How wallets, mixers and decentralised exchanges changed the movement of illicit wealth
· Updated · No. 125
Criminals use crypto mixers, NFTs, decentralised finance platforms and privacy coins to hide the origin of stolen or illicit money, exploiting gaps in global regulation and enforcement.
Laundering stolen or illicit wealth is evolving rapidly, and cryptocurrency + modern tech tools are becoming increasingly attractive and dangerous additions to the kleptocrat's playbook.

Here's how the game is changing:
What happens:
Funds (in USD, for example) are converted into Bitcoin, Ethereum, or stablecoins using offshore or unregulated exchanges.
These coins are then sent through mixers or tumblers (like Tornado Cash) that shuffle transactions, breaking the link between the source and destination.
Result: The original money becomes nearly impossible to trace.
The U.S. Treasury sanctioned Tornado Cash in 2022 for helping launder over $7B, including North Korean cybercrime proceeds.
How it works:
A corrupt actor creates or buys a worthless NFT.
Then they or an associate buy that NFT using dirty money at an inflated price.
The NFT is later sold or traded to legitimate buyers, making the profit seem clean.
Result: Funds are moved under the guise of digital art trade.
Same method used in fine art laundering, but now faster, borderless, and with fewer regulations.
Why DeFi is risky:
DeFi platforms allow users to swap tokens, stake assets, borrow and lend, all without KYC (Know Your Customer).
Smart contracts can split large transfers into hundreds of micro-transactions, reducing scrutiny.
Result: Obscures the origin, purpose, and identity of users.
Russian, Iranian, and North Korean hackers are known to use DeFi for laundering ransomware proceeds.
What makes them dangerous:
Unlike Bitcoin or Ethereum, privacy coins hide wallet balances and transaction histories completely.
These are the preferred tools of criminal networks.
Result: Authorities have no visibility, and these coins are almost impossible to trace without seizing devices.
Old tactic, new twist:
Shell companies open accounts on foreign crypto exchanges, often in the Middle East, Caribbean, or Southeast Asia.
Dirty funds move through multiple shell-controlled wallets, then are cashed out to fiat or stablecoins.
Result: A digital version of classic layering, but much faster and cheaper.
Stole $600M+ in crypto from exchanges.
Used Tornado Cash and small exchanges to launder it.
U.S. and Japan sanctioned wallets tied to the group.
Shifted wealth to crypto wallets after Western sanctions.
Using Dubai, Turkey, and Kazakhstan as crypto-friendly havens.
Facilitate underground trade settlements using USDT (Tether).
Cleaned billions by routing funds through gambling platforms and fake e-commerce stores.
Law enforcement lacks training/tools to track complex chains of transactions.
New tools (AI bots, private tokens, DeFi smart contracts) emerge faster than regulations.
Cracking down on unregistered exchanges
Demanding KYC/AML checks for crypto platforms
Investigating suspicious NFT marketplaces
Chainalysis, Elliptic and others offer blockchain forensics to governments
Comments
No answered comments yet. Yours could be the first.
Add a comment
Your email address is needed so we can reply, and is never shown on the site. Comments appear here once they have been answered.