Cryptocurrency use for illicit purposes totaled $40.9 billion in 2024, Chainalysis data shows. Though lower compared to the $46.1 billion observed in 2023, analysts warn that the current figure is a lower-bound estimate that will continue to rise as additional illicit addresses are recognized.
When Chainalysis released its 2023 Crypto Crime Report in January, it originally estimated $24.2 billion in criminal activity for 2023. A year later, the number has come close to doubling to $46.1 billion as more data was collected. According to historical trends, the 2024 total will increase by about 25% between reporting dates.
Stablecoins dominate illicit transactions
Stablecoins became the main player in criminal cryptocurrency activity during 2024. They were used in 63% of all criminal digital asset transactions. This is a shift from Bitcoin’s former leading role in criminal financing before 2021.
This change mirrors a 77% year-over-year increase in stablecoin usage in all crypto activity. Chainalysis, in its Geography of Cryptocurrency report, cited the useful applications of stablecoins in legitimate markets as value storage, remittances, cross-border payments, and support for international trade.
Various criminal activities continue to display various preferences about their digital currency options. Ransomware perpetrators and darknet marketplaces remain faithful to Bitcoin. Sanctioned actors and scammers, however, have aggressively adopted stablecoins.
The report identifies a key weakness in the stablecoin approach of criminals. This is because large issuers such as Tether regularly freeze addresses linked to illicit use. Tether has consistently blocked wallets associated with scams, terror funding, and sanctions evasion. This has made criminals who employ such coins to launder stolen money riskier.
Criminal cryptocurrency preferences also differ by activity category. Scammers and launderers of stolen funds usually spread their activities across more than one type of asset. Sanctioned actors, in turn, migrated mostly to stablecoins.
Stolen funds and scams are very lucrative
Scams and theft drew massive crypto profits in 2024. As per the data, the stolen funds were worth $2.2 billion, a 21% increase from 2023.
While DeFi protocols were the primary focus earlier in 2024, centralized services were most affected in Q2 and Q3. Prominent centralized exchange hacks included DMM Bitcoin’s loss of $305 million in May and WazirX’s loss of $234.9 million in July.
North Korean hackers posted record-breaking crypto heists in 2024, stealing $1.34 billion in 47 separate incidents. This is more than double the $660.5 million they stole in 2023. State-sponsored hackers from North Korea were responsible for 61% of the total amount stolen during the year. The numbers show that North Korean hackers are becoming faster and more efficient at conducting large hacks.
Chainalysis reported that attacks in the $50-100 million and over $100 million ranges are occurring much more frequently than in previous years.
Scams remained very profitable with at least $9.9 billion sent to scam addresses in 2024. HYIS and pig butchering schemes were the most profitable, earning 50.2% and 33.2% of scam funds respectively.
The report also registered increased sophistication in the scam environment, particularly by means of operations such as Huione Guarantee. Huione Guarantee is a peer-to-peer platform that offers everything from technology infrastructure to money laundering services to scammers.
On-chain criminal activity grew increasingly diverse
Of the $40.9 billion that went to illicit crypto addresses, $10.8 billion was sent to what Chainalysis classifies as “illicit-actor org.” This is a designation for services and actors both directly engaging in cybercrime and those who offer infrastructure to enable it.
The professionalization of crypto crime was most apparent through sites such as Huione Guarantee. This market has had over $70 billion worth of transactions since 2021.
Huione and its merchants assisted in an array of illicit activities, including pig butchering scams as well as stolen fund laundering. The platform facilitated transactions for sanctioned actors such as the Russian exchange Garantex, fraud shops, child sex abuse material peddlers, and Chinese betting websites.
A joint report by Chainalysis and OKX found direct financial connections between Mexican cartels and Chinese fentanyl precursor sellers via crypto payments. Crypto payments were also taken up by wildlife trafficking networks, with African exchanges and peer-to-peer transactions becoming mainstream avenues.
There has also been an increased occurrence of violent attacks against holders of crypto. Incidents involved kidnappings, home invasions, and long-term captivity cases where victims were compelled to send over their virtual assets.
Extremist groups see tactical changes in crypto funding
Extremist organizations raised over $20 million through cryptocurrency donations since 2012. However, patterns of support changed notably in 2024. While North America remained the global leader in extremist crypto funding, Europe saw the fastest growth, with nearly 50% of total inflows in recent years.
This European growth was mainly by white nationalist, white supremacist, and anti-Semitic groups that successfully monetized divisive narratives in increasingly polarized political environments. Average donation amounts to these groups spiked notably around major European elections in 2024. This was particularly seen in France and the United Kingdom.
The report identified a concerning trend of ideology-blending among extremist groups. Organizations now frequently combine elements of white supremacism, anti-Semitism, homophobia, and pro-Russia themes to attract wider audiences. On-chain transaction analysis revealed white nationalist organizations frequently donating to other extremist groups promoting Islamophobia, Holocaust denial, and other hate ideologies.
Cryptopolitan Academy: Tired of market swings? Learn how DeFi can help you build steady passive income. Register Now
