Money Laundering

What Is Money Laundering?

Money laundering is the process of making illegally obtained money appear legitimate. It allows criminals to use proceeds from activities like fraud, drug trafficking, ransomware, or theft without drawing the attention of law enforcement or financial regulators. The term originates from the practice of using cash-intensive businesses (like laundromats) to blend illicit cash with legitimate revenue.

In the context of cryptocurrency, money laundering takes on new dimensions. Digital assets introduce novel techniques for obscuring fund origins, but they also create an unprecedented transparency challenge for criminals: public blockchains record every transaction permanently. This tension between pseudonymity and transparency defines the modern landscape of anti-money laundering (AML) enforcement in crypto.

Globally, the United Nations Office on Drugs and Crime estimates that 2% to 5% of global GDP is laundered each year through traditional financial channels. In crypto, Chainalysis reported at least $154 billion in illicit transaction volume in 2025, though this represented approximately 1.2% of total crypto volume: a lower share than the estimated rate for traditional finance.

How It Works

Money laundering follows a three-stage model first described by the Financial Action Task Force (FATF), the international body that sets global AML standards. Each stage serves a distinct purpose in transforming dirty money into usable funds.

Stage 1: Placement

Placement is the initial introduction of illicit funds into the financial system. This is often the riskiest stage for criminals because large, unexplained deposits trigger suspicious activity reports (SARs) and regulatory scrutiny.

Common placement methods include:

• Smurfing: splitting large sums into many small deposits below reporting thresholds (in the US, banks must report cash transactions over $10,000 under the Bank Secrecy Act)
• Cash-intensive businesses: blending illicit cash with legitimate revenue from restaurants, car washes, or retail operations
• Crypto on-ramps: purchasing cryptocurrency with cash through Bitcoin ATMs, peer-to-peer platforms, or non-compliant exchanges that lack proper KYC verification
• Invoice fraud: creating fake invoices for goods or services never rendered, then "paying" them with illicit funds

Stage 2: Layering

Layering is the most complex stage, designed to create as much distance as possible between the funds and their criminal source. The goal is to generate a trail so convoluted that investigators cannot follow it back to the origin.

Traditional layering techniques include:

• Moving money through multiple bank accounts across different jurisdictions
• Using shell companies and trusts to obscure beneficial ownership
• Converting between currencies, asset classes, or financial instruments
• Round-tripping funds through offshore financial centers

In crypto, layering has evolved into a more technical discipline. Criminals exploit the speed and global reach of blockchain networks to move funds through dozens of wallets and services in minutes.

Stage 3: Integration

Integration is the final stage, where laundered funds re-enter the legitimate economy. Successfully integrated money appears indistinguishable from lawfully earned income. At this point, criminals can spend or invest the funds without raising suspicion.

Integration methods include:

• Purchasing real estate, luxury goods, or businesses
• Investing in legitimate financial instruments
• Establishing or acquiring businesses that generate plausible revenue
• Converting crypto to fiat through compliant off-ramps after sufficient layering

Crypto-Specific Laundering Techniques

Cryptocurrency introduces a distinct set of laundering methods that exploit the unique properties of blockchain networks. According to Elliptic's 2025 cross-chain crime report, illegal activity involving decentralized exchanges, bridges, and swap services reached $21.8 billion in 2025: more than three times the 2023 figure.

Chain-Hopping

Chain-hopping involves rapidly moving funds across multiple blockchains to exhaust investigators' tracing capabilities. A criminal might convert Bitcoin to Ethereum using a decentralized exchange, bridge those funds to a different chain, swap into yet another token, and repeat. Elliptic identified chain-hopping as the defining money laundering method of 2025, noting that 33% of complex crypto crime investigations involved more than three blockchains, with 20% spanning over ten.

Mixing and CoinJoin Services

CoinJoin and mixing services combine transactions from multiple users into a single large transaction, making it difficult to link specific inputs to specific outputs. Services like Tornado Cash (sanctioned by OFAC in 2022) and earlier mixers such as Bitcoin Fog and ChipMixer operated by pooling user funds and redistributing them after a delay.

However, advanced blockchain analytics can often "demix" these transactions by analyzing timing patterns, amounts, and address clustering heuristics. Several major mixing service operators have been arrested and their platforms seized.

Cross-Chain Bridges

Cross-chain bridges transfer assets between blockchains, and they typically provide little verifiable linkage between source and destination transactions. This makes them attractive for laundering. The now-defunct RenBridge was used to launder at least $540 million in crypto assets between 2020 and its shutdown, according to Elliptic research.

Privacy Coins

Privacy coins like Monero use cryptographic techniques such as ring signatures, stealth addresses, and confidential transactions to hide sender, receiver, and amount information by default. This makes tracing significantly harder than with transparent chains like Bitcoin. Several exchanges have delisted privacy coins under regulatory pressure, and the FATF has flagged them as a high-risk asset class.

DeFi Protocol Abuse

DeFi protocols that operate without centralized KYC controls can be exploited for laundering. Criminals may swap illicit proceeds through multiple DEXs using different token pairs, provide liquidity to earn "clean" LP tokens, or use flash loans to create complex transaction patterns that obscure fund flows. The US Treasury's 2023 DeFi illicit finance risk assessment specifically flagged these techniques.

Non-Compliant Exchanges and OTC Desks

Exchanges operating without proper licensing or KYC requirements: sometimes called nested exchanges: provide an easy path for converting between crypto assets or cashing out to fiat. These services often operate in jurisdictions with weak AML enforcement. High-risk OTC desks process large volumes with minimal identity verification, making them popular for placement and integration.

How Blockchain Analytics Detects Laundering

Despite the techniques above, blockchain's transparency creates a permanent audit trail that investigators can exploit. This is a fundamental advantage over cash-based laundering, where physical currency leaves no digital trace once it changes hands.

Address Clustering and Graph Analysis

Blockchain analytics firms like Chainalysis and Elliptic use address clustering to group wallets controlled by the same entity. The common input heuristic (addresses that appear as inputs in the same transaction likely share an owner) and output linking allow analysts to map entire wallet networks. Elliptic reports screening more than one billion blockchain transactions per week across 65+ networks.

Cross-Chain Tracing

Modern analytics platforms can follow funds across bridge transactions and cross-chain swaps. While chain-hopping was designed to overwhelm single-chain tracing, automated cross-chain analytics tools now reconstruct these paths programmatically, correlating deposits and withdrawals across multiple networks.

Pattern Recognition and Machine Learning

Analytics firms apply machine learning to detect laundering patterns in on-chain data: identifying suspicious transaction sequences, flagging known typologies (peel chains, consolidation patterns, timed withdrawals), and scoring wallet risk levels. Elliptic launched an AI-powered copilot in 2025 to accelerate analyst review of screening alerts and risk graphs.

Exchange Cooperation

Compliant exchanges share data with law enforcement and analytics firms, creating off-ramp chokepoints. When laundered funds arrive at a regulated exchange for fiat conversion, transaction monitoring and sanctions screening can flag and freeze suspicious deposits.

Notable Cases

Bitfinex Hack (2016)

In 2016, hackers stole approximately 119,754 BTC from the Bitfinex exchange. Ilya Lichtenstein and Heather Morgan spent years attempting to launder the proceeds using a sophisticated combination of techniques: cryptocurrency mixing services (Bitcoin Fog, Helix, ChipMixer), chain-hopping through privacy coins, darknet marketplace transactions, and fictitious identities. Despite these efforts, blockchain analysis allowed the US Department of Justice to trace and seize approximately 95,000 BTC in February 2022. Both defendants pleaded guilty in August 2023. Lichtenstein was sentenced to five years in prison in November 2024, while Morgan received 18 months.

The case demonstrated that even years-old Bitcoin transactions can be traced: the blockchain's immutability means laundering evidence never disappears, and advances in analytics tools can retroactively uncover previously opaque transaction paths.

Bitcoin Transparency vs. Cash

A common misconception holds that cryptocurrency is ideal for laundering. In reality, Bitcoin's public ledger makes it significantly harder to launder money compared to physical cash.

The Bitfinex case is a clear example: funds moved in 2016 were traced and seized six years later. With cash, recovery after that time span would be virtually impossible.

Regulatory Framework

Anti-money laundering regulations form a global framework designed to prevent, detect, and punish laundering across both traditional and crypto financial systems.

• The Bank Secrecy Act (BSA) requires US financial institutions to report suspicious activities and maintain transaction records
• FinCEN classifies crypto exchanges and certain DeFi services as money services businesses subject to AML obligations
• The FATF's Travel Rule requires VASPs to share sender and receiver information for transactions above $1,000
• The EU's MiCA regulation imposes AML requirements on crypto-asset service providers operating in Europe
• Currency transaction reports (CTRs) are required for transactions over $10,000 at US financial institutions

As of April 2026, the FATF reported that 51 of 149 assessed jurisdictions were "largely compliant" with its crypto AML standards, with significant gaps remaining in enforcement across many countries.

Why It Matters for Crypto

Money laundering risk is the primary driver behind virtually every crypto compliance requirement. Understanding how laundering works and how it is detected is essential for anyone building or using cryptocurrency infrastructure.

For legitimate users, AML regulations shape how exchanges operate: why KYC verification is required, why certain transactions are flagged, and why withdrawals can be delayed. For developers building payment infrastructure, transaction monitoring and AML tooling are critical components of any compliant system.

The growing sophistication of blockchain analytics is shifting the narrative around crypto and crime. Rather than being a haven for illicit finance, public blockchains are increasingly recognized as a more transparent financial infrastructure than the traditional banking system: one where laundering leaves permanent, traceable evidence.

Risks and Considerations

• Regulatory fragmentation: AML enforcement varies dramatically by jurisdiction, creating arbitrage opportunities for criminals who route funds through weakly regulated countries
• False positives: aggressive transaction monitoring can flag legitimate users, leading to frozen accounts and delayed payments for innocent participants
• Privacy tradeoffs: stricter AML measures can erode financial privacy for law-abiding users, creating tension between surveillance and civil liberties
• Evolving techniques: as analytics tools improve, laundering methods evolve in response, creating a continuous arms race between criminals and investigators
• De-risking: banks and exchanges may cut off entire regions or customer segments perceived as high-risk, reducing financial access for legitimate users in those areas

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.