The stablecoin market crossed a structural threshold in 2025. It expanded rapidly as a settlement and liquidity rail, yet it also became more central to enforcement-sensitive flows. TRM Labs’ latest analysis reframes the debate around stablecoin illicit flows: the share of overall volume may look contained, but the dollar amounts and network design behind those flows demand close attention.
Core Finding: Record Volume, Low Share, Large Dollar Value
TRM Labs’ figures point to stablecoin transfer volume reaching about $35 trillion across 2025. Within that backdrop, TRM estimates that wallets and clusters it categorizes as illicit received roughly $141 billion in stablecoins.
That relationship underpins the headline claim that illicit stablecoin activity represented less than 1% of total stablecoin volume:
-
$141B / $35T ≈ 0.40%
-
In other words, the illicit share is well below 1%.
The key caveat is practical rather than mathematical: $141 billion is not a small risk surface. TRM’s framing emphasizes that percentage-based comfort can be misleading when the underlying market has grown so large.
2025 Crypto Crime Picture: $158 Billion In Illicit Inflows Across Crypto
In its broader 2026 crypto crime review, TRM reports that total inflows to entities it labels illicit reached about $158 billion in 2025, described as a new high. At the same time, TRM notes that the illicit share of overall on-chain activity sits around 1.2%, roughly stable to slightly down versus the prior year in its methodology.
Taken together, the pattern is consistent with a maturing market:
-
Bigger market activity
-
Higher absolute illicit value
-
A relatively contained percentage share when measured against all on-chain volume
That combination is precisely why stablecoin metrics have become a focal point for analysts and regulators.
The A7A5 Factor: A Ruble-Pegged Token And Sanctions-Linked Networks
One of the most consequential details in TRM’s stablecoin analysis is the outsized role of A7A5, described as a ruble-pegged stablecoin that shows up heavily in certain sanctions-adjacent networks.
TRM attributes approximately $72 billion of 2025 illicit stablecoin receipts to A7A5-linked activity. It also associates at least $39 billion with an “A7” cluster in the same ecosystem.
TRM further flags that about 34% of A7A5 volume may reflect wash-trading-like patterns, based on rapid cyclical transfer behaviors. This matters because it highlights how large on-chain volumes can include transaction loops that inflate gross throughput without representing genuine economic demand.
Independent reporting has also noted sharp growth in A7A5-related transfers during 2025, reinforcing the view that stablecoin rails are being adapted into more structured cross-border and sanctions-sensitive payment arrangements.
Fraud, Laundering, And The Shift Toward Network Concentration
TRM’s work consistently points to two operational dynamics in illicit stablecoin use.
First, concentration. A meaningful portion of illicit stablecoin flows appears to run through a limited number of sophisticated hubs rather than being evenly distributed across many small actors. In practical terms, that suggests illicit finance is increasingly organized around infrastructure, not just opportunistic wallets.
Second, use-case divergence. Stablecoins do not play the same role across every crime category. In some segments they function as the default unit of account, while in others they are used more as an exit or settlement layer after activity begins in another asset.
On fraud specifically, TRM cites roughly $35 billion sent to scams in 2025. The consistent takeaway for investigators is that stablecoins often sit at critical junctions where proceeds are consolidated, moved, or converted, making them central to both the problem and potential interventions.
Why “Under 1%” Can Still Be Misread
The phrase “under 1%” is accurate in the context of TRM’s share-of-volume framing, but it can be misinterpreted if the denominator is treated as a proxy for real-world payments.
A major portion of stablecoin on-chain volume can be driven by trading-related transfers, exchange treasury movements, automated rebalancing, and internal routing, which inflate gross throughput. Research-based market commentary has argued that when you isolate activity that looks like payments, the totals can be far smaller than raw on-chain volume suggests.
The implication is straightforward:
-
The “illicit share” changes meaning depending on how you define total volume.
-
The more precise question is not only “what percentage,” but which activity types, which networks, and which financial touchpoints are involved.
Market And Policy Takeaways: Enforcement Capacity Is Rising, So Is Sophistication
The 2025 data strengthens several policy and industry conclusions.
-
Issuer and platform controls matter. Stablecoin ecosystems can enable freezing and interdiction in ways that are often harder with bearer-like instruments. TRM points to cases where tens of millions of USDT were frozen during European enforcement actions.
-
Sanctions and cross-border settlement are the hardest edge. In sanctions-linked ecosystems, stablecoins can be deployed in layered roles: one asset for external settlement, another for internal distribution, with routing designed to reduce friction and exposure.
-
Risk measurement is evolving. TRM has argued that tracking illicit value as a share of total on-chain volume is only one lens, and that liquidity and intermediary flow metrics can better show where illicit activity intersects with the regulated perimeter.
Stablecoin Illicit Flows Look Small In Ratio Terms, But The System Is Getting More Professional
Stablecoin illicit flows may have remained below 1% of 2025’s roughly $35 trillion in on-chain stablecoin volume, yet the estimated $141 billion in illicit-linked stablecoin receipts underscores a reality that cannot be dismissed as marginal.
For market professionals, the signal is clear: stablecoins are no longer simply a stabilizing instrument within crypto markets. They are now a primary arena where compliance tools, sanctions pressure, exchange liquidity, and on-chain behavioral analytics converge, and where the contest between enforcement and sophisticated financial networks is accelerating.
