There is a version of crypto AML compliance that looks rigorous on paper. It also shapes how many firms run cryptocurrency AML investigations. Transaction monitoring systems flag activity. Analysts review alerts. Teams file reports. Boxes get ticked.
And then illicit funds move through the cryptocurrency ecosystem. Meanwhile, cross-chain laundering accelerates to levels that legacy monitoring systems cannot follow. At the same time, a dedicated unit for crypto crime investigation quietly disappears.
The gap between the compliance activity and the actual threat is not a technical problem. Rather, it is a structural one. And most institutions are significantly further behind than they realize.
The Scale of the Problem Facing Cryptocurrency AML Investigations
These numbers deserve more attention than they get:
Illicit crypto volumes may have reached as much as $51 billion in 2024, according to estimates. Notably, these figures are lower-bound estimates. They will rise as analysts identify more illicit addresses.
Cross-chain criminal and high-risk activity has exceeded $21.8 billion. That figure comes from blockchain analysis firm Elliptic’s State of Cross-chain Crime in 2025 report. By comparison, the figure was $7 billion in 2023 and $4 billion in 2022. That is not incremental growth. It is near-tripling in two years.
And while the threat is expanding, the institutional response is contracting. In 2025, the IRS cut its investigators who oversee the dirty money defenses of crypto firms and other money transmitters by 33 percent. The count dropped to 139 agents, down from 208 in 2024. That is the lowest level since at least 2017.
Inside financial institutions, the monitoring infrastructure is struggling under its own weight. Studies show that around the world, up to 95% of AML alerts are false positives. These alerts cost financial institutions millions in wasted investigation resources and damage customer relationships. When 95% of alerts are noise, the 5% that matter do not just stall. Instead, they disappear in the backlog.
For cryptocurrency AML investigations, the picture is stark. The threat is growing. Enforcement capacity is shrinking. Monitoring systems are overwhelmed. Together, these three dynamics are converging at exactly the wrong time.
The New Laundering Playbook
The real risk does not come from basic mixer operations. Instead, it comes from sophisticated actors who use multi-layered obfuscation techniques to stay ahead of single-chain monitoring systems.
The playbook has evolved significantly. Cross-chain bridges and swap services now move funds across multiple blockchain ecosystems in rapid succession. This breaks the transactional trail that single-chain analytics would follow. In fact, 33% of cross-chain investigations involve more than three blockchains, 27% span over five, and 20% stretch across ten or more chains. For compliance teams, this means single-chain monitoring is no longer adequate.
DeFi platforms and non-custodial models add another layer of complexity. Without a centralized operator to subpoena, the traditional investigative pathway works differently. Requesting records from an exchange does not apply in the same way.
Nested exchanges are platforms that pool customer deposits within larger exchanges. They allow illicit actors to access major liquidity while operating behind a layer of legitimacy. Similarly, privacy coins like Monero build obfuscation directly into the protocol.
How Layering Challenges Cryptocurrency AML Investigations
The IRGC case that FinCEN detailed in May 2026 illustrates how sophisticated the layering can get. It involved shell companies in Hong Kong, non-resident banking in China and trade facilitation through UAE free zones. In addition, the network systematically relabelled Iranian oil as Malaysian product with forged documentation. It also used proprietary stablecoins minted through a sanctioned issuer to obscure the blockchain trail. We covered this in our analysis of the IRGC shadow banking network.
The network did not succeed through dark web anonymity. Rather, it exploited the seams between jurisdictional frameworks. It also exploited the speed gap between regulatory adaptation and financial innovation.
Here is the critical insight for investigators and compliance teams. Every layer of obfuscation does not hide the trail. On the contrary, it multiplies the data points. The problem is not that the evidence disappears. The problem is that following it across multiple chains, jurisdictions, and protocols requires new capabilities. Most monitoring systems lack them because nobody designed them for this.
What Good Cryptocurrency AML Investigations Actually Look Like
The tools available to investigators and compliance professionals have advanced significantly. However, their deployment has not kept pace with the threat.
Multi-chain analytics platforms can now trace fund flows across 50 or more blockchain ecosystems simultaneously. They use AI-powered graph tools to follow chain hops that previously required hours of manual reconstruction. As a result, analysts can now surface in minutes what once took a full working day.
The most effective crypto AML investigations combine on-chain forensics with traditional investigative methodology. Blockchain analysis identifies where the money went. Conventional investigation identifies who moved it and why. Consider the KYC record at the exchange and the beneficial ownership filing in a corporate registry. Add the field interview with a source who knows the counterparty. These data points turn a wallet address into an attribution, and an attribution into a prosecutable case. Our digital and financial forensics work follows this same approach.
The private sector now has access to tools that were previously limited to law enforcement agencies with dedicated cyber units. Blockchain analytics platforms provide transaction monitoring, wallet screening, and cross-chain tracing capabilities. Any institution with sufficient commitment can deploy them. What they cannot replace is investigative judgment. Teams still need that judgment to interpret what the data shows and act on it appropriately.
The gap between institutions that have built this capability and those that have not is widening. AI and blockchain-based KYC, combined with public-private data sharing, may reduce illicit activity by enabling investigations that are four times faster. Speed matters in cryptocurrency AML investigations more than in almost any other category of financial crime. That is because the funds move faster than the legal mechanisms available to freeze them. For a closer look at tracing, see how investigators follow crypto money.
The Regulatory Horizon
The regulatory landscape is evolving, and the direction of travel is clear even if the pace is uneven.
FATF’s 2025 mid-year review singled out stablecoins and decentralized finance platforms as priority risk areas. In particular, it raised concern about opacity in non-custodial models, cross-chain bridges, and mixers that remain under-regulated. In the EU, supervisors are beginning targeted reviews of Virtual Asset Service Providers under the Markets in Crypto-Assets Regulation. These reviews place particular emphasis on the same vulnerabilities.
The Crypto-Asset Reporting Framework represents the most significant step toward international transparency standards for digital assets. When fully implemented, CARF will require automatic exchange of tax and financial information related to crypto transactions between jurisdictions. Consequently, it will close some of the information gaps that cross-border laundering currently exploits.
Analysts expect the RegTech market to exceed $22 billion by mid-2025, growing at a 23.5% CAGR. Blockchain forensics, AI-based monitoring, and automated KYC tools are driving AML advances across crypto platforms.
The institutions investing in this capability now are not just ahead of the regulatory curve. They are also building the infrastructure that will define how effective their AML programs are. That matters once regulatory expectations catch up with the actual threat level.
What This Means for Investigators and Compliance Teams
Crypto AML is no longer a specialist function for a niche team or an automated platform. Instead, it is a core competency at the intersection of compliance, investigation, legal, and technology.
For compliance teams, the practical implications are immediate. First, teams need to replace or supplement single-chain monitoring with multi-chain capability. Second, they need to address false positive rates, not just for efficiency reasons. After all, alert fatigue is creating genuine blind spots. Finally, they need the investigative capacity to act on flagged activity, not just flag it. That capacity can come from internal teams or from external partners with relevant expertise, like our KYC and AML compliance team.
For fraud investigators and legal teams, the blockchain trail is increasingly one of the most powerful evidence sources in financial crime cases. Unlike bank records, nobody can alter it after the fact. Unlike witness testimony, it does not change under pressure. Investigators must know how to read it, preserve it and present it so it holds up in legal proceedings. This skill is becoming a baseline requirement for cryptocurrency AML investigations.
The institutions that treat this as a future problem are already behind. Right now, the funds moving through cross-chain bridges are not waiting for compliance frameworks to catch up.
The Permanent Compliance Gap in Cryptocurrency AML Investigations
The criminals are not waiting for the regulatory framework to catch up with them. They never have.
What changes in crypto AML is not the fundamental nature of the problem. There is still money to hide, people who want to hide it, and investigators trying to follow the trail. What changes is the speed, the complexity, and the toolset available on both sides.
Some institutions will close the gap between their compliance infrastructure and the actual threat landscape. Those will be the ones that avoid headlines for the wrong reasons. By contrast, the ones that treat cryptocurrency AML investigations as a checkbox exercise are already exposed. They just do not know it yet. To discuss a case, request a consultation with our team.
FAQs
What is cryptocurrency AML and why does it matter?
Cryptocurrency AML covers the systems, processes, and investigative work that detect, prevent, and report money laundering through digital assets. It matters because crypto now carries some of the most sophisticated financial crime. Billions in illicit funds cross borders and blockchains each year, faster than traditional monitoring can follow.
What makes crypto money laundering different from traditional financial crime?
Speed, borderlessness, and technical complexity create challenges that traditional AML frameworks never anticipated. Funds can cross jurisdictions and blockchains in minutes. Decentralized platforms have no central intermediary to subpoena. Moreover, transaction volumes overwhelm legacy monitoring, with false positive rates of up to 95%.
What are the biggest red flags in crypto transactions?
Key indicators include mixing services or privacy coins that obscure trails, and rapid crypto-to-fiat conversion through exchanges with weak AML controls. Others are wallets linked to sanctioned entities or darknet markets, and chain-hopping across blockchains with no clear commercial rationale. Stablecoin minting that needs multiple limit increases in a short period is another warning sign.
How does cross-chain laundering work and how is it traced?
Cross-chain laundering moves illicit funds across blockchain ecosystems through decentralized exchanges, bridges, and coin swap services to break the trail. Tracing it requires multi-chain analytics that follow flows across dozens of blockchains at once. Investigators also need sound methodology to identify the people behind the wallets.
What tools do investigators use to trace crypto across blockchains?
Chainalysis, Elliptic, TRM Labs and similar platforms offer multi-chain tracing, wallet screening, and risk scoring. AI-powered graph analytics cluster related addresses and follow chain hops across ecosystems. Investigators then add open-source intelligence, conventional investigation, and legal tools such as exchange subpoenas and asset freezing orders to build actionable cases.
What is the current regulatory landscape for crypto AML?
Regulation is uneven globally. FATF standards set the international framework, yet only around 40 jurisdictions currently hold a largely compliant rating. In the EU, MiCA brings more consistent oversight of Virtual Asset Service Providers. CARF is moving toward international crypto reporting standards. In the US, enforcement capacity has contracted sharply, with IRS AML staffing at its lowest since 2017.
Sources:
- Bitcoin ETFs lose record $4.57 billion in two months
- U.S. launches sweeping crackdown on Southeast Asia cyberscams and sanctions Cambodian senator
- Elliptic Follows the $7 Billion in Bitcoin stolen from Bitfinex in 2016
- Understanding FATF Recommendations for AML Compliance: Complete Guide for Fintechs and Neobanks
- The Leading Private Equity Firms according to Zinnia’s 2025 LinkedIn Performance Ranking