Stablecoins and the New Money Laundering Frontier: What Regulators Are Getting Right (and Wrong)

Stablecoins have moved from a niche instrument in the cryptocurrency ecosystem to a mainstream financial product, and with that transition has come a dramatic expansion in their exploitation for financial crime. Unlike Bitcoin or Ethereum, whose price volatility limits their practical utility as a store of value for criminal proceeds, stablecoins — particularly USD-pegged assets like USDT and USDC — offer the speed and pseudonymity of blockchain-based transfers with the value stability that criminal enterprises require for cross-border fund movement, sanctions evasion, and trade settlement outside the regulated financial system.

The Chainalysis 2025 Crypto Crime Report identified stablecoins as the dominant instrument in illicit cryptocurrency flows for the first time, overtaking Bitcoin in absolute volume terms. This represents a fundamental shift in the virtual asset crime landscape and has significant implications for how financial institutions, Virtual Asset Service Providers (VASPs), and regulators frame their detection and compliance strategies.

For Tier 1 banks with correspondent relationships to crypto exchanges, custodians, and payment processors that handle stablecoins, this is not a peripheral concern. The on-ramp and off-ramp between stablecoins and the traditional financial system flows directly through regulated institutions, making their transaction monitoring and VASP due diligence capabilities central to the effectiveness of the global AML regime.

Regulatory, Enforcement, and Market Context

The FATF's 2024 Virtual Assets and VASPs Updated Guidance provides the most comprehensive international framework for stablecoin regulation, requiring jurisdictions to apply the full suite of AML/CFT obligations to stablecoin issuers and the exchanges that list them. The Travel Rule — requiring originator and beneficiary information to accompany virtual asset transfers above threshold — is now implemented in over 30 FATF member jurisdictions, though compliance quality and technical implementation varies significantly.

The European Union's Markets in Crypto-Assets Regulation (MiCA), which came into full force in 2025, represents the most comprehensive stablecoin regulatory framework yet enacted, imposing reserve requirements, issuer authorisation, and AML obligations on e-money token and asset-referenced token issuers. OFAC has continued to demonstrate its willingness to use sanctions as a financial crime tool against stablecoin-related entities. The Hong Kong Monetary Authority (HKMA) and MAS have both finalised VASP licensing frameworks that include specific provisions for stablecoin handling.

What the Data Is Showing

Chainalysis data indicates that USDT on the Tron blockchain was the most widely used stablecoin for illicit transactions in 2024-2025, with usage concentrated in sanctions evasion, scam payment receipt, and darknet market settlement. The Tron network's low transaction fees and high throughput make it particularly attractive for high-volume, low-value fraud operations. Elliptic's analysis identified that a significant proportion of ransomware payments in 2025 were converted to stablecoins within hours of initial Bitcoin receipt, using decentralised exchange protocols that leave limited on-chain traceability.

From a banking sector perspective, the BIS published research in early 2026 demonstrating that stablecoin inflows to jurisdictions with weak AML frameworks correlate strongly with indicators of financial crime activity, including SAR filing rates and enforcement actions. This provides quantitative support for the longstanding concern that stablecoins are being used to route funds through regulatory arbitrage channels that exploit the uneven implementation of FATF virtual asset standards.

Implications for Financial Institutions

Banks with correspondent relationships to VASPs must apply risk-based enhanced due diligence that specifically addresses stablecoin exposure. VASP due diligence frameworks should include assessment of Travel Rule implementation quality, stablecoin listing policies, blockchain analytics tool usage, and the jurisdictional profile of the VASP's customer base. The Wolfsberg Group's VASP due diligence questionnaire provides a useful baseline, but institutions with material crypto exposure should consider commissioning independent assessments.

Transaction monitoring rules and models should be calibrated to detect stablecoin-related patterns: frequent small-value transfers consistent with crypto exchange activity, receipt of funds from high-risk VASP counterparties, and customer profiles inconsistent with crypto trading activity. Institutions should also maintain awareness of their indirect exposure through correspondent relationships and ensure that VASP-serving correspondents meet equivalent standards.

Conclusion

Stablecoins are no longer a fringe phenomenon in financial crime typologies — they are central infrastructure. The regulatory framework is maturing rapidly, but implementation gaps remain significant, particularly around Travel Rule compliance and cross-border information sharing. Financial institutions that stay ahead of this curve will be better positioned both defensively and commercially as the virtual asset ecosystem continues its integration with mainstream finance.

Suggested Next Steps

• Update your VASP due diligence framework to include specific stablecoin-focused risk indicators, including Tron network exposure, Travel Rule compliance verification, and blockchain analytics tool usage.

• Calibrate transaction monitoring models to detect stablecoin on-ramp and off-ramp patterns associated with high-risk VASP activity.

• Ensure compliance team capability includes virtual asset typology training, with specific focus on stablecoin money laundering methodologies identified in FATF and Chainalysis reporting.

• Review MiCA and local VASP licensing requirements for any business activities involving stablecoin issuance, custody, or payment facilitation to ensure regulatory authorisation is in place.

Sources: Chainalysis Crypto Crime Report 2025; FATF Virtual Assets and VASPs Updated Guidance 2024; EU MiCA Regulation; OFAC Enforcement Actions 2024-2025; Elliptic Financial Crime Intelligence 2025; BIS Working Paper on Stablecoins and Financial Crime 2026; MAS VASP Licensing Framework; HKMA Virtual Asset Policy Statement; Wolfsberg Group VASP Due Diligence Questionnaire.

TrustSphere helps financial institutions design and deploy intelligent fraud and financial crime detection solutions. Visit www.trustsphere.ai