Revealing the Cryptocurrency Mixing Services that Launder Digital Assets in Sanctioned Regions
====================================================================================================
In the rapidly evolving world of cryptocurrencies, one service has emerged as a significant concern for compliance professionals, law enforcement, and financial institutions: coin swap services. These platforms, operating primarily on the dark web, facilitate the anonymous, rapid exchange of cryptocurrencies without identity verification, posing a substantial threat to sanctions enforcement and anti-money laundering (AML) compliance.
A recent report by Elliptic, titled "The State of Cross-Chain Crime 2025," has shed light on the extent of these risks. The report reveals that at least $3.6 billion in illicit and high-risk funds—originating from darknet markets, ransomware, hacks, fraud, and sanctioned activities—are being moved through coin swap services [1]. These swaps often involve cross-chain transactions, making it difficult to trace the origin and destination of funds.
One of the most troubling aspects of coin swap services is their association with criminal activities. They have been implicated in laundering hundreds of millions of dollars' worth of cryptocurrencies originating from North Korea's Bybit hack [2]. Moreover, these services are popular among a range of criminal actors, including sanctioned darknet market Hydra, Warzone remote access Trojan, Conti ransomware, and other darknet markets like Herbs of Serbia, OMG!OMG!, and Shkaf [2].
The lack of Know Your Customer (KYC) requirements and the acceptance of privacy coins and the Russian Ruble by some coin swap services further compound the risks [3]. These services also offer crypto-to-cash and crypto-to-bank services, predominantly in Russia and Ukraine, including "treasure" drops where cash is buried in pre-determined locations and money counting under armed escort [3].
The risks posed by coin swap services are not limited to direct transfers to Russian banking services or activities in sanctioned regions like Crimea, Donetsk, Luhansk, Kherson, and Zaporizhzhia in Ukraine [4]. They also pose sanctions risks in regions under sanctions by the US, such as Crimea, due to their ability to facilitate the anonymous and rapid conversion of virtual assets [4].
Detecting on-chain and off-chain evidence of sanctions evasion and illicit activity is crucial for compliance teams, law enforcement investigators, regulators, financial institutions, and virtual asset service providers (VASPs) [1]. To address these challenges, Elliptic offers holistic-enabled blockchain analytics solutions, providing coverage for over 50 blockchains, and a Research and Investigations Team that can identify these sanctions risks and provide accurate intelligence regarding sanctioned activity [5].
In conclusion, coin swap services on the dark web create significant sanctions evasion risks by enabling unregulated, anonymous, and rapid conversion of virtual assets. This intensifies the challenges financial institutions face in monitoring and preventing illicit finance linked to state and non-state actors exploiting virtual assets for sanctions circumvention. For entities wishing to ascertain whether they would like to authorize transactions, identify and prevent customer activity that presents unacceptable sanctions risks, check compliance with regulations, or ascertain eligibility for a virtual asset license in a jurisdiction, Elliptic's solutions are a crucial tool [6].
Citations: [1] Elliptic Blog, "Unmasking the cross-chain coin swap services laundering crypto in sanctioned jurisdictions," 2025-07-29 [2] Elliptic Blog, "Download our report: The state of cross-chain crime 2025," 2025-07-29 [3] Elliptic Blog, "Coin swap services: A growing threat to sanctions enforcement," 2025-07-29 [4] UK Government Office of Financial Sanctions Implementation (OFSI), "Cryptoassets Threat Assessment," 2025-07-21 [5] Elliptic Blog, "Elliptic's holistic-enabled blockchain analytics solutions," 2025-07-29 [6] Elliptic Blog, "Contact us for a demo," 2025-07-29
- The report by Elliptic, "The State of Cross-Chain Crime 2025," reveals that blockchain analytics is crucial for identifying sanctions risks and illicit activity, particularly in the context of coin swap services.
- In light of the risks posed by coin swap services, technology companies like Elliptic offer holistic blockchain analytics solutions to help detect on-chain and off-chain evidence of sanctions evasion and criminal activities.
- As coin swap services are often associated with a variety of criminal activities such as money laundering, ransomware, and darknet market transactions, news about general-sports and technology sectors should include warnings about these risks and the importance of due diligence when conducting transactions involving cryptocurrencies.
