Signal
Submitted
Mar 4, 2026, 12:29 UTC
A new report reveals Russia, North Korea, and Iran have exploited cryptocurrency markets to launder $350 billion globally from 2005 to 2025, evading sanctions and funding hostile activities.
The Organized Crime and Corruption Reporting Project (OCCRP) reported on March 3, 2026, that crime syndicates and hostile states—specifically Russia, North Korea, and Iran—have increasingly used cryptocurrency as a tool for money laundering, sanctions evasion, hacking, and global illicit finance, laundering an estimated $350 billion between 2005 and 2025. The study, titled "Confronting the Illicit-Finance Hydra in Crypto Markets: Protecting Retail Investors and Disrupting Hostile Government Exploitation," reviewed 164 documented cases of crypto money laundering. Major findings include Russia's cryptocurrency exchange Garantex processing over $100 billion in transactions with 82% linked to sanctioned entities, North Korea executing 19 hacks stealing $4.1 billion—including a February 2025 hack of Bybit ($1.5 billion), and Iran generating over $100 million through crypto derived from oil sales, with a 700% surge in crypto outflows from Nobitex after U.S.-Israeli airstrikes. The report underscores limited legal accountability, with 79% of cases lacking convictions, and highlights the U.S. as the hardest-hit country by these activities due to its large opportunities for money laundering. It emphasizes the need for more vigilant prosecution, noting the state support behind Russian illicit crypto activities and the sophisticated cybercriminal ecosystem fueling this threat. The report situates this shadow crypto economy as a significant tool for hostile governments to circumvent sanctions and finance malign operations globally.
Confidence: High
Classified as an aggressor signal because the report details hostile state use of cryptocurrency to evade sanctions and launder funds facilitating malign activities. There is no indication of allied defensive or preparatory responses discussed.
Source URL
https://occrp.org/en/news/report-describes-cryptos-350-billion-shadow-war
Source reliability
B
Info credibility
3
Event time
Mar 3, 2026, 00:00 UTC
Event time confidence
exact
Location
Cyberspace
Region
Cyberspace
Primary actor
Russian cryptocurrency exchange Garantex
Country
Multiple countries
Countries
Multiple countries
Tags
cryptocurrency, anti-money laundering, sanctions, Russia, North Korea, Iran, cryptocurrency hacks, Garantex, Bybit, Nobitex, digital currency, illicit finance, crypto laundering, sanctions busting
Nodes
Node 3: Political Disruptions
Signal
Submitted
Mar 4, 2026, 12:29 UTC
A new report reveals Russia, North Korea, and Iran have exploited cryptocurrency markets to launder $350 billion globally from 2005 to 2025, evading sanctions and funding hostile activities.
The Organized Crime and Corruption Reporting Project (OCCRP) reported on March 3, 2026, that crime syndicates and hostile states—specifically Russia, North Korea, and Iran—have increasingly used cryptocurrency as a tool for money laundering, sanctions evasion, hacking, and global illicit finance, laundering an estimated $350 billion between 2005 and 2025. The study, titled "Confronting the Illicit-Finance Hydra in Crypto Markets: Protecting Retail Investors and Disrupting Hostile Government Exploitation," reviewed 164 documented cases of crypto money laundering. Major findings include Russia's cryptocurrency exchange Garantex processing over $100 billion in transactions with 82% linked to sanctioned entities, North Korea executing 19 hacks stealing $4.1 billion—including a February 2025 hack of Bybit ($1.5 billion), and Iran generating over $100 million through crypto derived from oil sales, with a 700% surge in crypto outflows from Nobitex after U.S.-Israeli airstrikes. The report underscores limited legal accountability, with 79% of cases lacking convictions, and highlights the U.S. as the hardest-hit country by these activities due to its large opportunities for money laundering. It emphasizes the need for more vigilant prosecution, noting the state support behind Russian illicit crypto activities and the sophisticated cybercriminal ecosystem fueling this threat. The report situates this shadow crypto economy as a significant tool for hostile governments to circumvent sanctions and finance malign operations globally.
Confidence: High
Classified as an aggressor signal because the report details hostile state use of cryptocurrency to evade sanctions and launder funds facilitating malign activities. There is no indication of allied defensive or preparatory responses discussed.
Source URL
https://occrp.org/en/news/report-describes-cryptos-350-billion-shadow-war
Source reliability
B
Info credibility
3
Event time
Mar 3, 2026, 00:00 UTC
Event time confidence
exact
Location
Cyberspace
Region
Cyberspace
Primary actor
Russian cryptocurrency exchange Garantex
Country
Multiple countries
Countries
Multiple countries
Tags
cryptocurrency, anti-money laundering, sanctions, Russia, North Korea, Iran, cryptocurrency hacks, Garantex, Bybit, Nobitex, digital currency, illicit finance, crypto laundering, sanctions busting
Nodes
Node 3: Political Disruptions