Share
Illicit crypto is not disappearing. It is relocating. New Chainalysis research shows that laundering activity is moving off centralized exchanges and into Chinese-language networks that operate openly on Telegram. The shift reflects a market response to tighter controls at exchanges and a growing preference for service-based laundering that sits outside formal platforms.
Centralized exchanges once served as the main exit point for dirty funds. That role is shrinking. According to Chainalysis’ preview of its 2026 Crypto Crime Report, Chinese-language money laundering networks processed about $16.1 billion in illicit crypto in 2025. That equals roughly $44 million per day spread across more than 1,799 active wallets. Over the past five years, these networks handled close to 20 percent of all tracked illicit crypto flows.
Chainalysis data shows how sharp the shift has been. Since 2020, inflows to identified Chinese-language laundering networks grew more than 7,000 times faster than illicit inflows to centralized exchanges, driven by a simple constraint: exchanges can freeze funds, while Telegram-based vendors cannot.
These networks operate as modular laundering services. Vendors advertise money mules, informal OTC desks, and gambling-linked services that break large transfers into smaller chunks or pool fragmented funds before moving them onward. For criminals, the appeal is speed and resilience. When one channel is disrupted, vendors move to another.
Telegram is not the crime itself infact it is the coordination layer. Chainalysis describes Chinese-language Telegram channels as marketplaces where vendors advertise, negotiate, and route clients toward laundering services. Guarantee platforms like Huione and Xinbi act as hubs that connect buyers and sellers. They do not directly control transactions, which limits the impact of takedowns.
Recent enforcement shows the pattern. In 2024, regulators in the United States and the United Kingdom began escalating scrutiny of Chinese-language laundering facilitators operating through crypto and messaging platforms, issuing advisories, sanctions warnings, and formal designations tied to cross-border fraud and scam activity. Telegram later removed several accounts and channels linked to these networks. The disruption was temporary, as vendors resurfaced under new names, shifted to parallel groups, and continued routing funds through alternative channels. The infrastructure absorbed the shock rather than collapsing.
The broader laundering ecosystem has expanded fast. Chainalysis estimates total illicit on-chain laundering exceeded $82 billion in 2025, up from about $10 billion in 2020. That growth tracks with wider crypto access and liquidity, while also exposing a policy gap.
Tom Keatinge of the Royal United Services Institute said in the report that law enforcement capabilities lag behind criminal adaptation. He pointed to weak cross-border coordination and limited crypto tracing capacity as key constraints. The data backs that view. Actions aimed at platforms disrupt traffic briefly. Operators and brokers remain the fixed points.
If you focus only on exchanges, you miss where laundering now concentrates. The Chainalysis findings suggest that effective disruption requires targeting operators, brokers, and mule networks that sit behind Telegram storefronts. That means pairing blockchain analysis with human intelligence and faster information sharing across borders.
The lesson is blunt. Crypto crime adapts faster than rulebooks. Enforcement that follows the old map will keep arriving late.
Share
