TL;DR
- The Treasury says digital asset money laundering remains smaller in volume than money laundering through fiat and other traditional methods, but it is central to some digital asset-native crimes.
- Stablecoins appeal to illicit actors because they are liquid, relatively stable, and can move quickly across borders.
- Key vulnerabilities include weak AML/CFT controls, regulatory gaps between jurisdictions, obfuscation methods, and transfers outside regulated institutions.
- Self-hosted wallets and peer-to-peer transfers can limit access to customer and transaction information.
- Financial-crime teams need to assess transaction behavior, counterparties, provenance, and relevant investigative context together.
What does the Treasury’s assessment say about digital asset money laundering?
The 2026 National Money Laundering Risk Assessment examines the threats and vulnerabilities that allow illicit funds to move through the U.S. financial system. Its assessment period covers January 2024 through December 2025.
The Treasury does not portray digital assets as the only or largest channel for illicit finance. In fact, it states that the overall volume of money laundering involving digital assets remains well below money laundering through fiat currency and other methods.
At the same time, digital asset money laundering can be central to crimes that begin and end in digital channels. Treasury points to digital asset investment scams, ransomware, sanctions evasion, terrorist financing, drug trafficking, and other forms of cyber-enabled crime. In these cases, criminals may use digital assets to receive proceeds, obscure their origin, move value across borders, or convert funds back into fiat currency.
The report’s strongest message is not that every digital asset transaction is suspicious. It is that criminals are becoming more sophisticated in combining several financial channels and technical tools into a single laundering process.
Why are stablecoins important in these laundering routes?
Stablecoins feature prominently in the Treasury’s discussion of digital asset money laundering. The report says illicit actors are increasingly using them to facilitate transactions and store proceeds.
The reasons are practical. Stablecoins can offer liquidity, relative price stability, and rapid settlement. Those same features support legitimate payments and trading activity, but they can also make stablecoins useful to criminals seeking to move value without holding a volatile asset.
Treasury describes stablecoins as one element in a more complex process. A criminal may move funds through a digital asset service provider, switch between assets, transfer value through self-hosted wallets, and then seek a fiat cash-out. Some over-the-counter brokers facilitating conversion from digital assets to fiat may also request stablecoins rather than other digital assets.
That means a stablecoin transfer should not be treated as a verdict. Its relevance depends on the wider facts: source of funds, transaction path, wallet relationships, customer behavior, timing, and destination.
Which vulnerabilities does the Treasury identify?
Treasury groups the core digital asset money laundering vulnerabilities into four areas:
- Exploitation of digital asset service providers that do not meet AML/CFT obligations
- Jurisdictional arbitrage
- Obfuscation tools and methods
- Use of digital assets outside regulated institutions
Each of these can matter on its own. The greater risk often appears when they overlap.
A service with weak controls may allow criminals to open or use accounts with false identifying information. A cross-border route may pass through a jurisdiction where AML/CFT rules have not been fully implemented. A bridge, swap, or mixing service may then make the transaction trail harder to interpret. The funds may finally move through self-hosted wallets, where there is no intermediary collecting the same customer information available in a regulated account relationship.
This is why digital asset money laundering should be analyzed as a route, not a list of isolated tools.
How do criminals use obfuscation methods?
Mixers, anonymity-enhancing cryptocurrencies, darknet market laundering services, chain-hopping, decentralized finance services, and cross-chain bridges can make tracing more difficult.
Treasury explains that criminals may exchange assets across blockchains, use bridges, or conduct large volumes of rapid transactions through a broad network of addresses. These actions can create a complex transaction trail and complicate efforts to assess whether incoming funds are connected to illicit activity.
None of these technologies automatically indicate wrongdoing. Legitimate users may use bridges, swaps, or self-custody for valid reasons.
The question for an investigator is how the tool was used. A single bridge transaction by a long-standing customer may not mean much. A newly created wallet that receives suspected scam proceeds, swaps assets, moves through a bridge, and sends funds to related off-ramp infrastructure presents a different review question.
Strong digital asset money laundering controls focus on patterns, not shortcuts.
Why do self-hosted wallets create a different challenge?
Self-hosted wallets allow users to hold and transfer digital assets without an intermediary financial institution. Treasury notes that peer-to-peer transfers can limit authorities’ ability to access customer and transaction information.
Public blockchains can still provide useful transparency. Transaction flows, timing, token movements, and wallet relationships may all be visible. Yet that transparency does not automatically identify the person controlling a wallet or explain the purpose of a transfer.
For compliance teams, this creates an important gap between visible activity and actionable understanding. An address may have an unusual transaction history, but the organization still needs to determine what the observed facts support.
That is where information provenance becomes important. Teams should be able to separate what they observed onchain, what they inferred from behavior, what a customer explained, and what has been verified through an authorized investigative source.
What should financial-crime teams do differently?
Treasury’s assessment reinforces the need for a disciplined workflow around digital asset money laundering. Monitoring systems, customer due diligence, sanctions controls, and blockchain analysis can all help surface activity that needs review. No single alert should carry the entire decision.
A useful review should ask:
- What specific behavior triggered concern?
- Does the pattern recur over time or across related wallets?
- Are there shared counterparties, routes, intermediaries, or cash-out points?
- Does the activity fit a known fraud, ransomware, sanctions, or laundering typology?
- What is the source and permitted use of the intelligence?
- What action is proportionate to the facts available?
This approach supports faster decisions without assuming certainty. It can help teams decide whether to monitor activity, conduct enhanced review, preserve relevant records, contact a customer through approved channels, or escalate internally.
Where verified investigative context fits
Most risk tools are designed to identify or estimate potential exposure. That is valuable work. Yet digital asset money laundering investigations often turn on a different question: has the activity appeared in a relevant investigative matter?
Deconflict helps bring verified investigative context into financial-crime workflows through intelligence contributed by participating law enforcement agencies. When relevant information is available, it can give institutions clearer context around an address, account, or transaction pattern, with provenance and an audit trail.
This does not replace due diligence, internal investigation, or existing monitoring tools. It can help teams understand whether an alert may connect to a broader matter before choosing their next step.
The takeaway
Treasury’s 2026 assessment does not call for broad suspicion of digital assets. It calls for sharper attention to the ways criminal networks combine products, jurisdictions, technical tools, and intermediaries.
The most effective response to digital asset money laundering starts with evidence. Know what happened, how the funds moved, what supports the concern, and whether there is relevant investigative context that changes the picture.
FAQs
What is digital asset money laundering?
Digital asset money laundering is the use of cryptocurrencies, stablecoins, wallets, or related services to hide, move, or convert proceeds of crime.
Are stablecoins inherently high risk?
No. Stablecoins have legitimate uses in payments, trading, and settlement. Risk depends on the transaction’s source, behavior, counterparties, and surrounding context.
What is jurisdictional arbitrage in crypto compliance?
Jurisdictional arbitrage occurs when criminals take advantage of differences in AML/CFT rules or supervision between countries to conceal ownership or move illicit proceeds.
Are self-hosted wallets illegal or automatically suspicious?
No. Self-hosted wallets are legitimate tools. They can create different due-diligence challenges because an intermediary may not hold the same customer information available in a regulated account relationship.
How can Deconflict help with digital asset money laundering reviews?
Deconflict can provide relevant verified investigative context through its participating law enforcement network, helping organizations assess an alert alongside their existing compliance and investigation processes.
