What is money laundering?

Money laundering is the process by which criminals disguise the origins of illegally obtained money (“dirty money”) to make it appear as though it came from a legitimate source. Money laundering enables virtually every form of serious crime: drug trafficking, terrorist financing, fraud, ransomware, corruption, tax evasion, and sanctions evasion all depend on the ability to move illicit funds into the legitimate financial system without detection.

The money laundering meaning extends beyond cash. Today, money laundering involves bank accounts, shell companies, real estate, casinos, trade-based schemes, and cryptocurrency. Blockchain-based money laundering has introduced entirely new techniques: mixers, cross-chain bridges, DeFi protocol exploitation, and privacy coins allow criminal actors to obfuscate the origin of funds at speeds and scales that traditional laundering methods cannot match.

Understanding how money laundering works and how it has been transformed by digital assets are essential for financial institutions, cryptocurrency exchanges, law enforcement agencies, and compliance professionals tasked with detecting and preventing financial crimes.

Why does money laundering matter?

Scale of the Problem

The United Nations Office on Drugs and Crime estimates that 2% to 5% of global GDP —  between $800 billion and $2 trillion — is laundered annually. Laundered funds finance drug cartels that destabilize entire regions, terrorist organizations that threaten national security, and criminal enterprises that exploit vulnerable populations through human trafficking and fraud.

Despite decades of anti-money laundering regulation, less than 1% of illicit financial flows are estimated to be seized or frozen. The gap between the scale of money laundering and the effectiveness of enforcement remains one of the most significant challenges in global financial crime prevention.

Economic and Institutional Harm

Money laundering distorts economies, undermines legitimate businesses, and erodes trust in the financial system. When laundered funds flow into real estate markets, they inflate property prices and crowd out legitimate buyers. When dirty money moves through financial institutions, it exposes those institutions to regulatory penalties, reputational damage, and criminal liability. HSBC paid $1.9 billion in 2012 for AML failures. Danske Bank faced $2 billion in penalties for processing $230 billion in suspicious transactions. The institutional cost of enabling money laundering activities is catastrophic.

The Crypto Dimension

Cryptocurrency has not replaced traditional money laundering; it has expanded the battlefield. Criminal actors now use bitcoin, ethereum, stablecoins, and other digital assets alongside cash, shell companies, and traditional banking to layer and move illicit funds. The crypto dimension introduces unique challenges: transactions are pseudonymous, cross-border by default, and can be executed 24/7 without intermediaries.

However, cryptocurrency also creates unprecedented investigative opportunities. Every transaction on a public blockchain is permanently recorded and traceable. Blockchain analytics tools can follow the flow of funds across wallets, exchanges, DeFi protocols, and bridges, providing law enforcement and compliance teams with visibility that traditional financial crime investigations rarely achieve. Chainalysis data power investigations that have led to the recovery of billions of dollars in stolen and laundered cryptocurrency.

How does money laundering work? The three stages

Money laundering typically follows three stages — placement, layering, and integration — that progressively distance illicit funds from their criminal origins. These stages apply to both traditional and cryptocurrency money laundering, though the specific techniques differ.

Stage 1: Placement

Placement is the initial introduction of illicit funds into the financial system. This is often the most vulnerable stage for detection, because large amounts of cash or crypto entering the system can trigger AML alerts.

Traditional methods: Depositing cash into bank accounts in small amounts below reporting thresholds (smurfing or structuring), purchasing monetary instruments, using cash-intensive businesses like casinos, laundromats, or restaurants as fronts, and physically smuggling cash across borders.

Crypto methods: Converting cash to cryptocurrency through peer-to-peer (P2P) exchanges or Bitcoin ATMs with weak KYC controls, depositing stolen cryptocurrency from hacks or scams into wallets controlled by the launderer, and using over-the-counter (OTC) brokers to convert large amounts of fiat currency to crypto without adequate identity verification.

Stage 2: Layering

Layering is the process of moving funds through complex transactions to obscure their origin. The goal is to create as much distance and confusion as possible between the illicit source and the eventual destination.

Traditional methods: Transferring funds through multiple bank accounts across jurisdictions, using shell companies and offshore entities to create complex corporate structures, engaging in trade-based money laundering through over- or under-invoicing of goods and services, and purchasing and reselling high-value assets like real estate, fine art, or luxury goods.

Crypto methods: Using mixers and tumblers to blend transactions with those of other users, chain-hopping across multiple blockchains using cross-chain bridges, routing funds through DeFi protocols (decentralized exchanges, liquidity pools, lending platforms) to create complex transaction trails, converting between cryptocurrencies and stablecoins, using peel chains to gradually siphon funds through hundreds of intermediate wallets, and exploiting privacy coins like Monero to break the on-chain trail.

Stage 3: Integration

Integration is the final stage, where laundered funds re-enter the legitimate economy. At this point, the money appears to come from a legitimate source and can be used freely.

Traditional methods: Investing in legitimate businesses, purchasing real estate or luxury assets, creating fraudulent loans or invoices, and using investment vehicles to generate seemingly legitimate returns.

Crypto methods: Cashing out through cryptocurrency exchanges with fiat off-ramps, using crypto debit cards for purchases, investing in tokenized assets or DeFi yield products, converting to stablecoins and using them for payments, and purchasing NFTs or other digital assets to convert crypto holdings into seemingly legitimate digital property.

How cryptocurrency has changed money laundering

Cryptocurrency has made money laundering faster, more global, and more technically complex. Understanding the specific methods used in crypto money laundering is essential for any organization building or evaluating its AML program.

Mixers and Tumblers

Cryptocurrency mixers (also called tumblers) pool transactions from multiple users and redistribute them, breaking the direct link between sender and receiver on the blockchain. Mixers are the crypto equivalent of layering through multiple shell company accounts. Tornado Cash, one of the most prominent mixers, was sanctioned by OFAC in 2022 for facilitating the laundering of over $7 billion in cryptocurrency, including funds stolen by North Korea’s Lazarus Group.

Chain-Hopping and Cross-Chain Bridges

Chain-hopping involves converting cryptocurrency from one blockchain to another using cross-chain bridges — for example, moving funds from Ethereum to Bitcoin to Avalanche to Solana. Each hop creates complexity for investigators attempting to trace the funds. The Lazarus Group has used chain-hopping extensively, moving stolen funds across dozens of blockchains and hundreds of wallets to obfuscate the trail.

DeFi Protocol Exploitation

DeFi protocols — decentralized exchanges, liquidity pools, lending platforms — provide permissionless financial services that can be exploited for layering. Criminal actors can swap tokens, provide and withdraw liquidity, take flash loans, and route funds through complex smart contract interactions that create transaction trails far more difficult to follow than simple wallet-to-wallet transfers.

Privacy Coins

Privacy coins like Monero (XMR) and Zcash (ZEC) use cryptographic techniques to obscure transaction details (sender, receiver, and amount), making on-chain tracing significantly more difficult than on transparent blockchains like Bitcoin or Ethereum. While privacy coins represent a small fraction of total crypto volume, they are disproportionately used in darknet market transactions and money laundering schemes.

Over-the-Counter (OTC) Brokers and Nested Exchanges

OTC brokers facilitate large cryptocurrency trades outside of public exchange order books. While many OTC desks are legitimate and compliant, some operate with minimal or no KYC, serving as high-risk on-ramps and off-ramps for laundered funds. Nested exchanges — services that operate through accounts at larger exchanges — can similarly enable money laundering by providing a layer of anonymity between the launderer and the regulated exchange.

Peel Chains and Rapid Consolidation

Peel chains are a laundering technique where funds are moved through a long sequence of wallets, with small amounts “peeled off” at each step to different destinations. The main balance continues forward while fragments are dispersed across dozens or hundreds of addresses. This technique is automated and can create thousands of transactions in hours, making manual investigation impractical without blockchain analytics tools.

Money laundering red flags

Identifying money laundering red flags is a core responsibility for compliance teams at financial institutions and crypto exchanges. Red flags indicate patterns that warrant further investigation.

Traditional Red Flags

  • Structuring (smurfing): Multiple transactions just below reporting thresholds to avoid triggering currency transaction reports (CTRs)
  • Unusually complex transactions: Financial transactions with no apparent economic purpose or business rationale
  • Shell company activity: Transfers involving entities with no clear operations, employees, or physical presence
  • Rapid movement of funds: Large amounts moving through accounts quickly with no apparent holding period
  • Cash-intensive business anomalies: Revenue patterns inconsistent with the business type or location

Crypto-Specific Red Flags

  • Interactions with sanctioned addresses: Deposits from or withdrawals to wallets associated with OFAC-designated entities
  • High-volume mixer or tumbler usage: Funds routed through mixing services to obscure their origin
  • Rapid chain-hopping: Funds moving across multiple blockchains in quick succession with no clear economic purpose
  • Deposits from darknet marketplaces: Incoming funds from wallets associated with darknet markets or illicit services
  • Peel chain patterns: Automated sequences of transactions designed to fragment and disperse funds
  • Exposure to high-risk jurisdictions: Transactions involving wallets or VASPs in jurisdictions with weak AML enforcement

Risks and common misconceptions about money laundering

Misconceptions

“Crypto is anonymous and untraceable.” This is the most persistent misconception about cryptocurrency money laundering. Public blockchains record every transaction permanently. Blockchain analytics tools can trace fund flows across wallets, exchanges, DeFi protocols, and cross-chain bridges. Crypto is pseudonymous, not anonymous, and the investigative tools available today make crypto money laundering more traceable than many traditional methods.

“Money laundering only involves cash.” While cash remains a primary vehicle for money laundering, modern laundering schemes use bank accounts, real estate, trade-based invoicing, virtual assets, shell companies, and digital assets. The money laundering definition has expanded far beyond physical currency.

“AML compliance is only a banking obligation.” AML obligations extend to cryptocurrency exchanges, money services businesses, insurance companies, broker-dealers, casinos, and real estate professionals in many jurisdictions. The Financial Action Task Force (FATF) has extended AML requirements to VASPs, and FinCEN requires all money services businesses to implement AML programs, regardless of size.

“Small transactions don’t matter.” Structuring — deliberately breaking large transactions into smaller ones to avoid reporting thresholds — is itself a federal crime. Money laundering investigations routinely uncover schemes built entirely on high volumes of small transactions designed to evade detection. In crypto, peel chains and automated micro-transactions are used for exactly this purpose.

Risks

Regulatory penalties for money laundering failures continue to escalate. Global AML fines have exceeded $10 billion in recent years, with individual penalties reaching into the billions for institutions that fail to combat money laundering effectively.

Evolving laundering techniques require continuous adaptation of AML programs. Criminal actors constantly develop new methods that can outpace static, rules-based monitoring systems.

Jurisdictional complexity creates enforcement gaps. Money laundering is inherently cross-border, and the patchwork of AML regulations across jurisdictions creates opportunities for regulatory arbitrage. Crypto’s borderless nature amplifies this challenge.

Real-world examples of money laundering

Traditional Money Laundering Cases

HSBC — $1.9 Billion Settlement (2012). HSBC allowed drug cartels in Mexico and Colombia to launder hundreds of millions of dollars through its U.S. operations. The bank failed to maintain adequate AML controls, processed $881 million in known drug trafficking proceeds, and facilitated transactions for entities connected to terrorist financing. The $1.9 billion settlement was the largest banking penalty at the time.

Danske Bank — $2 Billion Scandal (2018–2022). Danske Bank’s Estonian branch processed approximately $230 billion in suspicious transactions from Russian and former Soviet Union clients over nine years. The branch operated as a de facto money laundering pipeline, with AML controls that were systematically inadequate. The combined penalties from U.S. and European regulators exceeded $2 billion.

Cryptocurrency Money Laundering Cases

Lazarus Group / Ronin Bridge Hack — $625M (2022). North Korea’s state-sponsored Lazarus Group stole $625 million from the Ronin Bridge (Axie Infinity’s blockchain bridge). The group used mixers, chain-hopping, DeFi protocols, and hundreds of intermediate wallets to attempt to launder the stolen funds. Blockchain analytics traced the funds through complex layering schemes, enabling partial recovery and attribution to the DPRK.

BTC-e / Alexander Vinnik — $4B (2017–2024). BTC-e was a cryptocurrency exchange that facilitated the laundering of over $4 billion in bitcoin, including proceeds from the Mt. Gox hack, ransomware operations, and darknet market transactions. Alexander Vinnik, the exchange’s operator, was arrested in Greece in 2017 and subsequently convicted of money laundering in multiple jurisdictions. The case demonstrated how crypto exchanges with no AML controls become laundering hubs.

Tornado Cash OFAC Sanctions (2022). The U.S. Treasury Department sanctioned Tornado Cash, an Ethereum-based mixer, for facilitating the laundering of over $7 billion in cryptocurrency—including $455 million stolen by the Lazarus Group. The sanctions established that decentralized smart contracts used to facilitate money laundering can be designated under OFAC authorities.

The anti-money laundering (AML) framework

Anti-money laundering (AML) refers to the framework of laws, regulations, and procedures designed to detect, prevent, and report money laundering and related financial crimes. The global AML framework includes:

Financial Action Task Force (FATF) sets international AML/CFT standards through its 40 Recommendations. FATF evaluates countries’ compliance and maintains lists of high-risk and non-cooperative jurisdictions. FATF guidance extends AML obligations to VASPs and defines the Travel Rule for cryptocurrency transactions.

Financial Crimes Enforcement Network (FinCEN) is the primary U.S. AML enforcement body within the Department of the Treasury. FinCEN administers the Bank Secrecy Act, requires financial institutions and money services businesses to file suspicious activity reports (SARs) and currency transaction reports (CTRs), and enforces AML compliance.

Bank Secrecy Act (BSA) is the foundational U.S. anti-money laundering law (1970). The BSA requires financial institutions to maintain AML programs, conduct customer due diligence, maintain records, and report suspicious activity. The Anti-Money Laundering Act of 2020 (AMLA) significantly expanded BSA requirements.

EU Anti-Money Laundering Directives / AMLA provide the European AML framework, now in its sixth directive. The EU’s MiCA regulation extends AML obligations to crypto-asset service providers. The EU is also establishing a centralized Anti-Money Laundering Authority (AMLA) to coordinate enforcement across member states.

OFAC Sanctions administered by the Office of Foreign Assets Control prohibit transactions with sanctioned individuals, entities, and jurisdictions. OFAC sanctions apply to cryptocurrency transactions — as demonstrated by the Tornado Cash designation — and require all U.S. persons and entities to screen transactions for sanctions exposure.

How Chainalysis helps organizations detect and prevent money laundering

Money laundering is the core problem Chainalysis exists to solve. Chainalysis provides the blockchain intelligence platform that financial institutions, crypto exchanges, and law enforcement agencies use to trace, detect, and prevent money laundering across every major blockchain.

Chainalysis KYT (Know Your Transaction) provides real-time transaction monitoring that screens every on-chain transaction for money laundering red flags — mixer usage, exposure to sanctioned addresses, interactions with darknet markets, peel chain patterns, and connections to known illicit entities. KYT monitors 1,000+ assets and protocols and reduces false positives by up to 90%, enabling compliance teams to focus on genuinely suspicious activity.

Chainalysis Reactor is the investigation platform used by over 100 government agencies and leading financial institutions worldwide to trace money laundering across blockchains. Reactor visualizes fund flows, identifies connections between wallets and real-world entities, and builds evidence packages for SAR filings, asset seizures, and criminal prosecutions. Reactor’s analysis has been validated under the Daubert standard in U.S. courts — accepted as reliable evidence in federal proceedings.

Chainalysis Address Screening screens wallet addresses for exposure to money laundering risk indicators before transactions are processed. Wallet screening identifies connections to sanctioned entities, mixers, darknet markets, scam wallets, and other high-risk categories—enabling organizations to block laundering attempts before funds enter their platforms.

Frequently asked questions about money laundering

Q: What is money laundering in simple terms?

A: Money laundering is the process of making illegally obtained money appear legitimate. Criminals disguise the origins of dirty money by moving it through financial transactions, shell companies, real estate, or cryptocurrency to make it look like it came from a lawful source.

Q: What are the three stages of money laundering?

A: The three stages of money laundering are: (1) Placement—introducing illicit funds into the financial system; (2) Layering—moving funds through complex transactions to obscure their criminal origin; and (3) Integration—reintroducing the laundered money into the legitimate economy as apparently clean funds.

Q: How is cryptocurrency used for money laundering?

A: Criminals use cryptocurrency for money laundering by converting illicit funds to crypto, then obscuring the trail through mixers, cross-chain bridges, DeFi protocols, privacy coins, peel chains, and OTC brokers before cashing out through exchanges or converting to stablecoins. However, public blockchains record every transaction permanently, and blockchain analytics tools can trace these fund flows—making crypto money laundering more detectable than many traditional methods.

Q: What is anti-money laundering (AML)?

A: Anti-money laundering (AML) is the framework of laws, regulations, and procedures that financial institutions and crypto platforms implement to detect, prevent, and report money laundering and related financial crimes. AML programs include customer due diligence (KYC), transaction monitoring, suspicious activity reporting, sanctions screening, and independent auditing.

Q: What are money laundering red flags in crypto?

A: Crypto-specific money laundering red flags include interactions with sanctioned wallet addresses, high-volume mixer or tumbler usage, rapid chain-hopping across multiple blockchains, deposits from darknet marketplaces, peel chain transaction patterns, and large-value transfers inconsistent with a customer’s verified profile.

Q: What is an example of money laundering?

A: One prominent example is the Lazarus Group’s laundering of $625 million stolen from the Ronin Bridge in 2022. The North Korean state-sponsored hackers used mixers, cross-chain bridges, DeFi protocols, and hundreds of intermediate wallets to attempt to launder the stolen cryptocurrency—a scheme that blockchain analytics ultimately traced and partially recovered.

Money laundering fuels the world’s most dangerous criminal enterprises — and cryptocurrency has expanded the battlefield. Chainalysis gives financial institutions, crypto businesses, and law enforcement the tools to trace, detect, and prevent money laundering across every major blockchain. Request a demo to see how Chainalysis can strengthen your AML program.