Cybercriminals looking to launder money are often drawn to cryptocurrency due to its near-instant, pseudonymous, and cross-border capabilities. In 2022 alone, Chainalysis tracked a total of $23.8 billion worth of crypto laundered by cybercriminals, but keep in mind that this figure only includes funds associated with addresses tied to forms of crime that are inherently related to cryptocurrency, like ransomware, exchange hacks, and crypto scams. For the most part, it doesn’t include cases in which cryptocurrency is used to launder money made from crimes that took place “off-chain.”
There’s no way to track this type of activity at scale, since the funds in question are simply moving through cryptocurrency addresses that otherwise look legitimate. However, we know that this activity occurs, and investigators can use our tools to trace the flow of these funds. Further, when our customers alert us to this activity and provide the addresses and transactions involved, we can label those addresses and track the funds just as we would in any other case.
That’s exactly what happened recently with a large, Japan-based cryptocurrency exchange that uses Chainalysis. Police alerted the exchange that one of its users had deposited fiat currency derived from fraudulent activity and converted it into cryptocurrency in order to launder it. In this blog, we’ll show you what their money laundering strategy looked like on-chain, and help you understand how exchanges can respond effectively when their platforms are abused by criminals.
Suspected on-chain Japanese money laundering activities
Our knowledge of this suspicious activity began when our exchange customer relayed to us law enforcement’s assessment that the fraudulent accounts were being used to launder funds derived from scamming. Although we don’t know the nature of the fraud in question, it’s possible that it involves a financial scam, as these have been a huge problem in Japan recently. For instance, news publications have detailed occurrences of bank impersonation, insurance fraud, and even job postings for part-time criminal work across the country.
The criminals involved in this case converted ill-gotten fiat into cryptocurrency, then sent it through a series of personal wallets, and eventually to a new exchange where it could be converted into cash that would appear legitimate. We can see this activity on the Chainalysis Reactor graph below.
In the top left corner of the graph, we see funds moving from the reporting exchange to a group of personal wallets, reminiscent of both the “placement” and “layering” stages of money laundering. These are the transactions that were provided to us by the exchange, and were initiated by the fraudulent accounts in question. We had previously identified many of the personal wallets receiving that first round of transactions as being associated with scams, which allowed us to identify and alert other Japan-based exchanges whose users had also sent funds to those wallets.
Once the funds moved from the initial exchanges and were spread across several intermediary wallets (steps 1 and 2 on our Reactor graph; more layering), the funds were then reconsolidated in a single personal wallet (step 3). We know from previous cases that this pattern of diffusing funds across many wallets and reconsolidating them in a single wallet is a common money laundering tactic. From there, the funds were once again sent and spread across an even larger number of personal wallets (step 4; more layering), and then reconsolidated again at a single deposit address at a mainstream exchange, likely to be cashed out (step 5 in what’s known as the “integration” stage of money laundering).
The establishment of fraudulent exchange accounts for money laundering purposes is nothing new. In the case of Japan, a major online bank recently implemented a restriction to prevent this whereby new account holders are not allowed to send Yen to crypto exchanges within one month of opening accounts. Additionally, the Japan Cybercrime Control Center (JC3) recently published guidance for industries and law enforcement about how to better identify and mitigate these types of online crimes.
The future of collaboration between police, banks, and exchanges
The above example illustrates strong cooperation between the police, banks, crypto exchanges, and Chainalysis. In the future, collaboration between different organizations will be essential for combatting crypto-related crimes, whether they originate off-chain or on-chain. We hope to facilitate this by providing necessary parties with access to relevant data and consistently innovating to improve our product suite.
本ウェブサイトには、Chainalysis, Inc. およびその関連会社（以下、総称して「Chainalysis」）の管理下にない第三者のサイトへのリンクが含まれています。当該情報へのアクセスは、Chainalysis が当該サイトまたはその運営者との提携、支持、承認、または推奨を行っていることを意味するものではなく、Chainalysis は、当該サイトで提供される製品、サービス、その他のコンテンツについて一切の責任を負いません。
本資料は情報提供のみを目的としており、法律、税務、財務、または投資に関する助言を提供するものではありません。受領者は、こうした決定を行う前に、各自のアドバイザーに相談してください。Chainalysis は、受領者が本資料を利用したことに起因する、つながり におけるいかなる決定、その他の作為または不作為についても、一切の責任を負いません。
Chainalysis 当社は、本報告書に記載された情報の正確性、完全性、適時性、適合性、または有効性を保証するものではなく、当該資料のいかなる部分における誤り、欠落、またはその他の不正確さに起因するいかなる請求についても責任を負いません。
