Cryptocurrency payments linked to human trafficking and related illicit services surged sharply in 2025, according to new findings from Chainalysis. The blockchain analytics firm says crypto flows to suspected trafficking services climbed 85% year over year, reaching hundreds of millions of dollars worldwide.
The report paints a picture of increasingly organized, cross-border criminal networks that are leaning on stablecoins, messaging apps like Telegram, and a web of exchanges and laundering services to move funds. At the same time, the transparency of public blockchains is giving investigators more ways to follow the money.
Stablecoins and Telegram drive growth
Chainalysis identified four major categories of crypto-linked trafficking activity: Telegram-based international escort services, labor placement agents tied to scam compounds, prostitution networks, and vendors selling child sexual abuse material (CSAM). Many of these operations rely heavily on stablecoins for payments, which offer price stability and fast cross-border settlement. That convenience comes with a risk: stablecoins can be frozen by centralized issuers, creating pressure points for law enforcement.
Transaction data suggests these aren’t small, one-off schemes. Nearly half of the payments tied to Telegram-based escort services were larger than $10,000, a sign of scaled, professional operations. Prostitution networks tended to cluster in the $1,000 to $10,000 range, while CSAM-related payments were often much smaller, with many under $100.
Organized networks, visible trails
Unlike cash, crypto transactions leave permanent on-chain records. Investigators are using those trails to map payment routes, identify chokepoints at exchanges, and link wallets to known criminal groups. Chainalysis noted that funds often move through institutional-grade platforms and “guarantee services” before being converted into local currency — a process that adds scale but also creates compliance vulnerabilities.
The growth of trafficking-linked crypto activity has tracked the expansion of scam compounds and online gambling operations in Southeast Asia, along with Chinese-language money laundering networks operating largely through Telegram. In several cases, blockchain analysis connected administrator accounts to criminal organizations previously flagged by the United Nations Office on Drugs and Crime.
CSAM networks evolve
CSAM-related activity continues to shift toward subscription-style models, with most payments under $100 per month. The report points to growing overlap with extremist online communities and wider use of instant exchangers and privacy tools. In one notable 2025 case, a dark web CSAM site used more than 5,800 crypto addresses and generated over $530,000 since 2022 — more than the revenue linked to the 2019 “Welcome to Video” case.
Global flows, local pressure points
Major crypto inflows to these networks came from the U.S., Brazil, the U.K., Spain, and Australia. Chinese-language services operating across mainland China, Hong Kong, Taiwan, and Southeast Asia show how global the payment infrastructure has become. Still, Chainalysis highlighted warning signs investigators can monitor, including large recurring payments to labor agents, high-volume flows through guarantee platforms, clusters of stablecoin conversions, and wallet overlap across different illicit categories.
The takeaway: crypto has made cross-border crime easier to coordinate — but it has also made financial trails harder to hide.
Also Read: Vitalik Says Ethereum Apps Need Real Users, Not Just Rewards
CZ Criticizes Etherscan Over Address Poisoning Spam