The recent report from the Financial Action Task Force (FATF) reveals that criminals are still using cryptocurrency to move large amounts of money, though they’ve become more sophisticated in how they do it. While regulators are increasing their efforts to stop this activity, significant loopholes remain, allowing billions of dollars to flow through undetected. This impacts anyone involved with crypto – whether you operate a platform, process payments, or simply trade.
The Financial Action Task Force released an update in mid-July focusing on virtual assets, marking its seventh report on the topic. While rules about tracking transactions (the “Travel Rule”) are expanding, actually putting them into practice is falling behind. We’re also seeing more significant cases of illegal activity being uncovered – everything from massive money laundering schemes to widespread fraud operations affecting nearly one hundred countries. This isn’t just theoretical policy; it reflects how people are actually sending and receiving money in the modern world.
This article explains how criminals operate, clarifies the key messages from the Financial Action Task Force (FATF), and provides practical steps you can take right now to minimize your risks.
Aspect
What to Know
FATF’s 2026 Update
Issued 16 July 2026, it assesses how countries and VASPs are implementing standards for virtual assets and highlights real abuse cases (Comsure (reporting FATF)).
Travel Rule Status
83% of surveyed jurisdictions passed Travel Rule laws, up from 73% in 2025, but consistent cross-border compliance remains patchy (Comsure (reporting FATF)).
Enforcement Gap
Only about 40% of those with Travel Rule laws report supervisory or enforcement action, a key reason data still goes missing in transit (Comsure (reporting FATF)).
Scale of Abuse
FATF cites a Cambodia-based financial group that laundered at least USD 4B between 2021 and 2025, illustrating industrialized laundering networks (LexisNexis (reporting FATF)).
Law Enforcement Moves
INTERPOL’s Operation First Light saw 5,811 arrests and USD 293M intercepted across 97 countries, including blocks on virtual wallets (INTERPOL).
Why It Matters
Criminals exploit enforcement gaps, cross-chain tools, and weak Travel Rule plumbing. Platforms that don’t adapt risk sanctions breaches, seizures, or offboarding by partners.
How illicit crypto flows actually work
Illicit money moving through cryptocurrency doesn’t happen all at once; it’s a multi-step process. It begins with ‘placement,’ when the illegal funds first enter the blockchain. Next comes ‘layering,’ where the money is moved around between different wallets, blockchains, and services to hide its origin and delay tracking. Finally, there’s ‘integration,’ when the money is converted into something that can be used for purchases in the real world. This final step still requires traditional financial tools like exchanges, brokers, prepaid cards, or payment networks.
Layering is the most common technique for obscuring transactions. It involves moving funds through a series of transfers, ranging from basic sequences of many small payments to more complex paths using ‘bridges’ and ‘swaps’. Tools designed to enhance privacy gain and lose popularity based on how strictly regulations are enforced. Stablecoins are frequently used because they help minimize price fluctuations during the process of converting or withdrawing illicit funds. These methods constantly adapt as monitoring increases; when one method is blocked, activity simply moves to another route with lower costs and less scrutiny.
Virtual Asset Service Providers (VASPs) play a key role in complying with regulations because they handle customer funds and transactions. These services are required to gather information about the senders and recipients of money transfers, and share it with authorities – this is known as the Travel Rule. While many countries have now written these rules into law, according to recent reports (Comsure reporting for FATF), only a few are actively checking that they’re being followed internationally.
Law enforcement agencies are now working together much more effectively. Operations like ‘First Light’ demonstrate that when they share information, use data analysis, and collaborate across borders, they can quickly make arrests and seize illegal assets – as highlighted by INTERPOL.
Glossary you’ll actually use
- Travel Rule: The requirement for VASPs to send verified originator and beneficiary information alongside qualifying transfers, similar to bank wire data standards.
- VASP: Virtual Asset Service Provider. Any business that exchanges, transfers, or safeguards digital assets on behalf of customers.
- Layering: The stage of laundering focused on breaking traceability through hops, swaps, or intermediaries.
- Peel chain: A method of sending many small outputs from a larger pot to obscure the trail and slow investigators.
- Cross-chain bridge: Software or services that move value between blockchains, often used to exit a monitored network quickly.
- OTC broker: A dealer that matches buyers and sellers off-exchange, common in cash-outs where privacy or limit sizes matter.
Step-by-step playbook for platforms and compliance teams
- Map your Travel Rule posture by corridor. List your top counterparty jurisdictions and VASPs. Note which have working Travel Rule messaging, which don’t, and where you routinely lose data in transit.
- Fix the last-mile data gaps. Implement fallback procedures when counterparties can’t accept Travel Rule payloads. Use secure portals or interim attestations while you phase in interoperable messaging.
- Turn on cross-chain visibility. Add analytics that link deposits to previous hops across chains. A single inbound address rarely tells the real story without bridge and DEX traces.
- Risk-tier counterparties and networks. Score exchanges, OTC desks, and chains based on enforcement maturity, sanctions exposure, and historic hit rates. Raise friction on the riskiest corridors.
- Harden withdrawal controls. Screen beneficiary addresses for proximity to mixers, fraud clusters, and sanctioned services. Delay or review suspicious outflows to cut off cash-outs.
- Close the SAR loop. Make sure suspicious activity reports feed back into rules and models. If alerts don’t change behavior, you’re just filing paperwork.
- Train for current scams, not last year’s. Rotate case studies that mirror what you see now: romance scams, work-from-home mule rings, investment groups on messaging apps. Update playbooks quarterly.
- Coordinate beyond crypto. Build contacts with banks, payment processors, and national cyber units. When off-ramps and wallet freezes line up, recoveries and deterrence improve, as seen in recent global actions (INTERPOL).
How criminal routes actually look in 2026
As a researcher tracking illicit funds, I’ve observed a common pattern: attackers often target victims during weekday evenings when support teams are less available. The stolen money is quickly moved – first to a new digital wallet, then swapped for a stablecoin on a decentralized exchange. Next, it’s transferred across a bridge to a different blockchain that offers faster and cheaper transactions. From there, the funds end up in a hosted wallet on a smaller cryptocurrency exchange, one that doesn’t always strictly follow regulations requiring identity verification. If those checks are minimal, the criminals can convert the digital currency into something very close to cash on the same day.
Expand this operation, and you get an industrial-scale money laundering system. A recent report from the Financial Action Task Force (FATF) highlights a Cambodian conglomerate that laundered at least $4 billion over several years. This suggests not only sophisticated transactions but also a network of people willing to help, combined with inadequate oversight throughout the process (LexisNexis, reporting for FATF).
To prevent fraud, it’s best to interrupt suspicious activity as soon as possible. This means identifying potential issues *before* funds reach your system. Specifically, always verify required transaction details (like Travel Rule data) before processing deposits. Carefully review new customers, especially those with a history of quickly moving funds across different blockchains. And if a transaction path looks deliberately constructed to avoid detection, don’t hesitate to add extra checks and manual review.
Travel Rule reality check: progress, gaps, and what to do
From my analysis, while most countries appear to have adopted Travel Rule legislation – the Financial Action Task Force reports compliance in about 83% of jurisdictions – actual implementation is a different story. Only around 40% are actively supervising or enforcing these rules. This explains why we continue to see deposits coming through without complete identifying information for the sender and receiver, as highlighted by Comsure and reported to FATF.
Here’s a simple way to frame the implementation options and what they cost you.
As a crypto investor, I’ve been looking at how different approaches handle compliance with things like VASP regulations. Here’s how I see the pros and cons of a few options. First, directly connecting to trusted exchanges (VASPs) is fast and reduces errors, but it limits where I can send funds and could lock me into one provider. Building connectors to a wider network is great for global transfers and future growth, but it’s more complex to set up and needs a lot of testing. A fallback option is manual checks, which keep things moving in tricky situations, but they’re prone to human error and create audit nightmares. Finally, simply blocking non-compliant exchanges sends a strong message, but it can frustrate customers, cut off revenue in certain areas, and increase support requests. Each path has its upsides and downsides, and the best choice depends on balancing speed, reach, and risk.
Here’s the gist: create several ways to complete transactions. Make sure these methods work together seamlessly, maintain direct connections with key partners, and have a clear, step-by-step manual process as a backup for now. As other systems improve and regulators require proof of compliance, gradually reduce reliance on that manual process.
Spot the route, break the route
As an analyst, I’ve found that criminals consistently choose pathways for illicit funds that are the quickest, cheapest, and least likely to attract attention. That means we, as defenders, need to focus on identifying the telltale signs of these movements *before* the funds are converted into traditional currency and become much harder to recover. What follows is a breakdown to help you better connect your detection strategies with the current on-chain landscape.
Here’s a breakdown of common money laundering techniques and how to counter them:
Technique: Bridge Hop & DEX Swap
What it looks like: Funds are quickly moved from one blockchain to another using a bridge, then immediately swapped for a stablecoin.
Countermeasure: Track transactions across bridges, implement cool-down periods after bridging, and verify compliance with the Travel Rule before crediting accounts.
Technique: Peel Chain to Hosted Wallet
What it looks like: Small amounts of cryptocurrency are sent over several hours, eventually consolidating into a single deposit at an exchange.
Countermeasure: Group related transactions (clustering), set velocity limits, and require extra identity verification (enhanced KYC) for larger deposits.
Technique: OTC Broker Cash-Out
What it looks like: Funds are sent to a wallet linked to an over-the-counter (OTC) broker, then converted to traditional currency outside of exchanges.
Countermeasure: Assess the risk level of counterparties, receive alerts from payment partners, and collaborate on investigations.
Technique: Mixer Detour
What it looks like: Funds enter a known cryptocurrency mixer, disappear for a time, and then reappear on more easily traceable blockchains.
Countermeasure: Score transactions based on proximity to mixers, hold funds temporarily, and notify relevant Financial Intelligence Units (FIUs).
Here’s a helpful tip: Acting quickly is key. The first transaction after a compromised source is the best time to stop further loss. Respond within minutes or hours when you first suspect a problem, not after the money is already gone.
Centralized choke points vs open protocols
There’s a conflict: while centralized platforms are well-positioned to enforce regulations like identity verification and transaction monitoring, illegal activity often happens on decentralized systems where there’s no single entity to hold accountable. Money moves between both regulated and unregulated spaces, and criminals take advantage of these open pathways.
Effective fraud prevention relies on multiple layers of security. When information is shared between agencies, it stops dangerous transactions. Banks and payment companies carefully examine money as it enters and leaves the traditional financial system. And when national law enforcement agencies work together quickly, we see results – like the 5,811 arrests and $293 million seized during July’s international fraud crackdown led by INTERPOL.
The Financial Action Task Force (FATF) recently reported that 83% of countries surveyed have officially adopted relevant regulations. However, without consistent enforcement and prosecutions, criminals will continue to take advantage of loopholes and avoid detection (according to Comsure, reporting on FATF findings).
Pitfalls and red flags to watch
- Assuming Travel Rule = solved. If counterparties can’t receive payloads or your jurisdiction isn’t enforcing, you still have blind spots.
- Over-reliance on address blacklists. Criminals rotate infrastructure. Proximity and behavior analytics matter more than static lists.
- Treating stablecoins as low risk by default. They’re convenient for launderers because price doesn’t move while they reroute.
- Ignoring cross-chain traces. Dirty funds rarely arrive straight. Missing the bridge hop breaks your context.
- Manual fallbacks without guardrails. If staff are copy-pasting ownership attestations, audits will be painful and attackers will notice.
- Underpowered SAR feedback loop. Filing without learning means the same patterns keep slipping through.
For continued updates, in-depth analysis, and the latest information on this developing story, visit Crypto Daily.
Frequently Asked Questions
What exactly did the FATF publish in July 2026?
This report is the seventh in a series of updates examining how nations and virtual asset service providers (VASPs) are putting the Financial Action Task Force’s (FATF) standards for digital assets into practice. It focuses on the implementation of the Travel Rule, and also details examples of misuse and how regulations are being enforced, according to data from Comsure as reported to FATF.
Is the Travel Rule now universal in crypto?
Look, it’s not about whether countries *have* rules for crypto travel – most of them do, around 83% according to recent surveys. The real problem, as a crypto investor, is that these rules aren’t actually being *used* effectively. Only about 40% of those countries are actually enforcing them or even making sure different systems can talk to each other. It’s all well and good having laws on the books, but if they’re not enforced and don’t work in practice, it doesn’t really change much.
How do criminals move “billions” in practice?
Criminals are combining various techniques to move stolen money. They start by gaining access to accounts or running scams, then quickly transfer the funds through a series of transactions – including moving it between different blockchains, using decentralized exchanges, splitting it into smaller amounts (‘peel chains’), and sometimes hiding it with mixers. They often cash out using over-the-counter brokers or exchanges that don’t have strong security measures. A recent report from the Financial Action Task Force (FATF) highlighted a financial group in Cambodia that laundered at least $4 billion over several years, demonstrating how large these operations can be (as reported by LexisNexis).
Are mixers illegal everywhere?
Whether or not using a cryptocurrency mixer is legal depends on where you are. While some mixers have faced legal issues because of their connection to illegal activities, others are still permitted. Banks and other financial institutions should carefully review and potentially delay transactions involving mixers, as they may pose a risk.
What role do global operations like INTERPOL’s play?
International law enforcement agencies are working together to stop financial crimes by tracking down and shutting down criminal networks. This includes freezing assets and arresting individuals involved in activities like moving money for criminals, running scam operations, or laundering illicit funds. For example, Operation First Light in July 2026 led to 5,811 arrests and recovered $293 million, even targeting digital wallets (INTERPOL).
What should an exchange do if counterparties won’t support Travel Rule messaging?
Always have a backup plan in place, like secure access points or verification processes that include extra identity checks, longer processing times, and set limits. Assess the risk level of each party you work with, and streamline manual checks as they start using standardized, compatible systems or as regulators begin testing for compliance.
Is crypto becoming unusable for privacy-conscious but lawful users?
It’s not a certainty, but the trend is leaning towards more data being shared between virtual asset service providers (VASPs) and stricter regulations when converting cryptocurrency back into traditional money. Legitimate users will still be able to transfer funds, but expect more delays and checks, especially for international transfers and anything that looks like money laundering.
2026-07-23 15:18