FATF: Stablecoins Have Overtaken Other Crypto Assets as Criminals’ Preferred Laundering Rail

The Financial Action Task Force’s seventh targeted update on virtual assets, published July 16 at the opening of the United Kingdom’s incoming FATF presidency, delivers a finding that will reshape how virtual asset service providers and their banking partners think about transaction monitoring priorities for the remainder of 2026: the majority of identified on-chain illicit activity now involves stablecoins rather than more traditionally scrutinized assets like Bitcoin. The shift reflects a maturing criminal preference for the price stability, liquidity, and ease of cross-border movement that dollar-pegged tokens provide, characteristics that make them attractive to legitimate users and illicit actors in roughly equal measure — and that make transaction-level distinction between the two categories of user considerably harder than volatility-driven crypto laundering typologies of years past.

The report’s headline compliance statistic is more encouraging on its face: 83 percent of surveyed jurisdictions have now passed legislation implementing the FATF Travel Rule, which requires virtual asset service providers to collect and transmit originator and beneficiary information alongside transfers above a designated threshold, up from 73 percent in the 2025 update, with a further eleven jurisdictions reporting implementation in progress. But FATF was explicit that legislative adoption has sharply outpaced supervisory effectiveness, warning that many jurisdictions have not yet converted legal frameworks on paper into functioning, enforced supervision in practice — a gap that criminal networks have exploited at industrial scale. The report’s most striking illustrative case involves a Cambodia-based financial services conglomerate that FATF found had laundered at least $4 billion between 2021 and 2025 through a single piece of infrastructure that simultaneously served organized-crime fraud operations and cyber-theft proceeds linked to North Korean state actors, a convergence that underscores how thinly resourced or poorly supervised VASP sectors in specific jurisdictions can become chokepoints for laundering flows with origins as varied as romance scams and state-sponsored cybercrime.

FATF also flagged an emerging technical risk that compliance and blockchain-analytics teams should treat as an early warning rather than a distant concern: some criminal networks have begun developing proprietary stablecoins specifically engineered to resist the freezing and seizure capabilities that regulated, centrally-issued stablecoins like USDC and USDT retain by design. If this trend accelerates, it would represent a meaningful shift in the underlying risk model that most transaction monitoring systems currently assume — namely, that stablecoin issuers retain a technical and legal ability to freeze suspect funds on request, a capability that has become a standard component of law enforcement asset-recovery strategy and that a freeze-resistant proprietary token would eliminate entirely.

The update’s timing carries additional significance because it marks the formal handover of the FATF presidency from Mexico’s Elisa de Anda Madrazo to the United Kingdom’s Giles Thomson, whose two-year term beginning July 1 has explicitly prioritized accelerating the international response to virtual asset risk alongside a broader focus on the global fraud epidemic, including scam-compound operations that have proliferated across Southeast Asia. Thomson’s public remarks accompanying the report’s release called for governments and the private sector to close regulatory gaps and strengthen cross-border cooperation, framing effective implementation, rather than further standard-setting, as the presidency’s central task — a notable shift in emphasis from prior FATF cycles that focused heavily on expanding the scope of Recommendation 15’s coverage of virtual asset activity.

For compliance functions at banks, exchanges, and payment processors, the practical implication is a need to recalibrate risk scoring models that may still treat stablecoin transactions as inherently lower-risk than more volatile cryptocurrencies, an assumption FATF’s data now directly contradicts. Institutions should expect increased supervisory attention specifically on stablecoin flows through offshore or lightly-regulated VASPs, and should treat DeFi platforms — flagged in the report alongside offshore exchanges as a persistent regulatory gap — as a distinct risk category warranting its own typology-specific monitoring rules rather than being folded into generic virtual asset transaction thresholds. With FATF’s parallel targeted report on decentralized finance also due for publication this month, institutions with material DeFi exposure should anticipate further, more prescriptive guidance before year-end.