Crypto-linked flows to trafficking services surge 85% in 2025, Chainalysis says

Chainalysis says crypto flows to suspected trafficking services jumped 85% in 2025, with stablecoin-heavy, Telegram-linked networks leaving traceable on-chain trails.

Summary

• Chainalysis reports an 85% year-over-year rise in 2025 crypto flows to suspected trafficking services, reaching hundreds of millions of dollars globally.​
• Telegram-based escort services, scam-compound labor agents, prostitution networks, and CSAM vendors increasingly rely on stablecoins and privacy tools for cross-border payments.
• Despite this growth, blockchain transparency lets investigators map large, structured transactions, trace chokepoints at exchanges, and link wallets to known criminal groups.

Cryptocurrency flows to suspected human trafficking services increased 85% year-over-year in 2025, reaching hundreds of millions of dollars, according to new data from blockchain analysis firm Chainalysis.

Nearly half of transactions tied to Telegram-based international escort services exceeded $10,000, the report stated. The data indicates increasing professionalization of these networks, while blockchain transparency has emerged as an investigative tool for law enforcement.

Chainalysis tracked four major categories of suspected crypto-facilitated trafficking activity: Telegram-based international escort services, labor placement agents tied to scam compounds, prostitution networks, and child sexual abuse material (CSAM) vendors. The growth corresponds with the expansion of Southeast Asia-based scam compounds, online gambling operations, and Chinese-language money laundering networks, many operating via Telegram, according to the report.

Blockchain transactions leave permanent trails, unlike cash transactions. Law enforcement investigators are using that visibility to map flows, identify chokepoints, and disrupt operations, the firm reported.

Payment behavior varies across categories. Telegram-based international escort services and prostitution networks rely heavily on stablecoins, according to the data. CSAM vendors historically preferred Bitcoin, though alternative Layer 1 networks are increasing in use. Monero is increasingly used for laundering in CSAM-linked operations. The use of stablecoins suggests these networks prioritize price stability and rapid off-ramping, despite the risk of asset freezes by centralized issuers, the report stated.

Transaction size data reveals the structured nature of these operations. Nearly 50% of Telegram-based escort transactions exceed $10,000, prostitution networks cluster in the $1,000 to $10,000 range, and CSAM transactions trend lower, with many under $100, according to Chainalysis. Large transfers suggest organized, scaled criminal enterprises rather than isolated actors, the firm stated.

CSAM-related activity continues to evolve. Subscription-based revenue models dominate the sector, with payments typically under $100 per month, the report found. The data shows increased overlap with sadistic online extremism communities and greater use of instant exchangers and privacy tools.

In one 2025 case, a darkweb CSAM site used over 5,800 cryptocurrency addresses and generated more than $530,000 since 2022, exceeding revenue tied to the 2019 “Welcome to Video” case, according to the report. Geographic analysis shows strategic use of U.S.-based infrastructure, likely for scale and perceived legitimacy, Chainalysis stated.

Telegram-based escort services show strong financial integration with Chinese-language money laundering networks, guarantee platforms, and mainstream exchanges, the data indicated. Funds often pass through institutional-grade platforms before conversion into local currency. This creates both scale and vulnerability, as exchanges and guarantee services become compliance chokepoints, according to the firm.

Human trafficking linked to scam compounds remains tightly connected to cryptocurrency. Victims are recruited via fraudulent job advertisements, then coerced into scam operations in Southeast Asia, the report stated. Recruitment payments typically range from $1,000 to $10,000, matching observed on-chain transaction patterns. Blockchain analysis has tied certain administrator accounts to criminal organizations previously flagged by the United Nations Office on Drugs and Crime, according to Chainalysis.

The data shows major cryptocurrency inflows from the United States, Brazil, the United Kingdom, Spain, and Australia. Chinese-language Telegram services operating across mainland China, Hong Kong, Taiwan, and Southeast Asia demonstrate global payment infrastructure, the report found. Cryptocurrency enables cross-border payment coordination at scale, but also exposes flow patterns that investigators can analyze, Chainalysis stated.

The firm highlighted several red flags, including large recurring payments to labor agents, high-volume flows through guarantee platforms, stablecoin conversion clusters, cross-border transaction concentration, and wallet overlap across multiple illicit categories.

Blockchain transparency provides measurable, traceable data that law enforcement can leverage, unlike traditional cash-based systems, according to the report.