Does a Rise in Stablecoin Freezes Mean More On-Chain Crime?

 / 
2

An increase in stablecoin freezes does not directly mean there is more on-chain crime. This metric primarily measures how quickly issuers respond to enforcement actions and how capable they are of freezing funds, not the true scale of criminal activity. The record freeze numbers in 2026 were mainly driven by stronger US sanctions enforcement, faster coordination between Tether and OFAC, and broader proactive monitoring by issuers. In fact, illicit activity as a share of total on-chain transaction volume remains at a historic low.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!!

Freeze amounts are rising, but the share of illicit transactions is falling

You need to look at both sets of data together to understand what is happening.

According to Chainalysis' 2026 crypto crime report, total illicit crypto transaction volume reached a record high of about $154 billion in 2025, but that accounted for less than 1% of all on-chain transaction volume. TRM Labs independently estimated roughly $158 billion and a 1.2% share, which is in the same range. The absolute dollar amount of illicit transactions is growing, but legitimate transactions are growing even faster, so the percentage is declining.

At the same time, freeze amounts are indeed surging. Data from Bitquery shows that stablecoin issuer freezes reached a record $2.4 billion in 2026, with Tether accounting for 97% of issuer-related freezes. BlockSec's tracking data shows that as of July 2026, Tether's blacklist had cumulatively frozen about $5.69 billion across 9,597 addresses.

The rise in freeze amounts and the decline in the illicit transaction share are not contradictory. What it shows is that enforcement agencies and issuers are getting more efficient at handling identified illicit funds, not that illicit activity itself is becoming more rampant.

The real drivers behind the 2026 freeze surge

Sanctions enforcement is the biggest factor. On April 23, 2026, Tether worked with OFAC to freeze $344 million in USDT across two Tron addresses designated as property related to Iran's central bank. In July, another $131 million was frozen from addresses linked to Iran's Revolutionary Guard. Since the start of "Operation Economic Anger," cumulative freezes related to Iran total about $1 billion. These are geopolitical sanctions enforcement actions, not signals of growing ordinary on-chain crime.

Tether's own monitoring coverage has expanded. By address count, the largest source of Tether blacklist additions is not law enforcement requests or sanctions lists, but Tether's own on-chain monitoring, which identifies clusters of scam, phishing, and theft addresses. In 2025, 4,163 addresses were blacklisted, far exceeding any public law enforcement or OFAC request count, and most involved small freezes. This means part of the growth in frozen addresses reflects a more sensitive and broader issuer risk-control system.

Structural changes in issuer response speed. BlockSec's analysis notes that by 2026, OFAC and Tether coordination had become so tight that "some freezes were completed before public announcements." Faster and more proactive freezes naturally lead to higher freeze amounts per unit of time. This measures coordination efficiency, not crime rates.

Why "freeze amount" is a biased metric

Freeze amounts only record cases where issuers decided to act. They do not capture: illicit activity that was never identified, illegal activity using BTC or other non-stablecoin assets, or transactions that occur in issuer monitoring blind spots such as multi-hop transfers between unhosted wallets.

A March 2026 FATF report highlighted a structural limitation: the Travel Rule framework has significant visibility gaps in unhosted wallet scenarios. When stablecoins move through multiple unhosted wallets, "no single obligated entity can see the complete transaction chain." Issuer freeze capabilities are concentrated at the "edges"—nodes where funds enter or exit regulated entities—but monitoring capacity for mid-chain flows is limited.

This means freeze amount growth may reflect improved detectability rather than increased total crime. If monitoring tools get better, the same criminal activity will produce more freeze records. If criminal activity itself increases but monitoring does not keep up, freeze amounts might not change at all.

One detail worth separating: stablecoins are playing a bigger role in illicit activity

One trend is real: stablecoins are taking up a larger share of illicit crypto transactions. Chainalysis data shows stablecoins accounted for 84% of illicit transaction volume in 2025, up from just 15% in 2020, when Bitcoin made up about 70%. Bitcoin's share has fallen to about 7%.

But this explains a shift in asset preference among criminals, not a change in total illicit activity. Criminals choose USDT over BTC because stablecoins have stable prices, good liquidity, and are convenient for cross-border transfers. This drives up demand for stablecoin-related freezes, but it does not change the conclusion that illicit transactions account for less than 1% of total volume.

When would "more freezes = more crime" be more valid?

The rise in freeze amounts would more likely reflect real crime growth if the following combination appeared: the share of illicit transactions in total on-chain volume rises at the same time, and the amount of unfrozen illicit funds also expands. Current data does not support this combination—the share is falling while freezes are accelerating.

Another signal worth watching is a gap Bitquery identified: 77% of frozen amounts have no publicly disclosed reason. This means the basis for most freezes is opaque, making it impossible for outsiders to determine whether these freezes target confirmed crimes, are preventive measures, or are sanctions-related asset controls. This lack of transparency itself limits how much "freeze amount" can tell us about crime.

My assessment is this: the current rise in stablecoin freezes should primarily be read as a maturity indicator for enforcement and compliance infrastructure. Issuers have stronger freeze capabilities, faster response times, and closer coordination with sanctions agencies, so the same criminal activity produces more freeze records. Treating it as evidence that "on-chain crime is getting worse" confuses improved detection capability with expanded criminal scale.

Data worth watching going forward

Watch whether the share of illicit transactions in total on-chain volume starts to rise again, rather than looking only at absolute freeze amounts. Only if the share and freeze amounts rise together would a crime-growth interpretation be justified. Also watch whether the proportion of "no public reason" freezes tracked by Bitquery declines—if issuers disclose more freeze rationales, outsiders can more accurately distinguish how much of the freeze volume comes from sanctions enforcement, proactive risk control, and crime fighting respectively. As of early November 2026, neither condition has been met.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!!

References

  1. Explanations on the link between cryptocurrency and crime
  2. 2026 USDT blacklist mechanism explained
  3. Bitquery report on crypto asset freezes since 2016
  4. 2026 USDT blacklist mechanism explained (Chinese)
  5. Compliance analysis on stablecoins accounting for 84% of illicit crypto volume
  6. Analysis on structural changes in illicit crypto transactions