FATF Stablecoin Warning: 84% of Illicit Crypto Volume Now Runs on Stablecoins
FATF's March 3, 2026 report finds stablecoins account for 84% of illicit virtual asset volume. Secondary market monitoring is now in scope for issuers.
What Changed
On March 3, 2026, the Financial Action Task Force published its Targeted Report on Stablecoins and Unhosted Wallets. The report documents that stablecoins now account for 84% of illicit virtual asset transaction volume in 2025, citing Chainalysis data, against a stablecoin market capitalization exceeding $300 billion across more than 250 tokens. The report identifies peer-to-peer transactions via unhosted wallets as the central vulnerability and calls for AML and CFT obligations on stablecoin issuers, intermediaries, and custodians, with explicit reference to the ability to freeze, burn, or restrict stablecoins on the secondary market.
Who It Affects
Stablecoin issuers facing pressure to implement programmable smart-contract controls and active secondary-market monitoring. VASPs and exchanges with unhosted wallet flows where Travel Rule data exchange becomes more critical. Financial institutions holding stablecoin reserves or providing custody services with rising due diligence expectations. iGaming operators identified in FATF case studies as a vector for stablecoin-based money laundering. National regulators expected to bring stablecoin issuers and intermediaries under AML/CFT obligations. The 84% figure changes the AML conversation — Bitcoin is no longer the primary illicit crypto rail; stablecoins are.
What to Do
For stablecoin issuers, the report describes operational expectations that translate into specific capability investments: real-time wallet screening (sanctions, adverse media, structured-pattern analysis), Travel Rule message generation and consumption, smart-contract freezing infrastructure for secondary markets, off-chain investigation enrichment, and information-exchange protocols with national FIUs. Issuers operating without these capabilities are likely to face supervisory pressure before final FATF guidance crystallizes. For VASPs and exchanges, the secondary-market monitoring expectation extends Travel Rule compliance into post-transfer monitoring.
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds.
Learn More