The Financial Action Task Force (FATF) has issued a stark warning that criminals are exploiting regulatory gaps in the cryptocurrency industry to move billions of dollars in illicit proceeds, urging nations to strengthen international cooperation and enforcement. In its latest review into the role of virtual assets and illicit finance, the Paris-based global watchdog highlighted that while progress has been made, “significant gaps” remain in translating risk assessments into concrete actions to reduce crypto-enabled crime.
Escalating Crypto-Enabled Crime and Regulatory Gaps
The FATF’s July 2026 report details how crypto-enabled crime has become increasingly “complex and interconnected” over the past year, posing significant challenges for regulators, financial institutions, and crypto companies in detecting and stopping money-laundering flows. Criminal networks, including organized crime groups, are capitalizing on inconsistent regulatory frameworks across jurisdictions to launder illicit funds through virtual assets.
Despite some improvement in compliance, only 51 out of 149 assessed jurisdictions—just over a third (34%)—were deemed “largely compliant” with FATF’s standards for crypto as of April 2026, up from 29% the previous year. The watchdog emphasized that with virtual assets being inherently borderless, regulatory failures in one jurisdiction can have global consequences, undermining the integrity of the international financial system.
Key Findings: Stablecoins, Fraud, and Asset Recovery Challenges
The FATF highlighted several emerging risks and vulnerabilities in the crypto ecosystem:
- Stablecoin Misuse: The use of stablecoins by illicit actors, including North Korean operatives, terrorist financiers, and drug traffickers, has continued to increase. Most on-chain illicit activity now involves stablecoins, particularly in peer-to-peer transactions via unhosted wallets.
- Record-Breaking Crypto Theft: North Korea (DPRK) carried out the largest single virtual asset theft in history, stealing $1.46 billion from the crypto exchange ByBit. Only 3.8% of the stolen funds have been recovered, underscoring the urgent need to address asset recovery challenges and improve international cooperation.
- Fraud and Scams: There has been a significant uptick in the use of virtual assets in fraud and scams, with one industry participant estimating approximately $51 billion in illicit on-chain activity related to fraud and scams in 2024 alone.
- Offshore VASP Risks: The FATF approved a report on Understanding and Mitigating the Risk of Offshore Virtual Asset Service Providers (oVASPs), exploring how gaps and differences in regulatory coverage are exploited by criminals.
FATF Recommendations and Call for Action
The FATF called upon all countries to effectively implement its Recommendations, which form the basis for tackling money laundering, terrorist financing, and the financing of proliferation. Key areas for improvement laid out for both the public and private sectors include:
- Licensing and Registration: Jurisdictions need to address difficulties in identifying natural or legal persons conducting VASP activities and improve licensing and registration frameworks.
- Risk Mitigation for Stablecoins: The FATF’s March 2026 targeted report on stablecoins and unhosted wallets recommended fully implementing Recommendation 15, establishing comprehensive legal frameworks, and imposing clear AML/CFT obligations on stablecoin issuers, intermediaries, and custodians.
- International Cooperation: Findings from significant cases, such as the UK’s Operation Destabilise, underscore the importance of international cooperation and the ability to freeze and seize assets to disrupt criminal networks.
- Technology-Based Tools: The report emphasized leveraging advanced technology-based tools and, in some jurisdictions, requiring issuers to embed programmable controls in stablecoin smart contracts to support freezing, deny-listing, or other risk mitigation actions.
Compliance Progress and Persistent Challenges
The FATF acknowledged that jurisdictions—including those with materially important VASP activity—have made progress since 2024 towards developing or implementing AML/CFT regulation and taking supervisory and enforcement actions. However, the watchdog stressed that with the jurisdictions constituting approximately 98% of the global virtual asset market, ensuring the FATF Standards are fully implemented will significantly help reduce global risks overall.
Countries’ regulators, financial institutions, and crypto companies continue to face “significant and ongoing challenges” in detecting and stopping money-laundering flows coming from scam compounds and investment fraud networks. The FATF noted that mass adoption of stablecoins or virtual assets more broadly could amplify illicit finance risks, particularly with uneven implementation of the FATF Standards for VAs/VASPs.