The Financial Action Task Force (FATF), a Paris-based intergovernmental body that sets global anti-money laundering (AML) and counter-terrorism financing (CFT) standards, published its findings Thursday after approval at its June plenary session. The report covers virtual asset service providers (VASPs) such as exchanges, wallet providers, and brokers, and finds that regulatory coverage remains dangerously thin. Only 51 of 149 assessed jurisdictions, or 34 percent, now meet the body's core crypto compliance standards. That figure is up from 29 percent the prior year, but it still means two-thirds of countries provide inadequate oversight of the sector.

FATF said crypto-enabled crime has grown "more complex and interconnected." The report's findings reflect a broader pattern in which criminal networks layer their operations across multiple blockchains, offshore exchanges, and peer-to-peer transfer channels to avoid detection. The body also flagged a troubling new development: some criminal organisations are engineering their own stablecoins specifically designed to resist asset freezing or seizure by law enforcement. Stablecoins (digital tokens pegged to currencies like the US dollar) already dominate illicit crypto flows. A separate FATF report from March 2026 found that 84 percent of all illicit virtual asset volume in 2025 moved through stablecoins, totalling roughly $141 billion of a $154 billion annual total. Sanctions evasion activity was even more concentrated, with stablecoins accounting for 86 percent of those flows.

The July report references the February 2025 theft from Dubai-based exchange Bybit as the single largest virtual asset heist on record. North Korea's Lazarus Group, operating through the cluster known as TraderTraitor, stole $1.46 billion in a single operation. The FBI confirmed the attribution and noted that stolen assets were converted into Bitcoin and dispersed across thousands of blockchain addresses, with suspected Chinese over-the-counter trading services used as exit ramps. As of the report's publication, less than 4 percent of the stolen funds have been recovered. TRM Labs' 2026 Crypto Crime Report places total crypto theft across all incidents in 2025 at approximately $2.87 billion across roughly 150 cases, with five incidents alone accounting for 70 percent of the value lost. To put the scale of illicit activity in perspective, TRM Labs estimates that criminal transactions accounted for approximately 1.2 percent of total on-chain volume in 2025, meaning the vast majority of crypto activity remains legitimate.

Beyond state-sponsored theft, the report highlights two organised criminal ecosystems operating at scale. Chinese-language underground money laundering networks, with the Huione network identified as a key named facilitator, processed at least $16.1 billion in illicit funds in 2025 according to Chainalysis, though TRM Labs' figures are significantly higher at over $103 billion when including a broader set of linked services. These networks, which use coordinated pools of money mules and offshore exchanges with minimal compliance controls, now account for more than 20 percent of all crypto money laundering activity globally. Separately, the Russia-linked A7 network processed over $56 billion in crypto volume and issued its own proprietary stablecoin, A7A5, which handled $72 billion in gross volume last year. The Chinese-language network figures come from Chainalysis and the A7 data from TRM Labs. In its own analysis, FATF has identified significant gaps between countries' stated risk assessments and their actual enforcement capacity as a systemic problem across assessed jurisdictions.

The implications are particularly sharp for Africa and South Asia. Africa's crypto sector is growing fast, led by Nigeria, Kenya, South Africa, Ghana, Morocco, and Egypt, but the region's AML frameworks remain underdeveloped. The Institute for Security Studies has noted that crypto laundering costs criminals roughly 15 percent of proceeds compared to 50 percent for traditional cash methods, making the continent an attractive target. South Africa exited the FATF grey list in October 2025 after regulatory reforms, and a June 2026 High Court ruling brought offshore crypto wallet transfers under exchange control rules, adding new compliance risk for users moving assets abroad. Namibia and Algeria also exited the grey list at the June 2026 plenary, a positive step for their access to international financial systems. In South Asia, Pakistan passed the Virtual Assets Act 2026, establishing a dedicated regulator called the Pakistan Virtual Assets Regulatory Authority (PVARA) and allowing licensed exchanges to access banking services. The legislation is partly designed to prevent Pakistan from returning to the FATF grey list, having previously exited it in 2022 following years of compliance reforms. Bangladesh has still not legalised virtual assets at all, leaving its crypto users without any AML framework protections. FATF specifically called out scam compound operations based in Myanmar and Cambodia as a major unsolved problem, noting that financial institutions, crypto companies, and regulators face "significant and ongoing challenges" detecting laundering flows from investment fraud networks that disproportionately target South and Southeast Asian victims.

FATF published a companion report on decentralised finance (DeFi) regulation alongside Thursday's release, examining how AML obligations may apply to governance participants in DeFi protocols operating in member jurisdictions. Verse Press analysis of the DeFi report suggests that protocol-layer participants could face expanded compliance expectations, though the precise scope of any obligations will depend on how member countries implement the guidance. The Travel Rule, which requires exchanges to share sender and recipient information on transfers above threshold amounts, has now been adopted in 99 jurisdictions. For retail users transacting through unhosted wallets, regulators in compliant countries are pressing for stricter identification requirements on peer-to-peer transfers. With criminal networks actively building infrastructure designed to outpace freezing mechanisms, the central question for FATF's eighth annual update will be whether the compliance gap is narrowing in practice or only on paper. The body relies on peer pressure and grey-listing rather than direct enforcement powers to drive change, and the answer will reveal how much weight those tools ultimately carry.