State-Sponsored Evasion: Russia’s ‘A7A5’ Stablecoin Drives Illicit Crypto Flows to Record $158 Billion
Illicit crypto volume hit $158 billion in 2025, driven by Russia’s $72 billion ‘A7A5’ stablecoin and state-sponsored sanctions evasion.
The Geopolitical Pivot
Illicit cryptocurrency volume shattered records in 2025, hitting $158 billion, a 145% surge from the previous year. But the headline number hides a critical structural shift: the driver is no longer darknet markets or retail ponzi schemes, but sovereign nations building parallel financial rails.
According to the TRM Labs 2026 Crypto Crime Report, the explosion in illicit volume was fueled almost entirely by sanctions evasion. While the relative share of illicit activity dipped to 1.2% of total global volume, the absolute value moved by sanctioned entities skyrocketed.
This isn’t criminal chaos; it is state-level infrastructure.
The Mechanism: A7A5
The report identifies a single asset as the linchpin of this surge: A7A5, a ruble-pegged stablecoin issued by the Kyrgyzstani entity “Old Vector.”
Launched in February 2025, A7A5 processed over $72 billion in volume in under 11 months. Operating primarily on the Tron network, favored for its low fees and high USDT liquidity, the token served as a bridge for Russian entities to exit the ruble and enter the global crypto economy, bypassing SWIFT and OFAC controls.
Data from Chainalysis corroborates the scale, noting that Russia-linked flows and the A7 wallet cluster (responsible for another $39 billion) effectively erased the multi-year decline in on-chain crime observed since 2021.
The rapid growth of the ruble-pegged stablecoin A7A5… reflects concentrated, coordinated activity closely associated with sanctions evasion and state-aligned financial infrastructure, rather than broad market usage.
Institutionalized Evasion
The data points to a bifurcation in the market. While retail-facing exchanges tightened KYC controls, state actors moved to decentralized protocols and custom-built assets. Nation-states like Iran and Venezuela have now fully integrated crypto rails into their trade settlement layers.
Security breaches remain a secondary but potent vector. The $1.46 billion Bybit hack in February 2025 accounted for over half of the year’s total stolen funds, signaling that while theft frequency is down, the severity of individual incidents has intensified due to centralized honeypots.
For regulators, the challenge has mutated. The adversary is no longer a hacker in a basement, but a central bank with a smart contract.
