In short
- The ICIJ’s “Coin Laundry” investigation has revealed recurring illicit-flow patterns throughout exchanges, brokers, and crypto-to-cash storefronts.
- Case recordsdata present greater than $600 million in flows from Huione Group into Binance and OKX accounts whereas each platforms confronted U.S. enforcement actions.
- The patterns replicate shared vulnerabilities and opportunistic networks which have shaped over shared infrastructure or mutual comfort, Decrypt was advised.
A collection of investigations carried out by the Worldwide Consortium of Investigative Journalists (ICIJ) has discovered that illicit actors moved giant quantities of crypto by way of exchanges, brokers, and cash-out companies, with recurring patterns persisting at the same time as some platforms operated beneath U.S. penalties and court-appointed screens.
Dubbed “The Coin Laundry” ICIJ’s reporting factors to a widening technical hole between what blockchains document and what investigators or platforms can meaningfully course of.
ICIJ’s newest investigation The #CoinLaundry is a collaboration of 113 journalists from 38 media companions in 35 nations that exposes how cryptocurrency corporations have empowered a shadow financial system that lavishly income from crime.
Listed below are our findings: pic.twitter.com/TJcTi6t7DZ
— ICIJ (@ICIJorg) November 17, 2025
The consortium experiences that transfers routed by way of nameless wallets or “swappers” make tracing slower and extra resource-intensive, complicating efforts by exchanges and regulation enforcement to comply with transactions in actual time.
Former compliance workers at main platforms echoed the difficulty, telling ICIJ and The Toronto Star they might “hardly preserve tempo with savvy criminals.”
Huione’s cash laundering
One of the vital detailed instances includes Huione Group, a Cambodian monetary establishment labeled a “main cash laundering concern” by the U.S. Treasury in Might.
ICIJ discovered that Huione “continued largely unabated” with routing important volumes of Tether’s stablecoin USDT into buyer accounts at Binance and OKX, even after the designation.
Between July 2024 to July 2025, greater than $408 million moved from Huione to Binance accounts, together with roughly a million {dollars} per day in July 2025, a interval when Binance remained beneath two court-appointed screens following its 2023 plea deal for anti-money-laundering violations.
At the very least $226 million flowed from Huione into OKX buyer accounts between February and July 2025 after OKX pleaded responsible within the U.S. to working an unlicensed cash transmitter.
OKX pushed again on the implications of the investigation, saying it “welcomes scrutiny” of how exchanges tackle illicit finance however rejects the concept crypto platforms operate as havens for laundering.
“The place credible dangers are detected, we act rapidly, together with pausing interactions, blocking transfers, and supporting legal investigations,” a spokesperson advised Decrypt.
The flows cited within the ICIJ experiences “signify a really small fraction” of general exercise on the change, the spokesperson added.
KuCoin, one of many exchanges named in ICIJ’s investigations on crypto-to-cash storefronts, shared an announcement with Decrypt saying it “operates a rigorous and repeatedly evolving AML/CTF program,” aligned with world regulatory expectations.
Decrypt has reached out to Tether, Binance, Coinbase, Kraken, and Bybit for remark and can replace this text ought to they reply.
Buildings and flows
The findings arrive as world regulators proceed to impose penalties on exchanges whereas battling uneven enforcement and restricted cross-border coordination.
Ari Redbord, a former Treasury Division official and U.S. legal professional now working as world head of coverage at blockchain intelligence agency TRM Labs, advised Decrypt their analysis and knowledge exhibits repeating behavioral patterns in how illicit funds transfer throughout companies, typically involving “sure intermediaries, OTC brokers, or cross-chain companies.”
“These patterns typically replicate frequent laundering typologies slightly than mounted or standardized ‘routing templates,” Redbord defined. “In different phrases, illicit actors incessantly exploit the identical weak compliance factors or high-risk service suppliers, which may make flows seem structurally related even when they aren’t centrally coordinated.”
Redbord mentioned TRM’s evaluation helps the view that laundering exercise is networked slightly than remoted, noting that illicit actors and facilitators work together by way of “overlapping transactional relationships that cross jurisdictions and asset sorts.”
Some teams, reminiscent of pig-butchering operations, cartel-linked brokers, and North Korean actors, present extra “sustained coordination,” he mentioned, whereas most others kind “opportunistic linkages” constructed round “shared infrastructure or mutual comfort.”
“The recurring patterns we see are greatest understood as emergent habits inside an adaptive ecosystem—not a coherent operational construction,” Redbord mentioned.
Every day Debrief Publication
Begin on daily basis with the highest information tales proper now, plus authentic options, a podcast, movies and extra.

