TL;DR:
- FATF says today P2P stablecoin transfers via self-custody wallets can bypass regulated intermediaries and create AML gaps, enabling sanctions evasion.
- It urges countries to assess stablecoin arrangements and apply proportionate safeguards, including enhanced monitoring when unhosted wallets touch regulated platforms.
- Chainalysis: illicit addresses took at least $154B in 2025, with stablecoins at 84% of illicit volume, though illicit activity stayed under 1% of total onchain volume overall.
The Financial Action Task Force is warning that stablecoins are increasingly intersecting with sanctions risk, and it is calling out peer-to-peer transfers through self-custody wallets as a weak link. In a new report on stablecoins, unhosted wallets and P2P transactions, the watchdog said users can move funds directly without a regulated intermediary, creating gaps in Anti-Money Laundering oversight. The headline message is P2P stablecoin flows can bypass compliance guardrails as stablecoins expand in trading, payments, and cross-border transfers. It urged countries to assess exposure and apply proportionate mitigation measures now.
Where the compliance blind spot opens
FATF framed the issue as a blind spot: when transfers occur wallet-to-wallet, there is no exchange, custodian, or virtual asset service provider obligated to monitor activity or file suspicious reports. That means unhosted wallet rails can undermine AML visibility even though public blockchains are traceable. The report stressed that traceability is not the same as attribution, because addresses are pseudonymous and can obscure who controls them. As mitigation, FATF pointed to enhanced monitoring when self-custody wallets interact with regulated platforms and clearer AML and counterterrorism financing obligations for stablecoin issuers and distributors.
The data point FATF leaned on is striking. Chainalysis reported that illicit crypto addresses received at least $154 billion in 2025, and stablecoins accounted for 84% of illicit transaction volume, a statistic FATF reiterated. At the same time, Chainalysis said illicit activity remains under 1% of total onchain volume. In other words, stablecoins can dominate illicit flows while still being a small slice of everything in practice. For policy teams, that tension complicates calibration: controls must be tight enough to deter sanctions evasion, yet proportionate enough to avoid treating every wallet transfer as inherently suspicious.
FATF’s immediate ask is operational. As stablecoins spread into payments and cross-border transfers, jurisdictions should map where self-custody wallets touch regulated onramps and apply safeguards that fit the risk profile. The report’s language signals sanctions evasion is a use case regulators cannot ignore when value can move without an intermediary. For issuers and distributors, that may translate into clearer AML duties; for exchanges, tighter monitoring at the points where unhosted wallets interact. The strategic outcome is a more standardized compliance perimeter around stablecoin ecosystems, without eliminating wallet autonomy. Expect new guidance and standards.
