2025 was a structural year for cryptocurrency fraud enforcement. Several long-developing threads — sanctions against mixing services, the MiCA rollout, VASP licensing in Asia — moved into operational reality. This article summarises what actually changed, with a focus on what it means for victims considering civil or criminal recovery in 2026.
What materially changed
Sanctions against mixing services became self-executing
OFAC's designation of Tornado Cash and subsequent follow-ons have moved from policy statements to operationally relevant for regulated exchanges. Most licensed venues now screen deposits against sanctions lists and reject or freeze at the deposit stage. The practical effect for victims: funds that passed through sanctioned mixers in 2025 are not only unrecoverable via civil means, they are often frozen at the destination exchange against the fraud operator — which is closer to a deterrent than a recovery mechanism.
MiCA's full-year operational data
The EU's Markets in Crypto-Assets regulation completed its first full operational year. Licensed Crypto-Asset Service Providers (CASPs) are subject to harmonised disclosure obligations that materially assist asset tracing within the EU. Cross-border enforcement between EU member states now flows through a predictable Brussels Ia framework, with Chapter III of MiCA providing the substantive backbone.
VASP licensing maturity in Hong Kong and Singapore
Hong Kong's SFC licensing regime reached 14 licensed Virtual Asset Trading Platforms by end of 2025. Singapore's MAS licensing under the Payment Services Act saw steady enforcement attention on unlicensed operators. Both jurisdictions are now routine destinations for freezing applications against fraud-receiving addresses.
US enforcement concentrated on exchanges, not end-users
The SEC, CFTC, and DOJ focused 2025 resources on platform-level enforcement rather than individual fraudsters. For victims, this is mixed: platform enforcement may recover customer funds via regulatory-led return programs, but rarely addresses specific fraud matters directly.
What that means for 2026 strategy
| Pattern | Strategic implication |
|---|---|
| Mixer usage | Recovery is increasingly impossible. Free reporting routes (IC3, Action Fraud) become the only sensible step. |
| Funds at VASP in HK/SG | Recovery is increasingly feasible. Civil freezing orders against licensed exchanges are now routine. |
| Funds at unlicensed offshore platform | Recovery possible but slow; add 6–12 months to timelines versus 2024. |
| EU-based counterparty | MiCA disclosure obligations help; cross-EU enforcement has meaningfully improved. |
| US-touching counterparty | IC3 + civil parallel action remains the pattern; criminal referrals rarely conclude within 12 months. |
What did not change
Recovery rates remain low in absolute terms. The industry-wide distribution of outcomes (see our case distribution) did not meaningfully improve in 2025. What changed is the distribution: cases with a regulated-venue destination became more recoverable, while mixer-routed cases became almost entirely unrecoverable.
The structural takeaway
The 2025 shift rewards speed. Every additional week the funds are at a VASP, the probability of successful freezing is higher than it has ever been. Every additional week the funds are in a mixing service, recovery probability falls further. Victims deciding whether and how to act in 2026 should front-load the assessment stage.
Sources
- Chainalysis — Crypto Crime Report 2025
- OFAC — Specially Designated Nationals List updates, 2023–2025
- European Securities and Markets Authority — MiCA Year-One Operational Review (2025)
- Securities and Futures Commission (Hong Kong) — VASP Licensing Register
- Monetary Authority of Singapore — Payment Services Act Annual Report 2025
This article is informational and is not legal advice. Regulatory frameworks change; case-specific assessment is always required.
If your situation relates to the topics above, we offer a free initial consultation.