Recognizing Crypto Money Laundering Patterns
An overview of common laundering typologies including peel chains, chain hopping, and nested exchanges.
While the blockchain is public, criminals utilize sophisticated typologies to obscure the origin, destination, and ownership of illicit funds. Anti-Money Laundering (AML) investigators must recognize these patterns to effectively track illicit flows.
These techniques are designed to break heuristics, complicate jurisdictional boundaries, and exploit the speed of decentralized finance.
1. The Peel Chain
A peel chain is a classic Bitcoin laundering technique. A large amount of illicit BTC is held in a single wallet. A small amount is sent to an exchange (or darknet market), and the remainder (the change) is forwarded to a new address controlled by the launderer.
- •This process is repeated hundreds of times.
- •It "peels" off small amounts that fly under the radar of exchange AML triggers.
- •The goal is to slowly liquidate a massive fortune without triggering compliance alerts.
2. Chain Hopping (Cross-Chain Laundering)
Chain hopping involves moving funds from one blockchain to another to break the tracing software's continuity. It is currently the most prevalent laundering technique.
A criminal might steal USDT on Ethereum, use a decentralized cross-chain bridge to swap it for native BNB on the Binance Smart Chain, and then swap that for Bitcoin via a non-KYC exchange. Traditional tracing tools often stop at the bridge.
3. Nested Exchanges and OTC Brokers
Large-scale criminal syndicates rarely use standard retail exchange accounts. Instead, they utilize nested exchanges—businesses that operate accounts within larger exchanges (like Binance or Huobi) to provide trading services to their own un-KYC'd client base.
Similarly, rogue Over-The-Counter (OTC) brokers operate in jurisdictions with lax oversight, buying illicit crypto for cash at a discount and commingling it with legitimate trading volume to obfuscate the source.
4. Privacy Coins and Mixers
Swapping public assets for privacy coins (like Monero or Zcash) is the ultimate obfuscation technique. Because Monero hides the sender, receiver, and amount, tracing stops entirely. Launderers will swap BTC to XMR, move it across multiple wallets, and then swap it back to clean BTC.
Automated Typology Detection
Aletheia's advanced risk engine automatically detects peel chains, bridge hopping, and interactions with nested services, providing AML teams with instant context on suspicious flows.