Cryptocurrency payments to suspected human-trafficking syndicates based mostly in Southeast Asia will grow 85% in 2025, with total transactions reaching hundreds of millions of dollars, according to a new report from Chainalysis.
The surge in cryptocurrency payments associated with suspected human trafficking operations is not occurring in isolation. This coincides with the expansion of fraudulent compounds in Southeast Asia, online casino and gambling platforms, and Chinese-language money laundering and underwriting networks, many of which operate through Telegram, and together form a fast-growing illicit ecosystem with global reach and impact.
A US blockchain analytics firm said it has identified four main types of crypto-currency activities linked to human trafficking: international escort services, prostitution networks, recruitment agents and vendors distributing child sexual abuse material (CSAM).
Read also | Australia blasts big tech for child sex abuse failures
Her findings indicate that while many of these services operate primarily in Southeast Asia, payments come from customers in the Americas, Europe and Australia, underscoring the global scope of the networks.
Payment methods are different for each category
Elaborating on payment methods, which vary widely across these categories, the Chainalysis report showed that while international escort services and prostitution networks operate almost exclusively using stablecoins, CSAM vendors relied more heavily on bitcoin. The heavy reliance of “international escort” services and prostitution networks on stablecoins shows that they value price stability and easy conversion to cash, despite the risk that centralized issuers could freeze these assets.
Transaction size distribution
The report showed that the pattern of transaction sizes indicated different operating models among the services suspected of human trafficking. International escort services account for the largest share of high-value transfers, with 48% exceeding $10,000. The size of the transaction suggests that “international escort” services are an organized activity on a large scale. In comparison, prostitution networks tend to fall into the middle category, with approximately 62% of transactions between $1,000 and $10,000, suggesting operations that may operate at the agency level.
A significant segment are so-called job brokers who recruit individuals into fraudulent schemes, particularly in Southeast Asia, where cryptocurrency-related fraud is prevalent.
Read also | Code wars: How companies are turning artificial intelligence on themselves to fight fraud
In the CSAM vendor category, the report showed that crypto transactions are typically below $100. While they collect payments in mainstream cryptocurrencies, they are increasingly using Monero to launder revenue. Furthermore, instant exchangers play a key role in this process, offering fast, anonymous exchange of cryptocurrencies without the need to know your customer (KYC).
Business models for different categories
According to the report, the “international escort” services operate with a sophisticated business model, complete with a customer service contract and structured pricing. For example, one high-profile operation promotes its services in several major East Asian cities using a tiered pricing structure, around RMB 3,000 (roughly US$420) per hour and up to RMB 8,000 (around US$1,120) for longer arrangements that include international travel. These standardized rates generate predictable patterns of transactions that investigators and compliance teams can analyze to flag potentially suspicious activity on a large scale.
In contrast, CSAM operations typically rely on subscription-based models rather than one-time payments for specific content, resulting in more stable and predictable revenue streams. The report also notes the connection between CSAM’s subscription platforms and communities associated with so-called “sadistic online extremism” (SOE).