Crypto Compliance Tightens, but Indirect Monitoring Gap Persists
In brief
- 47% of new crypto entrants in 2026 meet top compliance standards, up from 10% in 2020
- Crypto firms uniform in direct monitoring but lag significantly in indirect exposure detection
- Indirect monitoring thresholds for ransomware and fraud are 10-20x higher than direct equivalents
Compliance gains since 2020
The shift is dramatic. In 2020, only 10% of the crypto industry met the top compliance requirements. The rate started increasing in 2023, and newer entrants are launching with more aggressive monitoring standards.
The crypto industry's compliance baseline around alert severity, trigger sensitivity and minimum dollar detection floors is tightening. This represents progress in an ecosystem that once had little regulatory infrastructure.
The direct-indirect gap
But uniformity masks a critical weakness. Companies have become more uniform in direct monitoring, where funds arrive immediately from a known illicit source, but indirect exposure detection remains inconsistent across the industry.
The numbers illustrate the problem. For categories such as ransomware, fraud shops, scams and darknet markets, indirect thresholds are often 10 to 20 times higher than their direct equivalents. Compare this to legacy finance: legacy financial institutions have lower triggering thresholds for indirect exposure to both illicit and non-illicit fund flows compared to crypto exchanges.
The risk is material. North Korean-affiliated hackers alone were responsible for an estimated $2 billion in crypto losses in 2025. Indirect monitoring gaps provide a pathway for such actors to move stolen funds with reduced detection.
What's next
"The industry's gap between direct and indirect monitoring creates an opening for illicit actors to exploit. Organizations that close this gap improve their regulatory defensibility and differentiate themselves as trustworthy counterparties." — Chainalysis team
Compliance isn't static. Newer platforms entering the market are raising the floor, but the industry can't afford complacency. Closing the indirect monitoring gap isn't optional—it's the next frontier.
