Regulated infrastructure and illicit-finance infrastructure, simultaneously
It's tempting to read stablecoins as a technology story that regulators are now catching up to, or as a crime story that legitimate finance is now being dragged into. Neither framing survives contact with the actual material. The UK's Bank of England and FCA have built a genuine, detailed joint regulatory regime for systemic stablecoins, complete with capital requirements, statutory trusts, and a £40 billion issuance guardrail. In the same period, the same asset class has become the preferred settlement rail for a specific, well-documented category of illicit finance, to the point that one major analytics provider now attributes the large majority of measured illicit virtual-asset volume to it. Both of those sentences are true right now, about the same instruments, often the same specific tokens. That's the actual compliance priority, not a hypothetical future risk.
This series exists because "stablecoin risk" isn't one topic. It's licensing law, prudential regulation, blockchain forensics, sanctions law, and contract law, and a practitioner who only knows one of those five will misread cases that touch the others. Rather than one long guide trying to cover everything shallowly, the series applies one recurring analytical chain across five focused guides, each going deep on the part of the chain it's actually built for.
Actor → Activity → Risk → Regulatory obligation → Control → Evidence → Escalation. Every guide in this series applies this same sequence: who's involved, what they're actually doing, what risk that creates, what obligation attaches to it, what control exists to manage it, what evidence establishes the facts, and what happens when a case escalates. No single guide covers every link equally; each one goes deepest on the one to three links its subject actually turns on. The series map below states, honestly, which links each guide is really built for.
Three numbers, each measuring something different
Three figures anchor this series, each checked directly against its own primary source, each measuring a genuinely different thing. A fourth figure, a "250+ circulating stablecoins" count that appears widely in secondary coverage, was deliberately not included here: no defensible primary source for it survived direct checking, so it's dropped rather than repeated on the strength of how often it's cited elsewhere.
| Figure | What it measures | Source & date | Read this with |
|---|---|---|---|
| 84% | Share of measured illicit virtual-asset transaction volume attributed to stablecoins, full calendar-year 2025 | Chainalysis 2026 Crypto Crime Report, published 8 January 2026, updated 12 June 2026 | This is the 2026 report's FY2025 figure. The separate 2025 Crypto Crime Report reports 63% for FY2024, a different figure from a different year; don't cite one report's number under the other's name. |
| ~$141bn | Value received by illicit entities via stablecoins, full calendar-year 2025 | TRM Labs, "Stablecoins at Scale", published 17 February 2026 | Roughly $72bn of this total is the A7A5-specific subset already covered in Guide 4's own methodology section. Don't add the two figures together; the $72bn sits inside the $141bn, it doesn't sit alongside it. |
| $304.573bn | Combined stablecoin market capitalisation, all backing mechanisms combined (fiat-backed, crypto-collateralised, algorithmic, and commodity-referenced), as of a single retrieval | DefiLlama, Total Stablecoins Market Cap, retrieved 30 August 2026 | This is a live, constantly-updating aggregate, not a fixed figure; it will have moved, in either direction, by the time you're reading this. It's also an all-mechanism total, not a fiat-backed-only figure, don't cite it as if it measured USDT- and USDC-style issuers exclusively. |
None of these three figures is directly comparable to either of the others, and that's worth stating plainly rather than leaving implicit: 84% is a share of a different, smaller universe (measured illicit volume); ~$141bn is an absolute dollar figure from a different provider using its own attribution methodology; $304.573bn measures the legitimate market's total size, not anything illicit at all. Citing any two of them in the same sentence as though they described one coherent picture is exactly the kind of imprecision Guide 4's own methodology section was built to guard against, applied here to the series' own headline numbers.
What each guide actually covers, and where to go next
This table describes what each guide's own content actually is, checked directly against the shipped guides, not against how they were originally scoped before drafting and correction rounds sometimes shifted emphasis.
| Guide | What it actually covers | Status | Chain focus |
|---|---|---|---|
| Guide 1 | UK Stablecoin Regulation 2026: the FCA's non-systemic authorisation perimeter, the statutory qualifying-stablecoin definition, and the full interactive Stablecoin Due Diligence Framework (this guide gives only the introductory version below). | Forthcoming | Regulatory obligation |
| Guide 2 | What changes once HM Treasury recognises a stablecoin arrangement as systemic: the three-band FCA-lead, overlapping FCA/Bank, and Bank-lead responsibility split, the £40bn issuance guardrail, multi-issuance risk, two-directional depeg mechanics, and the still-draft failure and resolution regime. | Published | Regulatory obligation, Control, Risk |
| Guide 3 | The seven-stage lifecycle map showing exactly where regulated visibility into a stablecoin transfer disappears and reappears, four risk patterns built on it, transaction-monitoring indicators, a stablecoin SAR checklist, and a Travel Rule continuity map. | Published | Actor, Activity, Risk |
| Guide 4 | A worked case study in getting the evidence right: four legitimate, non-additive volume figures for one sanctions-evasion network, and entity-by-entity sanctions status checked separately across OFAC, the UK, and the EU, including why the token itself isn't a designated "person" under any of them, while the EU separately subjects it to an instrument-level transaction ban. | Published | Evidence |
| Guide 5 | What "freezing a stablecoin" actually means: six technical mechanisms, three authority bases that trigger them, and one structural limit, worked through the Huione freeze and subsequent USDH response and a direct comparison of Circle's and Tether's own contractual freeze authority. | Published | Control, Regulatory obligation |
If you came here with a specific question, that table is the fastest way to the right guide. A licensing or capital question about a systemic issuer belongs in Guide 2. A question about what an investigator can actually see once a stablecoin leaves an exchange belongs in Guide 3. A question about how to source and attribute sanctions-evasion figures correctly belongs in Guide 4. A question about what a specific freeze, seizure, or blacklisting action actually accomplished belongs in Guide 5.
You're writing an internal briefing on stablecoin illicit-finance exposure. A colleague suggests opening with "stablecoins accounted for $141bn in crime last year, 84% of the total," treating the two figures as two halves of one finding.
The Stablecoin Due Diligence Framework, introductory level
The full version of this framework, built as an interactive, scored assessment, lives in Guide 1 once it ships. What follows is the practitioner checklist underneath it: the questions worth asking about any stablecoin your firm is exposed to, before reaching for a specific guide's depth. It draws a question from each of the four published guides, not because the topics are interchangeable, but because a real due diligence exercise touches all four.
- Issuer and backing. Who is the legal entity behind this token, and what backs it, cash and short-term government debt, crypto collateral, an algorithmic mechanism, or something else? The series' analysis, and most of its guides, applies specifically to issuer-backed, fiat-referenced stablecoins; other designs need separate treatment.
- Regulatory status. Is the issuer authorised, recognised as systemic, both, or neither, under the regime that actually applies to it? Recognition and authorisation are legally independent decisions in the UK regime, per Guide 24, don't assume one implies the other.
- Topology. Is this the issuer's native token, or a bridged or wrapped representation on another chain? Guide 3's token-topology work5 exists because this single question changes almost every other answer, including whether a freeze request will actually work.
- Sanctions and evidence discipline. Is any entity in the token's ecosystem, issuer, exchange, associated individuals, subject to a sanctions designation, checked entity by entity against each relevant list, not inferred from one jurisdiction's finding to another's? Guide 4's methodology6 is the model for how to do this without overstating what's actually been established.
- Intervention capability. What contractual discretion do the issuer's terms reserve, and what separate legal-compulsion basis may require intervention? Guide 57 keeps those two bases distinct and shows the answer differs materially between issuers; don't assume parity without checking.
It doesn't score, weight, or produce a risk rating, and it isn't a substitute for the specific depth each guide provides once one of these questions turns out to matter. Treat it as a starting filter, not a finished assessment.
A colleague asks: "If HM Treasury has already recognised a stablecoin arrangement as systemic, doesn't that mean the FCA has to approve the issuer's authorisation application?" They assume the answer sits in the forthcoming FCA-perimeter guide, since that's the licensing one.
Four patterns, four cards
FAQ
Is this guide a summary of the other four?
Why is this "Guide 0" if it's the first thing to read?
Which guide should I read next if I only have time for one?
Are the illicit-finance figures here the same ones used in Guide 4?
Does the due diligence checklist here replace a real risk assessment?
At a glance
Four patterns, the risk that makes each one look routine, the signal that gives it away, and the response that fits.
Primary sources
The three headline figures were checked directly against the primary releases below. Cross-references to Guides 2 through 5 point to the specific sections of those guides where the underlying material is verified in full; this guide doesn't re-verify what those guides have already closed.
- Chainalysis, 2026 Crypto Crime Report Introduction, published 8 January 2026, updated 12 June 2026.
- TRM Labs, Stablecoins at Scale: Broad Adoption and Highly Concentrated Illicit Networks, 17 February 2026.
- DefiLlama, Total Stablecoins Market Cap, retrieved 30 August 2026.
- FinCrimeRadar, Systemic Stablecoins: The Joint Bank of England and FCA Regime, cross-referenced for the HMT recognition/FCA authorisation independence point and the systemic regime generally, not re-verified in this guide.
- FinCrimeRadar, Stablecoin Financial Crime: Unhosted Wallets, P2P Transfers and the Visibility Gap, cross-referenced for the lifecycle map and token-topology material, not re-verified in this guide.
- FinCrimeRadar, A7A5: How a Stablecoin Became Sanctions Evasion Infrastructure, cross-referenced for the $72bn A7A5 subset figure and the methodology discipline this guide applies to its own headline figures, not re-verified in this guide.
- FinCrimeRadar, Freezing a Stablecoin: What Actually Happens, cross-referenced for the intervention-capability material, not re-verified in this guide.
Note on the market-cap figure: $304.573bn was the figure closed for this guide as of 30 August 2026. DefiLlama's own total is a live, continuously-updating aggregate; a later same-day check found the live aggregate had already moved to approximately $311bn, this kind of dataset changes continuously and that later figure isn't a correction to the one above. Expect the number to have moved again by the time you read this; the order of magnitude, not the exact figure, is what should be relied on.
Two facts, one series.
Stablecoins are being built into regulated financial infrastructure and exploited as illicit-finance infrastructure at the same time, and a practitioner who only tracks one side will misjudge the cases that touch both. The four published guides in this series each go deep where this one only points. FinCrimeRadar's screening tool checks sanctions, PEP, and adverse media exposure for the entities behind cases like these, free, no signup required.