Darknet interactions & bitcoin — a crypto activity analysis for May 2021

by the Crystal analytics team

Jun 17, 2021

KEY FINDINGS:

2021:

  • The amount of bitcoin transferred between darknet entities and other entity types declined in Q1 2021 compared to the same period a year ago.
  • The amount transferred between darknet entities and other entity types in Q1 2021 in USD slightly reduced too.
  • The overall share (sent and received) of darknet interactions (transfers) with exchanges with KYC requirements has been decreasing.

2020:

  • In retrospect, in Q1 2020 there was a rapid growth trend in the amount of bitcoin sent from darknet entities to mixers compared to the rest of 2020.
  • During the rest of 2020, this trend declined, and there were not such large amounts transferred in other quarters in 2020 as there were in Q1 2020.

REPORT DEFINITIONS:

Exchanges with KYC: exchanges with mandatory Know Your Customer (KYC) procedures, that will not allow the withdrawal of cryptocurrency or fiat money without ID confirmation.

Exchanges without KYC: exchanges that allow the withdrawal of cryptocurrency or fiat money without any mandatory KYC procedures.

Mixers: services for mixing cryptocurrency funds from different sources with other funds, to obscure the trail back to the original source.

Darknet entities: entities that operate via the darknet and offer illegal services or goods in exchange for (mainly) cryptocurrency.

Stolen coins: entities that have taken possession of someone else’s cryptocurrency by hacking.

Other entity types: includes payment processors, gambling services, illegal services, miners, marketplaces, online wallets, ransom extortioners, scams, stolen coins, and/or other entity types.

DeFi: Decentralized Finance

DEX: Decentralized Exchange

FATF: Financial Action Task Force

VASP: Virtual Asset Service Provider

INTRODUCTION:

The immutability and transparency of the Bitcoin Blockchain enables us to identify suspicious activity on a global level, an effort that would be impossible with fiat payments. Additionally, guidelines and regulations that have been laid out by the Financial Actions Task Force (FATF) and the European Union (EU) for exchanges, online wallets, and other Virtual Asset Service Providers (VASPs) have significantly contributed to the identification of fund source purity.

The public nature of transactions on the blockchain, paired with the most recent introductions of global and regional digital asset regulations (aimed at preventing illicit activity involving cryptocurrencies), makes it even easier to identify suspicious activities through analytical tools like Crystal.

This report represents both direct and indirect bitcoin transactions between clusters owned by darknet entities, as well as non-darknet and unidentified entities. The report includes transactions between darknet and other types of entities, as well as unknown intermediate addresses (ie. addresses that do not belong to any identified services.)

NOTE: This analytics report was compiled using the Crystal Blockchain platform All Connections solution on the Bitcoin Blockchain.

HOW THIS ANALYTICS REPORT WAS COMPILED:

  • The report compares changes across two metrics – changes in the amount of bitcoin (actual) and changes in value (measured in USD).
  • For clarity, we use USD and $ to indicate the overall value and use numbers only when indicating the amount of bitcoin (by the number of coins) observed.

Darknet Entity Interaction Statistics Q1 2017 - Q1 2021

ABOUT THE CHART ABOVE: This graph shows the relationship between the amount of bitcoin sent and received by darknet entities from Q1 2017- Q1 2021.

For example:

  • In Q4 2017, bitcoin amounting to $184 million USD was sent by darknet entities, with $177 million USD received by darknet entities.
  • In Q3 2020, bitcoin amounting to $469 million USD was sent by darknet entities, with $443 million USD received by darknet entities.
  • In Q1 2021 bitcoin amounting to $407 million USD was sent by darknet entities, with $400 million USD received by darknet entities.
NOTE: All USD amounts are monthly bitcoin amounts multiplied by the average monthly price of BTC.

DARKNET & BITCOIN USAGE CHANGES:

  • The amounts (in USD) of bitcoin sent and received by darknet entities were growing until Q3 2020
  • In Q1 2021 the amounts of bitcoin sent and received by darknet entities dropped to less than in Q1 2020.
  • The total amount received by darknet entities decreased from 50k bitcoin in Q1 2020 to 9k bitcoin in Q1 2021.
  • The total amount sent by darknet entities also decreased from 53k bitcoin in Q1 2020 to 9k bitcoin in Q1 2021.

WHY? These drops in bitcoin received and sent are mainly due to the significant growth of the price of BTC, however overall activity of darknet entities on the Bitcoin Blockchain declined too.

USD vs. BTC: Less rapid drops were considered in amounts in USD. We can see that darknet entities received and sent a slightly decreased amount of fiat or money in general

— from $410m in Q1 2020 to $400m in Q1 2021 and from $433m in Q1 2020 to $407m in Q1 2021 respectively.

A SHIFT IN DARKNET & CRYPTO DYNAMICS:

  • There's been an overall reduction in darknet entity activity on the Bitcoin Blockchain, which could be due to the growing popularity of other blockchains and their tokens.
  • There is likely also be an increase in DeFi (Decentralized Finance) and DEX (Decentralized Exchange) platform usage by darknet entities.

Entities Sending Bitcoin to the Darknet Q1 2017 - Q1 2021

  • There's been an overall reduction in darknet entity activity on the Bitcoin Blockchain, which could be due to the growing popularity of other blockchains and their tokens.
  • There is likely also be an increase in DeFi (Decentralized Finance) and DEX (Decentralized Exchange) platform usage by darknet entities.

Entities Sending Bitcoin to the Darknet Q1 2017 - Q1 2021

USAGE OF EXCHANGES WITH (OR WITHOUT) KYC VERIFICATION:

Darknet entities often solicit exchanges without strict KYC verification requirements (to avoid financial crime and money laundering restrictions). The share of all bitcoin received by darknet entities from exchanges without KYC slightly dropped in Q1 2021 compared to Q1 2020 - from 46% to 40% respectively, as compared to the consistent growth we saw throughout 2020.

The share of bitcoin received from exchanges with KYC verification requirements has also been decreasing. In Q1 2020 it was 28%, where, in Q1 2021 it dropped to 19%. More new exchanges are implementing KYC procedures due to requirements from the FATF, because of that users prefer to choose to avoid KYC verification while interacting with darknet entities.

USAGE OF DARKNET TO DARKNET ENTITY (DIRECT TRANSFERS):

The share of bitcoin sent from one darknet entity to another (i.e., all transactions between different darknet entities) stayed relatively flat in Q1 2020 compared to in Q1 2021 - 18%.

This stable share could also indicate that darknet users are still trying to hide their bitcoin flows and transfers inside the darknet itself, avoiding the risk of having their activities unveiled by other entities (like exchanges) that have implemented FATF requirements.

INCREASE IN SHARE OF STOLEN BITCOIN (HYDRA MARKETPLACE):

There was also a noticeable growth in the share of received stolen bitcoins in Q1 2021. The main contribution to this was made when the Hydra marketplace received coins (stolen in 2016 from Bitfinex) that started to move in Q4 2020 and reached the darknet marketplace in Q1 2021.

Entities Receiving Bitcoin from the Darknet Q1 2017 - Q1 2021

CHANGING DYNAMICS WITH MIXERS (HYDRA & WASABI):

The most notable change in how darknet entities send bitcoin is the growing use of mixers. Before Q3 2019, only 1-3% of bitcoin was sent to such services. In Q1 2020, it dramatically jumped to 20% and then declined to 10% until the end of 2020. It stopped at the 7% level in Q1 2021. The jump in Q1 2020 was mainly contributed to the interaction between the Hydra marketplace and the Wasabi mixer.

DECREASED INTERACTION WITH EXCHANGES WITH KYC:

  • The share of bitcoin sent to exchanges with verification requirements fell from 15% in Q1 2020 to 11% in Q1 2021.
  • This is likely in response to increased regulation and verification processes for exchanges.
  • This led darknet bitcoin owners to use other services to obfuscate the source of their coins.

INCREASED INTERACTION WITH EXCHANGES WITHOUT KYC:

  • Entities from the darknet also sent a bigger share of bitcoin to exchanges without verification requirements.
  • In Q1 2020 it was 48%; in Q1 2021 the amount sent to exchanges without KYC increased to 64% of all bitcoin.

Darknet Interaction with Exchanges With KYC Q1 2017 - Q1 2021

ABOUT THE CHART ABOVE: This graph shows the breakdown of all bitcoin sent and received by darknet entities from exchanges with KYC verification requirements.

For example:

  • In Q4 2017, darknet entities received a total of $86 million USD in bitcoin from such exchanges and sent a total of $61 million to these exchanges.
  • In Q3 2020, darknet entities received a total of $62 million USD in bitcoin from such exchanges and sent a total of $55 million to these exchanges.
  • In Q1 2021, darknet entities received a total of $45 million USD in bitcoin from such exchanges and sent a total of $32 million to these exchanges.

DARKNET DYNAMICS WITH KYC VERIFIED EXCHANGES:

The amount of bitcoin received by darknet entities from exchanges with KYC requirements significantly reduced from 8,800 total bitcoin in Q1 2020 to only 1,067 total bitcoin in Q1 2021. Across this same time period, the amount of bitcoin sent by darknet entities to exchanges with verification requirements dropped from 6,308 total bitcoin to 734 total bitcoin.

The amount of bitcoin sent (in USD) from the darknet to exchanges with verification requirements also dropped, from $52m in Q1 2020 to $32m in Q1 2021. And darknet entities received bitcoin (in USD) from exchanges with verification requirements also decreased - $45m in Q1 2021 compared with $72m Q1 2020. This is likely due once again to the increased KYC/AML requirements at these exchanges.

Darknet Interaction with Crypto Mixers Q1 2017 - Q1 2020

ABOUT THE CHART ABOVE: This graph shows the breakdown of all bitcoin sent and received by darknet entities from crypto mixer services.

For example:

  • In Q4 2017, darknet entities sent $1 million USD of bitcoin to mixer services and received approximately $172,260 USD of bitcoin from said services.
  • In Q3 2020, darknet entities sent $41 million USD of bitcoin to mixer services and received approximately $5 million USD of bitcoin from said services.
  • In Q1 2021, darknet entities sent $21 million USD of bitcoin to mixer services and received approximately $10 million USD of bitcoin from said services.

Overall, bitcoin mixing services continue to grow in popularity thanks to their use by darknet entities.

INCREASED DARKNET USAGE OF CRYPTO MIXERS:

  • The USD amount of bitcoin sent to mixers by darknet entities rose significantly in Q1 2020 - from $3m in Q1 2019 to $71m bitcoin in Q1 2020. The same growth was also observed in bitcoin amounts.
  • While the subsequent amounts in Q2-Q4 2020 were less than in Q1 2020, overall activity between darknet entities and mixers was high indicating rapid adoption of crypto mixers by darknet entities.
  • We see that in Q1 2021 the USD amount sent to mixers reduced to $21m, but it's too early to make conclusions about this reduction of sent amounts from darknet entities to mixing services in 2021.
  • The amount of bitcoin received by darknet entities from mixing services has been growing since Q1 2019 and reached $10m in Q1 2021.
  • From this analysis, it seems that mixers are becoming more popular for withdrawing from and depositing to darknet entities.

Darknet Interaction with Other Darknet Entities Q1 2017 - Q1 2021

ABOUT THE CHART ABOVE: This graph shows the increase in bitcoin (by value in USD) transferred between darknet entities.

For example:

  • In Q4 2017, $32 million in bitcoin was transferred amongst darknet entities.
  • In Q3 2020, $50 million in bitcoin was transferred amongst darknet entities.
  • In Q1 2021, $43 million in bitcoin was transferred amongst darknet entities.

DARKNET TO DARKNET CRYPTO ACTIVITY:

Overall, darknet entities are sending more and more bitcoin amongst themselves, in comparison to pre-2020. The sum of transferred amounts between darknet entities directly grew significantly (looking at both the amount of bitcoin and the value in USD) between 2017 and 2020. However, in Q1 2021 the amount transferred between darknet entities slightly reduced to $43m, compared to $46m in Q1 2020.

In Q1 2020, bitcoin transfers between darknet entities amounted to 5,585 bitcoin, while in Q1 2021 it was only 993 bitcoin. Despite the reduction in BTC, the amount in USD remained stable. This seems to indicate the darknet ecosystem is remaining stable in size right now, or its revenue streams are becoming more directly interconnected (darknet to darknet).

DARKNET & CRYPTO DYNAMICS ARE CHANGING:

In this report, we observed that in Q1 2021 the flow of bitcoin funds to and from darknet entities had dropped in bitcoin value and slightly decreased in USD value compared to Q1 2020. This may be partly explained by the growing capitalization of bitcoin. However, the overall decreasing bitcoin flow to and from these entities may also be explained by the growing popularity of other blockchains' tokens and DeFi platform usage. Exchanges with KYC are becoming a much less popular way to withdraw bitcoin from darknet entities, while mixers are becoming more popular to withdraw from darknet entities.

The amount of bitcoin and USD transferred between darknet entities since 2020 also grew compared to the previous period. However, in Q1 2021 there was a small decrease in amounts from $46m in Q1 2020 to $43m in Q1 2021. Bitcoin is available to anyone in the world to use — this means that while it is increasingly a place for legitimate business, it is still used for malicious and criminal activities.

What is reassuring, however, is that all potentially suspicious activity on the blockchain can be detected due to blockchain’s immutability and transparency. This paired with the introduction of digital asset regulations by the FATF and the EU, as well as local regulations around the world, will increase the potential for identification of fund source purity, aided even further by analytics tools like Crystal Blockchain.

Learn more about risk mitigation when it comes to potential darknet interactions or connections that your business might face. Email: contact@crystalblockchain.com

Similar news

The Evolution of Cryptocurrency Regulations

The important phases in the development of rule-making around digital asset transactions

by the Crystal analytics team

Jul 14, 2021

A guide to avoiding common crypto compliance pitfalls

Adhering to crypto compliance requires an understanding of crypto and traditional financial industry tendencies. Avoiding these five common mistakes will help your business grow.

by Marina Khaustova

Jul 06, 2021

10 Biggest Crypto Exchange Hacks In History

The cryptocurrency exchange security breaches that shook the world

by the Crystal analytics team

Jun 30, 2021

Rising instances of digital ransomware (using bitcoin) & how to deal with them

Tracking cryptocurrency transactions accurately from the victim to the illicit entity is key to dealing with ransomware involving digital assets like bitcoin on public blockchains

by the Crystal analytics team

Jun 16, 2021

NFTs: the good, the bad, and the artful scammers

How NFTs could become a new opportunity for crypto-criminals - if we’re not careful…

by the Crystal analytics team

May 19, 2021

Ukrainian Cyber Police Department Now In Collaboration with Crystal Blockchain

The first meeting between the Ukrainian Cyber Police Department and Crystal Blockchain, was a discussion of ambitious goals as well as exchanges of experience in cybercrime mitigation

by the Crystal communications team

May 18, 2021

Geography of Bitcoin Transaction Dynamics Report 2014 — Q1 2021

The Crystal team regularly explores bitcoin and crypto market dynamics, to see how fund flows have been affected by external factors like financial fluctuations or increasing regulations. We update these dynamics quarterly on our interactive map and in our report (PDF attached).

by the Crystal analytics team

Apr 28, 2021

5 steps to identifying potentially suspicious entities on blockchains

How to prevent accepting risky transactions and avoid becoming a victim of scams and criminal activities. These five steps will help you avoid these potential pitfalls.

by the Crystal communications team

Apr 21, 2021

Crystal Expands Blockchain Coverage & Crypto AML Compliance Solutions

Regulations from the Financial Action Task Force (FATF) and the 6th Anti-Money Laundering Directive (6AMLD), mean that cryptocurrency services, and businesses exposed indirectly to cryptocurrencies, need to get compliant. By integrating Crystal analytics alongside existing AML/CFT procedures businesses can manage crypto risk and comply with new legislation.

by the Crystal communications team

Apr 07, 2021

Stolen crypto withdrawal and transfer patterns

An analysis of cryptocurrency transactions made by crypto-criminals post-theft between 2015 and 2020, with a look at the fund flow patterns made using this stolen crypto.

by the Crystal analytics team

Feb 23, 2021

Peer-to-Peer (P2P) Transaction Volume Analysis 2019-2020

At the V20 Summit in November 2020, the co-chair of the FATF’s Virtual Asset Contact Group, Sandra Garcia, stated that regulatory requirements for P2P exchanges may emerge in 2021 to combat AML, as they come under the same hood as VASPs. The FATF is currently collecting data on P2P exchanges to allow their guidelines to reflect P2Ps (likely to be added June 2021).

by the Crystal analytics team

Feb 03, 2021

Ukraine challenges regulatory hurdles as blockchain industry advances

Crystal Blockchain spoke with the deputy minister of the Ukrainian Ministry for Digital Transformation, Alex Bornyakov, about blockchain tech and regulatory developments happening in Ukraine, and how its partnership with Crystal advances that purpose.

by the Crystal communications team

Jan 14, 2021

Crystal Blockchain End of Year Report 2020

A number of industries were put on pause this year due to the COVID19 pandemic. However, regulatory guidelines for the cryptocurrency markets continued to be a priority internationally in 2020, and legislation in the blockchain industry is ever more imminent. This, along with an increasing amount of cryptocurrencies being utilized for suspicious activities, has meant that Crystal Blockchain’s risk assessment and transactions and connections monitoring solution for virtual asset service providers (VASPs) has been an increasingly important tool to combat ML.

by Marina Khaustova

Dec 21, 2020

FICO and Crystal Blockchain of Bitfury Group Announce Partnership To Deliver Real-Time Cryptocurrency Risk Management

FICO, a global analytics leader, and Crystal Blockchain of Bitfury Group ("Crystal"), a leading digital currency analytics company, announced a partnership to provide cryptocurrency risk management and monitoring services. With an increasing number of financial service providers looking to expand services into the crypto market, the joint offering will help to protect new business models and effectively connect the worlds of virtual and fiat currency for the benefit of their customers.

by the Crystal communications team

Dec 16, 2020

Understanding the FATF red flag indicators for crypto service providers

When do VASPs need to employ the services of crypto AML and KYT compliance software companies to adhere to the FATF “red flag risk indicator” guidelines?

by the Crystal analytics team

Dec 08, 2020

Bitlicense and Other Crypto Licenses Around The World 2020

What types of cryptocurrency licenses are available internationally today?

by the Crystal analytics team

Nov 16, 2020

Security Breaches & Fraud Involving Crypto Still High Despite Tech Development

It’s ten years since the first official cyber-terrorist attack of a crypto exchange, and despite technological advances, most cryptocurrency entities have not yet been able to develop sufficiently reliable security systems to minimize security breaches on their platforms.

by the Crystal analytics team

Nov 12, 2020

Crypto payments provider B2BinPay in collaboration with Crystal

Global cryptocurrency payments provider, B2BinPay, is working in collaboration with Crystal analytics to strengthen their cryptocurrency compliance procedures.

by the Crystal communications team

Oct 15, 2020

The Importance of Knowing Your Cryptocurrency Transaction (KYT)

As traditional banks and financial institution become more directly involved with cryptocurrencies, they need to consider KYT as part of their KYC compliance due diligence

by the Crystal analytics team

Sep 21, 2020

Bitfury Crystal partners with PARSIQ to power their blockchain monitoring

World-leading blockchain monitoring system, PARSIQ will integrate Crystal Blockchain’s transaction risk scoring capabilities to power their AML and KYT processes for VASPs.

by the Crystal communications team

Sep 03, 2020

The importance of Ripple monitorization on the Crystal platform

Ripple (XRP) cryptocurrency released in 2012 stands behind two other digital assets only in terms of market capitalization, as of August 2020. Ripple is the sixth digital asset to be supported by the Crystal Blockchain analytics platform, adding to the current list of bitcoin (BTC), Bitcoin Cash (BCH), Ethereum (ETH, as well as ERC20 and ERC721), Litecoin (LTC), and Tether (USDT).

by the Crystal analytics team

Aug 19, 2020

2020 Report on Fund Sources for Dormant Bitcoin Addresses

It's been 11 years since the genesis Bitcoin block was created. During these last 11 years, bitcoin has been used for payments, exchange trading, and as a store of value. Not all mined bitcoins move much after their creation, however.

by the Crystal analytics team

Aug 04, 2020

Bitfury’s Crystal to assist the Ukrainian Ministry of Digital Transformation

Bitfury’s Crystal analytics to assist the Ukrainian Ministry of Digital Transformation

by the Crystal communications team

Jul 24, 2020

Crypto Regulation Continues To Progress Despite COVID-19 Pandemic

The Crystal Blockchain analytics team continues its quarterly update to the International Bitcoin Flows Analytics Report that was first compiled back in September 2019. This update takes into account fund flows from 2013 through the first six months of 2020. The report also considers the progress that has been made with the FATF guidelines and “travel rule”, despite the current COVID-19 pandemic that has seen many processes slowed down or stalled.

by the Crystal analytics team

Jul 14, 2020

Bitfury Group Brings Crystal Blockchain to India with HumanSTAR*

India's Strategic Advisory Firm, HumanSTAR* to offer Crystal Blockchain Analysis for Indian Law Enforcement Agencies

by the Crystal communications team

Jul 07, 2020

Upbit and Crystal partner to strengthen exchange’s compliance

South Korea-based crypto exchange Upbit will use Crystal analytics to strengthen AML compliance procedures

by the Crystal communications team

Jun 19, 2020

11 Years Later: Is Satoshi Nakamoto Finally Moving Bitcoin Funds?

More than ten years after the launch of the Bitcoin Blockchain, coins that were mined on February 9, 2009 have just started moving. Yesterday, 50 BTC left the address 17XiVVooLcdCUCMf9s4t4jTExacxwFS5uh. They were initially received in block number 3,654, created on February 9, 2009 - exactly one month after bitcoin mining started.

by the Crystal analytics team

May 22, 2020

Darknet Use and Bitcoin — A Crypto Activity Report by Crystal Blockchain

This report by Crystal Blockchain analytics reviews the use of bitcoin by darknet entities. The report analyzes darknet interactions with exchanges and other entities throughout the first quarter of 2020 and compares it to historical darknet activity from the past three years.

by the Crystal analytics team

May 19, 2020

Historical Data Shows Crypto Exchange Dynamics Influenced By Regulatory Changes

To investigate the effects of new regulation on the cryptocurrency market, as well as the extent virtual asset service providers will be affected by the changes, the Crystal™ Blockchain analytics team has issued an updated report on the historical international flow of bitcoin between cryptocurrency exchanges.

by the Crystal analytics team

May 05, 2020

2019 Crypto Compliance: Year in Review

2019 was a year of preparation and standardization for the cryptocurrency industry, as regulators around the world came together to enforce tangible legislation impacting the ecosystem. In the U.S., SEC Chairman Jay Clayton spoke candidly to a Senate Committee in December, informing them that the SEC is taking a measured yet proactive regulatory approach to crypto that will both foster innovation and capital formation while protecting investors and U.S. markets.

by Marina Khaustova

Dec 27, 2019

2019 Darknet Interactions and Bitcoin — A Crypto Activity Report by Crystal Blockchain

The Crystal analytics team have compiled a detailed report based on investigations into darknet interactions using bitcoin, and how regulation is changing trends.

by the Crystal analytics team

Dec 15, 2019

The Year in Review for Crystal Blockchain Analytics — 2018

The Crystal™ analytics platform is the all-in-one blockchain analytics tool for law enforcement bodies, capital market companies and financial organizations. This software provides a comprehensive view of the public blockchain ecosystem and uses advanced analytics and data scraping to map cryptocurrency transactions and related entities and to reveal suspicious funds and participants.

by Marina Khaustova

Jan 24, 2019