Cryptocurrency still walks into a South African boardroom wearing a balaclava. Mention bitcoin, and someone reaches for ransomware, sanctions evasion, or a suitcase of unmarked tokens. The reflex is understandable. The cases are real, they are ugly, and they travel well. They are also a poor description of how the system is used, especially on the corridors that actually matter to this region.

The latest forensic evidence is blunt. In 2025, identified illicit addresses received at least $154 billion in cryptocurrency, a sharp rise in nominal terms driven largely by sanctioned entities and stablecoins (Chainalysis, 2026).

TRM Labs (2026) independently estimates $158 billion. Both still place illicit activity…