Invest1 distinct publisher3 min readPublished
The figure aggregates 33,904 Bank Secrecy Act reports that FinCEN says may include attempts, duplicates and transfers in both directions, so it measures monitoring workload at crypto-exposed filers more than money lost.
The Investor · Invest desk
Compiled by The InvestorSomething wrong?How this is made
Divide $12.7 billion by 33,904 and the average filing describes roughly $375,000 of activity [1][2][1], and across the 27.8 months from September 8, 2023 to December 31, 2025 that works out to about 1,220 reports and $457 million of flagged flow a month [2]. Those are numbers a compliance function would staff against only if the aggregate meant what its size implies. FinCEN's own account describes it as gross filings, not netted loss [3].
The growth rates press the point harder. Reported month-over-month increases average 10.9 percent in report count and about 18 percent in dollars [5]; treat 10.9 percent as a compounding rate across 28 months and you get an eighteenfold rise [3], treat 18 percent the same way and you clear a hundredfold [4]. An arithmetic average of monthly changes overstates a compound rate, so read both as ceilings. Even at the ceiling, FinCEN makes no claim of a hundredfold rise in two years, and the figure has no other backer [6].
What survives that discount is the typology, which is the part an exchange can code into monitoring rules. FinCEN describes guarantee marketplaces reselling account creation, phishing and laundering as services, professional launderers standing up shell companies and mule accounts, and stablecoins carrying value out to exchanges outside the United States [4]. FATF's September report on underground banking describes hawala balances being settled in virtual assets including stablecoins, coordinated over WhatsApp, Telegram and Signal [11], and UNODC's July assessment reads the Southeast Asian syndicates as a service economy rather than a set of gangs [14]. The off-ramp is the chokepoint in that chain, which is why FinCEN's framing names issuers next to exchanges [9].
The spending pattern is less flattering once you trace it. A crypto-dependent money services business putting its marginal compliance dollar into compound-fraud typologies is buying detection of flows that, by the same document's accounting, include attempts and round trips already pointed offshore, and that dollar is not going into whatever else the budget line was funding.
This can go one of three ways. Examiners adopt $12.7 billion as an informal benchmark and filing volume becomes the metric firms manage to; or nothing much lands, because no entity is named and voluntary sharing compels nobody; or issuers, being the identifiable US-regulated party in the described chain, absorb the monitoring expectation that exchanges outside the perimeter cannot be made to carry. My read is the second outcome for offshore exchanges and the third for issuers, held at modest confidence, because what exists here is a trend analysis and an alert rather than an action against a named party. One clean test for this reading: a later reporting period in which FinCEN adds no new alert language and filings still climb near 11 percent a month would convert this series from a definitional artifact into an activity measure, and at that point $12.7 billion stops being a workload proxy and starts being a loss estimate worth arguing about.
Ranked by verification strength, evidence, and original report placement.
FinCEN identified about $12.7 billion in financial activity reported by U.S. institutions linked to suspected investment scams involving digital assets, which FinCEN says are typically operated by transnational organized crime groups based in Southeast Asia.
The $12.7 billion figure is drawn from 33,904 reports submitted under the Bank Secrecy Act between September 8, 2023 and December 31, 2025.
FinCEN said the total does not represent confirmed victim losses and may include attempted transactions, multiple reporting of the same funds, transfers in both directions, and amendments to previously submitted reports.
FinCEN's alert describes an outsourced criminal system in which operators use 'guarantee marketplaces' to buy services from account creation and phishing to money laundering, with professional laundering providers setting up shell companies and mule accounts and using stablecoins to move funds to exchanges outside the United States.
FinCEN said the rise in reporting can be attributed to the expansion of the vocabulary used in its alerts and should not be taken as an indication of growth in scam activity.
Most of the reports were filed by money services businesses largely dependent on the digital assets industry, with depository institutions bringing the combined share to 96% of all reports.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · September 4, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
invest
FinCEN turns 33,904 scam-linked filings into a dated red-flag list for banks1 distinct publisher
invest
Hong Kong's 56 months and Chainalysis's $14bn both point at the stablecoin off-ramp1 distinct publisher
invest
Stablecoin KYC and the Line at the Point of Issuance1 distinct publisher
invest
Regulators clear banks to contact the customers behind their SAR filings1 distinct publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
One relay of one government release
Every load-carrying number here comes from a single FinCEN publication as summarised by Cryptopolitan, and no second newsroom in our coverage has read the trend analysis against the alert. What the relay does well is keep the caveat intact: attempts, duplicate reporting, two-way transfers and amended filings are all named, and one Treasury official is quoted by name. The weaker material is borrowed at two removes — the 84% stablecoin share reaches the reader through FATF citing Chainalysis, with neither document quoted — and the UNODC and Hong Kong details are the outlet recalling its own earlier reporting.
Filing volume, not behaviour change
What is genuinely measured is paperwork: 33,904 reports over roughly 28 months, about 1,220 a month, with 96% of them from crypto-dependent money services businesses and depository institutions. That is the reporting regime working as designed at firms already inside it. Nothing in this reporting shows an exchange, custodian or stablecoin issuer changing a control in response, and the sharing FinCEN asks for under 314(b) is voluntary with no uptake figure attached.
Headline outruns FinCEN's own footnote
'$12.7 billion in crypto scam flows' reads as money lost, and FinCEN says the total may include attempted transactions, the same funds reported more than once, transfers counted in both directions, and re-counted amendments. The growth figures slip the same way. A 10.9% average monthly rise in filings, taken as compounding across the window, would leave the final month with roughly eighteen times the reports of the first, and the dollar figure more than a hundred times higher; FinCEN instead credits its own expanded alert vocabulary for the increase. The scaffolding that would justify the headline is absent from the story that carries it.
The tally serves its publisher
FinCEN publishes trend analyses partly to show that Bank Secrecy Act reporting earns its cost, and a bigger tally makes that case better than a smaller one; the agency effectively concedes the loop when it credits its own broadened alert language for the rise in filings. Chainalysis, whose 84% figure arrives via FATF, sells the analytics that such figures justify. Cryptopolitan writes for the exchanges and issuers being told to spend more on surveillance, and its framing of a compliance squeeze is the angle that audience clicks.
Sound arithmetic, unopened chains
The shape of the finding holds up: a filing count, a window, a dollar total, and a caveat that together describe monitoring workload at crypto-exposed filers. Confidence stops there. The primary documents go unquoted beyond a single line, no other outlet has checked the total, the monthly growth rates come with no base period that would make them interpretable, and the FATF, Chainalysis and UNODC numbers each rest on a chain this reporting does not open.