The crypto industry has entered a new phase where compliance infrastructure no longer sits at the margins of operations. It now defines how institutions enter, scale, and defend their presence in digital assets. A new report from Chainalysis shows that monitoring standards have improved sharply across the sector, yet a structural weakness remains in how firms handle indirect exposure to illicit funds.
The report builds on a simple premise. Choosing the right blockchain no longer defines success on its own. Institutions must also monitor what happens after transactions begin to flow. Regulators treat on-chain transparency as a baseline requirement, which places continuous pressure on firms to detect and respond to suspicious activity in real time.
Industry standards shift upward
Chainalysis data shows that nearly half of organizations onboarded in 2026 operate with alerting configurations that would have ranked among the strictest in 2020. The firm measured this shift through a compliance index that combines alert severity, trigger sensitivity, and minimum detection thresholds.
In 2020 and 2021, only about 10% of organizations met what the report defines as the “gold standard” of that period. The trajectory changed in 2023, when stricter configurations became more common. By 2026, roughly 47% of new entrants meet or exceed those earlier benchmarks.
“Standard compliance configurations today would have been considered industry-leading just five years ago,” Chainalysis said in the report preview.
This shift reflects a broader maturation of the market. Financial institutions that enter crypto today do not build compliance frameworks from scratch. They join an ecosystem that has already established baseline expectations, supported by tools such as Chainalysis KYT for transaction monitoring.
Crypto compliance is stricter than ever. Nearly half of organizations onboarded in 2026 use monitoring standards that would have been in the top 10% just a few years ago. Get a preview of our upcoming "The New Rails" report to see how TradFi compares to crypto exchanges and why… pic.twitter.com/M3w6rAAzrN
— Chainalysis (@chainalysis) May 27, 2026
Direct monitoring reaches global alignment
The report draws a clear distinction between direct and indirect exposure. Direct exposure refers to funds that come straight from known illicit sources. Indirect exposure includes funds that pass through intermediary wallets before reaching a platform.
Direct monitoring now shows strong global consistency. Across the Americas, EMEA, and Asia-Pacific regions, organizations apply similar low-threshold triggers for direct exposure. This alignment reflects regulatory expectations. Authorities across jurisdictions expect firms to detect funds linked directly to sanctioned entities or illicit actors with minimal tolerance.
For high-risk categories such as terrorist financing, sanctioned entities, and child abuse material, organizations apply near zero-tolerance thresholds. Even minimal transaction values trigger alerts. These categories carry severe legal and reputational consequences, which explains the uniform strictness.
Indirect exposure remains the weak point
The same consistency does not extend to indirect exposure. Chainalysis identifies this area as the main gap in current compliance frameworks.
Thresholds for indirect exposure often sit significantly higher than those for direct exposure. In categories such as ransomware, scams, fraud shops, and darknet markets, indirect thresholds can run 10 to 20 times higher. A platform that flags $10 in direct ransomware exposure may not trigger an alert for indirect exposure until it reaches $100.
This gap creates a predictable pattern. Illicit actors route funds through multiple intermediary wallets to reduce the likelihood of detection. The report notes that laundering strategies adapt to these thresholds, which increases the importance of closing the gap between direct and indirect monitoring.
“The industry’s gap between direct and indirect monitoring creates an opening for illicit actors to exploit,” the Chainalysis team said. “Organizations that close this gap improve their regulatory defensibility and differentiate themselves as trustworthy counterparties.”
Banks apply stricter thresholds than exchanges
The data also shows a clear divide between traditional financial institutions and crypto-native exchanges. Banks maintain tighter alerting thresholds across both illicit and non-illicit categories.
For indirect exposure to non-illicit flows, crypto exchanges set average alert thresholds around $950. Traditional financial institutions set those thresholds closer to $150. The difference narrows for illicit flows, but banks still operate with stricter configurations. Exchanges typically trigger alerts at $100, while financial institutions set thresholds closer to $55.
This gap reflects legacy regulatory pressure on banks. Institutions that already operate under strict compliance regimes carry those expectations into digital assets. As banks expand into stablecoins, tokenized assets, and custody services, their lower tolerance for risk shapes the broader market.
Regional differences shape indirect monitoring
Geography plays a significant role in how firms approach indirect exposure. While direct monitoring remains consistent, indirect thresholds vary across regions.
Organizations in EMEA maintain the strictest configurations, with relatively low thresholds across common risk categories. The Americas fall in the middle, with a mix of strict controls and broader flexibility. Asia-Pacific shows the most lenient distribution, with higher thresholds and wider variation.
This divergence has practical implications. Two institutions that use the same compliance tools may apply different standards depending on their regulatory environment. Cross-border partnerships require closer scrutiny as a result, especially when firms assess counterparties and transaction flows.
Rising pressure from illicit activity
The report arrives at a time when compliance pressure continues to build across crypto markets. Chainalysis has previously reported that North Korean-linked actors were responsible for more than $2 billion in crypto theft in 2025. That scale of activity raises the stakes for monitoring systems.
Other developments reinforce the trend. Platforms such as Polymarket have integrated Chainalysis tools to track insider activity and market manipulation after reaching billions in monthly volume. Regulatory scrutiny around anti-money laundering gaps, exchange monitoring, and stablecoin controls continues to expand.
A competitive edge in compliance
The findings point to an industry in transition. Direct exposure monitoring has reached a mature and standardized state. Indirect exposure still lacks the same level of precision and consistency.
For financial institutions, this gap defines both a risk and an opportunity. Firms that strengthen indirect monitoring can improve their regulatory standing and position themselves as reliable partners in a market that demands transparency.
Compliance no longer functions as a cost center alone. It acts as a competitive asset. Institutions that invest in stricter configurations, better data quality, and real-time monitoring tools gain an advantage as capital flows into digital assets under tighter regulatory expectations.
Gunel Ismayilova
Disclaimer: All materials on this site are for informational purposes only. None of the material should be interpreted as investment advice. Please note that, despite the nature of much of the material created and hosted on this website, HODL FM operates as a media and informational platform, not a provider of financial advisory services. The opinions of authors and other contributors are their own and should not be taken as financial advice. If you require advice, HODL FM strongly recommends contacting a qualified industry professional.
