What Are the Three Stages of Money Laundering in Crypto?

TL;DR - Money laundering moves illicit funds through three stages - placement, layering, and integration - and in crypto it is the layering stage that leaves the on-chain traces wallet screening is built to catch.

Placement, layering, and integration are the three stages every anti-money-laundering course teaches, but most explanations describe them from a bank compliance officer's desk. Crypto changes what each stage looks like: value that starts out digital skips the hardest part, and the obscuring step happens on a public ledger anyone can read. Understanding the three stages matters even if you never launder a cent, because the coins you receive carry the on-chain history of whoever held them before you - and that history is what an exchange judges when you try to cash out.

What are the three stages of money laundering?

The three-stage model comes from decades of anti-money-laundering practice and is the framework bodies like the Financial Action Task Force (FATF) use to describe how criminal proceeds become spendable. Placement is getting dirty value into the financial system. Layering is moving it around to break the link to its criminal source. Integration is spending or cashing it out so it looks like clean, legitimate wealth.

The model was written for cash - drug money fed into shops, wired between shell companies, then used to buy property. Crypto follows the same logic, but the mechanics are different at every step, and one stage often collapses or disappears entirely.

What happens during the placement stage in crypto?

Placement is the point where illegal value first enters the system. With cash this is the riskiest step, because banks watch for large or odd deposits. In crypto, placement often takes the shape of converting cash into digital assets through a Bitcoin ATM, an unregulated peer-to-peer trade, or a no-KYC exchange that asks few questions.

The twist is that a lot of crypto crime never needs placement at all. Ransomware payments, exchange hacks, and investment scams pay out in crypto from the start, so the money is already inside the system as digital value. When the proceeds begin their life on-chain, the launderer skips straight to layering - which is exactly why layering is where most of the action, and most of your exposure risk, lives.

What is the layering stage, and why is it the hardest to trace?

Layering is moving funds through enough transactions that the trail back to the crime becomes hard to follow. On a public blockchain every transfer is visible forever, so launderers do not hide transactions - they try to drown the trail in complexity. The common crypto techniques are mixers that pool and redistribute coins, chain-hopping that jumps value between blockchains, peel chains that shave off small amounts across hundreds of hops, and rapid swaps through decentralized exchanges or nested services.

Each technique has its own footprint. A crypto mixer such as Tornado Cash is the layering step in its purest form - it breaks the on-chain link between deposit and withdrawal, which is why funds that touched one raise a flag. If you want the mechanics of individual methods, read our explainers on peel chains and chain-hopping across blockchains, and on whether using a mixer is illegal.

Layering is the hardest stage to trace, but it is also the stage that leaves the clearest evidence. Blockchain analytics firms map the hops, cluster the addresses, and tag the ones tied to mixers, hacks, and sanctioned entities. That map is the reason a wallet three hops from a mixer can still be flagged years later.

How does the integration stage turn crypto into clean money?

Integration is the payoff: the laundered value re-enters the legitimate economy looking like ordinary funds. In crypto that usually means cashing out to fiat through an exchange or an over-the-counter desk, spending through a crypto debit card, or buying high-value goods such as real estate directly with coins.

This is the stage where an ordinary, honest user is most likely to get pulled in without knowing it. You might sell an NFT, accept a freelance payment, or buy discounted crypto from a stranger - and unknowingly receive funds that are in their integration step. The moment you move those coins to an exchange to cash out, the exchange screens them and the layering history surfaces. Our AML checklist for cashing out walks through how to avoid a frozen withdrawal at exactly this point.

Which stage does wallet screening actually catch?

Wallet screening catches the fingerprints left by the layering stage. When an exchange or a screening tool checks an incoming address, it asks whether the coins trace back - directly or a few hops away - to a mixer, a sanctioned address, a known hack, a darknet market, or a scam cluster. Those tags are the residue of someone else's layering, and they attach to the coins, not to your intentions.

You can inspect an address yourself on a block explorer such as Etherscan, but that only shows the raw list of transactions - not whether any of those funds passed through Tornado Cash or brushed a sanctioned entity two hops back. Screen the address with Plastron to see sanctions, mixer, and stolen-funds exposure across Ethereum and six more EVM chains in seconds, or start from our crypto money-laundering check. Knowing before you deposit is the difference between a clean cash-out and a week-long account hold.

FAQ

Which stage of money laundering is a crypto mixer part of?

A crypto mixer belongs to the layering stage. Mixers pool coins from many users and redistribute them to break the on-chain link between a deposit and a withdrawal, which is the definition of layering - obscuring where funds came from.

Is it illegal to hold crypto that went through the layering stage?

Holding coins with layering history is not automatically a crime, and exposure is not proof of wrongdoing. But it can get your deposit held or your account reviewed, so screening before you cash out lets you spot and explain the exposure first.

Does crypto always start with the placement stage?

No. When criminal proceeds are already digital - ransomware payouts, hacks, or scams paid in crypto - there is nothing to place, so launderers skip straight to layering. Placement mainly applies when cash is being converted into crypto.

Can wallet screening tell which stage funds are in?

Screening does not label a stage directly. It surfaces the tags left behind - mixer exposure, sanctioned counterparties, stolen-funds links - which are the evidence of layering. From there the pattern and hop distance tell a compliance team how close the funds sit to the original crime.