The criminal myth

Whenever a technology threatens control, the same four villains ride out to justify watching everyone: drug dealers, terrorists, traffickers, the dark web. It was said of the internet. It was said of encryption. It was said of cash. Now it’s said of Bitcoin. So it’s worth actually checking the numbers.

The myth

“Bitcoin is how criminals move money. Only someone with something to hide would want private, permissionless payments.”

The reality

Illicit activity is a tiny slice of crypto — blockchain-analysis firms put it well under 1% of transaction volume, around a quarter of a percent.
The traditional banking system launders an estimated $800 billion to $2 trillion every year (UN Office on Drugs and Crime) — almost all of it through fully ID-checked accounts.
And it gets caught: HSBC paid $1.9bn for moving Mexican cartel money; one small Danske Bank branch in Estonia pushed roughly $200bn of suspect funds.
Cash, phones, cars and the internet are all used by criminals. We didn’t ban them — because the same tool serves billions of honest people.

KYC and AML: security theatre

Know-Your-Customer and Anti-Money-Laundering rules make you hand your ID, address and a selfie to every exchange before you can buy a single satoshi. They stop remarkably little — the industrial-scale laundering above sailed straight through a banking system where every account is already KYC’d. What the rules reliably produce is something else: a detailed map of who owns what.

The honeypot

All that identity data pools into central databases — and a central database of “people who hold valuable assets” is a honeypot. When it leaks, and it does, the damage isn’t just spam. It’s a shopping list for phishers, extortionists and thieves who now know your name, your home address, and that you hold crypto. Ledger’s 2020 breach exposed around 270,000 customers’ names, addresses and phone numbers, and real-world threats followed. Equifax lost 147 million people’s records outright. KYC doesn’t just fail to protect you — it manufactures a brand-new risk and points it at your door.

Bitcoin inverts the target

Self-custody and decentralization flip the whole economics of attack. When you hold your own keys, there’s no central vault of your identity and your assets sitting in one company’s database — nothing to leak, nothing to subpoena, nothing to hand a thief. And because the network itself has no headquarters, there’s no single system to break into.

A centralized custodian is the ultimate target: breach it once and you walk away with millions of accounts, or a database of exactly who to rob. That’s the honeypot doing its job — for the attacker. Self-custody removes the honeypot entirely. To steal from a million self-custodial users, a thief has to compromise a million people, one at a time — no shared vault, no economies of scale, no single point of failure. The concentrated jackpot that makes big custodians worth attacking simply doesn’t exist.

So the same rules that were sold as protecting you do the opposite: they force everyone into custodians and databases that concentrate risk. Bitcoin lets you step outside that pattern — spreading security across individuals instead of piling it into one irresistible target.

The investor-protection farce

The same machinery promises to keep your money safe. It didn’t stop the 2008 financial crisis. It didn’t stop Silicon Valley Bank collapsing in 2023, or the Covid crash of 2020 — savers were wiped out or bailed out while the rulebook watched. “For your safety” and “for your protection” have become the wrapping that surveillance ships in.

The honest version is simple: privacy is not a confession. The four-villains argument is a thought-terminating cliché — repeated until you agree to surrender something every generation before you took entirely for granted. You can want a private payment for the same reason you want curtains: not because you’re guilty, but because it’s yours.

So who should be forced into the open? Not the individual — the institutions handling everyone else’s money. That inversion is next.

Key takeaways

The ‘criminals use it’ line is a recurring trope used against every privacy technology; illicit activity is well under 1% of crypto volume.
The banking system launders vastly more, and KYC databases are honeypots that leak — endangering ordinary users.