Illicit Crypto Flows Hit $154B as Cartel Mining Surfaces

For finance and markets professionals, the raw number is $154 billion — the estimated value received by illicit crypto addresses in 2025, up from $59 billion in 2024 — and part of that illicit economy is now being mined in the mountains of Puebla. The discovery signals that organized crime is not only moving funds on-chain but vertically integrating into the production of new coins, with implications for AML budgets, exchange surveillance, and digital-asset risk models.

Mexican authorities have uncovered a clandestine cryptocurrency mining operation in the Sierra Norte mountains of Puebla state, seizing 300 graphics processing units, 80 medium-voltage terminals and eight satellite antennas in what is the fourth such facility discovered in the area since early 2025. Investigators suspect the site was mining virtual coins to launder funds for organized criminal groups, a development that highlights how Mexico's cartels are extending their reach beyond traditional drug trafficking and extortion into sophisticated financial crime. The federal attorney's office has declined to comment, citing an active investigation, but the discovery adds a concrete operational case to a fast-growing global phenomenon.

“

Blockchain analytics firm Chainalysis estimates that addresses linked to criminal activity received roughly $154 billion in 2025, up from $59 billion in 2024 — an increase of more than 160% year-over-year.

The operation itself, while modest by international industrial mining standards, required substantial technical expertise and investment. Hundreds of GPUs demand not only computing hardware but constant power and cooling; according to local reporting, the electricity draw far exceeded the consumption needs of the small communities scattered across the region, pointing to theft or unauthorized grid use as a likely enabler. The presence of 80 medium-voltage terminals reinforces the scale of power infrastructure involved, while the eight satellite antennae suggest an effort to maintain connectivity and avoid dependence on local internet infrastructure that might be more easily monitored. Security analyst David Saucedo told reporters that cartels 'appear to have reached a new level of sophistication,' and that building such a facility would have required technical skill and backing from a well-financed group, such as one of Mexico's most powerful cartels.

The seizure lands at a moment when global illicit cryptocurrency activity is surging. Blockchain analytics firm Chainalysis estimates that addresses linked to criminal activity received roughly $154 billion in 2025, up from $59 billion in 2024 — an increase of more than 160% year-over-year. The firm analyzed transaction volumes sent to illicit wallet addresses, though these figures reflect wallets known or linked to criminal activity and can shift as addresses are reclassified. The jump underscores why a cartel-connected mining farm in rural Puebla matters beyond a single law-enforcement incident: it indicates that organized crime is not only moving funds through crypto rails but exploring ways to produce new coins at the source, potentially blending proceeds with freshly mined assets and complicating tracing.

For Mexico, the Puebla farm represents a new front in an already difficult security landscape. Cartels have long relied on cash-heavy operations, extortion and front businesses; mining adds a capital-intensive, technologically demanding layer that may be harder for smaller groups to replicate but well within the reach of larger organizations. Electricity theft, already a widespread issue in parts of Mexico, becomes both a criminal offense and an operational signature that investigators can use to detect similar facilities. The four farms found in the Sierra Norte region since early 2025 suggest either a local concentration of activity or improved detection in that area, and possibly both.