FraudCodex FraudCodex
Sign in
Anti-Money Laundering Crypto & Digital Assets

Peel Chains

Peeling small amounts off a large balance across many hops while the bulk keeps moving, to launder crypto.

1 Introduction

A peel chain is a cryptocurrency laundering technique in which a large illicit balance is moved through a long sequence of wallet addresses. At each hop a small amount is "peeled" off and sent to a cash-out point, such as an exchange deposit address, a mixer, or a merchant, while the large remainder is forwarded to a fresh address controlled by the same actor. Repeated across many hops, this fragments a single conspicuous sum into many small, less noticeable transfers, obscuring the trail and frustrating naive transaction tracing. Peel chains are closely related to mixing and chain-hopping, and are frequently combined with them.

Dozens+

Hops in a typical peel chain

Small

Size of each peeled cash-out

Public

Ledger that records every hop

2 Interactive Peel Chain Walkthrough

Phase: Origin Wallet

Peel Chain Flow

Laundering Summary

Step 1 - Origin Wallet: A large illicit balance of 100 BTC sits in the origin wallet. At this point the entire sum is in one place, easy for an investigator to spot and trace.

3 Detailed Analysis

Peel Chains vs. Related Techniques

Peel Chain

A long sequence of self-transfers where small amounts are repeatedly skimmed off to cash-out points while the bulk keeps moving forward to fresh addresses.

Mixing and Chain-Hopping

Mixers pool and shuffle funds to break the direct link, while chain-hopping swaps assets across blockchains. Peel chains are often layered on top of both.

Detection Methodology

Because public blockchains record every transaction, investigators use on-chain clustering and tracing to defeat peel chains. Heuristics such as common-input-ownership and change-address identification group addresses that are likely controlled by the same entity, reconstructing the chain even as the main balance hops from wallet to wallet. Analysts then trace each peeled output forward to the service where it was cashed out, and where that service is a regulated exchange they can request know-your-customer records tied to the deposit address. Repeated, near-equal forwarding amounts and a recurring split-and-forward pattern are strong signatures that automated graph analysis can flag at scale.

Red Flags

  • A long sequence of wallets where most of the balance is forwarded and a small fixed slice is peeled off at each hop
  • Many small deposits arriving at exchanges or mixers that trace back to a single high-value origin address
  • Fresh single-use addresses created at every hop, with funds held only briefly before moving on
  • Peel amounts kept just below common reporting or alerting thresholds to avoid scrutiny

Related Fraud Types

Mixing & Tumbling

Using services that pool and redistribute crypto assets to break the link between sender and receiver.

Chain Hopping

Moving funds across multiple blockchains to obscure the transaction trail and evade detection.

Structuring (Smurfing)

Breaking large transactions into smaller amounts to avoid regulatory reporting thresholds.