Stellar darknet volume is limited compared with BTC, but illicit actors still abuse low-fee XLM rails and SDEX swaps after cash-outs.
Market payment roles on Stellar
Remittance corridors create legitimate high volume. Attribution must name the illicit counterparty, not the corridor.
Historical tags still need dates
Issuer-asset codes matter: a malicious anchored asset is not the same as native XLM.
How XLM trails are read
Screen with asset code context. This information is not legal or financial advice.