Mass texts and EZ-Pass phishing: $17 billion stolen in crypto scams, largely by the Chinese

Chainalysis reports that Chinese-backed criminal networks stole a record ~$17 billion in cryptocurrency via scams in the most recent year—an increase of roughly 30% year-over-year—using tactics like EZ-Pass and USPS impersonation campaigns and AI-generated deepfakes. Testimony to the U.S. Senate from Chainalysis warned that while law enforcement recorded a record number of crypto seizures in 2025, industry and government responses remain fragmented, prompting calls for AI-enabled fraud prevention and likely heightened regulatory and enforcement scrutiny for crypto firms and fintech service providers.

Analysis

Market structure: The $17B (≈+30% YoY) surge in crypto-enabled scams is a net positive for SaaS cybersecurity and AI-content-moderation vendors; expect incremental enterprise security spend of 5–15% annualized across mid-market and large banks over 12–24 months. Blockchain analytics/AML providers (on‑chain monitoring) gain pricing power as exchanges and custodians pay for compliance; conversely, consumer-facing crypto platforms and high‑fraud merchant processors face higher charge-offs and compliance costs. Cross-asset: expect modest safe‑haven bid in USTs (2–5bp compression) on risk spikes, USD strength in acute risk-off, higher realized BTC volatility and pressure on crypto equities near-term.

Risk assessment: Tail risks include a harsh US regulatory push (e.g., tight AML rules or exchange limits) that could knock 20–50% off crypto-native equities (COIN, BCH proxies) within 3–6 months, or retaliatory China policy that disrupts attribution work. Immediate (days): headline-driven volatility around Senate/DOJ actions; short-term (weeks–months): capex and contract repricing for telcos/aggregators; long-term (quarters–years): AI-driven prevention may commoditize low-end fraud detection and shift suppliers. Hidden dependency: telecom/SMS carriers are a choke point—regulatory mandates to block messages would rapidly shrink the attack surface and reduce recurring revenue for SMS vendors.

Trade implications: Directly favor top-tier cybersecurity names (CRWD, PANW, FTNT) and underowned pure-play protection/endpoint vendors (S, ZS) with 2–4% position sizing each over 3–12 months; use 3–6 month call spreads to lever upside while capping premium. Hedge crypto exposure: buy 1–2% portfolio protection via 3‑month puts on COIN or short BTC ETF exposure if regulatory probability exceeds 30% in 60 days. Rotate +3–5% from consumer fintech (PYPL, SQ) into security/AML exposures now; expect mean reversion after regulatory clarity.

Contrarian angles: The market consensus to pile into the largest cyber names risks crowding—smaller AI-native defenders (SentinelOne, Zscaler) could double relative performance if product differentiation matters; conversely, rapid deployment of carrier/OS-level AI spam filters within 6–18 months could compress SaaS ARPU by 10–25%, making a tactically sized short on commoditized vendors defensible. Historical parallel: 2016–18 fraud waves led to consolidation and margin recovery for differentiated tech; monitor on‑chain flows to privacy coins as a leading indicator of criminal adaptation.

Key Decisions for Investors

• Establish a 3% long position in CRWD and a 3% long in PANW over the next 2 weeks; hedge cost with 3‑month call spreads (buy 10–15% ITM calls, sell equal notional 25% OTM calls) and target 6–12 month hold.
• Allocate 2% to S (SentinelOne) or ZS (pick one) as a contrarian growth play—buy 6‑month calls (25–35% OTM) or outright 2% equity stake, expect 30–60% relative upside if enterprise spend accelerates within 6–12 months.
• Reduce exposure to consumer fintech/payments (e.g., PYPL, SQ) by 3–5% and reallocate into cybersecurity/AML names within 1 month to offset rising fraud charge-offs and compliance costs projected over next 3–12 months.
• Buy 3‑month puts equivalent to 1% portfolio notional on COIN or short a BTC ETF (e.g., BITO) if by 60 days on‑chain seizure metrics or a major Senate/DOJ action push regulatory probability above 30%; cut hedge if probability falls under 15%.
• Raise 1–2% cash or add 1–2% 2‑year UST exposure as a tactical hedge for headline-driven risk-off events anticipated around upcoming hearings and enforcement actions in the next 30–90 days.