If they don't cash out directly to an off-ramp there might not be a way to connect a crypto address to a person. If they use the crypto to buy illegal shit and sell that on the black market for cash - or sell the crypto directly on the black market for cash, they could evade detection.

I wonder how much crypto is changing hands off-market in shadier corners.