Illicit crypto activity more resilient than legitimate demand