DOJ Seizes Huione Crypto Network — $31B Laundering Hub Falls

DOJ investigators have seized the backend cloud infrastructure that powered the Huione Group's money laundering empire, striking at what blockchain analysts describe as the largest illicit online marketplace in history. The seizure, part of the FBI's ongoing Operation Riptide campaign against fraud infrastructure, dismantles the technical backbone behind Huione Guarantee, a Telegram-based bazaar whose channels processed more than $31 billion in illicit transaction volume — a figure that eclipses dark-web forebears like Silk Road many times over.

The Justice Department said the seized cloud computing account hosted backend systems for subsidiaries of the Huione Group, a Cambodia-based conglomerate accused of helping launder billions of dollars in proceeds from crypto investment fraud and cyber scams. The infrastructure let criminal clients move and conceal funds before quietly converting them into the traditional banking system.

Huione Guarantee — also known as Haowang Guarantee — operated in plain sight on Telegram, functioning as an escrow-style guarantee marketplace for the criminal economy of Southeast Asia. Its channels advertised stolen credit card and identity data, malware proceeds, laundering services for romance and investment scams, and even services connected to human trafficking for the scam compounds that dot Cambodia and Myanmar.

The marketplace sat at the center of the global 'pig butchering' economy — the long-con investment scams in which victims, often recruited through fake romantic or friendly relationships, are coaxed into fraudulent crypto platforms and drained of their savings. U.S. victims alone have reported billions in annual losses, and the compounds running the scams have been repeatedly linked to forced labor and trafficking.

This is not the first blow to Huione. Last October, the Treasury Department's Financial Crimes Enforcement Network issued a final rule severing Huione Group from the U.S. financial system, designating it a primary money laundering concern and citing its role in washing proceeds for crypto fraud networks and North Korean state-sponsored cyber heists, including funds tied to the Lazarus Group. Huione's own guarantee marketplace announced a shutdown in 2025 after Telegram banned thousands of its channels — but analysts tracked much of the activity migrating to successor platforms running on the same backend rails the DOJ has now seized.

That is what makes the infrastructure seizure significant, investigators say. Rather than chasing individual Telegram channels — which reconstitute within days — Operation Riptide targeted the cloud servers, databases and payment plumbing that successor marketplaces depended on. Degrading the backend raises the cost and friction of rebuilding, and the seized systems are expected to yield a trove of transactional evidence for follow-on prosecutions and sanctions.

The Huione operation also illustrates how thoroughly the laundering economy has professionalized. Blockchain analytics firms describe a hub-and-spoke system: scam proceeds in stablecoins flow through over-the-counter desks and guarantee marketplaces, get commingled in high-volume wallets, and exit through complicit exchanges and shell companies. Huione even issued its own dollar-pegged stablecoin, marketed explicitly as beyond the reach of regulators — an innovation that drew particular attention from Treasury officials.

Industry reaction has been broadly supportive. Compliance officers at major exchanges say infrastructure-level takedowns are far more effective than address blacklisting, and stablecoin issuers have grown faster at freezing flagged funds. Critics, however, note the whack-a-mole pattern: previous takedowns saw volumes shift to successor platforms within weeks, and the scam compounds themselves — protected in jurisdictions with weak or complicit enforcement — remain largely untouched.

The crackdown lands amid a broader Washington push on crypto crime that has coexisted with a distinctly deregulatory turn on legitimate crypto business. The SEC's 2026 agenda under Chairman Paul Atkins emphasizes safe harbors for DeFi startups, Circle recently won a national trust bank charter, and spot Bitcoin ETFs continue absorbing institutional flows. Officials have framed the two tracks as complementary: legitimize the compliant industry while raising the cost of the criminal one.

For victims, the seizure offers a measure of hope but few guarantees. Forfeited funds can eventually flow to restitution, and the DOJ has recovered billions in crypto in recent years — including a record haul connected to a Southeast Asian scam conglomerate late last year. But recovery typically takes years, and the sums returned remain a fraction of what the compounds extract.

What's next: expect follow-on indictments of Huione-linked operators, additional sanctions designations targeting successor marketplaces, and pressure on Cambodia over the group's political connections. Investigators say the seized backend data is already mapping the successor ecosystem that sprang up after the 2025 shutdown.

The bottom line: by seizing the servers instead of chasing the storefronts, the DOJ has landed its most structural blow yet against the industrialized crypto-scam economy. Whether it becomes a turning point or another displacement event depends on what happens in the jurisdictions where the compounds still operate — and how fast the $31 billion machine can rebuild its plumbing.

https://www.youtube.com/watch?v=iWeNYTJfhtw