On June 23, the US Department of Justice announced it had seized a cloud computing account allegedly used to operate back-end systems tied to the Cambodia-based Huione Group. This move marks the latest step in a global crackdown targeting crypto-linked illegal money laundering rings thought to be operating through messaging platforms and blockchain networks.
Technical intervention targets Telegram-based structure
Authorities report that the operation focused specifically on Huione Guarantee, an entity believed to function over Telegram. Also registered under the name Haowang Guarantee, the group is accused of facilitating escrow services for illegal crypto proceeds and being used to trade stolen financial data as well as other illicit services.
Assistant Chief A. Tysen Duva from the Justice Department’s Criminal Division underscored that seizing such marketplace infrastructure is critical for combating fraud that affects many Americans and for shutting down channels used to launder criminal proceeds.
The investigation was supported by Chainalysis and Elliptic, along with the Google Cybercrime Investigation Team. In this operation, US officials targeted not just individual wallets or suspects, but the technical backbone keeping the infrastructure alive. This strategy signals a stronger effort to dismantle the digital backbone that fuels the growth of fraudulent networks.
Quick Glossary: An escrow service is a system in which payment between a buyer and seller is held by a third party until the transaction is complete. In criminal networks, escrow services can help build trust between parties and make illicit transactions easier to execute.
Crypto fraud losses surge across the US
According to data from the FBI Internet Crime Complaint Center, losses from crypto investment scams alone reached $7.2 billion in the US in 2025. Total recorded damages from all cybercrimes in the same period climbed to $21 billion.
US officials highlight that marketplaces created on platforms like Telegram combine private messaging, anonymous vendor accounts, crypto payments, and cross-border infrastructure. This model provides fertile ground for networks seeking to evade traditional banking oversight.
FinCEN: $4 billion in illicit flows tied to Huione
The Financial Crimes Enforcement Network (FinCEN), part of the US Treasury Department, reports that organizations linked to Huione played a role in laundering at least $4 billion in illegal funds between August 2021 and January 2025. These transfers are believed to be connected to investment scams, attacks by North Korea’s Lazarus Group, and other cross-border fraud schemes.
FinCEN has also designated Huione Group as a primary money laundering concern under the US PATRIOT Act. This approach expands beyond the main group to cover related entities and financial intermediaries, reflecting a broader strategy to counter these networks.
Crackdown expands, focus on the network’s next move
The US Treasury has previously sanctioned individuals and organizations linked to Cambodian scam centers associated with Huione. Washington argues these networks inflict billions of dollars in annual losses on US citizens, leveraging messaging apps, crypto transfer channels, and offshore payment systems.
Blockchain analysts warn that such interventions often cause fragmentation rather than permanent collapse in the short term. When one infrastructure is disabled, these networks may simply shift liquidity to other channels, reroute transactions, or migrate to alternative platforms.
Looking ahead, attention will turn to the FinCEN proposal’s public comment phase and possible updates to the OFAC sanctions list. On-chain intelligence reports to be published in the latter part of 2026 are expected to clarify whether the Huione-linked flows have truly stopped—or merely changed direction.
