{"id":1429,"date":"2026-06-24T09:40:58","date_gmt":"2026-06-24T09:40:58","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=1429"},"modified":"2026-06-24T09:40:58","modified_gmt":"2026-06-24T09:40:58","slug":"doj-seizes-huione-cloud-account-tied-to-cyber-scam-money-laundering","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=1429","title":{"rendered":"DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Jun 24, 2026<\/span><\/span>Money Laundering \/ Cybercrime<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

The U.S. Department of Justice (DoJ) on Tuesday announced<\/a> the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group.<\/p>\n

\u00abThese subsidiaries are alleged to have assisted individuals and organizations in transferring proceeds of cryptocurrency investment frauds, cyber scams, and other criminal activities on cryptocurrency blockchains and allowing for the conversion of the proceeds of these schemes to the legitimate banking sector undetected,\u00bb the DoJ said.<\/p>\n

The seized account, the Justice Department added, hosted backend infrastructure for the subsidiaries, including HuiOne Guarantee (aka Haowang Guarantee), which operated an illicit Telegram-based marketplace that engaged in transactions with billions of dollars between 2021 and 2025 by peddling a wide range of crimeware tools.<\/p>\n

These included personal and financial data, money laundering services, web development services for setting up fraudulent investment platforms and phishing websites, the procurement of individuals for human trafficking schemes, as well as software to facilitate face swapping, voice cloning, and deepfake-powered impersonation during video calls with victims.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

\u00abHuiOne Guarantee also provided escrow services for criminals transacting on its platforms to facilitate transactions, including money launderers laundering cryptocurrency,\u00bb the DoJ said. \u00abIn doing so, HuiOne Guarantee facilitated the movement of considerable funds stolen by Southeast Asian scam centers.\u00bb<\/p>\n

A July 2024 analysis from Elliptic revealed that merchants on HuiOne also marketed tear gas, electric batons, and electronic shackles for use by scam compound operators to imprison and torture their workers. \u00abThe merchants refer to ‘preventing escapers’ and controlling ‘runaway dogs,'\u00bb the company noted at the time. \u00abThose working within the scam compounds are commonly referred to as ‘dogs’ or ‘dog pushers.'\u00bb<\/p>\n

\u00abThe HuiOne Group used this cloud computing account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed \u2013 much of it stolen through Southeast Asian scam centers,\u00bb said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.<\/p>\n

\u00abSeizures of these marketplaces is critical in the fight against fraud that affects so many Americans, and to stop avenues for criminal proceeds to be laundered.\u00bb<\/p>\n

Although HuiOne announced it was ceasing operations in May 2025, a new analysis from Flare has revealed that more than 30 marketplaces have emerged since to fill up the void left by the guarantee platform, with the operators building proprietary messaging platforms to bypass Telegram’s bans.<\/p>\n

\u00abThe wave of enforcement in 2025 was the first coordinated attempt to reach both the financial and physical layers of the ecosystem at the same scale,\u00bb Flare researcher Chris d’Eon said. \u00abIt has produced visible adaptation, including reshuffled channel branding, redistributed flows across successor markets, and accelerated work on alternative venues. However, it has not meaningfully reduced volume across the ecosystem in aggregate.\u00bb<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

In tandem, the U.S. Treasury’s Financial Crimes Enforcement Network (FinCEN) has assessed<\/a> H-Pay Service PLC as a primary money laundering concern to guard against \u00abHuiOne Group’s attempts to circumvent being cut off from the U.S. financial system<\/a>.\u00bb It’s worth noting that FinCEN designated HuiOne Group as a \u00abprimary money laundering concern\u00bb in May 2025.<\/p>\n

\u00abMerchants sold money laundering services, stolen personal data, websites and other goods and services necessary to perpetrate so-called ‘pig butchering’ scams and other online fraud,\u00bb Elliptic said<\/a> in a statement. \u00abBy the time HuiOne was forced offline, it had received more than $31 billion in cryptoasset transactions, making it the largest illicit online marketplace ever recorded, more than 25 times larger than Silk Road and AlphaBay combined.\u00bb<\/p>\n

The development also comes as the Treasury levied sanctions against Prince Group’s leadership, investors in scam compounds, and front companies, a little over eight months after it was classified as a Transnational Criminal Organization (TCO) for its role in furthering a criminal enterprise built on the foundations of scam compounds, fraud, and money laundering. Prince Group’s chairman, Chen Zhi has since been arrested, extradited to China, and stripped of his Cambodian citizenship.<\/p>\n

\u00abTransnational criminal organizations based in Southeast Asia, like the Prince Group TCO and with support of their enablers like HuiOne Group, continue to target Americans through large-scale cyber-enabled fraud and scam operations,\u00bb Treasury said<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\ue804Ravie Lakshmanan\ue802Jun 24, 2026Money Laundering \/ Cybercrime The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based…<\/p>\n","protected":false},"author":1,"featured_media":1430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[573,329,233,309,2170,2019,2171,595,310,343],"class_list":["post-1429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-account","tag-cloud","tag-cyber","tag-doj","tag-huione","tag-laundering","tag-money","tag-scam","tag-seizes","tag-tied"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1429"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/1430"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}