Douglas Turner
The U.S. Justice Department has seized a cloud computing account at the center of what federal prosecutors describe as the largest illicit online marketplace ever operated, targeting the technical infrastructure behind the Huione Group, a Cambodia-based conglomerate accused of laundering billions in cryptocurrency fraud proceeds.
At a Glance
- The Justice Department seized a cloud account used by Huione Group subsidiaries to move and conceal fraud proceeds
- Huione Guarantee, the group's Telegram-based marketplace, has been described by blockchain analysts as the largest illicit online marketplace ever, surpassing Silk Road
- Americans reported more than $7.2 billion in losses from crypto investment fraud to the FBI in 2025, part of over $20 billion in total cybercrime losses
- The case is part of Operation Riptide, an FBI campaign targeting online fraud infrastructure
- FinCEN moved simultaneously to extend its money-laundering designation to a Huione successor entity, H-Pay Service PLC
What Was Seized and Why It Matters
On Tuesday, the Justice Department announced the seizure of a cloud computing account that hosted what prosecutors called the "backend infrastructure" for several Huione Group subsidiaries. That infrastructure let criminals transfer, obscure, and ultimately funnel funds into the conventional banking system without detection. Assistant Attorney General A. Tysen Duva of the Criminal Division said the account served as "a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed, much of it stolen through Southeast Asian scam centers."
Court documents tie the account to Huione Guarantee, also known as Haowang Guarantee, a Telegram-based marketplace where vendors sold stolen card and identity data, malware, and laundering services aimed at romance scams and fake investment schemes. The platform also ran escrow services to help money launderers transact in crypto. Blockchain analytics firms have called it the largest illicit marketplace ever documented online, eclipsing earlier dark web operations like Silk Road.
A Year of Mounting Pressure
Tuesday's action is the latest in a series of blows against Huione. Last October, the Treasury Department's Financial Crimes Enforcement Network issued a final rule cutting the group off from the U.S. financial system entirely, labeling it a "primary money laundering concern" for its role in processing proceeds from crypto fraud and North Korean cyber heists. The same rule was extended Tuesday to H-Pay Service PLC, a successor entity FinCEN identified as a vehicle for sidestepping the original ban.
Telegram banned Huione Guarantee's channels in May 2025, forcing the marketplace offline, though successor markets filled the void quickly. The group has shown a consistent ability to regroup: it launched its own stablecoin, USDH, and shifted activity to affiliated platforms as enforcement pressure grew.
The Scale of Crypto Fraud in 2025
The numbers behind this case are staggering. Americans reported more than $7.2 billion in losses from crypto investment fraud alone to the FBI's Internet Crime Complaint Center in 2025. Total cybercrime losses across all categories exceeded $20 billion last year, a 26 percent jump over the prior year. Those figures give you a sense of the environment Huione operated in and, to a degree, helped create.
The investigation was led by the FBI's San Francisco field office and IRS Criminal Investigation as part of Operation Riptide, a broader FBI campaign focused on dismantling the infrastructure that makes large-scale online fraud possible. Blockchain analytics companies Chainalysis and Elliptic, along with Google's cybercrime team, assisted in the work.
What This Means for Crypto Crime Enforcement
Cases like this one reflect how enforcement strategy has shifted. Rather than chasing individual transactions, agencies are now targeting the shared infrastructure that criminal networks depend on: cloud accounts, escrow systems, and stablecoin rails. Seizing a cloud account disrupts operations across multiple subsidiaries at once, which is a far more efficient approach than going after each scam individually.
Crypto's pseudonymous nature still creates real challenges for investigators. Funds can move across blockchains quickly, and groups like Huione have shown they can pivot to new platforms and financial instruments when old ones are shut down. The USDH stablecoin launch is a clear example of that adaptability.
Frequently Asked Questions
What is the Huione Group?
Huione Group is a Cambodia-based conglomerate that U.S. authorities accuse of operating infrastructure used to launder billions of dollars in proceeds from cryptocurrency investment fraud and cyber scams, including funds linked to North Korean state-sponsored hackers.
What is Huione Guarantee?
Huione Guarantee, also called Haowang Guarantee, was a Telegram-based marketplace where criminals bought and sold stolen data, malware, and laundering services. Blockchain analysts have described it as the largest illicit online marketplace ever identified, exceeding the scale of Silk Road. Telegram shut down its channels in May 2025.
What is Operation Riptide?
Operation Riptide is an FBI campaign targeting the technical and financial infrastructure behind large-scale online fraud. The Huione cloud account seizure is one action taken under that initiative.
How much have Americans lost to crypto fraud?
The FBI's Internet Crime Complaint Center recorded more than $7.2 billion in reported losses from crypto investment fraud in 2025 alone, part of a broader $20 billion-plus in total cybercrime losses that year.
The Road Ahead for Huione Enforcement
Huione has survived previous crackdowns by adapting fast, and prosecutors know that. The simultaneous move to designate H-Pay Service PLC suggests authorities are trying to close off escape routes before the group can fully reestablish itself. Whether that proves enough to keep the pressure sustained is a question enforcement agencies will be working to answer over the coming months.
Dean Porter
Eugene Castillo
Curtis Hernandez