The U.S. Justice Department seized a cloud computing account on Tuesday that hosted backend infrastructure for subsidiaries of Cambodia's Huione Group, which prosecutors called one of the world's most prolific criminal marketplaces. The account enabled the operation of Huione Guarantee, a Telegram-based marketplace where vendors traded stolen card data, identity information, and laundering services for Southeast Asian scam operations. On the same day, the Treasury's Financial Crimes Enforcement Network moved to extend its existing ban on Huione to a successor entity, H-Pay Service PLC, to prevent the group from evading U.S. financial system restrictions. Prosecutors said the account served as a technological backbone that allowed billions in fraud proceeds to be transferred and concealed before conversion into the banking system. The action is part of Operation Riptide, an FBI campaign targeting online fraud infrastructure amid a 26% surge in cybercrime losses.
DOJ Seizes Huione Cloud Infrastructure
The Justice Department announced on Tuesday the seizure of a cloud computing account used by subsidiaries of the Huione Group, a Cambodia-based conglomerate. The account hosted backend infrastructure for those subsidiaries, prosecutors said, allowing criminals to move and conceal funds before converting them into the banking system undetected. Assistant Attorney General A. Tysen Duva of the Criminal Division stated that the seizure "strikes a blow against one of the world's most prolific criminal marketplaces." According to court documents, the account helped operate Huione Guarantee, also known as Haowang Guarantee, where vendors traded stolen card and identity data, malware proceeds, and laundering services for romance and investment scams. The platform also ran escrow services to help criminals, including money launderers, transact in crypto.
FinCEN Extends Ban to H-Pay Service PLC
On Tuesday, FinCEN moved to extend its existing ban on Huione to a successor entity, H-Pay Service PLC, to guard against the group evading the ban. Last October, the Treasury's Financial Crimes Enforcement Network issued a final rule severing Huione from the U.S. financial system as a "primary money laundering concern," citing its role in laundering crypto-fraud proceeds and funds from North Korean cyber heists.
Huione Guarantee Operated as Telegram Marketplace
Blockchain analysts have described Huione Guarantee as the largest illicit online marketplace ever, eclipsing dark-web forebears like Silk Road. Telegram banned its channels in May 2025, forcing it to shut down, though successor markets quickly emerged to fill the gap. The platform served as a Telegram-based marketplace where vendors traded stolen data, laundering services, and tools for Southeast Asian scam operations.
Treasury Severed Huione from U.S. Financial System in October
Last October, the Treasury's Financial Crimes Enforcement Network issued a final rule severing Huione from the U.S. financial system as a "primary money laundering concern." The rule cited the group's role in laundering crypto-fraud proceeds and funds from North Korean cyber heists. The seizure caps a year of crackdowns on Huione.
FBI Reports $7.2 Billion in 2025 Crypto Fraud Losses
Americans reported more than $7.2 billion in losses from crypto investment fraud alone to the FBI's Internet Crime Complaint Center in 2025, part of over $20 billion in total cybercrime losses last year, a 26% jump. The case, investigated by the FBI's San Francisco field office and IRS Criminal Investigation, is part of Operation Riptide, an FBI campaign targeting the infrastructure behind online fraud. The department credited blockchain analytics firms Chainalysis and Elliptic, along with Google's cybercrime team, with assisting. Huione has proved adept at regrouping in the face of pressure from law enforcement, launching its own stablecoin, USDH, and shifting activity to affiliated platforms as enforcement has tightened.
FAQ
What did the DOJ seize on Tuesday in relation to Huione Group?
The U.S. Justice Department seized a cloud computing account on Tuesday that hosted backend infrastructure for subsidiaries of Cambodia's Huione Group. The account enabled the operation of Huione Guarantee, a Telegram-based marketplace where vendors traded stolen card data, identity information, and laundering services for Southeast Asian scam operations.
Why did FinCEN extend its ban to H-Pay Service PLC?
On Tuesday, FinCEN moved to extend its existing ban on Huione to a successor entity, H-Pay Service PLC, to prevent the group from evading U.S. financial system restrictions. Last October, Treasury issued a final rule severing Huione from the U.S. financial system as a "primary money laundering concern," citing its role in laundering crypto-fraud proceeds and funds from North Korean cyber heists.
How much did Americans lose to crypto investment fraud in 2025?
Americans reported more than $7.2 billion in losses from crypto investment fraud alone to the FBI's Internet Crime Complaint Center in 2025, part of over $20 billion in total cybercrime losses last year, representing a 26% increase.
