The U.S. Department of Justice announced on June 23, 2026, that it had seized a cloud computing account used by subsidiaries of Huione Group, a Cambodia-based corporate conglomerate accused of laundering more than $4 billion in illicit cryptocurrency proceeds between August 2021 and January 2025. The seized infrastructure hosted backend systems used to move and convert criminal earnings, including the proceeds of cryptocurrency investment fraud, cyber scams, and other criminal activities, into the conventional banking system. The Northern District of California is leading the prosecution.

"Strikes a blow against one of the world's most prolific criminal marketplaces," said A. Tysen Duva, Assistant Attorney General for the DOJ's Criminal Division. The Financial Crimes Enforcement Network (FinCEN) simultaneously issued a Notice of Proposed Rulemaking (NPRM) to formally extend its October 2025 designation of Huione Group to cover H-Pay Service PLC, the payment arm formerly known as Huione Pay that halted customer withdrawals and rebranded late last year following a bank run triggered by sanctions.

A Network Built for Evasion

Huione Group is not a typical crypto firm. The conglomerate includes a payment processor, a virtual asset exchange, and a Telegram-based dark marketplace called Huione Guarantee (also known as Haowang Guarantee), which facilitated roughly $27 billion in transactions and had approximately 233,000 users before Telegram shut it down in May 2025. According to the DOJ, that marketplace openly advertised stolen financial data, malware-enabled theft proceeds, deepfake services for cyber scams, money laundering services, and human trafficking procurement.

Huione Group is also linked to the Prince Group Transnational Criminal Organization and to Cambodia's ruling elite, a connection that shielded the network from domestic accountability and helps explain why meaningful enforcement required U.S. jurisdiction. In April 2026, Huione Group chairman Li Xiong was extradited to China, a development that added further pressure on the organization's leadership structure.

In September 2024, as regulatory pressure mounted, Huione launched its own stablecoin called USDH, pegged one-to-one with the U.S. dollar and deployed across Ethereum, BNB Smart Chain, Tron, and a proprietary network called Huione Chain (also marketed as Xone Chain). The stablecoin's official website described it as a currency that "avoids the common freezing and transfer restrictions of traditional digital currencies" and is "not restricted by traditional regulatory agencies." U.S. authorities have cited that language as evidence the token was designed to evade oversight. USDH and Huione Chain remain in circulation and are not directly subject to this week's seizure.

Blockchain analytics firm Elliptic estimated that Huione Group received $98 billion in total crypto inflows since 2014. FinCEN's own assessment found that at least $37 million in laundered funds originated from North Korean Lazarus Group cyberheists, with an additional $36 million tied to pig butchering scams (a fraud type where criminals build fake romantic or investment relationships online before draining victims' funds) and $300 million from other cyber schemes.

Post-Sanction Activity Signals Resilience

Following FinCEN's May 2025 NPRM targeting Huione Group, on-chain data from research firm GlobalLedger shows that between May 1 and June 17, 2025 alone, approximately $942.9 million in USDT moved from Huione-linked wallets to centralized exchanges. About $219 million flowed through Ethereum; the bulk of the remainder moved via Tron. More than 40 percent of the Tron-based volume was routed to exchanges that GlobalLedger classifies as lower-risk, suggesting deliberate counterparty selection to avoid detection.

That pattern carries direct compliance implications for exchanges operating in South Asia and Africa, where Tron-based USDT is, according to blockchain analytics firms, among the most widely used settlement rails for peer-to-peer crypto trading. Any exchange or protocol that processed transactions touching Huione-linked addresses during this window may face regulatory scrutiny.

Regional Exposure Is Significant

The downstream effects of Huione's network reach well beyond the United States. India is among the most frequently targeted countries for pig butchering fraud. A single case in Punjab's Ludhiana district saw an industrialist lose approximately 19.8 crore rupees (roughly $2.4 million USD) to a pig butchering scheme, the category of fraud Huione's infrastructure was built to support. Pakistan is estimated to lose 4.2 percent of GDP annually to scam activity, one of the highest rates globally, while Kenya loses an estimated 3.6 percent and South Africa 3.4 percent, according to data compiled by Statista and cited in TRM Labs' 2026 Crypto Crime Report.

Huione's marketplace also served as a supplier of scam toolkits, including deepfake software and identity data, to operators worldwide. Its collapse may reduce availability of those tools in the short term, but Elliptic and other blockchain analytics firms assess that successor platforms are likely to fill the gap quickly.

The United Nations and independent researchers estimate that between 100,000 and 300,000 people are currently held in forced labor inside Southeast Asian scam compounds, including individuals trafficked from sub-Saharan Africa and South Asia under false promises of legitimate employment.

What Comes Next

The June 23 action reflects a coordinated enforcement model: a DOJ seizure paired with a simultaneous FinCEN rulemaking, designed to close the rebranding loophole that Huione exploited when it renamed Huione Pay as H-Pay. In May 2025, responding to Elliptic's findings on Huione's $98 billion in crypto inflows, Tom Robinson, co-founder of Elliptic, stated: "This should serve as a wake-up call for the broader financial ecosystem to strengthen the detection and disruption of cross-border laundering networks."

Regulators in India, Nigeria, and Kenya could potentially be asked to participate through mutual legal assistance treaties as the case proceeds, though no formal requests have been confirmed. For exchanges in those markets, compliance analysts recommend an immediate review: screen active wallet lists against Huione-linked addresses on Tron and Ethereum, and treat any USDH exposure as a red flag requiring enhanced due diligence.