The U.S. Department of Justice has dealt a devastating blow to the infrastructure of Huione Group, seizing key servers of the "crypto laundering" operation.
The U.S. Department of Justice has officially announced the takedown of a critical cloud account used by the notorious Huione Group to manage its illicit financial ecosystem. This seizure of server infrastructure is not merely a one-time confiscation but a direct strike at the "heart" of the largest cryptocurrency money laundering network servicing international scam schemes.
The investigation established that the confiscated account ensured the uninterrupted operation of a range of platforms and channels involved in conducting illegal transactions. The Huione Group's ecosystem facilitated services for organizers of investment fraud, theft of digital assets, trading of stolen personal data, and support for fraudulent call centers. Notably, related Telegram channels openly advertised money laundering services and the sale of compromised data.
Scale of the Disaster: $4 Billion and a Global Network
The Huione Group has long been in the crosshairs of U.S. regulators. In 2025, FinCEN (the U.S. Treasury's Financial Crimes Enforcement Network) officially designated the group as a "primary money laundering concern," effectively cutting it off from the U.S. financial system. Our estimates, based on agency data, show that from August 2021 to January 2025, at least $4 billion in illegal funds passed through the group's structures. This sum includes proceeds from cryptocurrency fraud, cyberattacks by North Korean hackers, and other criminal schemes.
The dismantled ecosystem included the payment service Huione Pay, the cryptocurrency platform Huione Crypto, and the marketplace Haowang Guarantee (formerly known as Huione Guarantee). Analysts rightly called the latter the largest illegal online platform for servicing crypto scammers.
Pressure on Scammer Infrastructure: Washington's New Strategy
The seizure of server infrastructure is not just another police operation. It demonstrates a new U.S. strategy: not only to pursue individual criminals but to systematically destroy the technological foundation underpinning the entire ecosystem of transnational crypto fraud. The Justice Department stated directly that the goal is the complete destruction of the infrastructure supporting fraudulent networks in Southeast Asia.
My commentary as an analyst: This move sends a powerful signal to all participants in the shadow crypto market. If regulators previously hunted individual wallets, they are now purposefully destroying the "cloud hubs" without which a modern crypto laundry simply cannot function. Given that, according to Chainalysis, the volume of illegal crypto assets in 2025 grew by 162% and exceeded $154 billion, such operations are the only way to seriously slow down, if not stop, the flow of "dirty" money in the digital space.