The U.S. Department of Justice struck a blow against the crypto infrastructure of Huione Group: seized cloud servers used for laundering billions.
The U.S. Department of Justice announced the seizure of a key cloud account used by Huione Group entities to host server infrastructure. According to the investigation, this infrastructure served as the foundation for an entire network of services specializing in converting and laundering funds obtained from crypto scams, cyberattacks, and other types of criminal activity.
Analysis shows that the seized account supported platforms and channels through which illegal financial transactions were conducted. In particular, the Huione Group ecosystem actively advertised services for organizers of investment fraud, cryptocurrency theft, personal data trading, and even for supporting fraudulent call centers. This was not just a service, but a full-fledged "crypto laundry" integrated into the shadow economy.
One of the largest hubs of cryptocurrency crime
Huione Group has long been under close scrutiny by U.S. regulators. In 2025, FinCEN (a bureau of the U.S. Treasury Department) designated the company as a "primary money laundering concern," effectively cutting it off from the U.S. financial system. According to the agency's estimates, from August 2021 to January 2025, at least $4 billion in illicit funds passed through the group's structures. This sum includes money from cryptocurrency fraud, cyberattacks by North Korean hackers, and other criminal schemes.
The ecosystem included well-known services such as the payment service Huione Pay, the cryptocurrency platform Huione Crypto, and the marketplace Haowang Guarantee (formerly Huione Guarantee). Analysts have called the latter the largest illegal online platform for servicing crypto scammers. The scale is impressive: billions of dollars flowed through these structures alone, making Huione Group a key node in the international cybercrime network.
Pressure on fraudsters' infrastructure intensifies
The seizure of server infrastructure is not just another arrest. It is a strategic blow to the very foundations of transnational fraud networks based in Southeast Asia. The U.S. Department of Justice directly stated that the operation's goal is not only to prosecute individual criminals but also to completely dismantle the infrastructure that supports the entire crypto scam ecosystem. This confirms that regulators are moving from targeted arrests to the systematic elimination of entire networks.
Against this backdrop, it is worth noting that in 2025, the volume of illicit crypto assets, according to Chainalysis, exceeded $154 billion, a 162% increase from 2024. This indicates that despite increased pressure, crypto crime continues to grow, and the actions of the U.S. Department of Justice represent just one front in this global war.
Expert commentary: The seizure of Huione Group's cloud infrastructure is a landmark precedent. It demonstrates that law enforcement agencies have learned not only to track transactions but also to attack the very "technical base" of crypto criminals. However, given that tens of billions of dollars flow through such networks, the effectiveness of these measures will depend on how quickly fraudsters can restore their servers on new platforms. Time is the key resource in this game.