The U.S. Department of Justice has dealt a devastating blow to the infrastructure of the Huione Group crypto laundering operation: key servers have been seized.
The U.S. Department of Justice has taken a strategically important step in the fight against transnational financial crime by seizing a cloud account that served as a technological hub for the structures of the notorious Huione Group. This account supported the server infrastructure through which dozens of platforms and channels involved in laundering cryptocurrency funds obtained from scams and cyberattacks operated.
The investigation established that the Huione Group ecosystem represented a full-fledged "crypto-laundering" pipeline. Its services processed transactions linked to investment fraud, theft of digital assets, trading of compromised personal data, and even financing call centers operating under social engineering schemes. Related Telegram channels openly advertised services for converting illicit funds and providing anonymity for criminals.
One of the largest centers of crypto crime
Huione Group has long been in the crosshairs of U.S. regulators. As early as 2025, FinCEN (the U.S. Treasury Department's Financial Crimes Enforcement Network) designated the company as a "primary money laundering concern," effectively cutting it off from the U.S. financial system. According to the agency's estimates, from August 2021 to January 2025, at least $4 billion in illicit funds passed through the group's structures. This amount included money from cryptocurrency scams as well as assets stolen by North Korean hacker groups.
The ecosystem included three key elements: the payment service Huione Pay, the cryptocurrency exchange Huione Crypto, and the marketplace Haowang Guarantee (formerly Huione Guarantee), which analysts called the largest illegal online platform for servicing crypto scammers. The seizure of the server infrastructure strikes at the very core of this network, depriving it of the ability to coordinate operations.
Pressure on fraudsters' infrastructure intensifies
This move is part of a broader U.S. campaign against financial services that support transnational fraud networks in Southeast Asia. The Justice Department emphasized that the operation's goal is not merely to pursue individuals but to completely dismantle the technological foundation on which the entire crypto scam ecosystem relies.
It is worth noting that the scale of the problem continues to grow. According to Chainalysis data, in 2025, over $154 billion was deposited into illicit crypto wallets, a 162% increase from the previous year. This indicates that despite targeted strikes, the crypto crime industry is adapting and expanding. The seizure of Huione's infrastructure is an important but only the first step in a long struggle for the integrity of digital finance.
Expert opinion: The strike against Huione Group's server infrastructure demonstrates a new approach by U.S. authorities: not just blocking wallets but knocking out the "pillars" of the entire criminal ecosystem. However, given the decentralized nature of cryptocurrencies and the ease with which fraudsters migrate between jurisdictions, I expect such networks to quickly rebuild using more secure cloud providers or distributed hosting technologies. The market needs more systemic solutions, not just one-off raids.