The U.S. Department of Justice has dealt a devastating blow to the infrastructure of the crypto laundering operation Huione Group.
The U.S. Department of Justice has conducted a large-scale operation to seize a cloud account that served as a digital hub for the structures of the notorious Huione Group. This infrastructure ensured the uninterrupted operation of services for transferring and laundering funds obtained from cryptocurrency scams and other forms of cybercrime. This is not just about the arrest of a single account, but about dismantling a key node of an entire shadow ecosystem.
The investigation established that the seized account managed a server database through which numerous platforms and channels involved in illegal financial operations functioned. The Huione Group ecosystem, according to the investigation, provided a full range of services for organizers of investment frauds, cryptocurrency thieves, personal data traders, and operators of fraudulent call centers. In particular, money laundering services and the sale of stolen databases were openly advertised in related Telegram channels.
Epicenter of cryptocurrency crime with a turnover of billions of dollars
Huione Group has long been in the crosshairs of U.S. regulators. Back in 2025, FinCEN (a division of the U.S. Treasury Department) designated the company as a "primary money laundering concern," effectively cutting it off from the U.S. financial system. According to the agency's estimates, from August 2021 to January 2025, at least $4 billion in illegal funds passed through the group's structures. This amount includes assets obtained from cryptocurrency fraud, cyberattacks by North Korean hackers, and other criminal schemes.
The ecosystem included projects such as the payment service Huione Pay, the cryptocurrency exchange Huione Crypto, and the marketplace Haowang Guarantee. Analysts called the latter the largest illegal online platform for servicing crypto scammers. The seizure of the server infrastructure is not just a one-time action, but a strategic step within the U.S. campaign to contain transnational fraud networks based in Southeast Asia.
Systemic pressure on the infrastructure of evil
The U.S. Department of Justice emphasized that the main goal of the operation is not just to prosecute individual criminals, but to completely destroy the infrastructure that ensures the viability of the entire crypto scam ecosystem. This precedent creates a powerful benchmark: regulators are now demonstrating that they are ready to attack not only the ultimate beneficiaries, but also the technology providers without whom their activities are impossible.
Let me remind you that in 2025, according to a Chainalysis report, the volume of illegal crypto assets reached $154 billion, showing an increase of 162% compared to 2024. This indicates that, despite individual law enforcement successes, the scale of the problem continues to grow.
Expert opinion: This operation is undoubtedly a significant tactical success. However, given that the volume of illegal crypto assets is growing at an explosive rate, the seizure of one cloud account is only a temporary solution. To truly curb cryptocurrency crime, global cooperation among regulators and the implementation of more advanced tools for tracking transactions at the protocol level, not just at the server infrastructure level, are necessary.