The U.S. Department of Justice has dealt a devastating blow to the infrastructure of the "crypto laundering" Huione Group.
The U.S. Department of Justice has officially announced the seizure of a cloud account used by entities of the notorious Huione Group to host servers facilitating illegal financial operations. This infrastructure was a key link in the chain of laundering funds obtained from crypto scams and other forms of cybercrime.
The investigation established that the seized account supported a range of platforms and channels involved in illegal transactions. Specifically, the Huione Group ecosystem provided services for organizers of investment fraud, theft of digital assets, trading of personal data, and even support for fraudulent call center operations. Related Telegram channels openly advertised money laundering services and the sale of stolen information.
A Giant of the Shadow Economy
The Huione Group has long been in the crosshairs of U.S. regulators. As early as 2025, FinCEN (a bureau of the U.S. Treasury Department) designated this organization as a "primary money laundering concern," effectively isolating it from the U.S. financial system. According to the agency's estimates, from August 2021 to January 2025, at least $4 billion in illicit funds passed through the group's structures. This sum included money from cryptocurrency fraud, cyberattacks by North Korean hackers, and other criminal schemes.
The Huione ecosystem included the payment service Huione Pay, the cryptocurrency platform Huione Crypto, and the marketplace Haowang Guarantee (formerly Huione Guarantee). Analysts described the latter as the largest illegal online platform for servicing crypto scammers, where everything from "dirty" wallets to ready-made fraud schemes could be found.
Pressure on Infrastructure: A New Tactic by Authorities
The seizure of server infrastructure is not just another arrest. It demonstrates a systematic U.S. approach to combating transnational fraud networks in Southeast Asia. The Justice Department emphasized that the operation's goal is not merely to pursue individual criminals, but to completely dismantle the infrastructure underpinning the entire crypto scam ecosystem.
Recall that according to a Chainalysis report, over $154 billion flowed into illicit cryptocurrency wallets in 2025—a 162% increase compared to 2024. This indicates that despite high-profile operations, the scale of the problem continues to grow.
My comment: The confiscation of Huione Group's cloud infrastructure is an important but only targeted blow. As long as there is high demand for anonymous services and weak regulation in several jurisdictions, such "laundries" will quickly resurface under new brands. A real solution can only come from global coordination among law enforcement agencies and the implementation of mandatory verification mechanisms for all cryptocurrency platforms.