# U.S. Authorities Dismantle Major Online Scam Marketplace in Coordinated Global Operation
In a sweeping international enforcement effort, American law enforcement agencies have taken significant steps to shut down an online platform that served as a hub for digital fraud operations across Southeast Asia and beyond. The coordinated crackdown, involving multiple federal agencies, targeted a Telegram-based service that connected cybercriminals with organized fraud networks operating overseas.
## The Scope of the Operation
The U.S. Department of Justice, working alongside the Secret Service and the Treasury Department, moved swiftly on Wednesday to dismantle what had become one of the largest illicit digital marketplaces facilitating cyber fraud. Authorities seized control of multiple Telegram communication channels used to coordinate the operation, confiscated digital currency wallets, and launched the Fraud Network Disruption Task Force into Madagascar to dismantle a cluster of 13 fraudulent compounds linked to Chinese criminal syndicates.
In a single day, investigators successfully froze roughly $52 million in cryptocurrency tied to money laundering activities. This brought the cumulative total of restricted digital assets under the task force’s purview to approximately $938 million.
“Every single year, fraudulent compounds in Southeast Asia strip billions from American citizens,” stated Treasury Secretary Scott Bessent. “The current administration is fully committed to breaking apart these transnational criminal networks, and Treasury will persist in leveraging every available resource to protect the American people from this devastating fraud.”
## How the Marketplace Functioned
The platform, known as Xinbi Guarantee, emerged as a dominant presence after two predecessor services — HuiOne Guarantee and Tudou Guarantee — were shut down in the preceding year. Operating primarily through the encrypted messaging application Telegram, it functioned as a marketplace where individuals or groups running fraud operations could purchase a wide array of illicit services.
These services included designing custom fraudulent investment websites, laundering the proceeds of wire fraud obtained from victims, and even arranging for forced laborers to be trafficked into scam compounds across Southeast Asia. The platform essentially served as an intermediary, holding payments in escrow until the hired services were delivered, thereby guaranteeing reliability for its criminal clientele.
Blockchain intelligence company Elliptic, which collaborated with the U.S. Secret Service to identify and freeze wallets containing roughly $52.8 million in a dollar-pegged digital asset, estimated that Xinbi had facilitated approximately $30 billion in total transactions since its launch around 2022.
## Key Seizures and Arrests
As part of the operation, federal agents seized two digital wallets that Xinbi used to collect vendor payments, containing an estimated $12 million in funds. Across the broader network, 52 wallets connected to Xinbi and its associated merchants were identified and frozen, encompassing all $52.8 million in digital assets.
The Fraud Network Disruption Task Force expanded its operations globally, with a particular focus on Madagascar, where 13 scam compounds were raided. Over 3,200 electronic devices were confiscated, and nearly 400 individuals were detained and questioned. Among those arrested, approximately 30 were identified as senior figures in the scam compounds and were subsequently returned to China by the Chinese government.
According to a senior law enforcement official, criminals believed they could operate beyond the reach of American authorities once they had laundered stolen funds through Xinbi’s network. The recent actions have proven otherwise.
## Sanctions and International Response
The Treasury Department’s Office of Foreign Assets Control (OFAC) simultaneously imposed sanctions on Chinese-language media outlets accused of enabling cyber scams, fraud, money laundering, and other criminal activities aimed at American targets.
The Treasury also noted that Xinbi’s platform had been utilized by North Korean hackers and other entities already sanctioned by OFAC, including Jin Bei Group Co., Ltd. and subsidiaries of the Prince Group.
Earlier in January, the United Kingdom became the first nation to impose sanctions on Xinbi for selling cryptocurrency-based services to fraud centers, including stolen personal data and satellite communication equipment used to contact victims.
## Adapting to Enforcement Pressure
Historically, all transactions on Xinbi were conducted using Tether’s USDT digital asset, predominantly on the TRON blockchain. Following the asset freezes, the platform shifted its operations to USDD (“Decentralized USD”), a separate stablecoin also pegged to the American dollar. It is estimated that Xinbi converted approximately $2.8 million of its remaining USDT holdings into USDD through a decentralized trading platform.
Experts have noted that while USDD lacks the centralized freeze features present in USDT, it is not entirely immune to enforcement actions. The digital asset is partially backed by USDT reserves, which means its claimed decentralization remains a subject of debate.
Elliptic described the enforcement actions as a “severe setback” for the illicit marketplace ecosystem, noting that the uncertainty created by these measures fundamentally erodes the trust that merchants and criminal users depend upon to use these platforms.
## FAQ
**What is Xinbi Guarantee?**
Xinbi Guarantee was an online marketplace operating on Telegram that provided a range of illicit services to cybercriminal organizations, including website development for scams, money laundering, and human trafficking coordination.
**Why was it targeted?**
The platform facilitated massive amounts of financial fraud, primarily through “pig butchering” romance scams, and was used by multiple sanctioned entities and international criminal networks to process billions of dollars in illicit gains.
**What cryptocurrencies were involved?**
The platform primarily used Tether’s USDT stablecoin on the TRON blockchain. After enforcement actions, it transitioned to USDD, another dollar-pegged digital asset.
**How much money was frozen?**
Approximately $52.8 million in cryptocurrency was frozen across 52 wallets in a single day, bringing the cumulative total to around $938 million under the task force’s efforts.
**Where were the scam compounds located?**
The majority of targeted scam compounds were located in Madagascar, though the network operated globally, serving criminal organizations in Southeast Asia and beyond.
**Were any sanctions imposed?**
Yes. The Treasury Department sanctioned Chinese-language media outlets for facilitating fraud, and the United Kingdom previously sanctioned Xinbi itself for selling services to scam centers.
**What happened to the arrested individuals?**
Nearly 400 people were arrested and interviewed, with approximately 30 Chinese leaders of the scam compounds repatriated to China by the Chinese government.
## Conclusion
The coordinated actions taken by U.S. authorities represent a significant milestone in the ongoing global effort to combat transnational cyber fraud. By dismantling the digital infrastructure that enabled scam networks to operate with relative impunity, law enforcement has dealt a substantial blow to the organized crime syndicates behind these devastating schemes. The freezing of hundreds of millions of dollars in digital assets, combined with international sanctions and on-the-ground operations in Madagascar, signals a new era of aggressive enforcement against cryptocurrency-enabled fraud. While criminal networks may attempt to adapt by adopting alternative platforms and digital assets, the message from U.S. authorities is clear: no operation, no matter how sophisticated, is beyond the reach of law enforcement.
Thank you for reading
