Telegram Torches Chinese Crypto Laundering Hubs in $8.4B USDT Crackdown
By: crypto news|2025/05/15 06:00:14
0
Share
Key Takeaways:Telegram removed multiple channels linked to Xinbi and Huione Guarantee.The takedown targeted groups operating in Chinese and Southeast Asian markets, where fraud networks have used stablecoins and encrypted messaging to coordinate scams.The operation showed Telegram’s growing role in cybercrime investigations.Telegram has removed thousands of channels connected to the Chinese-language marketplaces Xinbi Guarantee and Huione Guarantee, following a report by blockchain analytics firm Elliptic. These Telegram-based platforms are responsible for over $35 billion in illicit transactions, primarily using the Tether (USDT) stablecoin.Huione Guarantee was just the tip of the iceberg – today Elliptic exposes Xinbi Guarantee: another huge, multi-billion dollar marketplace for online scammers. Merchants on Xinbi sell technology, personal data and money laundering services to fraudsters in China and South East... pic.twitter.com/QiDHRpnMa0— Elliptic (@elliptic) May 13, 2025Elliptic has identified at least $8.4 billion in USDT flowing through Xinbi since 2022. Huione, believed to have ties to Cambodia’s ruling elite, accounts for at least $27 billion and offers services ranging from money laundering and fake IDs to stolen personal data and intimidation-for-hire.How Xinbi and Huione Operate: Telegram, Stablecoins, and Illicit ServicesXinbi Guarantee and Huione Guarantee have gained popularity by offering plug-and-play services to cybercriminals seeking to launder stolen funds, disguise identities, or target new victims.Each operates as a marketplace within Telegram, using the platform’s encryption and group-based infrastructure to connect buyers and vendors at scale.Huione Guarantee, first identified by Elliptic in July 2024, sells a range of services to cybercriminals, including stolen personal data, fake documents, and money laundering tools. Huione Guarantee, an online marketplace operated by Huione Group, has been involved in facilitating online scams in Southeast Asia.#China #Scamhttps://t.co/gjj9JVuAl0— Cryptonews.com (@cryptonews) July 10, 2024Operating under the umbrella of Cambodia-based Huione Group, the platform has been linked to the Cambodian ruling family and has provided similar illicit services, including the sale of personal data, bank accounts, burner phones, and malware.Elliptic’s research further reveals that Xinbi Guarantee boasts more than 233,000 users, with vendors divided into nine categories, including document forgery, SIM card trafficking, database access, and crypto money laundering. These vendors openly advertise their ability to “clean” proceeds from pig butchering scams, a type of social engineering fraud that tricks victims into sending large sums of crypto under the pretense of romantic or investment relationships.Elliptic also discovered that the $220,000 in USDT stolen in the July 2024 WazirX exchange hack, believed to be linked to North Korean actors, was funneled through wallets tied to Xinbi. The services offered by Xinbi and Huione also go far beyond simple money laundering.For example, both platforms are reportedly connected to scam compounds spread across Southeast Asia, in countries like Cambodia, Laos, and Myanmar, where human trafficking victims are forced to carry out online fraud.@chainalysis mid-year report highlights emerging scam trends and exposes Huione Guarantee's role in facilitating Pig Butchering Scams.https://t.co/2QsNjvgnZj— Cryptonews.com (@cryptonews) August 29, 2024These compounds, often disguised as legitimate IT or customer service job offers, lure people from across Asia with promises of high-paying roles.Once onsite, victims are held against their will, subjected to abuse, and coerced into executing romance scams, crypto fraud, and blackmail schemes under constant surveillance.Both Xinbi and Huione used Telegram not just for communication, but also for reputation management, order fulfillment, and dispute resolution among vendors and clients. Telegram has not issued a formal statement regarding the removal of the Xinbi and Huione channels. Telegram’s Shift from Messaging App to Cybercrime MarketplaceThe removal of Xinbi and Huione channels shows how illegal activity is shifting from the darknet to encrypted apps like Telegram. While built for privacy, Telegram’s encryption has made it a preferred tool for criminal networks, especially in Southeast Asia. A new United Nations report is calling out Telegram for affecting organized crime in Southeast Asia amid Pavel Durov's legal woes.#Telegram #PavelDurov #UNhttps://t.co/q0ZEMy6TIU— Cryptonews.com (@cryptonews) October 7, 2024According to the United Nations, Telegram makes up to $36.5 billion a year through scams, money laundering, and stolen data sales, often using the USDT stablecoin. Criminals also promote deepfake tools and malware on the platform.The UN has previously described Tether (USDT) as the stablecoin of choice for criminal networks in Asia.In May 2025, the U.S. Treasury named Huione Group a major money laundering concern tied to $98 billion in crypto flows, some linked to North Korea’s Lazarus Group. The U.S. Treasury’s financial crimes arm has proposed removing the Huione Group from the US financial system for its alleged involvement in Lazarus-linked crypto laundering.#FinCEN #HuioneGroup #CryptoMoneyLaunderinghttps://t.co/SLbXFepAwH— Cryptonews.com (@cryptonews) May 2, 2025Elliptic now tracks over 30 similar Telegram-based marketplaces.Telegram has started to respond by removing features like “People Nearby” and updating its FAQ, but experts say more action is needed to stop the app from being used for global crypto crime.The post Telegram Torches Chinese Crypto Laundering Hubs in $8.4B USDT Crackdown appeared first on Cryptonews.
You may also like

Quick Overview of Alliance ALL16 Demo Day: 18 New Projects Featuring Emerging Trends in Prediction Markets and AI Applications
ALL17 application deadline is March 25.

The Ethereum Foundation launches "Hardness," a dedicated team to safeguard the decentralized baseline
Hardness is a protocol-level commitment to the core attributes of Ethereum, including censorship resistance, privacy, security, and permissionlessness.

Morning News | Boya Interactive plans to invest no more than $70 million to purchase cryptocurrency; WeChat launches official lobster plugin; Bitcoin mining difficulty decreased by 7.76% to 133.79 T
Overview of Important Market Events on March 22

The competition for stablecoin yields, how has it stalled U.S. cryptocurrency regulatory legislation?
Congress has only a few weeks left to seek bank support for the CLARITY Act, or it may shelve the legislation due to the midterm elections.

This Week's News Preview | The joint cryptocurrency regulatory guidance document from the U.S. SEC and CFTC officially takes effect; Polymarket announces major news
Highlights of the week from March 23 to March 29.

What characteristics do the projects delisted by mainstream exchanges have?
Mainstream exchanges are, on one hand, massively delisting coins, and on the other hand, massively listing tokenized stock assets. Essentially, this is a supply-side reform aimed at "bad money." The quality of the asset targets and the compliance of the platforms will become the focus of competition...

Before the $75,000 Gamma level, both bulls and bears are waiting for a signal
The selling pressure is being digested, and the belief is still on the way.

Business Opportunities of Tokenized Stocks
In this article, we will outline the lifecycle of tokenized stocks, analyze the current market landscape, and highlight the emerging business opportunities.

In-depth research report on the Resolv protocol hacking incident, who is the final payer?
This incident reveals a fundamental weakness in Delta's stablecoin - the coupling point between the minting logic and off-chain signatures/oracles is the most vulnerable attack surface of the system. Any capital efficiency design of "1 dollar minted for 1 dollar" must be predicated on extremely rigo...

Crypto Market Sees Large Liquidations: $272 Million in Long Positions Affected
Key Takeaways In the last 24 hours, $272 million worth of contracts were liquidated across the entire crypto…

Whale Increases BTC Shorts and Bets on Crude Oil: A Strategic Crypto Move
Key Takeaways A prominent whale, known as “UnRektCapital,” has strategically escalated its short position in Bitcoin while simultaneously…

Hackers in Brazil Use Fake Google Play Store to Steal Cryptocurrency
Key Takeaways Hackers in Brazil are exploiting fake Google Play Store pages to spread Android malware. Infected devices…

Exchanging 200,000 for nearly 100 million, DeFi stablecoins face another attack
DeFi project teams cannot assume that the modules they control are necessarily secure.

The underlying business agreement of the trillion-dollar Agent economy: Understanding ERC-8183, it's not just about payments, but the future
This article systematically analyzes the technical principles and commercial value of the ERC-8183 protocol from the dimensions of technical architecture, core mechanisms, application scenarios, and ecological collaboration.

When Wall Street's ETH begins to "yield": Looking at the asset properties of Ethereum from BlackRock's ETHB
ETH is undergoing a paradigm shift from a "volatile asset" to a "yield-generating cash flow asset."

The Power of Agency: The Agentic Wallet and the Next Decade of Wallets
In 1984, Apple killed the command line with a mouse. In 2026, Agent is killing the mouse.

Understanding x402 and MPP in One Article: Two Routes for Agent Payments
x402 makes payments within the agreement, while MPP makes system-level payments.

Particle Founder: The entrepreneurial insights I have gained the most from in the past year
Stop lean startup, stop lightning entrepreneurship, and think carefully about what your product aspirations are.
Quick Overview of Alliance ALL16 Demo Day: 18 New Projects Featuring Emerging Trends in Prediction Markets and AI Applications
ALL17 application deadline is March 25.
The Ethereum Foundation launches "Hardness," a dedicated team to safeguard the decentralized baseline
Hardness is a protocol-level commitment to the core attributes of Ethereum, including censorship resistance, privacy, security, and permissionlessness.
Morning News | Boya Interactive plans to invest no more than $70 million to purchase cryptocurrency; WeChat launches official lobster plugin; Bitcoin mining difficulty decreased by 7.76% to 133.79 T
Overview of Important Market Events on March 22
The competition for stablecoin yields, how has it stalled U.S. cryptocurrency regulatory legislation?
Congress has only a few weeks left to seek bank support for the CLARITY Act, or it may shelve the legislation due to the midterm elections.
This Week's News Preview | The joint cryptocurrency regulatory guidance document from the U.S. SEC and CFTC officially takes effect; Polymarket announces major news
Highlights of the week from March 23 to March 29.
What characteristics do the projects delisted by mainstream exchanges have?
Mainstream exchanges are, on one hand, massively delisting coins, and on the other hand, massively listing tokenized stock assets. Essentially, this is a supply-side reform aimed at "bad money." The quality of the asset targets and the compliance of the platforms will become the focus of competition...