The U.S. Department of Justice (DoJ) has announced the seizure of a cloud computing account allegedly used by subsidiaries of Cambodia-based HuiOne Group, a conglomerate accused of facilitating cryptocurrency-related fraud, cybercrime, and money laundering operations.
The action comes alongside new sanctions imposed by the U.S. Treasury Department against 26 entities and nine individuals connected to Prince Group, a business network previously linked to large-scale scam operations across Southeast Asia.
Cloud Infrastructure Allegedly Supported Criminal Operations
According to the Justice Department, the seized cloud account hosted backend infrastructure for several HuiOne subsidiaries, including HuiOne Guarantee, also known as Haowang Guarantee. The platform reportedly operated a large Telegram-based marketplace that enabled billions of dollars in transactions between 2021 and 2025.
Investigators claim the marketplace offered a variety of illicit services and products, including:
- Stolen personal and financial information
- Cryptocurrency money laundering services
- Fraudulent investment platform development
- Phishing website creation
- Human trafficking recruitment services
- Face-swapping and voice-cloning software
- Deepfake technology used for impersonation scams
Authorities believe these services played a significant role in supporting organized cybercrime and online fraud schemes worldwide.
HuiOne Guarantee’s Role in Money Laundering
The DoJ alleges that HuiOne Guarantee provided escrow services that helped criminals conduct transactions securely while concealing the origins of illicit funds.
Officials say the platform became a major facilitator for laundering cryptocurrency linked to scam centers operating throughout Southeast Asia. These scam compounds have been associated with investment fraud, romance scams, and so-called “pig butchering” schemes that target victims globally.
Assistant Attorney General A. Tysen Duva stated that the seized infrastructure formed part of a technological framework that enabled billions of dollars in fraudulent proceeds to be transferred and concealed.
Reports Link Marketplace to Human Trafficking and Abuse
Previous investigations by blockchain analytics firms revealed disturbing activities connected to merchants operating on HuiOne’s platforms.
Researchers reported that some vendors advertised products such as tear gas, electric batons, and electronic restraints allegedly intended for use in scam compounds. These facilities have faced repeated allegations of human trafficking, forced labor, and abuse of workers who are compelled to participate in online fraud operations.
Industry analysts noted that operators often used dehumanizing language when referring to workers inside these compounds, highlighting the severe exploitation occurring within the network.
Enforcement Efforts Trigger Emergence of New Markets
Although HuiOne announced it would cease operations in May 2025, cybersecurity researchers say the shutdown has not significantly disrupted the broader underground ecosystem.
Recent findings indicate that more than 30 new marketplaces have emerged following HuiOne’s closure. Many of these successor platforms have reportedly developed their own messaging systems to avoid restrictions and enforcement actions targeting Telegram-based criminal communities.
Experts believe cybercriminal groups are adapting quickly by rebranding services, redistributing transaction flows, and building alternative communication channels.
FinCEN Takes Additional Action Against H-Pay Service
The U.S. Treasury’s Financial Crimes Enforcement Network (FinCEN) has also identified H-Pay Service PLC as a primary money laundering concern.
Officials say the designation is intended to prevent HuiOne-related entities from bypassing restrictions designed to cut them off from the U.S. financial system. FinCEN had previously classified HuiOne Group itself as a primary money laundering concern earlier in 2025.
According to blockchain intelligence firm Elliptic, HuiOne received more than $31 billion in cryptocurrency transactions before being forced offline, making it one of the largest illicit online marketplaces ever documented.
Treasury Targets Prince Group Leadership
The latest enforcement measures also include sanctions against key members of Prince Group’s leadership, investors associated with scam compounds, and several front companies.
The Treasury Department had previously designated Prince Group as a Transnational Criminal Organization (TCO), citing its alleged involvement in fraud, money laundering, and cyber-enabled scam operations.
Authorities say these criminal networks continue to target victims worldwide, including large numbers of U.S. citizens, through sophisticated online fraud campaigns and cryptocurrency-based financial crimes.
Conclusion
The coordinated actions by the Department of Justice, Treasury Department, and FinCEN represent one of the most significant efforts to disrupt cybercrime and money laundering networks operating from Southeast Asia. While enforcement measures have forced major platforms like HuiOne offline, cybersecurity experts warn that criminal organizations continue to evolve, creating new marketplaces and technologies to sustain their operations.
As authorities intensify investigations and sanctions, the battle against transnational cyber fraud networks remains an ongoing challenge for governments and financial institutions worldwide.
