The Rise and Fall of Haowang Guarantee: A Telegram Marketplace Exposed
On May 13, Haowang Guarantee, identified as the world’s largest illicit online marketplace according to Elliptic, abruptly ceased operations. This closure followed a decisive action by Telegram, which blocked numerous accounts and channels associated with the platform. The implications of this crackdown are significant, especially considering that Haowang had facilitated approximately $27 billion in illicit USDT trades, which contributed to a range of criminal activities including money laundering, hacking, and personal data trafficking within Southeast Asia’s thriving crypto fraud rings.
Telegram’s Encryption: A Double-Edged Sword for Crime and Privacy
Elliptic’s investigation unveiled the extensive criminal network linked to Haowang. This network harbored connections with Cambodia’s Huione Group, which notably created USDH, a stablecoin specifically designed to bypass sanctions. The laundering operations orchestrated through Haowang and its affiliates allowed for the movement of $4 billion in illegal funds, establishing the platform as a full-service hub for nefarious activities.
According to the U.S. Treasury’s FinCEN, some of these laundered assets can be traced back to the infamous Lazarus Group, a North Korean cybercriminal organization. Following the unveiling of these activities, Telegram’s actions targeted Xinbi Guarantee, leading to further disruptions within these illicit marketplaces. Haowang and Xinbi together facilitated the movement of over $35 billion in USDT transactions before their operational shutdown.
Despite the crackdown, Elliptic co-founder Tom Robinson indicated that both Haowang and Xinbi are attempting to re-establish themselves on Telegram, alongside over 30 similar marketplaces that continue to operate undeterred. These closures, although a landmark enforcement success against crypto-related illicit finance, highlight the ongoing challenges law enforcement faces as criminal enterprises evolve.
From Cyberheists to Kidnappings: The Violent Side of Crypto Crime
The trend of illicit cryptocurrency transactions witnessed a startling surge in 2024, reaching $40.9 billion, as reported by Chainalysis. This increase is attributed to the identification of numerous illicit addresses and a significant rise in funds stolen through hacks, which alone amounted to $2.2 billion.
North Korean hackers, particularly the Lazarus Group and others, executed notable cyberattacks, such as the theft of 4,502.9 Bitcoin from Japan’s DMM Bitcoin exchange. Various other forms of cybercrime—including high-yield investment frauds and "pig butchering" scams—have thrived under this evolving landscape. These scams have even begun leveraging AI technology to conduct more convincing attacks.
Criminal networks have begun using cryptocurrency as a means to facilitate traditional crimes such as drug trafficking, intellectual property theft, and violent kidnappings. A prominent instance occurred on May 13, 2025, where the daughter and grandson of Paymium’s CEO were attacked in Paris. This high-profile incident highlighted the escalating risks that individuals associated with cryptocurrency face today.
Can Law Enforcement Keep Up with Crackdown on Crypto Crime?
In response to the rampancy of crypto-related crimes, the FBI intercepted approximately 5,400 crypto scams and recovered $285 million in stolen assets. They also attributed their actions to saving lives, resulting in the prevention of 42 suicides linked to financial distress in 2025. However, these victories seem minor compared to the overwhelming amount of illicit money circulating in the cryptocurrency ecosystem.
Reports indicate that Americans suffered losses of around $9.3 billion due to cryptocurrency-related crimes in 2024, with criminal entities continuously adapting to evade capture. Law enforcement around the world achieved fleeting successes; in Thailand, officials dismantled a fraud network laundering $620,000, while Nigerian law enforcement apprehended over 700 suspects involved in cross-border scams. Yet, despite these efforts, groups remain tenacious, demonstrating an alarming ability to adapt quickly.
Frequently Asked Questions (FAQs)
Why do banned platforms like Haowang keep returning?
Criminals take advantage of Telegram’s lax controls by duplicating channels and dispersing their operations across multiple platforms to evade detection. The inherent nature of cryptocurrency facilitates their financial transactions seamlessly. Tools like mixers, privacy coins, and anonymous wallets create obstacles for law enforcement, making it challenging to track illicit funds effectively.
How do investigators crack stablecoin laundering?
Investigation teams utilize specialized tools to analyze blockchain transactions, establishing connections between addresses, known services, and odd transactions that suggest illicit behavior. For example, Elliptic’s research recently identified Huione wallets involved in funding USDH scams. Advances in AI also play a significant role in adapting to criminal tactics such as chain-hopping and cross-chain swaps.
The revelations surrounding Haowang Guarantee underscore the intertwined nature of technology, crime, and regulatory challenges in the cryptocurrency landscape. As authorities enhance their capabilities, the ongoing evolution of cybercrime remains a critical area that necessitates vigilance and adaptability.