{"id":132411,"date":"2025-05-15T03:11:43","date_gmt":"2025-05-15T03:11:43","guid":{"rendered":"https:\/\/teknomers.com\/en\/telegram-targets-chinese-crypto-laundering-operations-in-8-4b-usdt-raid\/"},"modified":"2025-05-15T03:11:43","modified_gmt":"2025-05-15T03:11:43","slug":"telegram-targets-chinese-crypto-laundering-operations-in-8-4b-usdt-raid","status":"publish","type":"post","link":"https:\/\/teknomers.com\/en\/telegram-targets-chinese-crypto-laundering-operations-in-8-4b-usdt-raid\/","title":{"rendered":"Telegram Targets Chinese Crypto Laundering Operations in $8.4B USDT Raid"},"content":{"rendered":"<div class=\"su-note\" style=\"border-color:#e0d5e5;border-radius:3px\">\n<div class=\"su-note-inner su-u-clearfix su-u-trim\" style=\"background-color:#FAEFFF;border-color:#ffffff;color:#333333;border-radius:3px\">\n<p><strong>Key Takeaways:<\/strong><\/p>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Telegram removed multiple channels linked to Xinbi and Huione Guarantee.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">The takedown targeted groups operating in Chinese and Southeast Asian markets, where fraud networks have used stablecoins and encrypted messaging to coordinate scams.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">The operation showed Telegram\u2019s growing role in cybercrime investigations.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Telegram recently made headlines by removing thousands of channels associated with the illicit **Chinese-language marketplaces** known as **Xinbi Guarantee** and **Huione Guarantee**. This significant **action** came in the wake of a detailed report by the blockchain analytics firm **Elliptic**, which uncovered alarming activities connected to these channels, including illicit transactions surpassing **$35 billion** that predominantly utilized **Tether (USDT)**, a widely used stablecoin.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Huione Guarantee was just the tip of the iceberg \u2013 today Elliptic exposes Xinbi Guarantee: another huge, multi-billion dollar marketplace for online scammers.<br \/>Merchants on Xinbi sell technology, personal data and money laundering services to fraudsters in China and South East\u2026 <a rel=\"nofollow\" href=\"https:\/\/t.co\/QiDHRpnMa0\">pic.twitter.com\/QiDHRpnMa0<\/a><\/p>\n<p>&mdash; Elliptic (@elliptic) <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/elliptic\/status\/1922302626663723484?ref_src=twsrc%5Etfw\" target=\"_blank\">May 13, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Elliptic&#8217;s analysis indicates that since 2022, more than **$8.4 billion** in USDT has been funneled through **Xinbi**, while **Huione**, believed to have connections with Cambodia\u2019s political elite, accounts for at least **$27 billion** in transactions. This marketplace is notorious for offering services that span **money laundering**, fake identification, personal data theft, and even **intimidation-for-hire** services.<\/p>\n<h2 class=\"wp-block-heading\"><span id=\"h-how-xinbi-and-huione-operate-telegram-stablecoins-and-illicit-services\">How Xinbi and Huione Operate: Telegram, Stablecoins, and Illicit Services<\/span><\/h2>\n<p>Both **Xinbi Guarantee** and **Huione Guarantee** have effectively established themselves as **convenient** resources for cybercriminals aiming to launder stolen funds, conceal identities, or find new targets. They operate as comprehensive **marketplaces** on Telegram, leveraging the platform\u2019s **encrypted messaging** and group-based architecture to facilitate substantial interactions between buyers and sellers.<\/p>\n<p>Huione Guarantee first came to the attention of investigators in **July 2024** through Elliptic&#8217;s research, which revealed its wide range of offerings. These include databases of stolen personal information, fabrication of documents, and advanced tools for **money laundering**.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f468-200d-1f4bb.png\" alt=\"\ud83d\udc68\u200d\ud83d\udcbb\" class=\"wp-smiley\" style=\"height: 1em;max-height: 1em\" \/> Huione Guarantee, an online marketplace operated by Huione Group, has been involved in facilitating online scams in Southeast Asia.<a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/China?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#China<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/Scam?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#Scam<\/a><a rel=\"nofollow\" href=\"https:\/\/t.co\/gjj9JVuAl0\">https:\/\/t.co\/gjj9JVuAl0<\/a><\/p>\n<p>&mdash; Cryptonews.com (@cryptonews) <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/cryptonews\/status\/1810992955991413110?ref_src=twsrc%5Etfw\" target=\"_blank\">July 10, 2024<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>As part of the **Cambodia-based Huione Group**, Huione Guarantee is linked to criminal elements within the political hierarchy of Cambodia. Similar to its counterpart, it provides an array of illegal services, including access to confidential data, bank account shortcuts, disposable phones, and even malware.<\/p>\n<p>Notably, Elliptic&#8217;s findings show that **Xinbi Guarantee** has attracted a user base of over **233,000** individuals, with vendors categorized into nine different types, including document forgery, **SIM card trafficking**, database access, and cryptocurrency money laundering. These sellers openly promote their ability to \u201cclean\u201d profits from **pig butchering scams**, a deceptive type of fraud where victims are tricked into transferring vast sums of cryptocurrency, often under the guise of romantic or investment opportunities.<\/p>\n<p>Additionally, a shocking revelation by Elliptic highlighted that **$220,000** in USDT, stolen during the **WazirX exchange hack** in July 2024, was traced back to wallets associated with Xinbi. This showcases the intricate web of connections within the cybercrime ecosystem.<\/p>\n<p>Moreover, the scope of services offered by both platforms extends beyond mere money laundering. Reports suggest that they are entangled with **scam compounds** scattered throughout **Southeast Asia**, particularly in countries like Cambodia, Laos, and Myanmar. Here, victims of human trafficking are coerced into conducting online fraud.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/chainalysis?ref_src=twsrc%5Etfw\" target=\"_blank\">@chainalysis<\/a> mid-year report highlights emerging scam trends and exposes Huione Guarantee&#8217;s role in facilitating Pig Butchering Scams.<a rel=\"nofollow\" href=\"https:\/\/t.co\/2QsNjvgnZj\">https:\/\/t.co\/2QsNjvgnZj<\/a><\/p>\n<p>&mdash; Cryptonews.com (@cryptonews) <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/cryptonews\/status\/1829226882019275021?ref_src=twsrc%5Etfw\" target=\"_blank\">August 29, 2024<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>These scam operations often masquerade as legitimate employment opportunities within the IT or customer service sectors, luring individuals from across **Asia** with attractive salary promises. Once affected, many victims face **abuse** and coercion, executing romance scams, cryptocurrency frauds, and blackmail schemes under constant surveillance.<\/p>\n<p>Interestingly, Telegram is not merely a communication vector for these illicit activities but also serves for **reputation management**, fulfilling orders, and resolving disputes between vendors and clients. Notably, Telegram has not officially commented on the removal of the Xinbi and Huione channels.<\/p>\n<h2 class=\"wp-block-heading\"><span id=\"h-telegram-s-shift-from-messaging-app-to-cybercrime-marketplace\">Telegram\u2019s Shift from Messaging App to Cybercrime Marketplace<\/span><\/h2>\n<p>The dismantling of the Xinbi and Huione channels underscores a broader trend illustrating how illegal activities are migrating from the **darknet** to encrypted applications like Telegram. While the platform was designed for privacy, its encryption features have made it a favored tool for criminal networks, particularly across Southeast Asia.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f4f0.png\" alt=\"\ud83d\udcf0\" class=\"wp-smiley\" style=\"height: 1em;max-height: 1em\" \/> A new United Nations report is calling out Telegram for affecting organized crime in Southeast Asia amid Pavel Durov&#8217;s legal woes.<a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/Telegram?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#Telegram<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/PavelDurov?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#PavelDurov<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/UN?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#UN<\/a><a rel=\"nofollow\" href=\"https:\/\/t.co\/q0ZEMy6TIU\">https:\/\/t.co\/q0ZEMy6TIU<\/a><\/p>\n<p>&mdash; Cryptonews.com (@cryptonews) <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/cryptonews\/status\/1843376173784678558?ref_src=twsrc%5Etfw\" target=\"_blank\">October 7, 2024<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>According to **United Nations** reports, Telegram facilitates an astounding **$36.5 billion annually** in illicit activities, including scams, laundering, and data sales, almost always utilizing **USDT**. Criminal factions on the platform even promote advanced **deepfake tools** and malware.<\/p>\n<p>The UN has previously stated that Tether (USDT) is the stablecoin of choice among criminal networks in Asia. In a clear indictment of the platform, the **U.S. Treasury** recently identified the **Huione Group** as a significant **money laundering** concern involved in **$98 billion** of cryptocurrency transactions, some of which are linked to North Korea\u2019s notorious **Lazarus Group**.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f3e6.png\" alt=\"\ud83c\udfe6\" class=\"wp-smiley\" style=\"height: 1em;max-height: 1em\" \/> The U.S. Treasury\u2019s financial crimes arm has proposed removing the Huione Group from the US financial system for its alleged involvement in Lazarus-linked crypto laundering.<a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/FinCEN?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#FinCEN<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/HuioneGroup?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#HuioneGroup<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/hashtag\/CryptoMoneyLaundering?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\">#CryptoMoneyLaundering<\/a><a rel=\"nofollow\" href=\"https:\/\/t.co\/SLbXFepAwH\">https:\/\/t.co\/SLbXFepAwH<\/a><\/p>\n<p>&mdash; Cryptonews.com (@cryptonews) <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/cryptonews\/status\/1918192104318353697?ref_src=twsrc%5Etfw\" target=\"_blank\">May 2, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>As of now, Elliptic has identified more than **30 similar Telegram-based markets** promoting illicit activities. In response to these findings, Telegram has begun implementing changes, such as removing features including \u201c**People Nearby**\u201d and updating user FAQs, but experts argue that substantial interventions are necessary to prevent the application from continuing to facilitate global cryptocurrency crime.<\/p>\n<p>The post Telegram Torches Chinese Crypto Laundering Hubs in $8.4B USDT Crackdown appeared first on Cryptonews.<\/p>\n<p><a href=\"https:\/\/teknomers.com\/en\/category\/finance\/\">Finance and Crypto News-10<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Takeaways: Telegram removed multiple channels linked to Xinbi and Huione Guarantee. The takedown targeted groups operating in Chinese and Southeast Asian markets, where fraud networks have used stablecoins and encrypted messaging to coordinate scams. The operation showed Telegram\u2019s growing role in cybercrime investigations. Telegram recently made headlines by removing thousands of channels associated with [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":108984,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23832],"tags":[],"class_list":["post-132411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finance"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/posts\/132411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/comments?post=132411"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/posts\/132411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/media\/108984"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/media?parent=132411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/categories?post=132411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/en\/wp-json\/wp\/v2\/tags?post=132411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}