{"investigation":{"slug":"operation-token-mirrors-doj-crypto-market-manipulation-march-2026","entity_name":"Operation Token Mirrors — DOJ Crypto Market Manipulation (March 2026)","trust_score":3,"severity_base":null,"score_modifier":0,"confidence":0.85,"status":"draft","content_type":"investigation","summary":"Operation Token Mirrors is a multi-year FBI and Department of Justice undercover investigation into cryptocurrency 'market-manipulation-as-a-service' firms, built around an FBI-created token called NexFundAI. It produced an initial wave of charges in October 2024 against the market makers Gotbit, ZM Quant, CLS Global and MyTrade, and a second wave of indictments unsealed on March 30, 2026 against ten individuals tied to Gotbit, Vortex, Antier (Antier Solutions), and Contrarian. Defendants are alleged to have run wash-trading schemes that generated fake trading volume across more than 60 cryptocurrencies to deceive retail investors; several defendants have pleaded guilty and tens of millions of dollars in crypto assets have been seized or forfeited.","sections":[{"content":"According to the U.S. Securities and Exchange Commission, on October 9, 2024 federal authorities unsealed criminal and civil charges against several self-described crypto 'market makers' for manipulating the market of a crypto asset that was 'created at the direction of the Federal Bureau of Investigation as part of its parallel investigation into potential market manipulation in the crypto asset industry.' That FBI-created asset was an Ethereum-based token called NexFundAI, built with the help of cooperating witnesses to bait firms offering wash-trading and pump-and-dump services. The U.S. Attorney's Office for the District of Massachusetts charged 18 individuals and entities in connection with the sting, alleging billions of dollars in fraudulent wash-trading volume across more than 60 cryptocurrencies. The FBI/DOJ investigation was subsequently identified in press coverage as 'Operation Token Mirrors.'","heading":"Origins of Operation Token Mirrors: The NexFundAI Sting (October 2024)","sources":[{"url":"https://www.sec.gov/newsroom/press-releases/2024-166","name":"SEC Charges Three So-Called Market Makers and Nine Individuals in Crackdown on Manipulation of Crypto Assets","type":"regulatory","credibility":1},{"url":"https://decrypt.co/285503/feds-charge-gotbit-others-market-manipulation","name":"Feds Charge Meme Coin 'Market Maker' Gotbit, Three Others With Crypto Market Manipulation","type":"news_article","credibility":2},{"url":"https://www.bloomberg.com/news/articles/2024-10-09/crypto-firms-charged-with-market-manipulation-in-us-sting","name":"Crypto Firms Charged With Market Manipulation in US Sting","type":"news_article","credibility":1},{"url":"https://www.justice.gov/usao-ma/pr/eighteen-individuals-and-entities-charged-international-operation-targeting-widespread","name":"Eighteen Individuals and Entities Charged in International Operation Targeting Widespread Fraud and Manipulation in the Cryptocurrency Markets","type":"official","credibility":1},{"url":"https://www.trmlabs.com/resources/blog/fbi-creates-token-project-in-trojan-horse-crypto-operation-that-seizes-25-million","name":"FBI Creates Token Project In Trojan Horse Crypto Operation That Seizes $25 million","type":"research","credibility":2}],"severity":"critical"},{"content":"The SEC's October 9, 2024 press release named ZM Quant Investment Ltd. (and employees Baijun Ou and Ruiqi Lau), Gotbit Consulting LLC (and employee Fedor Kedrov), and CLS Global FZC LLC (and employee Andrey Zhorzhes), alongside individuals including Russell Armand, Maxwell Hernandez, Manpreet Singh Kohli, Nam Tran and Vy Pham, in connection with market manipulation of crypto assets offered and sold as securities. Decrypt reported that Gotbit's CEO, Aleksei Andriunin (26, of Russia and Portugal), and two other Gotbit executives were separately charged criminally, with Gotbit allegedly offering 'on-demand market manipulation' generating millions of dollars in fake daily trading volume; Andriunin was reported arrested in Portugal pending extradition and faced an additional charge of conspiracy to commit money laundering. Then-Acting U.S. Attorney Joshua Levy was quoted describing the cases as pairing 'an innovative technology—cryptocurrency' with 'a century-old scheme—the pump and dump.' Decrypt reported that over $25 million in crypto was seized in connection with the October 2024 charges.","heading":"October 2024 Charges: Gotbit, ZM Quant, CLS Global, MyTrade","sources":[{"url":"https://www.sec.gov/newsroom/press-releases/2024-166","name":"SEC Charges Three So-Called Market Makers and Nine Individuals in Crackdown on Manipulation of Crypto Assets","type":"regulatory","credibility":1},{"url":"https://decrypt.co/285503/feds-charge-gotbit-others-market-manipulation","name":"Feds Charge Meme Coin 'Market Maker' Gotbit, Three Others With Crypto Market Manipulation","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Per a March 2026 blog post by blockchain analytics firm TRM Labs, 'On March 30, 2026, the US Attorney's Office for the Northern District of California announced three indictments charging ten foreign nationals across four cryptocurrency firms' — Gotbit, Vortex, Antier (Antier Solutions Private Limited), and Contrarian — as a continuation of Operation Token Mirrors. Named defendants reportedly include, from Gotbit: Antoine Tsao (Taiwanese national), Ian Sofronov (Russian national) and Nemanja Popov (Serbian national); from Vortex: Gleb Gora, Sergei Ryzhkov and Michael Vogel (Russian nationals); from Contrarian: Manu Singh, Kushagra Srivastava and Vasu Sharma (Indian nationals); and from Antier: Sabby Singh. According to the IRS Criminal Investigation division, the defendants face wire fraud and conspiracy to commit wire fraud charges under 18 U.S.C. §§ 1343 and 1349, carrying maximum penalties of up to 20 years' imprisonment and a $250,000 fine per violation, and the government alleges the defendants used trading bots to generate artificial volume and inflate token prices before selling into the resulting demand. The IRS release states more than $1 million in cryptocurrency was seized in this phase, and that three defendants (Gora, Singh and Sharma) were arrested in Singapore and extradited. Some secondary crypto-industry outlets (TronWeekly, Coindoo, CryptoBriefing, FinanceFeeds) have reported additional details — including a $23 million forfeiture attributed to Gotbit under a plea agreement and allegations that the underlying conduct dates back to 2018 — that could not be independently confirmed against a primary DOJ document and should be treated as lower-confidence pending verification against the original court filings or a justice.gov press release.","heading":"March 2026 Indictments: Gotbit, Vortex, Antier and Contrarian","sources":[{"url":"https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california","name":"Ten Fraudsters from Four Financial Services Firms Charged in Different Cryptocurrency Market Manipulation Schemes Out of Northern District of California","type":"research","credibility":2},{"url":"https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation","name":"Ten foreign nationals charged in an international operation targeting cryptocurrency market manipulation","type":"official","credibility":1},{"url":"https://cryptobriefing.com/doj-indicts-10-crypto-market-manipulation-bots/","name":"US DOJ indicts 10 for using bots to fake liquidity in crypto markets","type":"news_article","credibility":2},{"url":"https://financefeeds.com/doj-targets-gotbit-vortex-antier-contrarian-in-multi-year-wash-trading-probe/","name":"DOJ Targets Gotbit, Vortex, Antier, Contrarian in Multi-Year Wash Trading Probe","type":"news_article","credibility":2},{"url":"https://www.justice.gov/usao-ndca/pr/ten-foreign-nationals-charged-international-operation-targeting-cryptocurrency-market","name":"Ten Foreign Nationals Charged In An International Operation Targeting Cryptocurrency Market Manipulation","type":"official","credibility":1}],"severity":"critical"},{"content":"TRM Labs reported, quoting court records, that 'On June 3, 2025, the Court entered a Preliminary Order of Forfeiture against Antoine Tsao covering 1.2 million in USDT tokens that he held as a result of his scheme,' indicating Tsao pleaded guilty in connection with the Gotbit-related charges. The IRS Criminal Investigation release states that by the time of the March 2026 announcement, two defendants had already been sentenced by a U.S. District Court judge, though the release does not specify exact sentencing dates. These forfeiture and sentencing outcomes indicate at least partial adjudication of the case against Gotbit-affiliated defendants, while charges against Vortex-, Contrarian- and Antier-affiliated defendants — including those extradited from Singapore — remained pending as of the most recent reporting reviewed.","heading":"Guilty Pleas, Sentencing and Asset Forfeiture","sources":[{"url":"https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california","name":"Ten Fraudsters from Four Financial Services Firms Charged in Different Cryptocurrency Market Manipulation Schemes Out of Northern District of California","type":"research","credibility":2},{"url":"https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation","name":"Ten foreign nationals charged in an international operation targeting cryptocurrency market manipulation","type":"official","credibility":1}],"severity":"high"},{"content":"TRM Labs' research blog states that 'shortly after the DOJ announcement on October 9th, 2024, an unknown actor created an imposter token called \"NexFund\" that mimicked the FBI's undercover token, generating approximately $127,000 in profits within 24 hours through a pump-and-dump scheme.' This appears to be an opportunistic, unrelated scheme by a copycat exploiting news coverage of the FBI's operation, rather than part of Operation Token Mirrors itself. The identity of the actor behind the imposter token has not been established in available reporting, and this claim rests on a single source; it is included here for completeness but should be treated as low confidence and not attributed to any of the defendants named above.","heading":"Unverified Tangential Reports: Imposter 'NexFund' Token","sources":[{"url":"https://www.trmlabs.com/resources/blog/fbi-creates-token-project-in-trojan-horse-crypto-operation-that-seizes-25-million","name":"FBI Creates Token Project In Trojan Horse Crypto Operation That Seizes $25 million","type":"research","credibility":2}],"severity":"low"}],"timeline":[{"date":"2024-10-09","event":"SEC and DOJ unseal charges against ZM Quant, Gotbit, CLS Global, MyTrade and associated individuals for allegedly manipulating the market of an FBI-created crypto asset (NexFundAI); 18 individuals and entities charged in the District of Massachusetts.","source":"SEC press release 2024-166 / Decrypt","source_url":"https://www.sec.gov/newsroom/press-releases/2024-166","date_evidence":"Washington D.C., Oct. 9, 2024 —"},{"date":"2024-10","event":"The FBI/DOJ undercover investigation behind the NexFundAI sting becomes publicly known in press coverage as 'Operation Token Mirrors.'","source":"TRM Labs research blog","source_url":"https://www.trmlabs.com/resources/blog/fbi-creates-token-project-in-trojan-horse-crypto-operation-that-seizes-25-million"},{"date":"2025-06-03","event":"Court enters preliminary forfeiture order against Gotbit-affiliated defendant Antoine Tsao for 1.2 million USDT.","source":"TRM Labs research blog","source_url":"https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california","date_evidence":"On June 3, 2025, the Court entered a Preliminary Order of Forfeiture against Antoine Tsao covering 1.2 million in USDT tokens that he held as a result of his scheme."},{"date":"2026-03-30","event":"DOJ unseals three additional indictments under Operation Token Mirrors against ten individuals tied to Gotbit, Vortex, Antier and Contrarian, alleging wire fraud and wash-trading conspiracies; more than $1 million in crypto seized in this phase.","source":"TRM Labs research blog / IRS Criminal Investigation","source_url":"https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation","date_evidence":"On March 30, 2026, the US Attorney's Office for the Northern District of California announced three indictments charging ten foreign nationals across four cryptocurrency firms"},{"date":"2026","event":"At least two defendants have been sentenced by a U.S. District Court judge in connection with the case, per the IRS Criminal Investigation release accompanying the March 2026 announcement.","source":"IRS Criminal Investigation","source_url":"https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation"}],"sources_used":[{"url":"https://www.sec.gov/newsroom/press-releases/2024-166","name":"SEC Charges Three So-Called Market Makers and Nine Individuals in Crackdown on Manipulation of Crypto Assets Offered and Sold as Securities","type":"regulatory","archive_url":"http://web.archive.org/web/20260912205148/https://www.sec.gov/newsroom/press-releases/2024-166","credibility":1,"archive_timestamp":"2026-09-12T20:51:48+00:00"},{"url":"https://decrypt.co/285503/feds-charge-gotbit-others-market-manipulation","name":"Feds Charge Meme Coin 'Market Maker' Gotbit, Three Others With Crypto Market Manipulation","type":"news_article","archive_url":"http://web.archive.org/web/20260517203831/https://decrypt.co/285503/feds-charge-gotbit-others-market-manipulation","credibility":2,"archive_timestamp":"2026-05-17T20:38:31+00:00"},{"url":"https://www.bloomberg.com/news/articles/2024-10-09/crypto-firms-charged-with-market-manipulation-in-us-sting","name":"Crypto Firms Charged With Market Manipulation in US Sting","type":"news_article","archive_url":null,"credibility":1,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.justice.gov/usao-ma/pr/eighteen-individuals-and-entities-charged-international-operation-targeting-widespread","name":"Eighteen Individuals and Entities Charged in International Operation Targeting Widespread Fraud and Manipulation in the Cryptocurrency Markets","type":"official","archive_url":"http://web.archive.org/web/20260912205147/https://www.justice.gov/usao-ma/pr/eighteen-individuals-and-entities-charged-international-operation-targeting-widespread","credibility":1,"archive_timestamp":"2026-09-12T20:51:47+00:00"},{"url":"https://www.trmlabs.com/resources/blog/fbi-creates-token-project-in-trojan-horse-crypto-operation-that-seizes-25-million","name":"FBI Creates Token Project In Trojan Horse Crypto Operation That Seizes $25 million","type":"research","archive_url":"http://web.archive.org/web/20260509162434/https://www.trmlabs.com/resources/blog/fbi-creates-token-project-in-trojan-horse-crypto-operation-that-seizes-25-million","credibility":2,"archive_timestamp":"2026-05-09T16:24:34+00:00"},{"url":"https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california","name":"Ten Fraudsters from Four Financial Services Firms Charged in Different Cryptocurrency Market Manipulation Schemes Out of Northern District of California","type":"research","archive_url":"http://web.archive.org/web/20260422014726/https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california","credibility":2,"archive_timestamp":"2026-04-22T01:47:26+00:00"},{"url":"https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation","name":"Ten foreign nationals charged in an international operation targeting cryptocurrency market manipulation","type":"official","archive_url":"http://web.archive.org/web/20260419022356/https://www.irs.gov/compliance/criminal-investigation/ten-foreign-nationals-charged-in-an-international-operation-targeting-cryptocurrency-market-manipulation","credibility":1,"archive_timestamp":"2026-04-19T02:23:56+00:00"},{"url":"https://www.justice.gov/usao-ndca/pr/ten-foreign-nationals-charged-international-operation-targeting-cryptocurrency-market","name":"Ten Foreign Nationals Charged In An International Operation Targeting Cryptocurrency Market Manipulation","type":"official","archive_url":"http://web.archive.org/web/20260921051806/https://www.justice.gov/usao-ndca/pr/ten-foreign-nationals-charged-international-operation-targeting-cryptocurrency-market","credibility":1,"archive_timestamp":"2026-09-21T05:18:06+00:00"},{"url":"https://cryptobriefing.com/doj-indicts-10-crypto-market-manipulation-bots/","name":"US DOJ indicts 10 for using bots to fake liquidity in crypto markets","type":"news_article","archive_url":"http://web.archive.org/web/20260917175839/https://cryptobriefing.com/doj-indicts-10-crypto-market-manipulation-bots/","credibility":2,"archive_timestamp":"2026-09-17T17:58:39+00:00"},{"url":"https://financefeeds.com/doj-targets-gotbit-vortex-antier-contrarian-in-multi-year-wash-trading-probe/","name":"DOJ Targets Gotbit, Vortex, Antier, Contrarian in Multi-Year Wash Trading Probe","type":"news_article","archive_url":"http://web.archive.org/web/20260728041519/https://financefeeds.com/doj-targets-gotbit-vortex-antier-contrarian-in-multi-year-wash-trading-probe/","credibility":2,"archive_timestamp":"2026-07-28T04:15:19+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-09-23T23:11:26.789793+00:00","updated_at":"2026-09-24T01:01:13.5803+00:00"}}