{"investigation":{"slug":"sanduo-group","entity_name":"Sanduo Group","trust_score":2,"severity_base":null,"score_modifier":0,"confidence":0.88,"status":"draft","content_type":"investigation","summary":"Sanduo Group is an alleged cryptocurrency investment fraud organization named in federal criminal complaints unsealed in the Southern District of California in April 2026. Prosecutors allege it operated as one of three linked scam networks running 'pig-butchering' schemes that targeted victims in the United States and abroad, causing millions of dollars in losses. Four individuals — three Indonesian nationals and one Burmese national — have been charged in connection with the Sanduo Group and related entities; the charges are allegations and no convictions have been entered as of September 2026.","sections":[{"content":"Sanduo Group is identified in U.S. Department of Justice (DOJ) and IRS Criminal Investigation press releases as one of three alleged scam organizations — alongside Ko Thet Company and Giant Company — that operated cryptocurrency investment fraud centers targeting victims internationally. According to DOJ charging documents filed in April 2026, defendants are alleged to have managed, recruited for, and worked within these entities to execute large-scale 'pig-butchering' schemes. Sanduo Group has no known legitimate corporate registration or public-facing business identity; it is described in charging documents solely as a criminal enterprise.","heading":"Overview and Alleged Criminal Activity","sources":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1},{"url":"https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego","name":"IRS Criminal Investigation: Coordinated Takedown of Scam Centers","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"Federal prosecutors allege that Sanduo Group and its co-defendant entities carried out 'pig-butchering' cryptocurrency fraud — a scheme in which operators cultivate a victim's trust over weeks or months through fabricated friendships or romantic relationships established via email, social media, dating apps, text messages, and phone calls. Alleged operators used fake identities supported by model photographs to pose as legitimate investment advisors. Once trust was established, victims were directed to transfer cryptocurrency into fraudulent investment platforms, including ones reportedly operating under the names 'CoinswiftTrading' and 'SwiftLedger.' Victims were then shown fabricated profits and encouraged to invest additional funds, often taking out loans. Upon attempting to withdraw, victims lost access to their assets entirely. These allegations are drawn from charging documents; no court has adjudicated these claims.","heading":"Pig-Butchering Scheme Methodology","sources":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1},{"url":"https://securityboulevard.com/2026/04/fbi-and-international-agencies-shut-down-scam-centers-arrest-276-people/","name":"Security Boulevard: FBI and International Agencies Shut Down Scam Centers","type":"news_article","credibility":2},{"url":"https://dailyhodl.com/2026/05/08/international-crackdown-takes-down-nine-crypto-investment-scam-centers-leads-to-arrest-of-276-individuals/","name":"Daily Hodl: International Crackdown Takes Down Nine Crypto Investment Scam Centers","type":"news_article","credibility":2}],"severity":"critical"},{"content":"In April 2026, the U.S. Attorney's Office for the Southern District of California unsealed two criminal complaints (case numbers 26MJ2335-AHG and 26MJ2437-AHG) charging four individuals in connection with Sanduo Group and Giant Company operations. All charges are allegations; no convictions have been entered. The defendants named are: Wiliang Awang (age 23, Indonesian national; aliases: Wiliang Ng, Wiliang Huang, Huang Wiliang, Lincon, Lincoln), apprehended by the Royal Thai Police; Andreas Chandra (age 29, Indonesian national; alias: Andreas Chandra Kho, Jay), apprehended by Dubai Police; Lisa Mariam (age 29, Indonesian national; aliases: Melissa Chloe, Cipul, Naomi May Lingston, Vanessa, Bella Theresia), apprehended by Dubai Police; and a fourth unnamed fugitive co-defendant (age 22, Indonesian national). Additionally, in March 2026, a grand jury in the same district returned an indictment against Thet Min Nyi (Burmese national, alias 'Pixy') and a fugitive co-defendant on wire fraud conspiracy and money laundering conspiracy charges in connection with Ko Thet Company, a related entity. Each charge of wire fraud conspiracy and money laundering conspiracy carries a maximum potential sentence of up to 20 years imprisonment and fines up to $250,000 or twice the financial gain or loss.","heading":"Federal Charges and Named Defendants","sources":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1},{"url":"https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego","name":"IRS Criminal Investigation: Coordinated Takedown of Scam Centers","type":"regulatory","credibility":1},{"url":"https://hoodline.com/2026/04/san-diego-feds-pounce-after-276-nabbed-in-dubai-crypto-scam-bust/","name":"Hoodline: San Diego Feds Pounce After 276 Nabbed in Dubai Crypto Scam Bust","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Federal charging documents state that Sanduo Group's alleged schemes caused millions of dollars in losses to victims in the United States and abroad, though the DOJ press release does not isolate a figure attributable specifically to Sanduo Group. The broader international operation — spanning Sanduo Group, Ko Thet Company, Giant Company, and other scam centers — is linked by prosecutors and investigators to $701 million in cryptocurrency restrained as alleged money-laundering proceeds. The FBI's Operation Level Up initiative, launched in January 2024, reportedly saved nearly 9,000 victims approximately $562 million by identifying and disrupting active pig-butchering schemes before funds were fully transferred. FBI data cited in reporting indicates that cryptocurrency fraud losses across all pig-butchering operations totaled $11.3 billion in 2025.","heading":"Financial Losses and Victim Impact","sources":[{"url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html","name":"The Hacker News: Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M","type":"news_article","credibility":2},{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1}],"severity":"high"},{"content":"Law enforcement reporting and multiple news accounts indicate that the scam center network — of which Sanduo Group is alleged to be part — relied on human trafficking to staff its operations. Foreign nationals were reportedly recruited with false promises of legitimate, high-paying employment and then coerced into operating fraud scripts under conditions described as slave-like, including physical punishment and threats of violence. This component was highlighted in both DOJ statements and international reporting. These details concern the broader network of which Sanduo Group is alleged to be a part; the extent to which Sanduo Group specifically, as distinct from Ko Thet Company or Giant Company, was involved in labor trafficking is not broken out separately in available public charging documents.","heading":"Human Trafficking and Labor Coercion","sources":[{"url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html","name":"The Hacker News: Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M","type":"news_article","credibility":2},{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"The operation targeting Sanduo Group and related entities was a coordinated international effort involving the FBI San Diego field office, the Dubai Police Department under the UAE Ministry of Interior, the Royal Thai Police, and the Chinese Ministry of Public Security. Dubai Police arrested Andreas Chandra and Lisa Mariam; the Royal Thai Police apprehended Wiliang Awang. The broader sweep resulted in at least 276 arrests and the dismantling of nine alleged scam centers, including the Shunda compound in Myanmar that was seized in November 2025. Charges against Sanduo Group defendants were unsealed in San Diego on or around April 29, 2026. The operation was anchored by the FBI San Diego Homeland Security Task Force, which had been investigating since at least 2025.","heading":"International Law Enforcement Action","sources":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1},{"url":"https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego","name":"IRS Criminal Investigation: Coordinated Takedown of Scam Centers","type":"regulatory","credibility":1},{"url":"https://dailyhodl.com/2026/05/08/international-crackdown-takes-down-nine-crypto-investment-scam-centers-leads-to-arrest-of-276-individuals/","name":"Daily Hodl: International Crackdown Takes Down Nine Crypto Investment Scam Centers","type":"news_article","credibility":2}],"severity":"high"},{"content":"As of the most recent available reporting (September 2026), the criminal complaints against Wiliang Awang, Andreas Chandra, Lisa Mariam, and their named co-defendant remain at the charging stage. No trial dates, plea agreements, or conviction records have been identified in public sources. At least two co-defendants in the broader set of cases remain fugitives. The charges represent allegations only; all defendants are presumed innocent unless and until proven guilty in a court of law. AVOID.NET will update this page if convictions, plea agreements, dismissals, or other material developments are reported.","heading":"Case Status as of September 2026","sources":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","credibility":1}],"severity":"medium"}],"timeline":[{"date":"2024-01-01","event":"FBI Operation Level Up launched, targeting active pig-butchering cryptocurrency fraud operations including networks later linked to Sanduo Group.","source":"The Hacker News","source_url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html"},{"date":"2025-11-01","event":"The Shunda compound in Myanmar — part of the broader scam center network — seized by authorities.","source":"The Hacker News","source_url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html"},{"date":"2026-03-01","event":"Grand jury in the Southern District of California returns indictment against Thet Min Nyi (alleged Ko Thet Company manager) and a fugitive co-defendant on wire fraud conspiracy and money laundering charges.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters"},{"date":"2026-04-01","event":"Two criminal complaints filed in the Southern District of California (26MJ2335-AHG and 26MJ2437-AHG) charging Wiliang Awang, Andreas Chandra, Lisa Mariam, and a fugitive co-defendant with wire fraud conspiracy in connection with Sanduo Group and Giant Company.","source":"IRS Criminal Investigation","source_url":"https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego"},{"date":"2026-04-29","event":"San Diego federal charges against Sanduo Group defendants unsealed following coordinated international arrests; Dubai Police arrest Chandra and Mariam; Royal Thai Police arrest Awang.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters"},{"date":"2026-04-29","event":"International coordinated enforcement action publicly announced: at least 276 arrests, nine scam centers dismantled, $701 million in cryptocurrency restrained.","source":"The Hacker News","source_url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html"}],"sources_used":[{"url":"https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","name":"DOJ Office of Public Affairs: Coordinated Takedown of Scam Centers Leads to at Least 276 Arrests","type":"regulatory","archive_url":"http://web.archive.org/web/20260921043708/https://www.justice.gov/opa/pr/coordinated-takedown-scam-centers-leads-least-276-arrests-alleged-managers-and-recruiters","credibility":1,"archive_timestamp":"2026-09-21T04:37:08+00:00"},{"url":"https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego","name":"IRS Criminal Investigation: Coordinated Takedown of Scam Centers","type":"regulatory","archive_url":"http://web.archive.org/web/20260921105007/https://www.irs.gov/compliance/criminal-investigation/coordinated-takedown-of-scam-centers-leads-to-at-least-276-arrests-alleged-managers-and-recruiters-charged-in-san-diego","credibility":1,"archive_timestamp":"2026-09-21T10:50:07+00:00"},{"url":"https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html","name":"The Hacker News: Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M","type":"news_article","archive_url":"http://web.archive.org/web/20260921043647/https://thehackernews.com/2026/05/global-crackdown-arrests-276-shuts-9.html","credibility":2,"archive_timestamp":"2026-09-21T04:36:47+00:00"},{"url":"https://securityboulevard.com/2026/04/fbi-and-international-agencies-shut-down-scam-centers-arrest-276-people/","name":"Security Boulevard: FBI and International Agencies Shut Down Scam Centers, Arrest 276 People","type":"news_article","archive_url":"http://web.archive.org/web/20260501123924/https://securityboulevard.com/2026/04/fbi-and-international-agencies-shut-down-scam-centers-arrest-276-people/","credibility":2,"archive_timestamp":"2026-05-01T12:39:24+00:00"},{"url":"https://dailyhodl.com/2026/05/08/international-crackdown-takes-down-nine-crypto-investment-scam-centers-leads-to-arrest-of-276-individuals/","name":"Daily Hodl: International Crackdown Takes Down Nine Crypto Investment Scam Centers","type":"news_article","archive_url":"http://web.archive.org/web/20260509060412/https://dailyhodl.com/2026/05/08/international-crackdown-takes-down-nine-crypto-investment-scam-centers-leads-to-arrest-of-276-individuals/","credibility":2,"archive_timestamp":"2026-05-09T06:04:12+00:00"},{"url":"https://hoodline.com/2026/04/san-diego-feds-pounce-after-276-nabbed-in-dubai-crypto-scam-bust/","name":"Hoodline: San Diego Feds Pounce After 276 Nabbed in Dubai Crypto Scam Bust","type":"news_article","archive_url":"http://web.archive.org/web/20260501024809/https://hoodline.com/2026/04/san-diego-feds-pounce-after-276-nabbed-in-dubai-crypto-scam-bust/","credibility":2,"archive_timestamp":"2026-05-01T02:48:09+00:00"},{"url":"https://www.fox9.com/news/global-crypto-scam-crackdown-270-arrests-dubai-fbi","name":"Fox 9: Crypto scam networks targeting Americans dismantled in global sting, 270+ arrested","type":"news_article","archive_url":"http://web.archive.org/web/20260501032732/https://www.fox9.com/news/global-crypto-scam-crackdown-270-arrests-dubai-fbi","credibility":2,"archive_timestamp":"2026-05-01T03:27:32+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-09-28T12:11:00.416991+00:00","updated_at":"2026-09-28T12:53:14.926865+00:00"}}