{"investigation":{"slug":"thai-southeast-asia-520m-cross-chain-crypto-scam-network","entity_name":"Thai-Southeast Asia $520M Cross-Chain Crypto Scam Network","trust_score":0,"severity_base":null,"score_modifier":-8,"confidence":0.88,"status":"published","content_type":"investigation","summary":"In mid-to-late June 2026, blockchain analytics firm Elliptic disclosed a data-sharing collaboration with Thailand's Royal Thai Police High-Tech Crime Division that flagged more than 500 suspicious cryptoasset wallets tied to theft, money laundering, and investment/romance ('pig-butchering') scams. The wallets received an estimated $520 million in incoming cross-chain transactions across 32 blockchains, against confirmed individual victim losses of nearly $14 million; roughly $234 million of the flagged activity was already known to Elliptic, including one North Korea-linked theft targeting Thai nationals. Some secondary details asserted in earlier drafts of this page — a named report author and a precise original publication date — could not be independently verified and have been removed or qualified below.","sections":[{"content":"Elliptic's Asia-Pacific Intelligence team stated it worked with Thailand's Royal Thai Police High-Tech Crime Division on a data-sharing initiative that analyzed more than 500 reported suspicious cryptoasset wallets linked to hundreds of police cases. Elliptic described the underlying activity as encompassing cryptoasset theft, professional money laundering, and investment and romance ('pig-butchering') scams, with some addresses connected to scam hubs in Myanmar and Cambodia. Elliptic's own newsroom post frames this as a disclosure of its analytical work and collaboration with Thai law enforcement, not a court filing or a criminal indictment; no named individuals or companies have been publicly charged as a direct result of this specific disclosure.","heading":"Overview of the data-sharing disclosure","sources":[{"url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/","name":"Elliptic newsroom: 'Elliptic works with Royal Thai Police to detect hundreds of millions of dollars in cryptoasset crime'","type":"official","credibility":1},{"url":"https://www.aicoin.com/en/news-flash/2945471","name":"AICoin news flash summarizing the Elliptic/Thai police findings","type":"news_article","credibility":3}],"severity":"high"},{"content":"According to Elliptic, the flagged wallets received approximately $520 million (reported by Elliptic as 17.8 billion Thai baht) in incoming cryptoasset transactions. This figure represents gross incoming transaction value across the linked wallets, not confirmed victim losses. Elliptic separately reported that individual victims in the underlying cases lost almost $14 million, mostly between January 2022 and October 2025, with some pig-butchering scam sites alone causing losses exceeding $10 million. The flagged funds were spread across 32 blockchains and more than 400 different asset types, most commonly USDT, followed by ETH and BTC. Elliptic said approximately $234 million of the total activity was already known to it and labeled in its existing blockchain-analytics solutions prior to the Thai police collaboration, including one theft it links to North Korea that targeted Thai nationals. These figures come from Elliptic's own characterization of its data and have not been independently audited by a third party in sources reviewed for this page.","heading":"Scale of flagged activity: $520M, 500+ wallets, 32 blockchains","sources":[{"url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/","name":"Elliptic newsroom: 'Elliptic works with Royal Thai Police to detect hundreds of millions of dollars in cryptoasset crime'","type":"official","credibility":1},{"url":"https://whale-alert.io/stories/e3c50197025d81/Elliptic-and-thai-police-uncover-520-million-suspicious-crypto-network-tied-to-theft-scams-and-money-laundering","name":"Whale Alert: 'Elliptic and Thai police uncover $520 million suspicious crypto network tied to theft, scams and money laundering'","type":"news_article","credibility":3},{"url":"https://www.aicoin.com/en/news-flash/2945471","name":"AICoin news flash summarizing the Elliptic/Thai police findings","type":"news_article","credibility":3}],"severity":"high"},{"content":"A prior version of this page attributed the underlying report to a named individual author and dated its original publication to June 18, 2026. Fresh research for this revision could not confirm either claim: Elliptic's own newsroom page carries no byline, and a direct search for the previously cited author's name alongside this report returned no matching result. On publication dating, sources diverge and cannot be fully reconciled from information reviewed. The earliest independently verifiable report found is an AICoin news flash explicitly timestamped \"published June 20, 2026, at 07:10,\" which already contains the core figures ($520 million, 500+ wallets, 32 blockchains, nearly $14 million in losses). A Whale Alert republication is marked as \"first published 2026-06-24T15:37:17Z.\" Elliptic's own newsroom page, fetched directly, displays a later date (\"Jul 30, 2026\") near the top of the article; whether this reflects a later update, a republication, or a dating artifact on Elliptic's site could not be determined from available evidence. Because of this unresolved discrepancy, this page treats June 20, 2026 as the earliest confirmed public reporting date and does not assert an original Elliptic publication date with day-level precision, nor does it name a report author.","heading":"Report authorship and publication date: unverifiable claims corrected","sources":[{"url":"https://www.aicoin.com/en/news-flash/2945471","name":"AICoin news flash (timestamped June 20, 2026)","type":"news_article","credibility":3},{"url":"https://whale-alert.io/stories/e3c50197025d81/Elliptic-and-thai-police-uncover-520-million-suspicious-crypto-network-tied-to-theft-scams-and-money-laundering","name":"Whale Alert republished story (timestamped June 24, 2026)","type":"news_article","credibility":3},{"url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/","name":"Elliptic newsroom page (date displayed as Jul 30, 2026)","type":"official","credibility":1}],"severity":"low"},{"content":"Elliptic's Thai disclosure sits within a wider pattern of U.S. and regional enforcement activity against Southeast Asian scam infrastructure, though these are separate actions and should not be conflated with the specific $520 million Thai figure. On May 1, 2025, the U.S. Treasury's Financial Crimes Enforcement Network (FinCEN) issued a finding and proposed rule under Section 311 of the USA PATRIOT Act naming Cambodia-based Huione Group a primary money laundering concern, alleging it laundered \"at least $4 billion worth of illicit proceeds between August 2021 and January 2025.\" FinCEN finalized that rule on October 15, 2025, barring U.S. financial institutions from maintaining correspondent accounts for Huione Group, effective November 17, 2025. Separately, on May 5, 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned the Karen National Army (KNA), a militia group based in Myanmar's Karen State, along with its leader Saw Chit Thu, citing their roles in facilitating cyber scam operations, human trafficking, and cross-border smuggling along the Thailand-Myanmar border. These actions target different named entities (Huione Group; KNA) than the still-largely-unnamed wallet network described in Elliptic's Thai police disclosure, and none of the sources reviewed directly ties the $520 million figure to either Huione Group or KNA by name.","heading":"Broader Southeast Asian scam ecosystem: related but distinct enforcement actions","sources":[{"url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","name":"FinCEN: 'FinCEN Finds Cambodia-Based Huione Group to be a Primary Money Laundering Concern'","type":"regulatory","credibility":1},{"url":"https://www.fincen.gov/news/news-releases/fincen-issues-final-rule-severing-huione-group-us-financial-system","name":"FinCEN: 'FinCEN Issues Final Rule Severing Huione Group from the U.S. Financial System'","type":"regulatory","credibility":1},{"url":"https://home.treasury.gov/news/press-releases/sb0129","name":"U.S. Treasury press release on OFAC sanctions against the Karen National Army","type":"regulatory","credibility":1}],"severity":"high"},{"content":"Elliptic's Thai disclosure states that part of the $234 million already known to it included one theft linked to North Korea that targeted Thai nationals, but it does not specify which incident this refers to in the sources reviewed. A separate, unrelated Elliptic report attributed the April 2026 exploit of the Drift Protocol (a Solana-based platform), involving roughly $286 million in stolen assets, to North Korea-linked actors, but Elliptic's own language on that attribution is hedged — describing it as a \"suspected DPRK-linked attack\" rather than a confirmed attribution. No source reviewed for this page links the Drift Protocol exploit to the Thai wallet network or to Thai nationals specifically; a prior version of this page appears to have stated this connection more firmly than Elliptic's own sourcing supports. Readers should treat any claimed link between the Thai $520 million figure and the Drift Protocol exploit as unconfirmed.","heading":"North Korea link and the 'Drift Protocol' attribution caveat","sources":[{"url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/","name":"Elliptic newsroom: 'Elliptic works with Royal Thai Police to detect hundreds of millions of dollars in cryptoasset crime'","type":"official","credibility":1},{"url":"https://www.elliptic.co/insights/drift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attack/","name":"Elliptic: 'Drift Protocol exploited for $286 million in suspected DPRK-linked attack'","type":"research","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2025-05-01","event":"FinCEN issues a finding and proposed rule naming Cambodia-based Huione Group a primary money laundering concern, alleging roughly $4 billion laundered between August 2021 and January 2025.","source":"FinCEN press release","source_url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","date_evidence":"FinCEN press release dated \"May 01, 2025\"; \"in aggregate, Huione Group laundered at least $4 billion worth of illicit proceeds between August 2021 and January 2025.\""},{"date":"2025-05-05","event":"OFAC sanctions the Karen National Army and leader Saw Chit Thu over alleged facilitation of cyber scam compounds on the Thailand-Myanmar border.","source":"U.S. Treasury press release","source_url":"https://home.treasury.gov/news/press-releases/sb0129","date_evidence":"Treasury press release dated \"May 5, 2025,\" announcing OFAC sanctioned \"the Karen National Army (KNA), a militia group in Burma,\" and its leader Saw Chit Thu."},{"date":"2025-10","event":"FinCEN issues a final rule under Section 311 severing Huione Group from the U.S. financial system, effective November 17, 2025.","source":"FinCEN press release","source_url":"https://www.fincen.gov/news/news-releases/fincen-issues-final-rule-severing-huione-group-us-financial-system","date_original":"2025-10-15"},{"date":"2026-06-20","event":"Earliest independently verifiable public report of the Elliptic/Royal Thai Police wallet-analysis findings appears.","source":"AICoin news flash","source_url":"https://www.aicoin.com/en/news-flash/2945471","date_evidence":"AICoin news flash recorded as \"published June 20, 2026, at 07:10,\" already containing the $520 million, 500+ wallet, and 32-blockchain figures."},{"date":"2026-06","event":"Whale Alert republishes the Elliptic/Thai police findings, reaching wider crypto-news distribution.","source":"Whale Alert","source_url":"https://whale-alert.io/stories/e3c50197025d81/Elliptic-and-thai-police-uncover-520-million-suspicious-crypto-network-tied-to-theft-scams-and-money-laundering","date_evidence":"Whale Alert story recorded as \"first published 2026-06-24T15:37:17Z.\"","date_original":"2026-06-24"},{"date":"2026-07","event":"Elliptic's own newsroom page presenting the findings displays a later date (\"Jul 30, 2026\"); the reason for this later date relative to the June reporting could not be confirmed.","source":"Elliptic newsroom","source_url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/"}],"sources_used":[{"url":"https://www.elliptic.co/newsroom/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime/","name":"Elliptic newsroom: 'Elliptic works with Royal Thai Police to detect hundreds of millions of dollars in cryptoasset crime'","type":"official","credibility":1},{"url":"https://whale-alert.io/stories/e3c50197025d81/Elliptic-and-thai-police-uncover-520-million-suspicious-crypto-network-tied-to-theft-scams-and-money-laundering","name":"Whale Alert: 'Elliptic and Thai police uncover $520 million suspicious crypto network tied to theft, scams and money laundering'","type":"news_article","credibility":3},{"url":"https://www.aicoin.com/en/news-flash/2945471","name":"AICoin news flash summarizing the Elliptic/Thai police findings","type":"news_article","credibility":3},{"url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","name":"FinCEN: 'FinCEN Finds Cambodia-Based Huione Group to be a Primary Money Laundering Concern'","type":"regulatory","credibility":1},{"url":"https://www.fincen.gov/news/news-releases/fincen-issues-final-rule-severing-huione-group-us-financial-system","name":"FinCEN: 'FinCEN Issues Final Rule Severing Huione Group from the U.S. Financial System'","type":"regulatory","credibility":1},{"url":"https://home.treasury.gov/news/press-releases/sb0129","name":"U.S. Treasury press release on OFAC sanctions against the Karen National Army","type":"regulatory","credibility":1},{"url":"https://www.elliptic.co/insights/drift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attack/","name":"Elliptic: 'Drift Protocol exploited for $286 million in suspected DPRK-linked attack'","type":"research","credibility":2}],"source_tags":[],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-06-26T17:16:56.16116+00:00","updated_at":"2026-11-02T18:02:26.222+00:00"},"source_quality":{"total":7,"tier1":3,"tier2":2,"tier3":0,"unrated":2},"follower_count":null,"content_updated_at":"2026-11-02T18:02:26.873Z","last_fact_checked_at":"2026-11-02T18:02:26.513Z","fact_check_next_allowed_at":"2026-11-09T18:02:26.513Z","update_next_allowed_at":"2026-11-09T17:08:42.660Z"}