{"investigation":{"slug":"thai-southeast-asia-520m-cross-chain-crypto-scam-network","entity_name":"Thai-Southeast Asia $520M Cross-Chain Crypto Scam Network","trust_score":0,"severity_base":null,"score_modifier":0,"confidence":0.88,"status":"draft","content_type":"investigation","summary":"A joint investigation by Elliptic's Asia-Pacific Intelligence team and the Royal Thai Police's High-Tech Crime Division (HTCD), published June 18–24, 2026, identified $520 million in incoming suspicious cryptocurrency transactions linked to a cross-chain criminal network operating across 32 blockchains and 400+ digital assets. The network encompasses pig-butchering romance investment fraud, credential theft, professional cross-chain money laundering, organized crime compounds in Cambodia and Myanmar, and at least one theft attributed to North Korean state-linked actors targeting Thai nationals. The investigation began with analysis of over 500 reported suspicious wallets associated with approximately $14 million in documented individual victim losses spanning January 2022 to October 2025.","sections":[{"content":"Elliptic's Asia-Pacific Intelligence team partnered with the Royal Thai Police's High-Tech Crime Division (HTCD) in a data-sharing initiative covering crypto theft, scams, and money laundering cases reported to Thai authorities. Analysis of over 500 suspicious wallets — linked to approximately $14 million in individual victim losses recorded between January 2022 and October 2025 — expanded through network tracing to reveal $520 million in incoming cryptoasset transactions to those wallets. Of the total traced, $234 million had already been labeled within Elliptic's existing blockchain analytics systems prior to the joint investigation. The report was authored by Dr. Arda Akartuna and published by Elliptic on June 18, 2026, with wider media coverage on June 24, 2026.","heading":"Overview of the Investigation","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","name":"Crypto Briefing: Elliptic and Thai Police Uncover $520M in Suspicious Crypto Transactions","type":"news_article","credibility":2},{"url":"https://dailyhodl.com/2026/06/24/520000000-in-suspicious-crypto-transactions-involving-32-blockchains-discovered-as-elliptic-exposes-massive-scam-network/","name":"The Daily Hodl: $520,000,000 in Suspicious Crypto Transactions Involving 32 Blockchains Discovered","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The criminal network identified in the investigation operated across 32 separate blockchains and utilized more than 400 unique digital assets. Ethereum, TRON, and Bitcoin were the most heavily used networks; USDT (Tether), ETH, and BTC were the most common assets held in the flagged wallets. The breadth of blockchain usage is consistent with documented professional cross-chain laundering techniques, which Elliptic's broader research has tracked at an industry level: as of July 2025, Elliptic estimated that $21.8 billion in cumulative criminal or high-risk crypto transactions had moved through DEXs, cross-chain bridges, and coin swap services since 2022 — a threefold increase from the $7 billion figure recorded in 2023.","heading":"Scale and Blockchain Footprint","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://www.elliptic.co/media-center/cross-chain-crime-surges-past-21-billion-elliptic-report-reveals","name":"Elliptic: Cross-Chain Crime Surges Past $21 Billion","type":"research","credibility":2},{"url":"https://cointelegraph.com/news/crosschain-swaps-move-21b-illicit-funds-up-200-two-years-elliptic","name":"CoinTelegraph: Crosschain Swaps Move $21B in Illicit Funds, Up 200% in Two Years","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Approximately $200 million of the $520 million in traced transactions was linked to suspected investment fraud, romance scams, and so-called 'pig-butchering' schemes. In pig-butchering fraud, perpetrators build fictitious romantic or social relationships with victims over weeks or months before directing them to place funds in fraudulent investment platforms, typically presenting as cryptocurrency trading portals. At least one pig-butchering site linked to the network was associated with more than $10 million in victim losses. These operations are consistent with the industrialized fraud infrastructure documented across Southeast Asia, where criminal syndicates operate large-scale compounds staffed — in many cases — by trafficked workers forced to run scripts against victims globally. Chainalysis estimated that crypto scams of this type generated more than $17 billion in losses worldwide in 2025, with pig-butchering as the leading contributor.","heading":"Criminal Activities: Pig-Butchering and Investment Fraud","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/crypto-scams-2026/","name":"Chainalysis: 2026 Crypto Crime Report — Scams","type":"research","credibility":2},{"url":"https://www.elliptic.co/blog/elliptics-typologies-report-detecting-the-money-flows-behind-the-global-pig-butchering-ecosystem","name":"Elliptic: Typologies Report — Pig Butchering Ecosystem","type":"research","credibility":2}],"severity":"critical"},{"content":"A second major category of criminal activity identified in the investigation was cryptoasset theft through wallet hacks and credential theft targeting exchange accounts. Perpetrators allegedly used unauthorized access to victims' exchange credentials to drain holdings directly. At least one such theft within the network was attributed to North Korean state-linked actors, who allegedly targeted Thai nationals as part of a significant theft operation. North Korea's Lazarus Group and affiliated clusters have been extensively documented as using social engineering, credential harvesting, and software supply chain attacks to steal cryptocurrency; Elliptic's cross-chain crime report estimated North Korea accounted for approximately 12% — roughly $2.5 billion — of the $21 billion in cross-chain criminal activity tracked through May 2025.","heading":"Criminal Activities: Credential Theft and Wallet Hacks","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","name":"Crypto Briefing: Elliptic and Thai Police Uncover $520M in Suspicious Crypto Transactions","type":"news_article","credibility":2},{"url":"https://www.elliptic.co/media-center/cross-chain-crime-surges-past-21-billion-elliptic-report-reveals","name":"Elliptic: Cross-Chain Crime Surges Past $21 Billion","type":"research","credibility":2},{"url":"https://www.sanctions.io/blog/the-lazarus-group-and-dprk-crypto-theft-in-2026","name":"Sanctions.io: The Lazarus Group and DPRK Crypto Theft in 2026","type":"research","credibility":2}],"severity":"critical"},{"content":"Addresses in the network were linked to organized crime compounds in Cambodia and Myanmar. These compounds are a well-documented feature of Southeast Asian cyber fraud operations: trafficked workers — lured by fraudulent job advertisements — are held in compound facilities and forced to operate romance and investment scams under threat of violence. Key compound locations identified in the broader enforcement landscape include KK Park, Huanya, and Tai Chang in Myanmar, as well as former casino infrastructure in Sihanoukville, Cambodia. The Karen National Army (KNA), a militia group controlling territory on the Thai-Burmese border, was sanctioned by the U.S. Treasury's Office of Foreign Assets Control (OFAC) on May 5, 2025 for facilitating cyber scam operations and human trafficking from this region. Separately, the Huione Group — a Cambodia-based financial conglomerate — was identified by FinCEN on May 1, 2025 as a primary money laundering concern, having processed an alleged $4 billion in illicit proceeds between August 2021 and January 2025, including proceeds from pig-butchering scams. While the Elliptic/HTCD investigation does not name Huione explicitly in its published findings, the broader laundering ecosystem these entities operate in is directly relevant context.","heading":"Geographic Infrastructure: Cambodia and Myanmar Scam Compounds","sources":[{"url":"https://home.treasury.gov/news/press-releases/sb0129","name":"U.S. Treasury: Sanctions Burma Warlord and Militia Tied to Cyber Scam Operations (May 5, 2025)","type":"regulatory","credibility":1},{"url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","name":"FinCEN: Huione Group Identified as Primary Money Laundering Concern (May 1, 2025)","type":"regulatory","credibility":1},{"url":"https://www.coindesk.com/policy/2025/05/05/u-s-treasury-sanctions-burmese-militia-group-said-to-run-pig-butchering-compounds","name":"CoinDesk: U.S. Treasury Sanctions Burmese Militia Group Said to Run Pig Butchering Compounds","type":"news_article","credibility":2},{"url":"https://www.elliptic.co/blog/cyber-scam-marketplace","name":"Elliptic: Huione Guarantee — The Multi-Billion Dollar Marketplace Used by Online Scammers","type":"research","credibility":2}],"severity":"critical"},{"content":"The network employed professional cross-chain laundering techniques to obscure the origin of funds. Criminals exploited services that lack Know Your Customer (KYC) requirements, including decentralized exchanges (DEXs), cross-chain bridges, and instant swap services. The laundering process involved converting niche or low-liquidity tokens into mainstream assets, chain-hopping across multiple blockchains to break traceability, and deliberately avoiding freezable stablecoins (such as USDT in certain configurations) to reduce the risk of blacklisting by issuers. The hidden shared infrastructure connecting individual wallets — visible only through holistic network analysis — was identified as a key enabling feature of the network, allowing disparate criminal operations to appear unrelated while benefiting from common laundering rails.","heading":"Money Laundering Methodology: Cross-Chain Obfuscation","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://dailyhodl.com/2026/06/24/520000000-in-suspicious-crypto-transactions-involving-32-blockchains-discovered-as-elliptic-exposes-massive-scam-network/","name":"The Daily Hodl: $520,000,000 in Suspicious Crypto Transactions Involving 32 Blockchains Discovered","type":"news_article","credibility":2},{"url":"https://www.elliptic.co/resources/the-state-of-cross-chain-crime-2025","name":"Elliptic: State of Cross-Chain Crime 2025","type":"research","credibility":2}],"severity":"high"},{"content":"The Elliptic/HTCD findings were published against a backdrop of escalating international enforcement actions targeting the same Southeast Asian fraud infrastructure. On April 23, 2026, the U.S. Department of Justice's Scam Center Strike Force — launched in November 2025 — announced coordinated actions including criminal charges against two Chinese nationals who managed a scam compound in Burma, seizure of a Telegram channel used to recruit trafficking victims, takedown of 503 fraudulent investment websites, and restraint of over $700 million in cryptocurrency tied to scam laundering networks. The Secret Service separately reported that the Strike Force had seized more than $580 million from Chinese transnational criminal networks as of February 2026. U.S. Treasury (OFAC) also sanctioned Cambodian Senator Kok An and businessman Rithy Raksmei in April 2026 for their alleged roles in pig-butchering infrastructure. These enforcement actions corroborate the geographic and operational patterns identified in the Elliptic/HTCD investigation.","heading":"Broader U.S. and International Enforcement Context","sources":[{"url":"https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting","name":"DOJ: Scam Center Strike Force Takes Major Actions Against Southeast Asian Scam Centers (April 23, 2026)","type":"regulatory","credibility":1},{"url":"https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational","name":"U.S. Secret Service: DC Scam Center Strike Force Seizures Top $580 Million","type":"regulatory","credibility":1},{"url":"https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/","name":"Chainalysis: U.S. Crackdown on Southeast Asian Crypto Scam Centers (April 2026)","type":"research","credibility":2},{"url":"https://unchainedcrypto.com/treasury-sanctions-cambodian-senator-kok-an-over-pig-butchering-crypto-scam-network/","name":"Unchained: Treasury Sanctions Cambodian Senator Kok An Over Pig-Butchering Crypto Scam Network","type":"news_article","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/the-scam-center-strike-force-a-whole-of-government-response-to-global-crypto-fraud","name":"TRM Labs: The Scam Center Strike Force — A Whole-of-Government Response","type":"research","credibility":2}],"severity":"high"},{"content":"Elliptic's investigation identified at least one theft within the network that is attributed to North Korean operatives who allegedly targeted Thai nationals. The DPRK's cryptocurrency theft program — primarily executed through the Lazarus Group and affiliated clusters — has been documented extensively by U.S. government agencies and blockchain analytics firms. In 2025, North Korea-linked actors were attributed with approximately $2.02 billion in cryptocurrency thefts. In 2026, the same infrastructure was linked to the approximately $285–286 million exploit of Drift Protocol (April 1, 2026), which Elliptic attributed to DPRK actors following a months-long social engineering campaign. North Korean operatives have increasingly employed credential theft, fake hiring processes, and software supply chain compromises to gain access to exchange accounts and protocol admin keys. The presence of DPRK-linked activity within the Thai victim complaint network is consistent with known DPRK targeting patterns but has not been independently corroborated beyond Elliptic's attribution at the time of this writing.","heading":"North Korean State-Linked Actor Involvement","sources":[{"url":"https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","name":"Crypto Briefing: Elliptic and Thai Police Uncover $520M in Suspicious Crypto Transactions","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/business/2026/04/02/north-koreans-hackers-likely-behind-the-usd286-million-drift-protocol-exploit-elliptic","name":"CoinDesk: Elliptic Flags $285 Million Drift Exploit as Likely North Korea-Linked Operation","type":"news_article","credibility":2},{"url":"https://thehackernews.com/2025/12/north-korea-linked-hackers-steal-202.html","name":"The Hacker News: North Korea-Linked Hackers Steal $2.02 Billion in 2025","type":"news_article","credibility":2},{"url":"https://www.csis.org/analysis/cross-border-law-enforcement-collaboration-countering-north-koreas-crypto-plunder","name":"CSIS: Cross-Border Law Enforcement Collaboration for Countering North Korea's Crypto Plunder","type":"research","credibility":1}],"severity":"critical"},{"content":"The $520 million figure represents total incoming crypto transactions to identified suspicious wallets — it is not a figure representing confirmed theft or fraud proceeds. Individual documented victim losses within the analyzed wallet set totaled approximately $14 million, a fraction of the broader transaction volume, which reflects both the layered nature of laundering networks and the likelihood that many incoming transactions represent onward movement of funds already passing through the network rather than direct victim deposits. Of the total, $234 million was already flagged in Elliptic's existing labeling systems before the joint investigation began, indicating substantial prior intelligence on portions of the network. The investigation methodology relied on Elliptic's proprietary blockchain analytics platform, which at the time of publication covered 66+ blockchains. The use of a single analytics vendor's data as the primary source means independent corroboration of the full $520 million attribution has not been publicly confirmed by other firms or court filings as of June 2026.","heading":"Investigation Methodology and Data Limitations","sources":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","credibility":2},{"url":"https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","name":"Crypto Briefing: Elliptic and Thai Police Uncover $520M in Suspicious Crypto Transactions","type":"news_article","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2021-08","event":"Huione Group begins accumulating what FinCEN later identifies as at least $4 billion in illicit proceeds through its payments and crypto services, linked to pig-butchering scam laundering and DPRK heist proceeds.","source":"FinCEN press release","source_url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","date_original":"2021-08-01"},{"date":"2022","event":"Start of the victim complaint window analyzed in the Elliptic/HTCD investigation; Royal Thai Police begin receiving crypto-related victim reports that would eventually feed the joint dataset.","source":"Elliptic media center","source_url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","date_original":"2022-01-01"},{"date":"2025-01-25","event":"Bybit suffers a $1.5 billion Ethereum theft attributed by the FBI to North Korea's Lazarus Group cluster TraderTraitor, the largest single crypto theft in history. North Korean cross-chain crime tactics are put under global scrutiny.","source":"The Hacker News","source_url":"https://thehackernews.com/2025/12/north-korea-linked-hackers-steal-202.html"},{"date":"2025-05","event":"FinCEN identifies Cambodia-based Huione Group as a primary money laundering concern under Section 311 of the USA PATRIOT Act, citing $4 billion in alleged illicit proceeds and its role as infrastructure for DPRK heist laundering and pig-butchering scam proceeds.","source":"FinCEN press release","source_url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","date_original":"2025-05-01"},{"date":"2025-05-05","event":"U.S. Treasury OFAC sanctions the Karen National Army (KNA), its leader Saw Chit Thu, and his two sons for facilitating cyber scam compounds on the Thai-Burmese border, human trafficking, and cross-border smuggling.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0129"},{"date":"2025-07-16","event":"Elliptic publishes its State of Cross-Chain Crime 2025 report, estimating $21.8 billion in cumulative cross-chain criminal activity since 2022 — a threefold increase from 2023 — with North Korea accounting for approximately 12% of the total.","source":"Elliptic media center","source_url":"https://www.elliptic.co/media-center/cross-chain-crime-surges-past-21-billion-elliptic-report-reveals"},{"date":"2025-10","event":"End of the victim complaint window analyzed in the Elliptic/HTCD investigation; over 500 suspicious wallets linked to approximately $14 million in documented individual victim losses have been reported to the Royal Thai Police.","source":"Elliptic media center","source_url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","date_original":"2025-10-01"},{"date":"2025-11","event":"U.S. Attorney Pirro officially launches the DOJ Scam Center Strike Force to target Chinese organized crime syndicates operating Southeast Asian scam centers, crypto investment fraud, and human trafficking operations.","source":"DOJ press release","source_url":"https://www.justice.gov/usao-dc/pr/new-scam-center-strike-force-battles-southeast-asian-crypto-investment-fraud-targeting","date_original":"2025-11-01"},{"date":"2026-02","event":"U.S. Secret Service reports the Scam Center Strike Force has seized more than $580 million in cryptocurrency from Chinese transnational criminal networks since the Strike Force's inception.","source":"U.S. Secret Service","source_url":"https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational","date_original":"2026-02-01"},{"date":"2026-04","event":"Drift Protocol, the largest decentralized perpetual futures exchange on Solana, is exploited for approximately $285-286 million in what Elliptic attributes to a DPRK-linked operation following a six-month social engineering campaign — further establishing North Korean operatives as active in the Asia-Pacific threat landscape.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2026/04/02/north-koreans-hackers-likely-behind-the-usd286-million-drift-protocol-exploit-elliptic","date_original":"2026-04-01"},{"date":"2026-04-23","event":"DOJ Scam Center Strike Force announces major coordinated actions: criminal charges against managers of a Burma scam compound, seizure of a Telegram recruitment channel, takedown of 503 fraudulent investment websites, and restraint of over $700 million in cryptocurrency. OFAC simultaneously sanctions Cambodian Senator Kok An and businessman Rithy Raksmei.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting"},{"date":"2026-06-18","event":"Elliptic publishes its joint report with the Royal Thai Police's High-Tech Crime Division, authored by Dr. Arda Akartuna, exposing $520 million in suspicious crypto transactions across 32 blockchains linked to a cross-chain scam and money-laundering network operating from January 2022 to October 2025.","source":"Elliptic media center","source_url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime"},{"date":"2026-06-24","event":"Wider media coverage of the Elliptic/HTCD report published, including The Daily Hodl and Crypto Briefing, bringing the $520 million figure and cross-chain network details to broader public attention.","source":"The Daily Hodl","source_url":"https://dailyhodl.com/2026/06/24/520000000-in-suspicious-crypto-transactions-involving-32-blockchains-discovered-as-elliptic-exposes-massive-scam-network/"}],"sources_used":[{"url":"https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","name":"Elliptic: Royal Thai Police Detects Hundreds of Millions in Cryptoasset Crime","type":"research","archive_url":"https://web.archive.org/web/20260727012248/https://www.elliptic.co/media-center/royal-thai-police-detects-hundreds-of-millions-in-cryptoasset-crime","credibility":2,"archive_timestamp":"2026-07-27T01:22:48+00:00"},{"url":"https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","name":"Crypto Briefing: Elliptic and Thai Police Uncover $520M in Suspicious Crypto Transactions","type":"news_article","archive_url":"https://web.archive.org/web/20260727052200/https://cryptobriefing.com/elliptic-thai-police-520m-suspicious-crypto/","credibility":2,"archive_timestamp":"2026-07-27T05:22:00+00:00"},{"url":"https://dailyhodl.com/2026/06/24/520000000-in-suspicious-crypto-transactions-involving-32-blockchains-discovered-as-elliptic-exposes-massive-scam-network/","name":"The Daily Hodl: $520,000,000 in Suspicious Crypto Transactions Involving 32 Blockchains Discovered","type":"news_article","archive_url":"http://web.archive.org/web/20260625081234/https://dailyhodl.com/2026/06/24/520000000-in-suspicious-crypto-transactions-involving-32-blockchains-discovered-as-elliptic-exposes-massive-scam-network/","credibility":2,"archive_timestamp":"2026-06-25T08:12:34+00:00"},{"url":"https://www.elliptic.co/media-center/cross-chain-crime-surges-past-21-billion-elliptic-report-reveals","name":"Elliptic: Cross-Chain Crime Surges Past $21 Billion","type":"research","archive_url":"http://web.archive.org/web/20260311160238/https://www.elliptic.co/media-center/cross-chain-crime-surges-past-21-billion-elliptic-report-reveals","credibility":2,"archive_timestamp":"2026-03-11T16:02:38+00:00"},{"url":"https://www.elliptic.co/resources/the-state-of-cross-chain-crime-2025","name":"Elliptic: State of Cross-Chain Crime 2025","type":"research","archive_url":"http://web.archive.org/web/20260711140651/https://www.elliptic.co/resources/the-state-of-cross-chain-crime-2025","credibility":2,"archive_timestamp":"2026-07-11T14:06:51+00:00"},{"url":"https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","name":"FinCEN: Huione Group Identified as Primary Money Laundering Concern (May 1, 2025)","type":"regulatory","archive_url":"http://web.archive.org/web/20260706121827/https://www.fincen.gov/news/news-releases/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern","credibility":1,"archive_timestamp":"2026-07-06T12:18:27+00:00"},{"url":"https://home.treasury.gov/news/press-releases/sb0129","name":"U.S. Treasury: Sanctions Burma Warlord and Militia Tied to Cyber Scam Operations (May 5, 2025)","type":"regulatory","archive_url":"http://web.archive.org/web/20260706121524/https://home.treasury.gov/news/press-releases/sb0129","credibility":1,"archive_timestamp":"2026-07-06T12:15:24+00:00"},{"url":"https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting","name":"DOJ: Scam Center Strike Force Takes Major Actions Against Southeast Asian Scam Centers (April 23, 2026)","type":"regulatory","archive_url":"http://web.archive.org/web/20260714020521/https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting","credibility":1,"archive_timestamp":"2026-07-14T02:05:21+00:00"},{"url":"https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational","name":"U.S. Secret Service: DC Scam Center Strike Force Seizures Top $580 Million","type":"regulatory","archive_url":"http://web.archive.org/web/20260426180021/https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational","credibility":1,"archive_timestamp":"2026-04-26T18:00:21+00:00"},{"url":"https://www.chainalysis.com/blog/crypto-scams-2026/","name":"Chainalysis: 2026 Crypto Crime Report — Scams","type":"research","archive_url":"http://web.archive.org/web/20260725024320/https://www.chainalysis.com/blog/crypto-scams-2026/","credibility":2,"archive_timestamp":"2026-07-25T02:43:20+00:00"},{"url":"https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/","name":"Chainalysis: U.S. Crackdown on Southeast Asian Crypto Scam Centers (April 2026)","type":"research","archive_url":"http://web.archive.org/web/20260517180333/https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/","credibility":2,"archive_timestamp":"2026-05-17T18:03:33+00:00"},{"url":"https://www.coindesk.com/business/2026/04/02/north-koreans-hackers-likely-behind-the-usd286-million-drift-protocol-exploit-elliptic","name":"CoinDesk: Elliptic Flags $285 Million Drift Exploit as Likely North Korea-Linked Operation","type":"news_article","archive_url":"http://web.archive.org/web/20260409044143/https://www.coindesk.com/business/2026/04/02/north-koreans-hackers-likely-behind-the-usd286-million-drift-protocol-exploit-elliptic","credibility":2,"archive_timestamp":"2026-04-09T04:41:43+00:00"},{"url":"https://www.elliptic.co/blog/cyber-scam-marketplace","name":"Elliptic: Huione Guarantee — The Multi-Billion Dollar Marketplace Used by Online Scammers","type":"research","archive_url":"http://web.archive.org/web/20260624131947/https://www.elliptic.co/blog/cyber-scam-marketplace","credibility":2,"archive_timestamp":"2026-06-24T13:19:47+00:00"},{"url":"https://www.elliptic.co/blog/elliptics-typologies-report-detecting-the-money-flows-behind-the-global-pig-butchering-ecosystem","name":"Elliptic: Typologies Report — Pig Butchering Ecosystem","type":"research","archive_url":"http://web.archive.org/web/20260218160255/https://www.elliptic.co/blog/elliptics-typologies-report-detecting-the-money-flows-behind-the-global-pig-butchering-ecosystem","credibility":2,"archive_timestamp":"2026-02-18T16:02:55+00:00"},{"url":"https://unchainedcrypto.com/treasury-sanctions-cambodian-senator-kok-an-over-pig-butchering-crypto-scam-network/","name":"Unchained: Treasury Sanctions Cambodian Senator Kok An Over Pig-Butchering Crypto Scam Network","type":"news_article","archive_url":"http://web.archive.org/web/20260726160316/https://unchainedcrypto.com/treasury-sanctions-cambodian-senator-kok-an-over-pig-butchering-crypto-scam-network/","credibility":2,"archive_timestamp":"2026-07-26T16:03:16+00:00"},{"url":"https://www.trmlabs.com/resources/blog/the-scam-center-strike-force-a-whole-of-government-response-to-global-crypto-fraud","name":"TRM Labs: The Scam Center Strike Force — A Whole-of-Government Response","type":"research","archive_url":"http://web.archive.org/web/20260702235848/https://www.trmlabs.com/resources/blog/the-scam-center-strike-force-a-whole-of-government-response-to-global-crypto-fraud","credibility":2,"archive_timestamp":"2026-07-02T23:58:48+00:00"},{"url":"https://www.csis.org/analysis/cross-border-law-enforcement-collaboration-countering-north-koreas-crypto-plunder","name":"CSIS: Cross-Border Law Enforcement Collaboration for Countering North Korea's Crypto Plunder","type":"research","archive_url":"https://web.archive.org/web/20260727011951/https://www.csis.org/analysis/cross-border-law-enforcement-collaboration-countering-north-koreas-crypto-plunder","credibility":1,"archive_timestamp":"2026-07-27T01:19:51+00:00"},{"url":"https://thehackernews.com/2025/12/north-korea-linked-hackers-steal-202.html","name":"The Hacker News: North Korea-Linked Hackers Steal $2.02 Billion in 2025","type":"news_article","archive_url":"http://web.archive.org/web/20260508232125/https://thehackernews.com/2025/12/north-korea-linked-hackers-steal-202.html","credibility":2,"archive_timestamp":"2026-05-08T23:21:25+00:00"},{"url":"https://www.coindesk.com/policy/2025/05/05/u-s-treasury-sanctions-burmese-militia-group-said-to-run-pig-butchering-compounds","name":"CoinDesk: U.S. Treasury Sanctions Burmese Militia Group Said to Run Pig Butchering Compounds","type":"news_article","archive_url":"http://web.archive.org/web/20251101043405/https://www.coindesk.com/policy/2025/05/05/u-s-treasury-sanctions-burmese-militia-group-said-to-run-pig-butchering-compounds","credibility":2,"archive_timestamp":"2025-11-01T04:34:05+00:00"},{"url":"https://www.justice.gov/usao-dc/pr/new-scam-center-strike-force-battles-southeast-asian-crypto-investment-fraud-targeting","name":"DOJ: New Scam Center Strike Force Battles Southeast Asian Crypto Investment Fraud","type":"regulatory","archive_url":"http://web.archive.org/web/20260706121951/https://www.justice.gov/usao-dc/pr/new-scam-center-strike-force-battles-southeast-asian-crypto-investment-fraud-targeting","credibility":1,"archive_timestamp":"2026-07-06T12:19:51+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-06-26T17:16:56.16116+00:00","updated_at":"2026-07-27T06:38:42.236115+00:00"}}