← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,497
Relationships
32,575
Potential duplicates
0
Filter by kind
Entities (event)
↯e548d4e1
Eleven Drainer toolkit alleged to have launched, based on community research placing its origin approximately August 2025. Exact launch date is unconfirmed.(2025-08-01:eleven-drainer)event
↯8314859b
OFAC designates Abdelhakim Boukich and Bitcoin Xchange under Executive Order 13224, as amended by EO 13886, adding both to the SDN list under the SDGT tag alongside two other individuals and five other entities.(2026-06-22:abdelhakim-boukich)event
↯52e04145
FinCEN publishes advisory on ISIS cryptocurrency financing methods, highlighting camp-based fundraising infrastructure similar to Bitcoin Xchange's operating model.(2025-04-01:abdelhakim-boukich)event
↯fd462d77
TRM Labs begins tracking Bitcoin Xchange and the broader Idlib-area crypto exchanger ecosystem, identifying it as a node in ISIS financing networks.(2022-01-01:abdelhakim-boukich)event
↯ab9cabe6
Boukich establishes Bitcoin Xchange in Syria with local associates in late 2020, forming a money service business targeting ISIS-linked fundraising flows.(2020-01-01:abdelhakim-boukich)event
↯4ea9653a
Abdelhakim Boukich born in The Hague, Netherlands (alternative DOB of 1991-01-01 also recorded in OFAC records).(1993-12-15:abdelhakim-boukich)event
↯d9f25318
OFAC designates Bitcoin Xchange (formally 'BITCOIN EXCHANGE AGENT IDLIB'S NO.1 COIN EXCHANGE') and its controller Abdelhakim Boukich under Executive Order 13224 for materially supporting ISIS. Five additional entities across Turkey and Nigeria and two other individuals are designated in the same action.(2026-06-22:bitcoin-xchange-syria-based-isis-linked)event
↯218a92e2
ISIS-affiliated fundraisers instruct donors to use Tron USDT (TRC20) wallets explicitly to avoid blockchain surveillance; Syria-based exchanges continue operating as cash-out layer.(2026-04-01:bitcoin-xchange-syria-based-isis-linked)event
↯174fc0e0
ISIS-linked Bitcoin campaigns raise approximately USD 7,400 for detainee relocation operations channeled through Syria-based exchanger network.(2026-02-01:bitcoin-xchange-syria-based-isis-linked)event
↯4517dd3e
ISIS-affiliated organizations announce receiving Tether donations for detainees at al-Hol and Roj camps, promoting a centralized fund system; broader network in which Bitcoin Xchange operates continues activity.(2025-10-01:bitcoin-xchange-syria-based-isis-linked)event
↯fc859a48
Bitcoin Xchange established in late 2020 by Abdelhakim Boukich and Syria-based associates, operating as a money services business in Idlib Governorate.(2020-12-01:bitcoin-xchange-syria-based-isis-linked)event
↯6393c6a5
A predecessor Syria/Idlib-based entity called BitcoinTransfer begins processing Bitcoin transactions later linked to terrorism financing; over USD 280,000 passes through it. Organizational connection to Bitcoin Xchange is not established.(2018-12-01:bitcoin-xchange-syria-based-isis-linked)event
↯6d0ca8de
FinCEN NPRM (document 2026-12794) published in the Federal Register, formally proposing to extend the Huione Group primary money laundering concern designation to H-Pay Service PLC and successor entities.(2026-06-25:h-pay-service-plc-huione-successor-entity)event
↯17c7524e
U.S. DOJ announces seizure of cloud computing account used by Huione Group subsidiaries. FinCEN simultaneously issues NPRM to extend Huione Group final rule to H-Pay Service PLC and any future successor entities. Treasury also announces OFAC designations targeting 9 individuals and 26 entities linked to Prince Group TCO.(2026-06-23:h-pay-service-plc-huione-successor-entity)event
↯1a7a2849
H-Pay Service PLC's own Cambodian license is revoked.(2026-03-01:h-pay-service-plc-huione-successor-entity)event
↯14f89156
Approximately 1,300 Huione Pay customers submit identity documents and claims to the National Bank of Cambodia seeking recovery of frozen funds.(2025-12-01:h-pay-service-plc-huione-successor-entity)event
↯b388bddd
FinCEN issues final rule severing Huione Group from the U.S. financial system. UK Foreign, Commonwealth and Development Office and OFAC take complementary actions on the same date.(2025-10-14:h-pay-service-plc-huione-successor-entity)event
↯0d189d44
Telegram bans Huione Guarantee's channels. Successor dark marketplaces emerge to fill the void.(2025-05-01:h-pay-service-plc-huione-successor-entity)event
↯89963160
National Bank of Cambodia formally revokes Huione Pay's banking/payment services license.(2025-03-06:h-pay-service-plc-huione-successor-entity)event
↯fffecc69
FinCEN's formal analysis of Huione Group illicit proceeds covers through this date — at least $4 billion total documented.(2025-01-01:h-pay-service-plc-huione-successor-entity)event
↯d3b53c7e
H-Pay Service PLC incorporated in Cambodia according to the country's business registry. Hun To and Li Xiong resign from Panda Bank's board of directors.(2024-10-01:h-pay-service-plc-huione-successor-entity)event
↯362a916b
National Bank of Cambodia suspends Huione Pay's payment services license.(2024-09-01:h-pay-service-plc-huione-successor-entity)event
↯72b6fabb
Elliptic publishes first major exposure of Huione Guarantee as the world's largest illicit online Telegram marketplace.(2024-07-01:h-pay-service-plc-huione-successor-entity)event
↯5ea2c56c
Lazarus Group (DPRK) hacks Japanese virtual asset service provider DMM, stealing approximately $305 million; approximately $35 million later attributed to have transited Huione Group.(2024-05-01:h-pay-service-plc-huione-successor-entity)event
↯7e7b2bc9
Huione Group begins receiving illicit proceeds — the start date cited in FinCEN's formal analysis covering August 2021 to January 2025.(2021-08-01:h-pay-service-plc-huione-successor-entity)event
↯87a61bfb
DOJ Scam Center Strike Force publicly announces Disruption Week results: 1.4 million social media accounts disrupted, $3.8 million in cryptocurrency frozen (Coinbase alone: $3M+), thousands of Starlink kits removed from scam compounds, 20,000 Microsoft accounts disabled, and seven arrests in Thailand.(2026-06-03:doj-scam-center-disruption-week-june-2026)event
↯6f0c43ee
Disruption Week operational window closes following coordinated takedown actions across Meta, Microsoft, SpaceX, Coinbase, Apple, Google, and other partners.(2026-05-21:doj-scam-center-disruption-week-june-2026)event
↯d6e4fb92
Disruption Week operations commence, with federal investigators, foreign law enforcement, and private sector partners gathered in Washington to coordinate simultaneous infrastructure disruption actions.(2026-05-18:doj-scam-center-disruption-week-june-2026)event
↯a7294396
Multinational operation by FBI, Dubai Police, and Chinese Ministry of Public Security results in 276 arrests and dismantlement of nine scam centers, with $701 million in cryptocurrency seized.(2026-05-04:doj-scam-center-disruption-week-june-2026)event
↯7cf992ab
DOJ unseals criminal complaints against Huang Xingshan and Jiang Wen Jie for wire fraud conspiracy in connection with operations at the Shunda compound; wanted posters issued. Both defendants arrested on immigration charges by Thai law enforcement.(2026-04-01:doj-scam-center-disruption-week-june-2026)event
↯314a2aaf
Operation Level Up reports having notified 8,935 victims as of this date; 77% were unaware they were being scammed; estimated $562.7 million in losses prevented; 93 victims referred for suicide intervention.(2026-03-01:doj-scam-center-disruption-week-june-2026)event
↯e7a230fd
DOJ and IRS Criminal Investigation announce that the Scam Center Strike Force has frozen and seized over $580 million in cryptocurrency from Chinese transnational criminal organizations since the Strike Force's founding three months prior.(2026-02-26:doj-scam-center-disruption-week-june-2026)event
↯caa0d766
Shunda compound in Min Let Pan, Burma seized by the Karen National Liberation Army; alleged operators Huang Xingshan and Jiang Wen Jie relocate operations to Cambodia.(2025-11-01:doj-scam-center-disruption-week-june-2026)event
↯01ce503b
Shunda compound in Min Let Pan, Burma begins operations under alleged management by Huang Xingshan and Jiang Wen Jie, targeting American victims with pig butchering cryptocurrency fraud.(2025-01-01:doj-scam-center-disruption-week-june-2026)event
↯3b4fca4b
FBI launches Operation Level Up, an ongoing initiative to proactively identify and notify victims of cryptocurrency investment fraud before losses are complete.(2024-01-01:doj-scam-center-disruption-week-june-2026)event
↯57e30f31
Guilty plea hearing scheduled before Magistrate Judge Nathan W. Hill in Orlando Courtroom 4D. Sentencing date not yet set as of late June 2026.(2026-06-30:goliath-ventures-christopher-alexander-delgado)event
↯b00d8a06
Christopher Alexander Delgado signs a 56-page federal plea agreement, admitting guilt on charges of conspiracy to commit fraud, wire fraud, and money laundering. Delgado agrees to forfeit approximately $250 million including seven properties and eleven vehicles.(2026-06-23:goliath-ventures-christopher-alexander-delgado)event
↯575fc4ac
Six civil actions filed across four federal districts. Additional third-party defendants named include law firm Alston & Bird and financial services provider Broad Financial. MDL consolidation of bank-liability cases pending.(2026-04-01:goliath-ventures-christopher-alexander-delgado)event
↯06a716ad
CoinDesk reports on the JPMorgan class action lawsuit; Finance Magnates covers JPMorgan red flags allegations.(2026-03-12:goliath-ventures-christopher-alexander-delgado)event
↯02f3f446
Formal receivership order entered. Receiver Michael Budwick granted authority to secure all bank accounts, digital wallets, and company records.(2026-03-03:goliath-ventures-christopher-alexander-delgado)event
↯22137875
JPMorgan Chase banking relationship with Goliath ends. By this date, approximately $253 million had flowed through JPMorgan accounts and roughly $123 million had been transferred to Coinbase wallets.(2025-06-30:goliath-ventures-christopher-alexander-delgado)event
↯cb886049
Irregular transaction patterns emerge including rapid high-value transfers between related accounts, commingling of investor funds, and substantial transfers to cryptocurrency exchanges.(2024-01-01:goliath-ventures-christopher-alexander-delgado)event
↯5bee072d
Rapid scheme expansion: over 2,000 investors attracted nationwide through marketing events, referral networks, charitable sponsorships, and luxury gatherings.(2023-06-01:goliath-ventures-christopher-alexander-delgado)event
↯22b17c47
Microsoft's Digital Crimes Unit and Europol, in coordination with law enforcement from Canada, Denmark, Germany, the Netherlands, the United Kingdom, and the United States, announce Operation Endgame disruption of StealC and Amadey infrastructure: 326 servers and 142 domains actioned; 182 C2 IP addresses seized across 47 domains; 18,000+ victim computers severed from criminal control; approximately 27 million stolen credentials recovered; EUR 41 million in cryptocurrency assets frozen. Microsoft files civil lawsuits against alleged operators and affiliates.(2026-06-24:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯a3cf6ded
CoinDesk, The Next Web, and multiple crypto-security outlets publish coverage of the CryptoBandits disclosure, broadening awareness of the USB worm campaign.(2026-06-19:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯a908641d
Operation Endgame disrupts SocGholish malware infrastructure in an earlier phase of the coordinated law enforcement sweep.(2026-06-18:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯ff4edf5b
Microsoft Threat Intelligence and Microsoft Defender Experts publicly disclose the CryptoBandits campaign in a detailed security blog post, documenting USB LNK propagation, Tor C2, seed phrase theft, wallet address substitution, and backdoor capabilities.(2026-06-17:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯d30bd52b
Amadey botnet linked to over 140,000 infected computers worldwide during the first two weeks of May 2026, according to Operation Endgame figures. BitSight TRACE analyzes over 200,000 Amadey infections over a 90-day window.(2026-05-01:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯6b72d36c
Microsoft Defender Experts begin tracking the CryptoBandits cryptocurrency clipper campaign. The malware is observed spreading via malicious USB .lnk shortcut files with Tor-based C2 communications.(2026-02-01:crypto-clipper-worm-microsoft-dcu-takedown-june-2026)event
↯943a13f9
Multiple crypto and cybersecurity media outlets report on the arrests and ZachXBT's identification of 'Merry'. Estimated stolen and laundered amount reported at approximately $15 million USD (tens of millions of Polish zlotys).(2026-06-26:wojtek-kulisz-aka-merry-sim-swap-gang)event
Data refreshes within about 10 minutes · All metrics derived from Supabase