Audit log

Every state-changing event for DOJ Pig Butchering $25M Forfeiture 2026: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-07-25 12:22:58Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   HYGwNAfo2V5E…A9XYFRBYcopysha256 → base58

   verifying row…

   canonical bytes (25108 B) ▸

   {"actor":"system:backfill","investigation_id":"aa8c0fdb-c7ba-4763-8b64-7d50b9415798","kind":"publish","page_slug":"doj-pig-butchering-25m-forfeiture-2026","published_at":"2026-07-25T12:22:58.652Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"DOJ Pig Butchering $25M Forfeiture 2026","sections":[{"content":"On July 21, 2026, the U.S. Attorney's Office for the District of Columbia and the U.S. Secret Service Washington Field Office filed five civil forfeiture complaints in U.S. District Court for the District of Columbia, docketed as case numbers 26-cv-2539 through 26-cv-2543. The complaints collectively seek forfeiture of more than $25 million in USDT (Tether) that the government traces to alleged international investment fraud, romance fraud, and asset-recovery fraud schemes. No defendants are named in any of the five complaints; the government sued the property itself under 18 U.S.C. § 981, the standard mechanism for civil asset forfeiture. Claimants have 35 to 60 days from notice to assert an innocent owner defense under 18 U.S.C. § 983(d). The action was announced as the largest forfeiture action ever sought by the DOJ in connection with crypto confidence and pig butchering scams.","heading":"Overview of the Forfeiture Action","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"US authorities seek forfeiture of $25 million in crypto stolen from over 2,000 fraud victims — CoinTurk","type":"news_article","url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"credibility":2,"name":"US authorities recover over $25M from crypto fraud operations in Scam Center Strike Force — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33182595/"}]},{"content":"The five civil forfeiture complaints each target a distinct fraud network. Complaint 26-cv-2540 (MicMarket FX) seeks $1,766,583 linked to 17 confirmed victims of a fake trading platform; investigators traced approximately 65.9% of the seized funds directly to victim deposits. Complaint 26-cv-2539 (Zoomex domain spoof) seeks $2,389,778.77; two primary victims sent approximately $5.25 million to a spoofed version of the Zoomex exchange domain, with over 99% of the seized funds traced to those victims. Complaint 26-cv-2542 (Multi-scheme network) is the largest, seeking $10,404,905 linked to 243 or more victim transactions spanning multiple fraud types including pig butchering, task schemes, and approval phishing; investigators directly traced only approximately 11% of this pool to individual victims. Complaint 26-cv-2541 (Recovery fraud) seeks $284,903.78 in a secondary fraud case in which a British victim who had already lost more than 3.7 million GBP was then targeted by individuals impersonating UK National Crime Agency and HMRC officers. Complaint 26-cv-2543 (Investment platform) seeks $1,230,899.74 linked to a victim in the National Capital Region, with 86% of one address directly victim-traced. Named fake investment platforms identified across the complaints include MicMarket FX, the spoofed Zoomex domain, BitaGold, SteemFly, Smart Labs, Bdswg.com, and Apex Financial.","heading":"Breakdown of the Five Complaints","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"}]},{"content":"Across the five complaints, investigators identified more than 470 individual victims in the United States and Canada, with the total alleged victim count across all linked networks estimated at over 2,000. The largest single complaint (26-cv-2542) documents 243 or more victim transactions. The second-largest complaint documents over 270 suspected victims linked to fraudulent investment platforms. The Zoomex spoof complaint documents two primary victims who together sent approximately $5.25 million to the fraudulent domain. In 2025, the FBI recorded $7.2 billion in total losses to crypto investment fraud across more than 61,500 complaints nationwide. Losses to Americans from pig butchering and related Southeast Asian scam compound operations were estimated at approximately $10 billion annually as of 2025.","heading":"Victim Scope","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"US authorities seek forfeiture of $25 million in crypto stolen from over 2,000 fraud victims — CoinTurk","type":"news_article","url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"}]},{"content":"Pig butchering (known in Chinese as sha zhu pan) is a form of confidence fraud in which perpetrators establish prolonged online relationships with targets — typically through social media, dating apps, or unsolicited text messages — before convincing them to invest in counterfeit cryptocurrency trading platforms. The name derives from the practice of fattening a pig before slaughter. The five complaints also document three related scheme variants. Task schemes involve micro-payment incentives that gradually draw victims into negative balances before funds are seized. Approval phishing involves the use of malicious smart contracts to obtain wallet approval permissions, allowing fraudsters to drain victim wallets directly. Recovery fraud targets previous victims by impersonating law enforcement or regulatory officials who claim they can recover previously lost funds, extracting additional payments. Victims were directed to transfer real cryptocurrency to wallets controlled by the fraud networks, after which funds were moved through layered intermediary addresses before reaching consolidation wallets.","heading":"Fraud Methodology: Pig Butchering and Related Schemes","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"US authorities recover over $25M from crypto fraud operations in Scam Center Strike Force — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33182595/"}]},{"content":"The complaints document a multi-layer laundering chain. Victim funds, initially deposited as Bitcoin or other cryptocurrencies, were bridged to Ethereum-based USDT via THORChain, a decentralized cross-chain bridge. Proceeds were then swapped through Tokenlon, a decentralized exchange operating without KYC requirements, before being consolidated into USDT addresses. Onramps identified in the complaints include Coinbase, Crypto.com, Binance, and BTSE. Funds moved through hundreds of intermediary crypto wallets, with accounts registered to individuals in Georgia and Armenia identified as intermediate custodians. In one case, Canadian law enforcement alerted U.S. authorities to suspect wallet addresses in late 2024, leading to the identification of 16 or more Tether addresses that were blacklisted in January 2025. IP addresses associated with laundering operations were traced to China, Malaysia, and Cambodia. Laundering operations were attributed to alleged networks run out of compounds in Burma, Cambodia, and Laos, staffed in part by trafficked workers.","heading":"Laundering Infrastructure","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"}]},{"content":"All five complaints target USDT held in addresses that Tether voluntarily froze at the request of law enforcement. The Armstrong & Bradylyons analysis of the complaints notes that at least one address was frozen the same day law enforcement made the request, and another was frozen approximately 20 months before the public filing of the complaint. A total of 16 or more addresses were blacklisted in one case alone in January 2025. Tether's cooperation with law enforcement in this action is consistent with its previously stated policy of freezing wallets linked to illicit activity upon receipt of valid legal requests. Tether had previously frozen $225 million linked to a human trafficking and pig butchering network in November 2023. The use of USDT as the primary laundering asset across all five complaints reflects the continued dominance of dollar-pegged stablecoins in illicit crypto finance due to their liquidity and transferability.","heading":"Tether's Role in the Action","severity":"high","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"Crypto firm Tether says it has frozen $225 million linked to human trafficking — Investing.com","type":"news_article","url":"https://investing.com/news/world-news/crypto-firm-tether-says-it-has-frozen-225-million-linked-to-human-trafficking-3239300"}]},{"content":"The five complaints were filed as part of the D.C. Scam Center Strike Force, launched in November 2025 by U.S. Attorney for the District of Columbia Jeanine Ferris Pirro. The Strike Force is a multi-agency task force comprising the U.S. Attorney's Office for D.C., the DOJ Criminal Division, the FBI, and the U.S. Secret Service. Its stated mandate covers seizing cryptocurrency, disabling U.S.-based infrastructure used by scam networks, and coordinating with international partners. By February 2026, the Strike Force reported total seizures and freezes exceeding $580 million. By the time of the July 2026 filing, cumulative Strike Force recoveries exceeded $800 million in under nine months of operation. The July 21, 2026 action also followed additional broader DOJ enforcement: in October 2025, the DOJ filed what it described as the largest forfeiture action in department history — approximately $15 billion in Bitcoin — against Prince Holding Group chairman Chen Zhi for operating Cambodian forced-labor scam compounds. The D.C. Scam Center Strike Force's $580 million milestone was also confirmed independently by the U.S. Secret Service and the IRS Criminal Investigation division.","heading":"Scam Center Strike Force and Broader Enforcement Context","severity":"high","sources":[{"credibility":1,"name":"D.C. Scam Center Strike Force Seizures of Cryptocurrency from Chinese Transnational Criminals Tops $580 Million — IRS Criminal Investigation","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/dc-scam-center-strike-force-seizures-of-cryptocurrency-from-chinese-transnational-criminals-tops-580-million"},{"credibility":1,"name":"D.C. Scam Center Strike Force Seizures of Cryptocurrency from Chinese Transnational Criminals Tops $580 Million — U.S. Secret Service","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational"},{"credibility":1,"name":"Scam Center Strike Force Takes Major Actions Against Southeast Asian Scam Centers — DOJ Office of Public Affairs","type":"regulatory","url":"https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting"},{"credibility":2,"name":"US authorities recover over $25M from crypto fraud operations in Scam Center Strike Force — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33182595/"},{"credibility":1,"name":"DOJ seizes $15 billion in bitcoin from massive 'pig butchering' scam based in Cambodia — CNBC","type":"news_article","url":"https://www.cnbc.com/2025/10/14/bitcoin-doj-chen-zhi-pig-butchering-scam.html"}]},{"content":"The Scam Center Strike Force's investigations, including the July 2026 forfeiture action, have attributed the underlying fraud infrastructure to alleged Chinese transnational criminal organizations operating compounds primarily in Southeast Asia — specifically Burma (Myanmar), Cambodia, and Laos. These compounds allegedly employ or coerce trafficked workers to staff call centers and social engineering operations targeting victims in the United States, Canada, and other Western countries. The complaints trace IP addresses and laundering network custodians to China, Malaysia, and Cambodia. Cambodian Senator Kok An was sanctioned by the U.S. Treasury Department in April 2026 in connection with related enforcement actions. Two Chinese nationals were separately charged in 2026 for allegedly laundering proceeds from a compound operating in Burma. The Prince Holding Group, run by Cambodian national Chen Zhi, was identified in the parallel $15 billion Bitcoin forfeiture action as one of Asia's largest alleged transnational criminal organizations, earning alleged proceeds of more than $30 million per day at peak operation.","heading":"Alleged Threat Actor Attribution: Chinese Transnational Crime Syndicates","severity":"critical","sources":[{"credibility":2,"name":"US authorities seek forfeiture of $25 million in crypto stolen from over 2,000 fraud victims — CoinTurk","type":"news_article","url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"credibility":1,"name":"Chairman of Prince Group Indicted for Operating Cambodian Forced Labor Scam Compounds — DOJ Office of Public Affairs","type":"regulatory","url":"https://www.justice.gov/opa/pr/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged"},{"credibility":1,"name":"Two members of Chinese money laundering network charged with laundering investment fraud proceeds — IRS Criminal Investigation","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/two-members-of-chinese-money-laundering-network-charged-with-laundering-investment-fraud-proceeds"},{"credibility":1,"name":"DOJ seizes $15 billion in bitcoin from massive 'pig butchering' scam based in Cambodia — CNBC","type":"news_article","url":"https://www.cnbc.com/2025/10/14/bitcoin-doj-chen-zhi-pig-butchering-scam.html"}]},{"content":"The five complaints document several consistent warning patterns relevant to retail crypto users. All identified fake investment platforms used professionally designed interfaces mimicking legitimate exchanges, including a spoofed version of the Zoomex exchange domain. Platforms named in the complaints — MicMarket FX, BitaGold, SteemFly, Smart Labs, Bdswg.com, and Apex Financial — are not registered with U.S. financial regulators. Victims were recruited primarily through unsolicited contact on social media, dating apps, and SMS. Task schemes disguised as remote employment opportunities were used to onboard victims unfamiliar with crypto trading before escalating to larger investment deposits. The approval phishing variant in the complaints is particularly notable: malicious smart contract approvals can grant perpetrators ongoing access to drain wallets without further victim interaction after the initial approval. Recovery fraud poses a secondary risk to any previous fraud victim contacted by individuals claiming law enforcement or regulatory affiliation.","heading":"Risk Signals for Retail Crypto Users","severity":"critical","sources":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"US seeks forfeiture of $25M in crypto linked to international fraud networks — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/us-seeks-forfeiture-25m-crypto-fraud-schemes/"}]}],"sources_used":[{"credibility":2,"name":"DOJ's $25 Million Crypto Forfeiture: Five Civil Complaints, Frozen Tether, No Defendants — Armstrong & Bradylyons PLLC","type":"news_article","url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"credibility":2,"name":"US authorities seek forfeiture of $25 million in crypto stolen from over 2,000 fraud victims — CoinTurk","type":"news_article","url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"credibility":2,"name":"US authorities recover over $25M from crypto fraud operations in Scam Center Strike Force — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33182595/"},{"credibility":2,"name":"US seeks forfeiture of $25M in crypto linked to international fraud networks — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/us-seeks-forfeiture-25m-crypto-fraud-schemes/"},{"credibility":1,"name":"D.C. Scam Center Strike Force Seizures of Cryptocurrency from Chinese Transnational Criminals Tops $580 Million — IRS Criminal Investigation","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/dc-scam-center-strike-force-seizures-of-cryptocurrency-from-chinese-transnational-criminals-tops-580-million"},{"credibility":1,"name":"D.C. Scam Center Strike Force Seizures of Cryptocurrency from Chinese Transnational Criminals Tops $580 Million — U.S. Secret Service","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/02/dc-scam-center-strike-force-seizures-cryptocurrency-chinese-transnational"},{"credibility":1,"name":"Scam Center Strike Force Takes Major Actions Against Southeast Asian Scam Centers Targeting Americans — DOJ Office of Public Affairs","type":"regulatory","url":"https://www.justice.gov/opa/pr/scam-center-strike-force-takes-major-actions-against-southeast-asian-scam-centers-targeting"},{"credibility":1,"name":"Chairman of Prince Group Indicted for Operating Cambodian Forced Labor Scam Compounds — DOJ Office of Public Affairs","type":"regulatory","url":"https://www.justice.gov/opa/pr/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged"},{"credibility":1,"name":"Two members of Chinese money laundering network charged with laundering investment fraud proceeds — IRS Criminal Investigation","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/two-members-of-chinese-money-laundering-network-charged-with-laundering-investment-fraud-proceeds"},{"credibility":1,"name":"DOJ seizes $15 billion in bitcoin from massive 'pig butchering' scam based in Cambodia — CNBC","type":"news_article","url":"https://www.cnbc.com/2025/10/14/bitcoin-doj-chen-zhi-pig-butchering-scam.html"},{"credibility":2,"name":"US launches Scam Center Strike Force to combat crypto investment scammers in Southeast Asia — Cybernews","type":"news_article","url":"https://cybernews.com/security/us-launches-scam-center-strike-force-combat-crypto-investment-scams/"},{"credibility":2,"name":"Crypto firm Tether says it has frozen $225 million linked to human trafficking — Investing.com","type":"news_article","url":"https://investing.com/news/world-news/crypto-firm-tether-says-it-has-frozen-225-million-linked-to-human-trafficking-3239300"},{"credibility":2,"name":"US DOJ Files Civil Forfeiture Action Targeting $25M in Crypto Linked to Fraud Networks — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/us-doj-files-civil-forfeiture-action-targeting-25m-in-crypto-linked-to-fraud-networks"},{"credibility":1,"name":"District of Columbia | Investigations into Cryptocurrency Scams Result in Seizure of More Than $25 Million — U.S. Department of Justice","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/investigations-cryptocurrency-scams-result-seizure-more-25-million"}],"summary":"On July 21, 2026, the U.S. Attorney's Office for the District of Columbia filed five civil forfeiture complaints seeking more than $25 million in cryptocurrency linked to pig butchering, romance, and asset-recovery fraud schemes. The action, executed through the Scam Center Strike Force, represents the largest forfeiture action ever sought by the DOJ specifically targeting crypto confidence scams, and documents a major active threat surface involving Chinese transnational crime syndicates, fake investment platforms, and Tether-denominated laundering chains affecting thousands of victims across the United States and Canada.","timeline":[{"date":"2023-11-01","event":"Tether froze $225 million in USDT linked to a Southeast Asian human trafficking and pig butchering network, at law enforcement request.","source":"Investing.com","source_url":"https://investing.com/news/world-news/crypto-firm-tether-says-it-has-frozen-225-million-linked-to-human-trafficking-3239300"},{"date":"2024-01-01","event":"Tether blacklisted 16 or more USDT wallet addresses associated with laundering networks later named in the D.C. forfeiture complaints, at law enforcement request.","source":"Armstrong & Bradylyons PLLC","source_url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"date":"2024-12-01","event":"Canadian law enforcement (Ontario Provincial Police) notified U.S. authorities about suspect wallet addresses linked to approval phishing victims, triggering one of the five subsequent forfeiture complaints.","source":"CoinTurk","source_url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"date":"2025-11-01","event":"U.S. Attorney Jeanine Ferris Pirro launched the D.C. Scam Center Strike Force to target crypto investment fraud linked to Chinese transnational crime syndicates and Southeast Asian scam compounds.","source":"Cybernews","source_url":"https://cybernews.com/security/us-launches-scam-center-strike-force-combat-crypto-investment-scams/"},{"date":"2025-10-14","event":"DOJ filed the largest forfeiture action in department history — approximately $15 billion in Bitcoin — against Prince Holding Group chairman Chen Zhi for operating Cambodian forced-labor pig butchering compounds.","source":"CNBC","source_url":"https://www.cnbc.com/2025/10/14/bitcoin-doj-chen-zhi-pig-butchering-scam.html"},{"date":"2026-01-01","event":"UK National Crime Agency referred a British victim's case — involving a recovery fraud that followed an original loss of more than 3.7 million GBP — to U.S. law enforcement, leading to forfeiture complaint 26-cv-2541.","source":"Armstrong & Bradylyons PLLC","source_url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"date":"2026-02-01","event":"The D.C. Scam Center Strike Force reported total seizures and freezes of cryptocurrency from Chinese transnational criminals exceeding $580 million.","source":"IRS Criminal Investigation","source_url":"https://www.irs.gov/compliance/criminal-investigation/dc-scam-center-strike-force-seizures-of-cryptocurrency-from-chinese-transnational-criminals-tops-580-million"},{"date":"2026-04-01","event":"Cambodian Senator Kok An was sanctioned by the U.S. Treasury Department in connection with Scam Center Strike Force enforcement actions.","source":"CoinTurk","source_url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"date":"2026-04-01","event":"Cumulative Strike Force seizures and freezes exceeded $700 million.","source":"CoinTurk","source_url":"https://en.coin-turk.com/us-authorities-seek-forfeiture-of-25-million-in-crypto-stolen-from-over-2000-fraud-victims/"},{"date":"2026-07-21","event":"U.S. Attorney's Office for the District of Columbia filed five civil forfeiture complaints (26-cv-2539 through 26-cv-2543) seeking more than $25 million in USDT linked to pig butchering, romance, task, approval phishing, and recovery fraud schemes. Described as the largest forfeiture action ever sought related to crypto confidence scams.","source":"DOJ / Armstrong & Bradylyons PLLC","source_url":"https://www.armstrongbradylyons.com/library/doj-crypto-forfeiture-25-million"},{"date":"2026-07-22","event":"Media coverage of the July 21 forfeiture action published; cumulative Strike Force recoveries reported at more than $800 million in under nine months.","source":"CryptoNews","source_url":"https://cryptonews.net/news/security/33182595/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 71c7d0a9-3077-480b-a935-056d99ef7f78copy