H-Pay Service PLC (Huione Successor Entity)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2hkPJk…29yzSummary
H-Pay Service PLC is a Cambodia-based payment company incorporated in October 2024 that U.S. regulators allege is a successor entity to Huione Pay, itself a subsidiary of the Huione Group — a conglomerate FinCEN designated as a primary money laundering concern in October 2025 for laundering at least $4 billion in illicit proceeds linked to North Korean state-sponsored cyber heists and Southeast Asian pig-butchering scam networks. On June 23–24, 2026, FinCEN proposed amending its Huione Group final rule to explicitly encompass H-Pay Service PLC and any future successors, while the DOJ simultaneously seized backend cloud infrastructure used by Huione Group subsidiaries to process billions in fraud proceeds. H-Pay is alleged to have assumed Huione Pay's branches, customer base, branding, and operational footprint specifically to circumvent the existing U.S. financial restrictions imposed on Huione Group.
Connected Entities
5 entities · 60 linked investigations- H-Pay Service PLC (Huione Successor Entity)→mentioned with→Tether(60%)
- H-Pay Service PLC (Huione Successor Entity)→mentioned with→Chen Zhi / Prince Group(75%)
- Huione Group→mentioned with→Chen Zhi / Prince Group(85%)
- Chen Zhi / Prince Group→mentioned with→Huione Group(80%)
- H-Pay Service PLC (Huione Successor Entity)→mentioned with→Huione Group(80%)
- H-Pay Service PLC (Huione Successor Entity)→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- Huione Group→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
- Huione Group→mentioned with→Tether(70%)
Connected Through
5 shared actors · 217 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Tetherorganizationalso inBitcoin Xchange (Syria-based, ISIS-Linked)·0Siavash Kayvanpour·0Gurhan Kiziloz·0DOJ Pig Butchering $25M Forfeiture 2026·0Shunda Scam Compound·0Operation Economic Outcast — Iran Digital Assets Sectoral Sanctions (August 2026)·0Tudou Guarantee Telegram Marketplace·0Q2 2026 Record Crypto Hack Wave·0Indonesia Pig Butchering Syndicate — Live Model Operation (2025-2026)·0A7A5 Stablecoin / Old Vector·0Zedcex / Zedxion / Babak Morteza Zanjani (IRGC-linked exchanges)·0Mass Ethereum Address-Poisoning Wave (Dec 2025-Jan 2026)·0OFAC Iran Central Bank Crypto Wallet Freeze (July 2026)·0Southeast Asian Pig-Butchering Scam Compounds (276-Arrest Operation)·0OFAC ISIS-K 134-Address SDN Batch (July 2026)·0DSJEX / BG Wealth Sharing·0Drift Protocol DPRK Exploit (April 2026)·0Inferno Drainer·0DOJ DC 25M Crypto Fraud Forfeiture July 2026·0FX Winning / David Merino Quintana·0ISIS-K Crypto Funding Network (OFAC July 2026)·0Babak Zanjani Network — Expanded OFAC Designations (July 2026)·0Cambodia ChatGPT Pig-Butchering Crypto Scam Network (OpenAI Shutdown July 2026)·0Operation Economic Outcast — Iran Digital Asset Sanctions·0Swift Wave Capital·0DPRK Lazarus April 2026 $635M Blitz — Drift + Kelp Combined Campaign·0Liquid Global·0HormuzSafe Marine Services Authority / Persian Gulf Marine Insurance Company (PGMIC)·0Famous Chollima ClickFake Interview Campaign (PylangGhost / GolangGhost)·0Iranian Crypto Exchanges OFAC Designation — Nobitex, Wallex, Bitpin, Ramzinex (June 2026)·0Pig Butchering Scam Network (Operation Atlantic / 2026 Global Crackdown)·0fxrpntwork.com — Fake Flare Network XRP Staking Scam·0DOJ Pig-Butchering Seizure — Southeast Asia Networks (July 2026)·0Fun Coffee (GCM Project)·0Cheil Credit Bank·0Zaid Issam Ahmed al-Jebouri·0DOJ $25M Crypto Forfeiture International Fraud Rings (July 2026)·0Mass Address Poisoning Campaign (Ethereum 2025-2026)·0CarbonVote Token·0DSJEX / BG Wealth Sharing Ponzi·0Verus Ethereum Bridge Second Exploit (July 2026)·0Daren Li·0Morocoin / Berge Blockchain / Cirkor·0Aban Tether·0Nobitex / Wallex / Bitpin / Ramzinex·0Miloud Abderrahmane (ISIS Crypto Facilitator)·1DOJ Pig Butchering Civil Forfeiture — DC District July 2026·2HQI Exchange·2Evita Investments (Iurii Gugnin)·2Operation Token Mirrors — DOJ Crypto Market Manipulation Ring·2Gotbit / Vortex / Contrarian / Antier Wash-Trading Ring·2Finiko·2Evita Pay (Iurii Gugnin)·2Zhuoying Chen & Haojie Zhang — $43M Pig-Butchering Laundering Network·2ISIS-K Crypto Wallet Network (TRON/Monero SDN Designations)·2Terra/Luna·2DOJ $225M Pig Butchering Civil Forfeiture — U.S. v. Approx. $225,364,961 in USDT·2Huione Group·2Gotbit Vortex Antier Contrarian Market Manipulation Ring·2Korea Mangyongdae Computer Technology Company·2Gotbit Consulting LLC·2Blessed Trust & Hexa Whale·2AudiA6 Mixing Service·3M1llionz (RichMilly666)·3CLS Global FZC / ZM Quant Investment·3DOJ Scam Center Strike Force / Southeast Asia Pig Butchering Network·3India OTC Crypto KOL Scam (Ravindra K / Mohammed Waseem / Saurabh Diwan / Vaibhav Gupta)·4DOJ DC — $25M Crypto Confidence Scam Multi-Case Forfeiture July 2026·4Nobitex·5DOJ $25M Pig Butchering Seizure (July 2026)·5DOJ $225M Crypto Confidence Scam Seizure June 2026·5wallet drainers·5Sportsbet·6EXMO Exchange Limited·6Roberto Zibert·8C&M Software·8SUNRAY·FINANCE·8Rhea Finance Exploit (April 2026)·9Mixin Network·10Multichain·10FixedFloat·10Binance Bridge·10Poly Network·10Joaquin Diaz (Orionx Co-Founder)·12Solareum·12BNB Chain Bridge·16Remora Markets·16MiCA EU Mass Non-Compliance — 83% Unlicensed Platform Risk·18Bilaxy·18TRUMP Official Memecoin ($TRUMP)·18Rhea Lend·20Local Traders·22Magic Internet Money·22Remitano·28Mixin Network·28StablR — Multisig Exploit and EURR/USDR Depeg·28Bitfinex / Tether·28Holograph·28MiCA Transitional Period Expiry — Unlicensed EU Crypto Platforms·28Platypus Finance·28Tether Gold (XAUT)·31LayerZero Labs·32KuCoin Exchange Hack·32MEXC Exchange·32Rhea Finance·32Strike·34Nexo·34UNUS SED LEO·35Astera.fi·38USD1 (World Liberty Financial)·38TRON·38StablR·38DGLD·42Chainflip·42Blockstream·42Binance·45Ledger Live·50Tether·52Drift Protocol·52Avalanche·52DMM Bitcoin·52Transak·55LayerZero Protocol·55Global Dollar (USDG)·56Yearn Ether·58Yearn Finance DAI Vault Exploit·62PAX Gold (PAXG)·62Circle Internet Financial·62Circle·62USD Coin (USDC)·71
- □North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaignorganizationalso inNorth Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign·0Atomic Wallet Hack·0June 2026 Cross-Chain Bridge Exploit ($127M)·0Cheil Credit Bank·0ChipMixer·0Famous Chollima ClickFake Interview Campaign (PylangGhost / GolangGhost)·0H1 2026 Crypto Hack Landscape — AI Agent Attack Vector Emerges·0KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0AscendEX (BitMax)·0Lazarus Group 'Graphalgo' Fake-Recruiter npm/PyPI Campaign·0Blockchain Bandit·0Lazarus Group Mach-O Man ClickFix macOS Campaign·0Blender.io·0Q2 2026 Bridge Exploit Wave·0Q2 2026 Record Crypto Hack Wave·0Mach-O Man Malware Campaign (Lazarus / Chollima)·0World Cup 2026 — Stake.com Impersonation Wallet Drainer Campaign·0Pump.fun·0Xinbi Guarantee·0HECO Bridge & HTX Exchange Hack·1eXch·2Huione Group·2Sinbad.io·2AscendEX Exchange·4Harmony Horizon Bridge·4Heco Bridge·5Huobi / HTX·7Nomad Bridge·8pump.fun·8Orbit Chain Bridge·8Taiko L2 Bridge Exploit June 2026·8AlphaPo·10Euler V1·10Orbit Bridge·10Phemex·10Poloniex·10Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)·12Tapioca DAO·12The Sandbox SAND — LayerZero Bridge Exploit August 2026·12Garden Finance·14Garden·14KelpDAO Bridge Exploit (April 2026)·18Kelp·18OKX DEX·18Pump.fun / Solana Labs / Jito Labs — RICO MEV Class Action (SDNY 2026)·20World Liberty Financial (WLFI)·22Ronin Network·22ALEX Lab·24OKB·25ALEX Lab·28Indodax·28KuCoin·28Stake.com·28Thorchain DEX·28Dunamu / Upbit·30OKX NFT Aggregator·30BingX·32Gate.io·32CoinEx·32KuCoin Exchange Hack·32LayerZero Labs·32Nexera·32CoinStats·35Axie Infinity·38BitoPro·38CoinDCX·38Stake.com·38WazirX·38Railgun·40CoinEx Exchange Closure (September 2026)·42NiceHash·42LCX Exchange·52THORChain·52Ronin Bridge·52LayerZero Protocol·55Euler Finance·58Upbit·58LayerZero Executor Wallet Incident (July 2026)·62Hyperliquid·62Safe{Wallet}·68Bybit·72Aave·74ZachXBT·82
- □Huione Grouporganizationalso inHuione Group (Haowang Guarantee)·0Courier-Based Pig Butchering Scam Network (FBI Warning June 2026)·0Cheil Credit Bank·0Chen Zhi / Prince Holding Group·0Ko Thet Company / Sanduo Group / Giant Company Pig-Butchering Network·0Cambodia ChatGPT Pig-Butchering Crypto Scam Network (OpenAI Shutdown July 2026)·0Prince Group Transnational Criminal Organization·0Southeast Asian Pig-Butchering Scam Compounds (276-Arrest Operation)·0Tudou Guarantee Telegram Marketplace·0Huione Group·2Hu Xiaowei (Prince Group second-in-command)·2DOJ $225M Pig Butchering Civil Forfeiture — U.S. v. Approx. $225,364,961 in USDT·2Chen Zhi / Prince Group·2Kok An / Crown Resorts / Anco Brothers·2DOJ Scam Center Strike Force / Southeast Asia Pig Butchering Network·3DOJ $25M Pig Butchering Seizure (July 2026)·5Huobi / HTX·7OKB·25
- □Chen Zhi / Prince Grouporganizationalso inChen Zhi / Prince Holding Group·0Prince Group Transnational Criminal Organization·0Tudou Guarantee Telegram Marketplace·0Courier-Based Pig Butchering Scam Network (FBI Warning June 2026)·0Huione Group (Haowang Guarantee)·0Chen Zhi / Prince Group·2Huione Group·2Kok An / Crown Resorts / Anco Brothers·2Hu Xiaowei (Prince Group second-in-command)·2DOJ $225M Pig Butchering Civil Forfeiture — U.S. v. Approx. $225,364,961 in USDT·2Xinbi Marketplace·2LuBian·5AB DAO·18
- □H-Pay Service PLC (Huione Successor Entity)organization
Timeline(14 events)
August 2021
Huione Group begins receiving illicit proceeds — the start date cited in FinCEN's formal analysis covering August 2021 to January 2025.
FinCEN Final Rule (October 2025)May 2024
Lazarus Group (DPRK) hacks Japanese virtual asset service provider DMM, stealing approximately $305 million; approximately $35 million later attributed to have transited Huione Group.
CryptoNews.com / FinCENJuly 2024
Elliptic publishes first major exposure of Huione Guarantee as the world's largest illicit online Telegram marketplace.
EllipticSeptember 2024
National Bank of Cambodia suspends Huione Pay's payment services license.
Radio Free Asia / CambodianessOctober 2024
H-Pay Service PLC incorporated in Cambodia according to the country's business registry. Hun To and Li Xiong resign from Panda Bank's board of directors.
CamboJA News2025
FinCEN's formal analysis of Huione Group illicit proceeds covers through this date — at least $4 billion total documented.
FinCEN6 March 2025
National Bank of Cambodia formally revokes Huione Pay's banking/payment services license.
Radio Free AsiaMay 2025
FinCEN issues proposed rulemaking identifying Huione Group as a financial institution of primary money laundering concern under Section 311 of the USA PATRIOT Act.
FinCENMay 2025
Telegram bans Huione Guarantee's channels. Successor dark marketplaces emerge to fill the void.
Elliptic14 October 2025
FinCEN issues final rule severing Huione Group from the U.S. financial system. UK Foreign, Commonwealth and Development Office and OFAC take complementary actions on the same date.
FinCENDecember 2025
Approximately 1,300 Huione Pay customers submit identity documents and claims to the National Bank of Cambodia seeking recovery of frozen funds.
Cambodianess23 June 2026
U.S. DOJ announces seizure of cloud computing account used by Huione Group subsidiaries. FinCEN simultaneously issues NPRM to extend Huione Group final rule to H-Pay Service PLC and any future successor entities. Treasury also announces OFAC designations targeting 9 individuals and 26 entities linked to Prince Group TCO.
DOJ / FinCEN / Treasury25 June 2026
FinCEN NPRM (document 2026-12794) published in the Federal Register, formally proposing to extend the Huione Group primary money laundering concern designation to H-Pay Service PLC and successor entities.
Federal RegisterDecision Log
- hash: 23cxSLKy4ywaHYyWgj7sao5QnBqvywWG4oLVY51Riu5b
This investigation is cryptographically anchored to the Solana blockchain (1 event). 27 of 27 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/26/2026, 12:29:46 PM
last updated: 7/27/2026, 2:17:28 PM
4 viewsavoid.net — verified advice for a post-truth world