DoJ Seizes Huione Guarantee Cloud Account After $31B in Scam Laundering Flows

The seizure targeted HuiOne Guarantee subsidiaries of Cambodia's Prince Group, which operated an illicit marketplace selling crimeware, stolen data, money laundering services, and victim-control equipment including electronic shackles. Elliptic documented merchants openly marketing tools to prevent escapes from scam compounds. Treasury sanctions hit nine individuals and 26 entities while FinCEN designated H-Pay Service PLC a primary money laundering concern to block U.S. financial system access.

Technical evidence shows the account supported escrow functions and blockchain conversion layers that moved fraud proceeds into legitimate banking undetected. Flare's post-shutdown analysis recorded more than 30 successor marketplaces emerging on proprietary messaging platforms after Telegram bans, with aggregate transaction volume unchanged despite 2025 enforcement waves. This indicates resilient pipeline architecture rather than isolated platform takedowns.

The pattern matches prior Southeast Asian compound operations where corporate entities provide layered financial and technical services behind physical coercion. Official statements emphasize victim fraud losses while procurement records and contract structures reveal the same entities maintaining banking access through multiple jurisdictions. Independent tracing confirms the $31 billion figure but shows no reduction in downstream flows after the May 2025 designation.

Next indicators will appear in successor platform transaction volumes and any new FinCEN advisories on alternative payment rails. Adaptation speed suggests operators have pre-positioned infrastructure to absorb displaced flows within 90 days.