The US Department of Justice (DOJ) has seized the cloud computing account used by subsidiaries of the Cambodian corporation Huione Group.. The account allegedly hosted infrastructure used by a Huione subsidiary that is said to have “assisted individuals and organizations in transferring proceeds of cryptocurrency investment frauds, cyber scams, and other criminal activities on cryptocurrency blockchains and allowing for the conversion of the proceeds of these schemes to the legitimate banking sector undetected.”. – Getty Images.
“Today’s seizure strikes a blow against one of the world’s most prolific criminal marketplaces,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.. “The Huione Group used this cloud computing account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed — much of it stolen through Southeast Asian scam centers.
Seizures of these marketplaces is critical in the fight against fraud that affects so many Americans, and to stop avenues for criminal proceeds to be laundered.”. It has not been disclosed which cloud provider was being used, but the DOJ later thanked the intelligence teams at Chainalysis and Elliptic, and Google’s CyberCrime Investigation Team for “voluntarily providing valuable information for this investigation.”.
Chainalysis is a blockchain data platform, while Elliptic is a blockchain analytics platform that helps with detecting crypto crime. Google’s CyberCrime Investigation Group (CCIG) is a specialized internal division that protects the company and its users by investigating, identifying, and disrupting illicit activities on Google’s infrastructure..
DCD has contacted Google for comment.. “The FBI is committed to disrupting the infrastructure and services that cybercriminals rely on to profit from their illegal activity,” said assistant director Brett Leatherman of the FBI’s Cyber Division. “Today’s action targets a key enabler of cyber-enabled fraud and money laundering schemes, demonstrating that the FBI will pursue not only the perpetrators, but also the services that support their criminal operations.”.
The DOJ stated that the seized account was used to operate Huione Guarantee, which operated Telegram channels that contained discussions regarding “illicit products and/or services, ranging from the sale of stolen credit card and identity information, the fruits of malware-enabled thefts, the procurement of individuals for human trafficking schemes, as well as assistance with laundering the proceeds of romance and investment scams.”. The DOJ said that this facilitated “movement of considerable funds stolen by Southeast Asian scam centers.” FinCEN has previously estimated that Huione Group laundered more than $4bn in illegal funds between August 2021 and January 2025.
The Huione Group has been linked to money laundering services since July 2024. In March 2025, the National Bank of Cambodia revoked the company’s Huione Pay’s banking license, and in April 2026, the company’s former chairman, Li Xiong, was extradited to China to face money laundering charges..
Huoine’s websites have since been disabled.. The seizure was part of Operation Riptide, an ongoing FBI campaign targeting the criminal actors, infrastructure, and financial networks behind cybercrime, cyber-enabled crime, and fraud against the American people.. More in Cloud & Hyperscale.
29 Apr 2026. 23 Feb 2026. More in Cyber.
23 Jun 2026. 15 Jun 2026
