U.S. DISRUPTS XINBI GUARANTEE CYBER SCAM MARKETPLACE AND RESTRAINS MORE THAN $52 MILLION IN CRYPTOCURRENCY

WASHINGTON — The United States has launched a coordinated enforcement action against Xinbi Guarantee, a Chinese-language illicit marketplace that federal authorities say helped power cyber scams, money laundering, human trafficking, cryptocurrency fraud, and other transnational criminal activity tied to scam compounds operating across Southeast Asia.

On September 9, 2026, the U.S. Department of the Treasury’s Office of Foreign Assets Control sanctioned Xinbi Guarantee as a significant transnational criminal organization while the Department of Justice’s Scam Center Strike Force moved against the marketplace’s Telegram infrastructure and cryptocurrency wallets. Federal authorities said more than $52 million in cryptocurrency linked to scam money laundering was restrained in a single day, bringing the Strike Force’s total restrained assets to approximately $938 million.

Xinbi Guarantee operated as more than a communications channel. According to allegations in a seizure warrant unsealed by the Justice Department, vendors used Xinbi’s Telegram-based marketplace to sell services to scam center operators, including the creation of fraudulent investment websites, laundering of proceeds stolen through wire fraud, and recruitment of trafficking victims to work in scam compounds.

According to the seizure-warrant allegations, the marketplace also functioned as an escrow intermediary. Once a scam operator purchased a service, Xinbi held funds until the vendor completed the work, providing a degree of transactional assurance inside a criminal marketplace. Federal investigators traced funds stolen from U.S. victims to specific vendors advertising money laundering services through Xinbi and posting cryptocurrency wallet addresses for payment.

On September 7, the U.S. District Court for the District of Columbia authorized the seizure of Telegram channels hosting the marketplace.

Under the same warrant, the Scam Center Strike Force seized two cryptocurrency wallets used by Xinbi to collect vendor payments. Those wallets held approximately $12 million. Authorities also sought restraint of 47 additional cryptocurrency wallets believed to be connected to money laundering activity across Xinbi’s network and vendors servicing scam operations. Federal officials credited Tether with providing assistance during the investigation.

Treasury’s action went further by formally designating Xinbi Guarantee under Executive Order 13581, as amended, which targets significant transnational criminal organizations.

Treasury said Xinbi operated as a central node connecting scam center operators with merchants offering financial services, technological infrastructure, money laundering capabilities, and other goods used to support cybercrime operations. The platform also provided escrow services to scam operators, laundering networks, and cybercrime syndicates.

Since its emergence around 2022, Treasury said Xinbi Guarantee processed the equivalent of more than $24 billion in digital assets and fiat currency, with much of that activity centered in Southeast Asia. Treasury said that following FinCEN’s listing of Huione Pay, cybercriminals attempted to preserve their operations by transferring activity to Xinbi Guarantee’s marketplace.

The scale of Xinbi’s operation shows how modern cybercrime ecosystems have developed beyond individual hackers or isolated scam crews.

Scam operators can obtain payment infrastructure, laundering services, communications platforms, fraudulent websites, recruitment channels, and other technical support without developing those capabilities internally.

That service-based model allows criminal organizations to divide operations among specialized providers while using centralized marketplaces to coordinate payments and transactions.

Treasury also sanctioned Anwen Technology Co., Ltd. and SafeW Technology Co., Ltd., companies it said provided applications and other support used in Xinbi’s illicit operations.

SafeW Technology, based in Singapore, developed the SafeW encrypted messaging application. Treasury said Xinbi began migrating merchant and money-laundering networks to SafeW around June 2025 as law-enforcement scrutiny intensified.

Anwen Technology, based in Cambodia, developed XinbiPay, also known as NewPay wallet, a cryptocurrency payment and digital wallet application associated with Xinbi’s operations.

OFAC said both companies materially assisted or provided financial, technological, or other support to Xinbi Guarantee.

The sanctions carry significant legal and financial consequences.

Property and interests in property belonging to the designated entities that are located in the United States or controlled by U.S. persons are blocked and must be reported to OFAC. Entities owned, directly or indirectly, 50 percent or more by one or more blocked persons are also blocked.

U.S. persons are generally prohibited from engaging in transactions involving designated entities unless authorized by OFAC or otherwise exempt. Treasury also warned that violations can result in civil or criminal penalties and that foreign persons can face exposure for causing U.S. persons to violate sanctions or for attempting to evade those restrictions.

The Xinbi operation formed part of a broader expansion by the Justice Department’s Scam Center Strike Force.

U.S. Attorney Jeanine Ferris Pirro announced that the Strike Force is extending operations beyond Southeast Asia and recently deployed personnel to Madagascar to assist local authorities in dismantling scam compounds there.

Federal officials said the two-week deployment supported the takedown of 13 scam centers operated by Chinese organized crime syndicates. The Strike Force assisted authorities in processing more than 3,200 electronic devices seized during the operation.

Authorities conducted interviews involving nearly 400 arrested individuals, and approximately 30 were identified by DOJ as Chinese leaders of the scam compounds. The Justice Department said those individuals were repatriated to China by the Chinese government. U.S. investigators also opened cases based on information developed during the operation.

The Scam Center Strike Force was launched in November 2025 to confront organized cyber-enabled fraud operations linked primarily to Chinese criminal syndicates operating scam centers in Southeast Asia.

Its focus includes cryptocurrency investment fraud, cyber-enabled fraud, money laundering, human trafficking, and the financial infrastructure supporting those operations.

According to Justice Department figures citing the FBI’s Internet Crime Complaint Center, cyber-enabled fraud accounted for almost 85 percent of losses reported to IC3 in 2025. Reported losses from cryptocurrency investment fraud rose from approximately $4.57 billion in 2023 to $8.65 billion in 2025, an increase of 89 percent. Federal authorities cautioned that reported figures likely understate the true scale of losses because many victims never report the crimes.

The Strike Force includes the FBI, U.S. Secret Service, Justice Department Criminal Division, U.S. Postal Inspection Service, IRS Criminal Investigation, Homeland Security Investigations, and multiple U.S. Attorney’s Offices, with additional coordination from Treasury and the State Department.

Assistant U.S. Attorney Karen P. Seifert directs the Strike Force. The Xinbi seizures were handled by Seifert, Assistant U.S. Attorney Rick Blaylock Jr. of the District of Columbia, and Assistant U.S. Attorney Mac Caille Peturrson of the District of Alaska, along with the FBI’s Chicago Field Office and the U.S. Secret Service Washington Field Office.

The Xinbi action represents a direct attack on the infrastructure surrounding the scam economy rather than a single fraud scheme.

By targeting the marketplace, wallet system, communications infrastructure, service providers, and financial channels supporting scam compounds, federal authorities are attempting to disrupt the commercial ecosystem that allows large-scale fraud operations to function across borders.

The removal of one marketplace does not eliminate the underlying criminal demand for those services. What the operation demonstrates is that the infrastructure supporting cyber-enabled fraud has itself become a law-enforcement target, including the escrow systems, cryptocurrency wallets, communications platforms, technical vendors, and financial intermediaries that allow organized scam networks to operate at industrial scale.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE