The United States Department of the Treasury has taken decisive action, imposing comprehensive sanctions on Xinbi Guarantee, a prominent digital marketplace identified as a central orchestrator of extensive cryptocurrency-related criminal schemes. This coordinated enforcement action, announced by federal agencies on Wednesday, targets a critical node in the global illicit finance ecosystem, aiming to dismantle operations that have facilitated over $24 billion in transactions, a significant portion of which involved digital currencies. The move underscores an escalating commitment by U.S. authorities to combat the growing threat of cyber-enabled financial crime, particularly those leveraging virtual assets to evade traditional financial controls and victimize individuals worldwide.
The Rise and Reach of Xinbi Guarantee: A Hub for Transnational Criminality
Operating as a sophisticated Chinese-language service since approximately 2022, Xinbi Guarantee rapidly established itself as a pivotal platform for various illicit activities, ranging from intricate cyber scams to large-scale money laundering. The Treasury’s Office of Foreign Assets Control (OFAC) detailed how the platform functioned as a crucial intermediary, providing essential escrow and liquidation services that enabled fraudulent call centers across Southeast Asia to procure necessary equipment, launder vast sums of illicit proceeds, and sustain their exploitative operations. These call centers are frequently associated with "pig butchering" scams, where fraudsters cultivate relationships with victims over months before coercing them into fraudulent cryptocurrency investments, ultimately draining their savings. The human cost of these operations is equally devastating, often involving victims of human trafficking forced into labor within these scam compounds.
Beyond facilitating these widespread scams, Xinbi Guarantee’s services extended to other high-profile and dangerous actors. Federal investigators allege the platform provided critical support to North Korean cyber operatives, known for their state-sponsored hacking and illicit finance activities aimed at funding weapons programs. Furthermore, Xinbi was found to be connected to organizations previously sanctioned, such as the notorious Prince Group, a Cambodia-based conglomerate implicated in significant money laundering, human trafficking, and drug smuggling operations. This broad clientele highlights Xinbi’s deep integration into the fabric of transnational organized crime, making it a critical target for disruption. The platform’s ability to process such massive volumes of transactions, estimated by TRM Labs Global Head of Policy Ari Redbord to exceed $36 billion overall, underscores its central role, particularly after the closure of the Huione platform, positioning Xinbi as the dominant escrow service for Southeast Asian fraud operations.
A Coordinated Enforcement Blitz: Seizures, Sanctions, and Digital Disruptions
The enforcement action on September 9, 2026, was a multi-pronged assault designed to cripple Xinbi Guarantee’s operational and financial infrastructure. The Justice Department’s Scam Center Strike Force, a specialized unit dedicated to dismantling these criminal enterprises, achieved significant seizures of digital assets. Specifically, two cryptocurrency wallets directly utilized by Xinbi for collecting vendor fees were confiscated, containing approximately $12 million in various cryptocurrencies. This immediate financial blow was compounded by judicial authorization to freeze an additional 47 cryptocurrency wallets linked to money laundering activities throughout Xinbi’s broader operational network. In total, authorities successfully restrained or confiscated over $52 million in digital assets, representing a substantial disruption to the platform’s financial liquidity and its ability to process illicit funds.
However, the intervention extended beyond financial assets. Recognizing the importance of communication channels for criminal coordination, a federal district judge granted authorization on September 7, 2026, to seize Xinbi Guarantee’s primary Telegram communication channels. These channels were not merely forums for discussion; they served as critical marketplaces where criminal vendors openly promoted a range of illicit services, including sophisticated money laundering schemes, fraudulent investment platforms, and disturbingly, recruitment drives for forced labor scam facilities. The closure of these channels, as observed and reported by blockchain analytics firm Bitrace, represents a significant blow to the operational coherence of Xinbi’s network, impeding their ability to communicate, coordinate, and recruit new victims or perpetrators.
This complex investigation and subsequent enforcement action were bolstered by crucial contributions from key partners in the cryptocurrency ecosystem. Stablecoin provider Tether played a significant role in assisting the Justice Department, leveraging its internal compliance capabilities to track illicit flows. Similarly, blockchain analytics company Elliptic provided invaluable support to the U.S. Secret Service, tracing the intricate web of transactions and identifying the platform’s activities across various blockchain networks. The collaboration between government agencies and private sector entities, particularly those specializing in digital asset tracing, proved instrumental in unraveling Xinbi’s sophisticated operations and securing the evidence necessary for these sweeping actions.
Xinbi’s Futile Attempts at Evasion and the Persistence of Law Enforcement
The intelligence gathered by federal investigators revealed that Xinbi Guarantee, anticipating increased scrutiny and potential law enforcement pressure, had initiated strategic operational changes in an attempt to evade detection and maintain its criminal enterprise. Beginning around June 2025, the organization embarked on a significant migration, attempting to shift its vast merchant and money laundering networks to a secure messaging application developed by SafeW Technology, a company registered in Singapore. This move was clearly designed to move their communications and coordination to a platform they hoped would be less susceptible to external monitoring and intervention.
Concurrently with this relocation effort, Xinbi introduced a proprietary cryptocurrency wallet solution named XinbiPay, developed by Anwen Technology, a firm registered in Cambodia. The creation of XinbiPay was intended to provide an in-house, seemingly secure payment processing system, giving Xinbi greater control over its financial flows and potentially creating additional layers of obfuscation for illicit transactions. However, these proactive measures ultimately proved futile. In a testament to the comprehensive nature of the U.S. enforcement action, both SafeW Technology and Anwen Technology were explicitly included in Wednesday’s sanctions announcement alongside Xinbi Guarantee. This demonstrates a clear intent by authorities to target not just the primary criminal entity but also the enabling infrastructure and technology providers that support such illicit operations, effectively cutting off avenues for relocation and continued activity.
International Cooperation and a Broader Strategic Imperative
The U.S. sanctions against Xinbi Guarantee are not an isolated incident but rather a component of a broader, internationally coordinated effort to combat cyber-enabled financial crime. The significance of this global approach was highlighted by previous actions taken by British authorities. In March of an unspecified year prior to the U.S. action, the United Kingdom had already sanctioned Xinbi, freezing its holdings within the UK financial system and prohibiting it from accessing British commercial systems. This earlier action by a key international partner signals a growing consensus among leading nations regarding the severity of these threats and the necessity for unified responses.
U.S. Treasury Secretary Scott Bessent underscored the strategic importance of these actions, emphasizing the staggering scale of financial losses incurred by Americans due to these Southeast Asian scam facilities, amounting to billions annually. Secretary Bessent reaffirmed the department’s unwavering commitment to continuing and intensifying efforts to dismantle these criminal enterprises, recognizing the severe economic and social damage they inflict. U.S. Attorney Jeanine Pirro further illustrated the global reach of these law enforcement initiatives, noting that the task force had deployed personnel to Madagascar to combat similar fraudulent operations in that region. This deployment signifies a proactive and adaptive strategy, pursuing criminal networks wherever they emerge and disrupt their operations globally.
The imposed sanctions carry significant legal and financial ramifications. They mandate the freezing of all U.S.-based property and interests connected to Xinbi Guarantee, SafeW Technology, and Anwen Technology. Furthermore, they strictly prohibit American individuals and entities from engaging in any transactions with the designated organizations. This effectively cuts off their access to the vast U.S. financial system and significantly impedes their ability to conduct international business, isolating them from legitimate global commerce. The objective is to deny these criminal networks the financial infrastructure necessary to operate, thus making their illicit activities unsustainable.
Implications and the Future of Combating Cybercrime
The sanctioning of Xinbi Guarantee marks a significant victory in the ongoing battle against transnational organized crime and illicit cryptocurrency usage. It sends a strong message to other digital marketplaces and service providers that facilitate criminal activity: enabling fraud, money laundering, and human exploitation carries severe consequences. For the cryptocurrency industry, this action reinforces the growing expectation for platforms and stablecoin issuers to enhance their compliance frameworks and actively collaborate with law enforcement to identify and disrupt illicit flows. The involvement of Tether and Elliptic demonstrates a pathway for responsible industry participation in maintaining financial integrity.
The broader implications extend to the evolving landscape of cybercrime. As law enforcement agencies become more adept at tracing cryptocurrency transactions and disrupting digital infrastructures, criminal organizations are forced to innovate their evasion tactics, as seen with Xinbi’s attempted relocation. However, the coordinated response from multiple agencies and international partners showcases an equally evolving and sophisticated counter-response from authorities. This ongoing cat-and-mouse game necessitates continuous investment in blockchain analytics, intelligence sharing, and rapid response capabilities. The focus on infrastructure providers like Xinbi Guarantee, rather than just individual scammers, represents a strategic shift towards dismantling entire ecosystems that enable widespread fraud.
Ultimately, the U.S. Treasury’s action against Xinbi Guarantee is a critical step towards safeguarding the integrity of the global financial system and protecting vulnerable populations from sophisticated, digitally-enabled criminal schemes. It underscores the global nature of these threats and the indispensable role of international collaboration and advanced technological tools in bringing perpetrators to justice and reclaiming stolen assets. As digital currencies become more integrated into the global economy, the vigilance and proactive enforcement demonstrated in this case will be paramount in mitigating the risks posed by those who seek to exploit these innovations for illicit gain.
