The **U.S. Department of Justice (DoJ)** recently announced the seizure of a cloud computing account utilized by subsidiaries of the Cambodia-based corporate conglomerate, **HuiOne Group**. This action comes as the **U.S. Treasury Department** unveiled fresh sanctions against nine individuals and 26 entities linked to the **Prince Group**.  ### Orchestrating Billions in Illicit Transactions According to the DoJ, **HuiOne Group**'s subsidiaries are alleged to have facilitated the transfer of proceeds from cryptocurrency investment frauds, cyber scams, and various other criminal activities. This infrastructure allowed for the conversion of illicit funds into the legitimate banking sector, effectively bypassing detection. Specifically, the seized account hosted the backend for services like **HuiOne Guarantee** (also known as **Haowang Guarantee**). This platform operated an illicit Telegram-based marketplace, processing billions of dollars in transactions between 2021 and 2025. It peddled a wide array of crimeware tools, including: * Personal and financial data * Money laundering services * Web development for fraudulent investment and phishing sites * Procurement of individuals for human trafficking schemes * Software for face swapping, voice cloning, and deepfake impersonation during video calls with victims ### Facilitating Southeast Asian Scam Centers **HuiOne Guarantee** also provided escrow services for criminals, further enabling the movement of substantial funds stolen by **Southeast Asian scam centers**. A July 2024 analysis by **Elliptic** revealed disturbing details, indicating that merchants on **HuiOne** even marketed tools like tear gas, electric batons, and electronic shackles for use by scam compound operators to imprison and torture their workers. The company noted that merchants referred to 'preventing escapers' and controlling 'runaway dogs,' with those forced to work in the compounds often called 'dogs' or 'dog pushers.' Assistant Attorney General A. Tysen Duva of the Justice Department's Criminal Division stated, "The **HuiOne Group** used this cloud computing account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed – much of it stolen through Southeast Asian scam centers." ### The Resilient Underbelly of Cybercrime Despite **HuiOne** announcing its cessation of operations in May 2025, a new analysis from **Flare** indicates that over 30 successor marketplaces have emerged. These new platforms are building proprietary messaging systems to circumvent Telegram's bans, demonstrating the adaptive nature of these criminal enterprises. **Flare** researcher Chris d'Eon commented on the enforcement efforts, saying, "The wave of enforcement in 2025 was the first coordinated attempt to reach both the financial and physical layers of the ecosystem at the same scale. It has produced visible adaptation, including reshuffled channel branding, redistributed flows across successor markets, and accelerated work on alternative venues. However, it has not meaningfully reduced volume across the ecosystem in aggregate." ### Treasury's Continuous Pressure In parallel, the **U.S. Treasury's Financial Crimes Enforcement Network (FinCEN)** has designated **H-Pay Service PLC** as a primary money laundering concern. This measure aims to prevent **HuiOne Group**'s attempts to bypass being cut off from the U.S. financial system, a designation initially made by **FinCEN** in May 2025. **Elliptic** further highlighted the scale of **HuiOne**'s operations, noting that it had received over $31 billion in cryptoasset transactions by the time it was forced offline. This makes it the largest illicit online marketplace ever recorded, exceeding the combined scale of **Silk Road** and **AlphaBay** by more than 25 times. ### Sanctions Against Prince Group This development also coincides with Treasury sanctions against the leadership and investors of **Prince Group**, including those involved in scam compounds and front companies. This follows **Prince Group**'s classification as a **Transnational Criminal Organization (TCO)** in October 2025 for its role in a criminal enterprise built on scam compounds, fraud, and money laundering. **Prince Group**'s chairman, **Chen Zhi**, has since been arrested, extradited to China, and stripped of his Cambodian citizenship. Treasury officials emphasized the ongoing threat: "Transnational criminal organizations based in Southeast Asia, like the **Prince Group TCO** and with support of their enablers like **HuiOne Group**, continue to target Americans through large-scale cyber-enabled fraud and scam operations."