DOJ seizes cloud infrastructure in crypto laundering

TLDR

The U.S. Department of Justice has seized a cloud computing account that allegedly powered a multi billion dollar crypto laundering marketplace tied to Cambodias Huione Group.

1. The seized cloud account hosted backend infrastructure for Huione subsidiaries, including a Telegram marketplace used to move and conceal billions in scam proceeds.
2. The move shows law enforcement is increasingly targeting technical infrastructure around crypto crime, not just wallets, with growing risk that legit looking funds can be frozen later.
3. Next, expect expanded FinCEN rules, more sanctions on Southeast Asia scam networks, and tighter scrutiny of OTC desks, escrow services, and privacy heavy platforms.

Deep Dive

1. What DOJ Seized

According to court filings, the DOJ seized a cloud computing account used by subsidiaries of the Huione Group, a Cambodia based conglomerate accused of laundering billions from crypto investment fraud and cyber scams. The account hosted backend systems for Huione Guarantee (also called Haowang Guarantee), a Telegram based marketplace where vendors sold stolen card and ID data, malware proceeds, and offered escrow and laundering services for romance and investment scams in crypto.Huione infrastructure seizure

Officials describe Huione Guarantee as one of the largest illicit online marketplaces ever, surpassing earlier dark web markets like Silk Road, before Telegram forced it offline in 2025.cloud account linked to Huione The seizure is part of Operation Riptide, and follows Treasurys 2025 move to label Huione a primary money laundering concern and cut it off from the U.S. financial system.

2. Impact On Crypto Users

This action does not target ordinary crypto holders directly, but it underlines the risk of using unregulated escrow services, OTC channels on messaging apps, or VIP investment platforms that sit outside licensed exchanges. Investigators say the seized infrastructure helped move and conceal fraud proceeds before they were converted into banked funds, meaning assets that look clean on chain can later be traced back and frozen.huione infrastructure seizure

Americans reported more than 7.2 billion dollars in crypto investment fraud losses in 2025, out of over 20 billion in total cybercrime losses, and agencies now treat crypto scams, DeFi exploits, and laundering as a unified risk category.Treasury 10 billion scam warning

3. What To Watch Next

FinCEN is moving to extend its Huione rule to successor entity H Pay Service PLC and related operations, aiming to block workarounds and keep Huione linked flows out of the U.S. financial system.Treasury Huione and H-Pay crackdown At the same time, Treasury has sanctioned additional Southeast Asia scam networks tied to pig butchering and fake crypto platforms.

Industry groups are responding with security and compliance initiatives that try to show regulators that DeFi and exchanges can police themselves. For users and builders, the trend points to tighter controls on OTC desks, escrow markets, privacy tools, and any infrastructure that looks like a laundering hub.

Conclusion

By seizing cloud infrastructure rather than just wallets, U.S. authorities are signaling that every layer surrounding crypto transactions is now fair game for enforcement. For crypto users and builders, the edge increasingly lies in using venues with clear licensing, KYC and AML controls, and in assuming that opaque offshore setups can become targets even if their on chain activity initially appears normal.