TLDR
US authorities have frozen about $938 million in cryptocurrency tied to scam networks after shutting down a major Telegram-based laundering marketplace.
- A Justice Department strike force restrained $52 million in one day targeting Xinbi Guarantee, bringing its total frozen scam crypto to roughly $938 million.
- Xinbi Guarantee reportedly processed more than $24 billion and served Southeast Asian scam operations, sanctioned groups, and North Korean hackers, showing how scams move money through crypto rails.
- The crackdown signals growing US focus on cross border scam ecosystems, encrypted messaging apps, and laundering services, raising freeze and sanctions risk for anyone touching these flows.
Deep Dive
1. Scale Of The Freeze
According to a recent report, the Justice Departments Scam Center Strike Force has now restrained around $938 million in scam linked cryptocurrency, following an operation against the Xinbi Guarantee marketplace that ran on Telegram.
In this single operation, investigators froze about $52 million in crypto, seized two payment wallets holding roughly $12 million, and moved to restrain 47 additional wallets believed to support money laundering on Xinbis network. A federal court also authorized seizure of Xinbis Telegram channels on 7 September 2026, effectively taking its core communication infrastructure offline.
Here, restrained means funds are frozen under court order and cannot be moved while investigations and forfeiture cases proceed.
2. How The Scam Network Used Crypto
Xinbi Guarantee functioned as an escrow marketplace, holding buyers payments until vendors completed services, but in practice it became a hub for laundering services and custom investment scam websites that recruited victims via messaging apps. Treasury reports that Xinbi processed over $24 billion in combined digital asset and fiat transactions since about 2022, mainly for Southeast Asian activity, and was reportedly used by North Korean hackers and sanctioned entities like the Jin Bei Group.
The US Treasury recently designated Xinbi Guarantee and supporting firms Safew Technology in Singapore and Anwen Technology in Cambodia, effectively cutting them off from compliant financial channels and putting anyone dealing with them at sanctions risk. The same enforcement push supported actions against 13 Chinese run scam compounds in Madagascar, highlighting how these operations span multiple countries and rely heavily on crypto as a value transfer layer.
Crypto is deeply embedded in global scam and trafficking ecosystems, so enforcement is now targeting infrastructure (wallets, apps, marketplaces), not just individual fraudsters.
3. What Crypto Users Should Watch
For everyday crypto users, the direct impact is not on mainstream coins, but on how and where they move funds. Using off the grid guarantee markets, laundering services, or sketchy over the counter desks can place assets inside wallets that enforcement later treats as part of scam flows, increasing the chance of freezes or forfeiture.
Regulators are also signaling closer scrutiny of encrypted messaging platforms that host payment bots, escrow channels, and laundering networks. More designations or seizures of Telegram and similar channels, plus chain analysis of scam clusters, are likely if these operations continue at scale.
The practical lens is simple: counterparties, platforms, and payment routes now matter almost as much as which token you hold.
Conclusion
This crackdown shows US agencies moving toward industrial scale disruption of scam ecosystems, freezing nearly a billion dollars in crypto tied to fraud, trafficking, and sanctioned actors. For crypto users, the key takeaway is not that major assets are unsafe, but that interacting with opaque laundering services, guarantee marketplaces, or high risk scam regions can pull otherwise legitimate funds into enforcement crosshairs. Watching where liquidity flows, which platforms draw regulatory attention, and how sanctions lists evolve is increasingly central to managing risk in crypto markets.
