The US Department of Justice announced Tuesday it has seized a cloud computing account used by subsidiaries of Cambodia-based HuiOne Group. The Treasury simultaneously unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group.
According to the DoJ, the subsidiaries helped transfer proceeds from cryptocurrency investment frauds, cyber scams, and other criminal activities across blockchain networks, converting illicit funds into the legitimate banking sector undetected.
The seized account hosted backend infrastructure for HuiOne Guarantee (also known as Haowang Guarantee), an illicit Telegram-based marketplace that handled billions of dollars in transactions between 2021 and 2025. Merchants on the platform sold personal and financial data, money laundering services, web development tools for building fraudulent investment platforms and phishing sites, and services related to human trafficking. They also offered face-swapping, voice cloning, and deepfake impersonation tools used in video calls with victims.
HuiOne Guarantee also provided escrow services for criminals transacting on its platforms. The DoJ stated that HuiOne Guarantee facilitated the movement of considerable funds stolen by Southeast Asian scam centers.
A July 2024 Elliptic analysis revealed HuiOne merchants also marketed tear gas, electric batons, and electronic shackles, tools used by scam compound operators to imprison and torture workers.
Assistant Attorney General A. Tysen Duva said: The HuiOne Group used this cloud computing account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed. Seizures of these marketplaces is critical in the fight against fraud that affects so many Americans.
Although HuiOne announced it was ceasing operations in May 2025, Flare researchers found more than 30 new marketplaces have emerged to fill the void, with operators building proprietary messaging platforms to bypass Telegram bans.
In a related action, the Treasury FinCEN designated H-Pay Service PLC as a primary money laundering concern. Elliptic said HuiOne had received more than 1 billion in cryptoasset transactions before being forced offline, making it the largest illicit online marketplace ever recorded, more than 25 times larger than Silk Road and AlphaBay combined.
