What the DOJ seized and why it matters
The DOJ announced on June 23, 2026 that it seized a cloud computing account that hosted backend infrastructure for Huione Guarantee, also known as Haowang Guarantee. The department described the account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed. For related coverage, see U.S. Government Seizes $7.8M XRP in DEA Operation.
The action builds on a longer U.S. enforcement campaign. FinCEN finalized a Section 311 special measure against Huione Group in October 2025 after designating it a primary money laundering concern. The agency’s analysis found that Huione received at least USD 4 billion in illicit proceeds between August 2021 and January 2025. For related coverage, see U.S. Government Seizes $7.8 Million in XRP.
FinCEN’s breakdown attributed at least USD 300 million of those proceeds specifically to cyber and CVC scam activity. A separate finding tied at least USD 37.6 million to heists attributed to North Korean-linked actors.
Blockchain analytics firm Elliptic put the gross scale even higher, stating that Huione Guarantee received more than USD 31 billion in total cryptoasset transactions before it was forced offline. The gap between FinCEN’s illicit-proceeds figure and Elliptic’s gross-volume estimate reflects the difference between confirmed laundering and overall platform throughput.
“Huione was the largest illicit marketplace the world has ever seen. This moment shows what the public and private sectors can achieve.”
Simone Maini, Elliptic CEO, via company statement
Coordinated sanctions and regulatory expansion
The DOJ seizure did not happen in isolation. On the same day, the U.S. Treasury’s OFAC sanctioned nine individuals and 26 entities linked to Prince Group, describing Huione as a critical laundering node within that network. The action mirrors a growing pattern of coordinated U.S. crypto seizure operations across multiple agencies.
FinCEN also proposed on June 23 amending its October 2025 Huione rule to include H-Pay Service PLC and any successor entity, closing a potential loophole where the group could rebrand to evade restrictions. The move signals that U.S. regulators intend to pursue Huione-linked infrastructure regardless of corporate restructuring.
The DOJ press release cited FBI data showing that crypto investment fraud, often facilitated through pig-butchering schemes, generated over USD 7.2 billion in reported losses in the IC3’s 2025 report. Huione Guarantee allegedly served as a primary marketplace connecting scam operators with money laundering services.
What to watch after the seizure
The infrastructure seizure raises immediate questions about whether Huione’s remaining operations can continue. Unlike sanctions that restrict banking access, seizing backend cloud infrastructure directly disrupts platform functionality. U.S. authorities have increasingly turned to this kind of technical disruption, as seen in recent federal crypto seizure actions targeting wallets and operational accounts.
Court filings following the seizure warrant could reveal more about the technical scope of Huione’s operations, including which cloud provider hosted the account and how many subsidiary platforms depended on it. Neither Huione Group nor its affiliates have publicly responded to the action.
Compliance teams at exchanges and stablecoin issuers will be watching for updated OFAC designations that could expand the list of sanctioned addresses. FinCEN’s proposed rule expansion to cover successor entities suggests the agency expects Huione-linked actors to attempt reconstitution under new names, a pattern also observed in international crypto enforcement cases.
The coordinated timing of the DOJ seizure, Treasury sanctions, and FinCEN rule expansion represents one of the most comprehensive single-day enforcement actions targeting crypto laundering infrastructure to date. Further agency statements or sealed indictments could follow in the coming weeks.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
