FinCEN Details How Digital Asset Investment Scam Centers Launder Proceeds
Summary
FinCEN’s September 2026 alert details how digital asset investment scam centers use guarantee marketplaces, professional money launderers, and DeFi to move proceeds, and provides detection red flags for financial institutions.
Key points
- FinCEN bases its analysis on BSA reporting, blockchain data, open-source reporting, and law-enforcement information.
- The alert cites FBI figures showing reported U.S. cryptocurrency investment fraud losses rose from $907 million in 2021 to $7.2 billion in 2025.
- Guarantee marketplaces, typically organized through Chinese-language Telegram groups, connect scam operators with laundering services and vendors offering social media targeting and mass phishing.
- FinCEN describes three broad stages: collecting victim payments, obscuring digital asset origins on-chain, and integrating proceeds into the traditional financial system.
- Laundering methods include consolidation wallets, mixers, cross-blockchain swaps, and conversion into stablecoins, followed by transfers through money mules and underground banking services.
- Detection red flags include transactions linked to guarantee marketplaces, suspicious DeFi conversions, and stablecoins marketed as resistant to freezing; FinCEN cautions that no single indicator establishes illicit activity.
- FinCEN asks institutions filing related suspicious activity reports to include FIN-2026-SCAMCENTERS and relevant technical evidence, including wallet addresses, transaction hashes, and scam communications.
Article Details
- Publisher
- FinCEN
- Scope
- Digital asset investment scam centers, associated guarantee marketplaces and money laundering, and detection and reporting obligations for U.S. financial institutions; based on BSA reporting, blockchain data, open-source reporting, and law enforcement information.
- Key Statistics
- According to FBI IC3, reported U.S. victim losses from digital asset investment scams increased from $907 million in 2021 to $7.2 billion in 2025.
- FinCEN found that Huione Group laundered $4 billion in illicit proceeds between August 2021 and January 2025, including at least $300 million in digital assets from other cyber scams, including DPRK cyber heists and virtual currency investment scams.
- DOJ's coordinated actions announced on 2026-04-23 included the seizure of 503 fake investment websites.
- RRP cyber scam cases from October 2024 through June 2026 recorded $385,952,451.65 in ACH transfers initially destined for Asia and Pacific; initial destinations do not necessarily represent the ultimate destinations of proceeds.
- Recommendations
- Assess red flags alongside customer history, prevailing business practices, and related indicators; no single red flag establishes illicit activity.
- For relevant SARs, include FIN-2026-SCAMCENTERS in field 2 and the narrative, and select Fraud-Other in field 34(z) with the description Scam Centers.
- Include available technical indicators, transaction details, service provider identities, beneficial ownership information, and suspected geographic or criminal organization connections in SAR filings.
- Maintain risk-based customer due diligence, beneficial owner verification, ongoing transaction monitoring, and appropriate scrutiny of foreign counterparties and politically exposed persons.
- Participate in section 314(b) information sharing and expand appropriate cross-border information sharing to support investigations.
People
Threat Actors
Products
Haowang GuaranteeHuione Group’s extensive digital asset services and its online marketplace, Haowang Guarantee, had made Huione Group a “one stop shop” for criminals to launder digital assets obtained through illicit activities.Telegraminvestment fraud compound in Burma and attempted to open another compound in Cambodia, the seizure of a Telegram messaging app channel used to recruit human trafficking victims to a scam compound in Cambodia in order
Countries
BurmaOffer of Up to $10 Million for Information Leading to Financial Disruption of Tai Chang Scam Centers in Burma” (Apr. 23, 2026).CambodiaTCOs operate industrial-scale scam centers in Southeast Asia, primarily in Cambodia, Burma, and Laos.[^15] Criminal gangs have trafficked hundreds of thousands of people to these centers, where victims may have theirDPRKleast $300 million worth of digital assets from other cyber scams, including digital assets stemming from DPRK cyber heists and virtual currency investment scams.LaosTCOs operate industrial-scale scam centers in Southeast Asia, primarily in Cambodia, Burma, and Laos.[^15] Criminal gangs have trafficked hundreds of thousands of people to these centers, where victims may have theirUnited StatesFraud continues to be one of the largest sources of illicit proceeds in the United States, according to Treasury’s 2026 National Money Laundering Risk Assessment.[^3] Fraud and cybercrime are two of FinCEN’s Anti-Money
Industries
Digital asset servicesHuione Group’s extensive digital asset services and its online marketplace, Haowang Guarantee, had made Huione Group a “one stop shop” for criminals to launder digital assets obtained through illicit activities.Financial institutions- [Reminder of Relevant BSA Obligations and Tools for U.S. Financial Institutions](#reminder-of-relevant-bsa-obligations-and-tools-for-us-financial-institutions)