{"id":26767,"date":"2025-05-14T15:02:04","date_gmt":"2025-05-14T15:02:04","guid":{"rendered":"https:\/\/dogewisperer.com\/telegram-cracks-down-on-suspected-8b-chinese-crypto-crime-marketplace-set-up-in-colorado\/"},"modified":"2025-05-14T15:02:04","modified_gmt":"2025-05-14T15:02:04","slug":"telegram-cracks-down-on-suspected-8b-chinese-crypto-crime-marketplace-set-up-in-colorado","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=26767","title":{"rendered":"Telegram Cracks Down on Suspected $8B Chinese Crypto Crime Marketplace Set Up in Colorado"},"content":{"rendered":"<div>\n<p>Messaging app Telegram has closed thousands of channels belonging to suspected Chinese crypto-crime marketplaces after new research shed light on the situation, according to Elliptic.<\/p>\n<p>The closure follows a <a href=\"https:\/\/www.elliptic.co\/blog\/xinbi-guarantee\">report<\/a> published by the blockchain analytics firm on Tuesday into the fast-growing Telegram-based marketplace called Xinbi Guarantee.<\/p>\n<p>The Colorado-incorporated marketplace has processed over $8.4 billion worth of transactions using Tether\u2019s USDT stablecoin since 2022. It facilitates services relating to money laundering, operating crypto scam compounds and other illicit services, such as intimidation and sex trafficking, according to Elliptic.<\/p>\n<p>\u201cElliptic is tracking around thirty other such marketplaces, all leveraging Telegram and stablecoin payments,\u201d the report said.<\/p>\n<p>Telegram did not immediately respond to a request for comment.<\/p>\n<p>Such marketplaces are a key part of the Southeast Asia-based global cyberscam epidemic by providing scammers with the tools needed to conduct fraud on an industrial scale.<\/p>\n<p>One of the biggest such marketplaces is Huione Guarantee, <a href=\"https:\/\/www.coindesk.com\/policy\/2025\/02\/13\/crypto-scam-revenue-from-pig-butchering-ai-schemes-likely-grew-in-2024-chainalysis-reports\">according to Chainalysis<\/a>, facilitates similar services to Xinbi. The firm behind it, Huione Group, has <a href=\"https:\/\/www.elliptic.co\/blog\/cyber-scam-marketplace?hs_amp=true\">ties<\/a> to Cambodia\u2019s ruling family.<\/p>\n<p>Xinbi and Huione, the two largest Telegram-based marketplaces, are responsible for a combined $35 billion in illicit transactions, Elliptic said.<\/p>\n<p>On May 1, the U.S. Treasury\u2019s Financial Crimes Enforcement Network (FinCEN) <a href=\"https:\/\/www.fincen.gov\/news\/news-releases\/fincen-finds-cambodia-based-huione-group-be-primary-money-laundering-concern\">designated<\/a> Huione Group a \u201cprimary money laundering concern,\u201d saying it helped launder at least $4 billion worth of illicit proceeds between August 2021 and January 2025.<\/p>\n<h2>Cyberscam epidemic<\/h2>\n<p>Services offered on marketplaces like Xinbi and Huione are infamous for enabling industrial-scale scam compounds across Southeast Asia.<\/p>\n<p>These compounds attract victims with the promise of well-paid IT work. When they arrive they are trafficked, imprisoned and <a href=\"https:\/\/bangkok.ohchr.org\/sites\/default\/files\/wp_files\/2023\/08\/ONLINE-SCAM-OPERATIONS-2582023.pdf\">forced<\/a> to carry out online<a href=\"https:\/\/www.secretservice.gov\/investigations\/investmentfraud-pigbutchering\"> pig butchering scams<\/a> to pay off phony debts.<\/p>\n<p>Xinbi vendors offer Starlink satellite internet equipment, which is often used by scam compounds, fake IDs and databases of stolen personal information used to target potential fraud victims, Elliptic said.<\/p>\n<p>Another big driver of business is money laundering services, according to the report. Such services are mostly used to launder the proceeds of pig butchering scams, but <a href=\"https:\/\/www.coindesk.com\/policy\/2024\/07\/15\/cambodian-payments-firm-received-150k-from-north-korean-hackers-lazarus-wallet-reuters\">funds from North Korean<\/a> crypto heists are also in the mix.<\/p>\n<p>Elliptic found about $220,000 in USDT originating from the $230 million WazirX <a href=\"https:\/\/www.coindesk.com\/business\/2024\/07\/18\/crypto-exchange-wazirx-sees-230m-in-suspicious-withdrawals-largely-100m-in-shib-token\">theft<\/a> in July was sent to Xinbi, indicating that vendors operating on the marketplace were employed to help launder proceeds of the heist.<\/p>\n<p>It\u2019s not clear whether North Korean IT workers are interacting with Xinbi vendors directly, though.<\/p>\n<p>\u201cOur hypothesis is that the funds are under the control of Chinese money laundering groups by the time they enter marketplaces such as Xinbi,\u201d Tom Robinson, chief scientist and co-founder at Elliptic, told CoinDesk over email.<\/p>\n<h2>Colorado connection<\/h2>\n<p>What sets Xinbi apart from other similar marketplaces, however, is its connection to the U.S.<\/p>\n<p>On its website, Xinbi describes itself as an \u201cinvestment and capital guarantee group company\u201d operating as a Colorado-based corporation, Elliptic said.<\/p>\n<p>The Colorado corporate register shows a company called \u201cXinbi Co., Ltd\u201d was incorporated in August 2022, with an office in Aurora, Colorado even though the Chinese-language marketplace is primarily used by fraudsters in Asia.<\/p>\n<p>\u201cThese marketplaces depend on trust,\u201d Robinson said. \u201cA U.S. incorporation does bring some level of legitimacy.\u201d<\/p>\n<p>Robinson also noted that similar marketplaces have previously conducted exit scams, where a business stops shipping orders while still receiving payments, eventually walking away with the money. \u201cAnything that inspires confidence will help attract customers,\u201d he said.<\/p>\n<p>In January 2025, the company\u2019s status was <a href=\"https:\/\/www.sos.state.co.us\/biz\/BusinessEntityDetail.do?quitButtonDestination=BusinessEntityResults&amp;nameTyp=ENT&amp;masterFileId=20221849161&amp;entityId2=20221849161&amp;fileId=20221849161&amp;srchTyp=ENTITY\">updated<\/a> to delinquent for failing to file a periodic report.<\/p>\n<p><strong><em>Read more: <a href=\"https:\/\/www.coindesk.com\/business\/2025\/05\/02\/cambodian-huione-group-received-usd98b-in-crypto-leading-to-u-s-crackdown-elliptic\">Cambodian Huione Group Received $98B in Crypto Leading to U.S. Crackdown: Elliptic<\/a><\/em><\/strong><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Messaging app Telegram has closed thousands of channels belonging to suspected Chinese crypto-crime marketplaces after new research shed light on the situation, according to Elliptic. The closure follows a report published by the blockchain analytics firm on Tuesday into the fast-growing Telegram-based marketplace called Xinbi Guarantee. The Colorado-incorporated marketplace has processed over $8.4 billion worth [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-26767","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/26767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=26767"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/26767\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}