DoJ Seizes Huione Cloud Account in Cyber Scam Laundering Crackdown

The U.S. Department of Justice announced on Tuesday the seizure of a cloud computing account operated by subsidiaries of Cambodia-based conglomerate HuiOne Group, a network accused of laundering proceeds from cryptocurrency investment frauds, cyber scams, and other criminal schemes. The Treasury Department simultaneously imposed fresh sanctions against nine individuals and 26 entities linked to the Prince Group. According to the DoJ, the seized account hosted backend infrastructure for HuiOne subsidiaries, including HuiOne Guarantee (formerly Haowang Guarantee), an illicit Telegram-based marketplace that processed billions of dollars in transactions between 2021 and 2025. The platform peddled stolen personal and financial data, money laundering services, phishing infrastructure, web development kits for fraudulent investment platforms, and human trafficking recruitment services—threats that underscore why consumers should routinely run an email breach check to monitor whether their data has surfaced on dark web forums.

Beyond data brokerage, HuiOne Guarantee offered escrow services to facilitate transactions between criminals, enabling money launderers to convert stolen cryptocurrency into clean banking sector funds. The platform also served as a marketplace for crimeware tools, including software enabling face swapping, voice cloning, and deepfake-powered impersonation during live video calls with victims. An Elliptic analysis from July 2024 further revealed that HuiOne merchants marketed tear gas, electric batons, and electronic shackles to scam compound operators, who referred to imprisoned workers as "dogs" and "dog pushers" to be controlled as "runaway dogs."

"The HuiOne Group used this cloud computing account as part of a technological backbone that allowed billions in fraud proceeds to be transferred, moved, and concealed—much of it stolen through Southeast Asian scam centers," said Assistant Attorney General A. Tysen Duva of the Justice Department's Criminal Division. Despite HuiOne announcing its closure in May 2025, threat intelligence firm Flare has identified more than 30 successor marketplaces that have since emerged, with operators building proprietary messaging platforms to circumvent Telegram's enforcement actions. Given the proliferation of these platforms and the weaponization of deepfake technology, users should conduct a comprehensive privacy checkup to assess their digital exposure and secure accounts against the full spectrum of fraud tools now circulating in this ecosystem.