U.S. Takes Down Xinbi Guarantee Scam Network, Freezes $52.8M in Crypto
The DOJ disrupted an online scam marketplace linked to Chinese organized crime, seizing Telegram channels and crypto assets. The operation targeted 13 scam compounds in Madagascar.
TL;DR
- DOJ shut down Xinbi Guarantee, a marketplace offering scam-as-a-service tools.
- Authorities seized Telegram channels and froze $52.8 million in cryptocurrency.
- Scam Center Strike Force deployed to Madagascar to dismantle 13 physical scam sites.
- Operation highlights growing international coordination against cybercrime infrastructure.
- Targets included Chinese-organized crime groups running tech-enabled fraud operations.
In a major international crackdown on cybercrime, the U.S. Department of Justice has taken down Xinbi Guarantee—an online marketplace that provided tools and services for large-scale scams. The operation involved seizing key communication channels on Telegram, confiscating cryptocurrency wallets, and freezing over $52.8 million in digital assets tied to the scheme.
As part of the broader effort, the DOJ's Scam Center Strike Force was deployed to Madagascar, where they worked with local authorities to shut down 13 physical scam compounds allegedly operated by Chinese organized crime syndicates. This multi-pronged approach underscores the evolving tactics used by law enforcement to combat increasingly sophisticated and globally distributed cybercriminal networks.
Operation Breakdown
- Xinbi Guarantee functioned as a scam-as-a-service platform, enabling fraudsters to launch phishing, romance scams, and business email compromise attacks.
- Telegram channels used to coordinate and manage the marketplace were seized as part of the takedown.
- Two cryptocurrency wallets associated with the operation were confiscated, resulting in the freeze of $52.8 million in digital currency.
- The Scam Center Strike Force conducted on-the-ground operations in Madagascar to dismantle physical scam call centers.
Implications for Cybersecurity Teams
- This case demonstrates how cybercriminals are leveraging legitimate platforms like Telegram for coordination and monetization.
- Organizations should monitor for abuse of messaging apps and implement strict access controls to prevent internal misuse.
- The use of decentralized financial systems like cryptocurrency complicates asset recovery, highlighting the need for proactive threat intelligence.
- Cross-border collaboration between law enforcement agencies can serve as a model for private sector incident response involving global adversaries.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.