$100M Pyramid Scheme Linked to Prominent Chinese Filecoin Project

A Cambodia-headquartered financial group recently cut off from the U.S. financial system is suspected of having operated in South Korea, raising fresh questions about cross-border crypto and currency flows tied to the group. According to the Dong-A Ilbo, which cited data from the Korea Customs Service (KCS), Huione Group—now sanctioned by the U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN)—appears to have run a currency exchange in Seoul from 2018 to July 2024. The outlet reported that a banner on the premises displayed a logo identical to Huione’s, prompting suspicions about its ownership and control.Photo by Aleksandar Pasaric on PexelsTies to North Korean hackersThe exchange reported conducting roughly $20,000 in annual currency conversions during that period, excluding cryptocurrency transactions. The timeline overlaps with a period in which Huione Group reportedly received $150,000 in cryptocurrency from the North Korean hacking group Lazarus.  Connections also extend to Cambodia. Panda Bank—a local lender that shares a building with Huione subsidiaries—supports USDT transactions originating from South Korea. Panda Bank director He Yanming is listed as the owner of Huione Crypto, a virtual asset service provider (VASP), suggesting potential links between operations in Seoul and Phnom Penh. These developments come against the backdrop of a U.S. investigation disclosed in May, in which FinCEN said Huione’s business networks, including payments arm Huione Pay, collectively laundered at least $4 billion in illicit proceeds between August 2021 and January 2025. Crypto used in $2.6B illegal conversionsMeanwhile, recent KCS data also shows a rise in illegal currency conversions involving cryptocurrency by foreign nationals. The Korea Economic Daily reported conversions totaling 432 billion won ($302 million) in 2021, climbing to 836 billion won ($584.5 million) in 2023 and 956 billion won ($668.4 million) last year. Over the past eight years, the total amount involved in such cases reached 3.7 trillion won ($2.59 billion) across 28 instances. By value, Chinese nationals accounted for 84.1% of the total, followed by Australians (11.1%), Vietnamese (3.2%), and Russians (1.6%). The growing prevalence of cryptocurrency in illicit activity parallels a broader surge in crypto investment within the country. Many South Koreans have turned to digital assets, often with home ownership as a long-term goal. Trading on local exchanges, Bloomberg reported, is heavily skewed toward more volatile altcoins, which make up more than 80% of total volume.  That stands in contrast to global markets, where investors largely focus on Bitcoin and Ethereum, which together make up more than half of overall trading. The momentum in local crypto investment intensified after Donald Trump’s U.S. presidential victory, with crypto trading in Korea reaching $27 billion in December 2024, about 80% of turnover on the KOSPI stock index. The investigation underscores the growing challenge for regulators in tracking and containing cross-border financial networks that rely on cryptocurrency and informal money transfers. As crypto adoption deepens in South Korea and scrutiny widens abroad, authorities find themselves navigating an increasingly intricate intersection of financial opportunity, enforcement, and risk. 

Crypto Features in India-UK Markets DialogueAccording to a press release published by HM Treasury, the 2nd India-UK Financial Markets Dialogue meeting held on Wednesday featured six key themes with crypto featuring among them.©Pexels/SkitterphotoThe event brought officials from both nations together in the first in-person financial dialogue since 2017. While the meeting considered banking, insurance and reinsurance, capital markets, asset management and sustainable finance, it also allotted time to discuss payments and crypto-assets.CBDC knowledge sharingBoth sets of officials discussed the scope for augmenting knowledge on Central Bank Digital Currencies (CBDC) by way of mutual learning. The officials agreed on the importance of robust global approaches relative to the emergence and development of crypto-assets internationally. The joint statement issued following the meeting revealed that progress relative to the G20 roadmap for enhancing cross-border payments was a matter which was discussed. It’s an item that could have major implications for the use of cryptocurrency in cross border transactions.Global collaborationThe meeting marks another move towards greater global collaboration on policy and regulation relative to digital payment systems and crypto assets. Earlier this month, India’s Finance Minister Nirmala Sitharaman said that the introduction of any new regulations on digital assets needs to be coordinated on a global basis. “The G20 and its members agree that it’s not going to be possible to have an independent, standalone country dealing with crypto assets”, Sitharaman stated at a news conference following a meeting of central bank governors and G20 finance ministers.There’s a growing recognition among politicians, government and central bank officials that decentralized money doesn’t end at a territory’s borders due to its inherently decentralized properties.Taking steps to regulate cryptoWhile on the one hand strategizing as to how digital assets can be best controlled on a global level, India is also taking its own individual steps towards national regulatory action. Recently, it expanded its Prevention of Money Laundering Act (PMLA) to include consideration of digital assets. The newly amended PMLA will now deal with the exchange of digital assets for fiat money and vice versa. It also considers safekeeping, transfer and administration relative to cryptocurrency. Furthermore, its broadened scope deals with financial services offered related to virtual or digital assets.Rajagopal Menon, the VP of India’s leading cryptocurrency exchange WazirX, has said that “regulations levied by India have been baby steps toward institutional participation in the crypto exchange.” While market participants in the digital assets space are apprehensive about the regulatory measures that governments and state regulators choose to adopt, so long as the objective isn’t to regulate the innovation out of existence, such developments can have a profoundly positive effect on the digital assets market.There’s no doubt that in line with Menon’s point relative to the Indian context, the same scenario can play out in all digital markets given the application of the right regulatory approach. Institutional investment for the most part has eluded crypto despite many already heralding its arrival in recent years. Institutions move slowly and the only way in which they will be comfortable in working with digital assets is with complete regulatory clarity having been set out.So while some in crypto may be concerned at the mention of global regulatory coordination in respect of digital assets, so long as it doesn’t go too far, greater work towards improved regulatory clarity in the digital assets market can be a catalyst for further adoption and growth in India, the UK and further afield.

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies. Huoine PayOn July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. Photo by allPhoto Bangkok on Unsplash‘Pig butchering’It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.”  Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.” The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet. The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform. Compromising crypto businessesIn a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications. A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware.  Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024.