The U.S. Department of Justice has seized a cloud computing account tied to Cambodia’s Huione Group, which allegedly laundered billions in cryptocurrency fraud proceeds.
The press release marks one of the largest actions yet against crypto-enabled criminal infrastructure, highlighting the growing scale of cybercrime and the intensifying regulatory crackdown.
Money Laundering Crackdown
The Department of Justice’s action against Huione Group stems from a multi-year investigation into transnational crime networks operating out of Southeast Asia.
Huione, a Cambodia-based conglomerate with ties to financial services and technology, allegedly ran subsidiaries that acted as laundering hubs for billions of dollars in illicit funds.
According to investigators, Huione Guarantee—one of its key platforms—functioned as a marketplace where criminal groups could exchange stolen data, launder proceeds from scams, and even advertise services ranging from malware distribution to human trafficking.
The seized cloud computing account was central to this operation. It hosted the digital infrastructure that allowed Huione’s network to scale globally, using encrypted messaging apps like Telegram to connect buyers and sellers of illicit services.
By targeting the account rather than just individual actors, the DOJ effectively disrupted the backbone of the laundering ecosystem, cutting off access to servers that processed and stored fraudulent transactions.
The seizure was part of Operation Riptide, an FBI-led initiative focused on dismantling large-scale cybercrime networks.
By freezing Huione’s cloud assets, investigators not only disrupted ongoing laundering but also gained access to valuable forensic data that could help trace the flow of billions in stolen cryptocurrency.
This approach reflects a shift in law enforcement strategy: rather than chasing individual wallets or accounts, authorities are now targeting the platforms and infrastructure that enable fraud at scale.
Cloud Computing as a Cyber Threat
A cloud computing account refers to infrastructure hosted on third-party platforms that provides storage, processing, and networking services.
Criminal groups exploit these accounts to run marketplaces, escrow services, and laundering operations without needing physical servers.
By seizing Huione’s account, the DOJ effectively dismantled the technological backbone that enabled billions in illicit crypto transactions.
Is This Type of Crypto Fraud Common?
Yes. Fraudsters increasingly rely on cloud-based systems to scale operations.
Cases of cryptojacking—where criminals hijack cloud resources to mine cryptocurrency—have surged, alongside Ponzi schemes and laundering networks exploiting cloud vulnerabilities.
The Huione case is notable for its scale, but it reflects a broader trend where cloud infrastructure is weaponized for crypto fraud.
Furthermore, crypto crime has escalated sharply.
Reports show $158 billion in illicit crypto flows in 2025, a 145% increase from 2024. Americans alone reported $7.2 billion in losses to crypto investment fraud in 2025, while scams globally reached $17 billion.
These figures underscore how crypto has become embedded in both legitimate finance and criminal operations, with Southeast Asian scam centers playing a major role.
Combatting Crypto Fraud
The U.S. has strengthened its regulatory framework in recent years.
The GENIUS Act (2025) established rules for stablecoin issuers, while the Digital Asset Market Clarity Act (2025) clarified oversight of non-stablecoin assets.
Agencies like the SEC, CFTC, FinCEN, and IRS coordinate enforcement, while the DOJ and FBI target criminal infrastructure. These laws aim to balance innovation with consumer protection, ensuring that fraud networks like Huione cannot exploit gaps in regulation.
The DOJ’s seizure of Huione Group’s cloud account is a landmark case in the fight against crypto-enabled fraud. It demonstrates how law enforcement is targeting not just perpetrators but also the infrastructure that supports criminal ecosystems.
