‘Amazon for criminals’ 💰

Huione is causing serious headaches for some of the industry's largest exchanges.

Hey all, Liam here. 

On Monday morning, the International Consortium of Investigative Journalists published an explosive investigation into the vast network of crypto exchanges and over-the-counter desks that facilitate the movement of millions in illicit funds. 

At its centre: a Cambodia-based crypto exchange called Huione, which has links to the country’s ruling family, as DL News reported in 2024.

In May, the US Treasury Department designated Huione as a money-laundering operation for its role in cleaning digital assets generated from illicit activity. 

North Korean hacker groups, as well as large scam centres in Southeast Asia, have used the exchange to move ill-got funds, the Treasury said.

Cyber threat investigator Ngo Minh Hieu characterised Huione as “the Amazon for criminals,” referring to the mega e-commerce site.

And the Treasury Department, via the Financial Crimes Enforcement Network, or FinCen, moved to sever it from the US financial system. 

“Huione Group has established itself as the marketplace of choice for malicious cyber actors like the Democratic People’s Republic of Korea and criminal syndicates, who have stolen billions of dollars from everyday Americans,” Secretary of the Treasury Scott Bessent declared.  

According to the ICIJ investigation, however, it doesn’t appear that some of the largest crypto exchanges got the memo. 

Take Binance and OKX, for example. 

Both platforms recorded more than $600 million in funds from Huione, according to reports. 

Between July 2024 and July 2025, Binance hosted over $400 million in deposits flowing from Huione. OKX recorded another $220 million in deposits over five months this year. 

A Binance spokesperson told the ICIJ that it maintains the highest security standards and works closely with authorities to monitor risky activity. Binance did not immediately respond to a request for comment. 

“The flows cited in the article represent a very small fraction of overall activity on our platform,” an OKX spokesperson told DL News. “The vast majority of OKX usage is legitimate and occurs under robust anti-money laundering and know-your-customer controls that we continue to strengthen in line with evolving regulatory expectations.”

AML and KYC provisions are security measures companies must implement to combat financial crime.

Once the Treasury Department's blacklist of Huione was put in place in October, an OKX spokesperson said the exchange paused all interactions with Huione.

Enormous sums

While these remain enormous sums, they pale in comparison to the dirty money flowing through traditional finance. 

The United Nations estimates that roughly $2 trillion in illicit funds is laundered each year using traditional financial rails. By comparison, the analytics firm Chainalysis reported that the total amount of illicit cryptocurrency transactions over the last five years is $189 billion

Still, for an industry maturing into a fully fledged financial market, the report is damning for several reasons. 

It suggests that suspicious actors continue to find holes in the industry’s ability to monitor illicit finance. It also highlights how a patchwork of regulations makes it challenging to stop criminal activity, especially for technology that knows no borders. 

Meanwhile, illicit actors are constantly evolving their strategies, making it difficult to distinguish bad money from good.

“Not every address linked to a bad actor is used exclusively for illicit activity, and many intermediaries — such as over-the-counter brokers, mixing services, or peer-to-peer hubs — facilitate both licit and illicit flows,” Ari Redbord, global head of policy and government affairs at TRM Labs, told DL News

“That nuance is essential when interpreting blockchain intelligence and understanding what attribution actually represents.”  

ICYMI

Latest from DL Research

Story of the week

In a 113-page brief filed on November 13, federal prosecutors said Judge Katherine Polk Failla should reject Tornado Cash developer Roman Storm’s request that she toss his conviction, as well as two other charges that split jurors after a three-week criminal trial.

“The evidence in support of the jury’s verdict was more than sufficient; it was overwhelming,” prosecutors wrote.

“And while the jury did not reach a verdict on the other two counts … the evidence was at least sufficient for a reasonable jury to convict the defendant on those counts as well.”

Post of the week

The Senate Agriculture Committee’s market structure draft is missing a few key points, such as how it plans on regulating DeFi.

DL News is an independent news organisation that provides original, in-depth reporting on the largely misunderstood world of cryptocurrency and decentralised finance. From original stories to investigations, our journalism is accurate, honest and responsible.

Forwarded by a friend? subscribe here.