Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to intelligence
enforcement-actioncryptocurrency-platform-riskidentity-impersonation-fraudcybercrime-service-ecosystem

Record-Breaking $15 Billion Bitcoin Seizure from Prince Group Cybercrime Syndicate

Updated 3mo agoFirst seen Oct 14, 202512 sources

Federal authorities in the United States and United Kingdom have executed a historic crackdown on the Prince Group, a transnational criminal organization based in Cambodia, resulting in the seizure of approximately 127,271 Bitcoin, valued at around $15 billion. This operation marks the largest cryptocurrency seizure in U.S. history and is part of a coordinated effort to dismantle one of the most prolific cyber-enabled financial fraud and human trafficking networks in the world. The Prince Group, led by Chen Zhi, also known as Vincent, has been accused of orchestrating widespread 'pig butchering' scams—sophisticated investment frauds that lure victims through social media, dating sites, and messaging apps, ultimately convincing them to invest in fraudulent cryptocurrency schemes. Victims' funds were systematically stolen and laundered through a complex web of over 100 shell and holding companies spanning more than 30 countries.

The criminal enterprise relied heavily on human trafficking, forcibly recruiting and detaining thousands of individuals in heavily guarded compounds in Cambodia, where they were compelled to perpetrate scams under threat of violence. These compounds were described as modern-day slavery camps, featuring high walls, barbed wire, and harsh living conditions. The Prince Group also operated automated call centers, utilizing millions of phone numbers to facilitate their fraudulent activities on a global scale. Chen Zhi, the alleged mastermind, remains at large and is the subject of an international manhunt, with the FBI seeking information on his whereabouts. He faces up to 40 years in prison if apprehended and convicted.

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has imposed financial sanctions on 146 individuals and entities associated with the Prince Group, aiming to disrupt the organization’s financial infrastructure. The group’s operations have been ongoing since at least 2015, with law enforcement agencies noting the use of advanced cryptocurrency laundering techniques such as 'spraying' and 'funneling' to obscure the origins of illicit funds. Chen Zhi is also accused of bribing public officials to evade law enforcement scrutiny and maintain the group’s operations. The crackdown is being hailed as one of the most significant actions ever taken against cyber-enabled financial fraud and human trafficking, with officials emphasizing the global reach and devastating impact of the Prince Group’s activities. The seizure and sanctions are expected to significantly disrupt the group’s ability to operate and send a strong message to other cybercriminal organizations. Authorities continue to investigate the full extent of the Prince Group’s network and are working with international partners to identify additional victims and perpetrators. The operation underscores the growing intersection of cybercrime, cryptocurrency, and human trafficking, highlighting the need for continued vigilance and international cooperation. The Prince Group’s public-facing business activities in Cambodia masked its extensive criminal enterprise, which has now been exposed through this landmark law enforcement action. The case serves as a warning to other criminal organizations leveraging technology and human exploitation for financial gain. The Justice Department and its partners remain committed to pursuing those responsible and providing support to the victims of these crimes.

Share:
Record-Breaking $15 Billion Bitcoin Seizure from Prince Group Cybercrime Syndicate
Stay ahead

Get ahead of threats like this

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.

EVENT TIMELINE

How this story unfolded

5 events from the most recent confirmed update back to the earliest known activity.

5 EVENTS
Oct 14, 20258mo ago

U.S. seizes roughly $15 billion in bitcoin tied to Prince Group

U.S. authorities announced the seizure of about $15 billion in bitcoin allegedly connected to the Prince Group's fraud proceeds and associated bitcoin mining operations in Laos, Texas, and China. The assets were reported to already be in U.S. custody in the Eastern District of New York, marking a record crypto seizure tied to cyber-enabled fraud.

U.S. and U.K. impose coordinated sanctions on Chen Zhi network

The U.S. Treasury's OFAC, coordinated with the U.K., sanctioned Chen Zhi, the Prince Group, and a broad network of related entities, executives, and associates. The measures were intended to cut the alleged scam network off from Western financial systems.

DOJ unseals indictment against Chen Zhi

The U.S. Department of Justice unsealed an indictment charging Chen Zhi with wire fraud conspiracy and money laundering conspiracy tied to the Prince Group's alleged scam empire. The case describes a transnational criminal organization generating major proceeds through pig-butchering fraud and related laundering activity.

U.S. links Brooklyn fraud network to Cambodia scam compound

Prosecutors alleged that a Brooklyn-based fraud network worked with a Sihanoukville compound at the Jinbei Hotel and Casino to route U.S. victims into the scam ecosystem. Authorities said this activity contributed to losses affecting more than 250 U.S. victims.

Jan 1, 201511y ago

Prince Group allegedly begins global pig-butchering scam operations

U.S. authorities allege Chen Zhi's Prince Group began operating large-scale romance baiting and cryptocurrency investment fraud schemes in Cambodia and globally starting in 2015. Prosecutors say the network used forced-labor scam compounds, shell companies, and laundering infrastructure to support the operation.

LINKED ENTITIES

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

10 LINKEDOpen in app
Organizations
8 linked
U.S. Department of JusticePrince GroupJinbei Hotel and CasinoPrince Real Estate GroupRadisson Hotel GroupAqua Pure WaterUnited Kingdom's Foreign, Commonwealth, and Development OfficeDepartment of the Treasury Office of Foreign Assets Control
The operational view lives in Mallory

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t — which of your assets are affected, which threat actors are using it right now, which detections to deploy, and what to do next.
Exposure mapping

Map indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidence

Every observed campaign, victim, and pivot linked to actors named in this story.

Associated malware

Malware, exploits, and IOCs connected to the activity described here.

Detection signatures

YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alerts

Get matching new stories delivered to your team as they break — not the next morning.

AI threads

Ask questions about this story and take action on the answers.