U.S. Sentences Crypto Scam Launderers in Multimillion-Dollar Fraud Network
U.S. prosecutors and courts advanced multiple cases tied to large-scale cryptocurrency fraud and laundering operations that targeted American victims through fake trading platforms and social-engineering lures. In one California case, Jingliang Su, a Chinese national, was sentenced to 46 months in prison after admitting he helped launder more than $36.9 million stolen from 174 victims by a scam network operating from Cambodia; the court also ordered more than $26.8 million in restitution. Authorities said the fraud used unsolicited messages, calls, texts, dating platforms, and bogus crypto-investment websites to persuade victims to transfer funds, which were then routed through U.S. shell companies, bank accounts, Deltec Bank in the Bahamas, and Tether (USDT) wallets controlled abroad.
In a related prosecution, Daren Li, a dual citizen of China and St. Kitts and Nevis, pleaded guilty to conspiracy to commit money laundering after authorities said he and co-conspirators moved more than $73 million in victim proceeds through shell companies, U.S. financial accounts, wire transfers, and conversion into USDT; he was later sentenced to 20 years in federal prison. The cases form part of a broader Justice Department crackdown on transnational crypto-enabled investment scams and money-laundering networks, with officials reporting that multiple co-conspirators have pleaded guilty and that the U.S. Secret Service played a central investigative role.

Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
10 events from the most recent confirmed update back to the earliest known activity.
Daren Li sentenced to 20 years in federal prison
In February 2026, Daren Li was sentenced to 20 years in federal prison for his role in a multimillion-dollar cryptocurrency scam and related laundering activity targeting U.S. victims.
Jingliang Su sentenced to 46 months and ordered to pay restitution
In January 2026, a federal court in Los Angeles sentenced Jingliang Su to 46 months in prison and ordered $26,867,242 in restitution for his role in laundering proceeds from a Cambodia-based digital asset investment fraud operation.
Jingliang Su pleads guilty in scam-center laundering conspiracy
In June 2025, Jingliang Su pleaded guilty to conspiracy to operate an illegal money transmitting business for laundering proceeds from a digital asset investment fraud scheme that stole more than $36.9 million from 174 U.S. victims.
Foreign national pleads guilty in $73 million crypto scam laundering case
In November 2024, Daren Li pleaded guilty to conspiracy to commit money laundering for helping launder more than $73 million from cryptocurrency investment scam victims through shell companies, U.S. bank accounts, wire transfers, and Tether conversions.
Daren Li arrested at Atlanta airport in crypto laundering case
Daren Li, a dual citizen of China and St. Kitts and Nevis, was arrested at Hartsfield-Jackson Atlanta International Airport for his alleged role in laundering proceeds from cryptocurrency investment scams and was transferred to the Central District of California.
Nashatka appears in Bay Area federal court after indictment
After his September 2019 arrest, Nashatka was arraigned in San Francisco federal court on hacking-related charges tied to the alleged $1.4 million cryptocurrency theft scheme and released on bond.
Anthony Tyler Nashatka arrested in New York
Nashatka was arrested in New York in connection with the 2017 cryptocurrency exchange theft scheme before being brought to federal court in the Bay Area.
Single victim loses another $800,000 in follow-on theft
On December 26, 2017, the same alleged cryptocurrency theft scheme was used to steal an additional approximately $800,000 from one victim.
Hundreds of exchange users lose about $600,000 in cryptocurrency
Between December 20 and 21, 2017, the alleged exchange takeover scheme stole roughly $600,000 in cryptocurrency from hundreds of victims whose credentials were captured through the spoofed site.
Attackers hijack cryptocurrency exchange domain and disable servers
In December 2017, Anthony Tyler Nashatka and Elliott Gunton allegedly used a victim's identity to gain control of a cryptocurrency exchange's domain settings, disabled the company's servers, and redirected users to a fake website to harvest wallet addresses and private keys.
Sources
7 references tracked. Mallory keeps watching after this page renders.
Central District of California | Dual National of China and St. Kitts and Nevis Sentenced to 20 Years in Federal Prison for Role in Multimillion-Dollar Cryptocurrency Scam | United States Department of Justice
justice.gov
Open sourceCentral District of California | Chinese National Sentenced to Nearly 4 Years in Federal Prison for Role in Multimillion-Dollar Cryptocurrency Scam Targeting U.S. Victims | United States Department of Justice
justice.gov
Open sourceChinese National Pleads Guilty for Laundering Millions in Crypto Investments
cybersecuritynews.com
Open sourceOffice of Public Affairs | Foreign National Pleads Guilty to Laundering Millions in Proceeds from Cryptocurrency Investment Scams | United States Department of Justice
justice.gov
Open sourceNorthern District of California | Michigan Resident Appears In Bay Area Federal Court On Hacking Charges | United States Department of Justice
justice.gov
Open sourceAlleged Cryptocurrency Thief 'Psycho' Charged In Brazen Digital Scheme - CBS San Francisco
cbsnews.com
Open sourceStorage Courtlistener
storage.courtlistener.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.


