Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to intelligence
enforcement-actioncryptocurrency-platform-riskidentity-impersonation-fraudvoice-social-engineering

U.S. Sentences Crypto Scam Launderers in Multimillion-Dollar Fraud Network

Updated 28d agoFirst seen May 25, 20267 sources

U.S. prosecutors and courts advanced multiple cases tied to large-scale cryptocurrency fraud and laundering operations that targeted American victims through fake trading platforms and social-engineering lures. In one California case, Jingliang Su, a Chinese national, was sentenced to 46 months in prison after admitting he helped launder more than $36.9 million stolen from 174 victims by a scam network operating from Cambodia; the court also ordered more than $26.8 million in restitution. Authorities said the fraud used unsolicited messages, calls, texts, dating platforms, and bogus crypto-investment websites to persuade victims to transfer funds, which were then routed through U.S. shell companies, bank accounts, Deltec Bank in the Bahamas, and Tether (USDT) wallets controlled abroad.

In a related prosecution, Daren Li, a dual citizen of China and St. Kitts and Nevis, pleaded guilty to conspiracy to commit money laundering after authorities said he and co-conspirators moved more than $73 million in victim proceeds through shell companies, U.S. financial accounts, wire transfers, and conversion into USDT; he was later sentenced to 20 years in federal prison. The cases form part of a broader Justice Department crackdown on transnational crypto-enabled investment scams and money-laundering networks, with officials reporting that multiple co-conspirators have pleaded guilty and that the U.S. Secret Service played a central investigative role.

Share:
U.S. Sentences Crypto Scam Launderers in Multimillion-Dollar Fraud Network
Stay ahead

Get ahead of threats like this

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.

EVENT TIMELINE

How this story unfolded

10 events from the most recent confirmed update back to the earliest known activity.

10 EVENTS
Feb 9, 20264mo ago

Daren Li sentenced to 20 years in federal prison

In February 2026, Daren Li was sentenced to 20 years in federal prison for his role in a multimillion-dollar cryptocurrency scam and related laundering activity targeting U.S. victims.

Jan 27, 20265mo ago

Jingliang Su sentenced to 46 months and ordered to pay restitution

In January 2026, a federal court in Los Angeles sentenced Jingliang Su to 46 months in prison and ordered $26,867,242 in restitution for his role in laundering proceeds from a Cambodia-based digital asset investment fraud operation.

Jun 9, 20251y ago

Jingliang Su pleads guilty in scam-center laundering conspiracy

In June 2025, Jingliang Su pleaded guilty to conspiracy to operate an illegal money transmitting business for laundering proceeds from a digital asset investment fraud scheme that stole more than $36.9 million from 174 U.S. victims.

Nov 12, 20242y ago

Foreign national pleads guilty in $73 million crypto scam laundering case

In November 2024, Daren Li pleaded guilty to conspiracy to commit money laundering for helping launder more than $73 million from cryptocurrency investment scam victims through shell companies, U.S. bank accounts, wire transfers, and Tether conversions.

Apr 12, 20242y ago

Daren Li arrested at Atlanta airport in crypto laundering case

Daren Li, a dual citizen of China and St. Kitts and Nevis, was arrested at Hartsfield-Jackson Atlanta International Airport for his alleged role in laundering proceeds from cryptocurrency investment scams and was transferred to the Central District of California.

Oct 11, 20197y ago

Nashatka appears in Bay Area federal court after indictment

After his September 2019 arrest, Nashatka was arraigned in San Francisco federal court on hacking-related charges tied to the alleged $1.4 million cryptocurrency theft scheme and released on bond.

Sep 6, 20197y ago

Anthony Tyler Nashatka arrested in New York

Nashatka was arrested in New York in connection with the 2017 cryptocurrency exchange theft scheme before being brought to federal court in the Bay Area.

Dec 26, 20178y ago

Single victim loses another $800,000 in follow-on theft

On December 26, 2017, the same alleged cryptocurrency theft scheme was used to steal an additional approximately $800,000 from one victim.

Dec 21, 20179y ago

Hundreds of exchange users lose about $600,000 in cryptocurrency

Between December 20 and 21, 2017, the alleged exchange takeover scheme stole roughly $600,000 in cryptocurrency from hundreds of victims whose credentials were captured through the spoofed site.

Dec 20, 20179y ago

Attackers hijack cryptocurrency exchange domain and disable servers

In December 2017, Anthony Tyler Nashatka and Elliott Gunton allegedly used a victim's identity to gain control of a cryptocurrency exchange's domain settings, disabled the company's servers, and redirected users to a fake website to harvest wallet addresses and private keys.

The operational view lives in Mallory

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t — which of your assets are affected, which threat actors are using it right now, which detections to deploy, and what to do next.
Exposure mapping

Map indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidence

Every observed campaign, victim, and pivot linked to actors named in this story.

Associated malware

Malware, exploits, and IOCs connected to the activity described here.

Detection signatures

YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alerts

Get matching new stories delivered to your team as they break — not the next morning.

AI threads

Ask questions about this story and take action on the answers.

U.S. Sentences Crypto Scam Launderers in Multimillion-Dollar Fraud Network | Mallory