Yazılar

Telegram Blocks Two Massive Black Market Services Linked to Cybercrime and Money Laundering

Telegram has shut down two major digital black markets—Xinbi Guarantee and Huione Guaranteewhich collectively facilitated over $35 billion in transactions since 2021, according to blockchain analytics firm Elliptic. The services, which primarily operated in Chinese and were known hubs for cybercriminals and fraud networks, appeared inactive as of Thursday.

In a statement to Reuters, Telegram confirmed the takedowns, saying:

Criminal activities like scamming or money laundering are forbidden by Telegram’s terms of service and are always removed whenever discovered.”

Massive Fraud Ecosystems Dismantled:

  • Xinbi Guarantee and Huione Guarantee far surpassed older dark web markets such as Silk Road, which was infamous for illegal drug distribution.

  • The platforms served as critical infrastructure for illicit services, including:

    • Stolen data trading

    • Money laundering

    • Fraudulent telecom operations

Elliptic hailed the shutdown as a major win in the fight against online fraud, calling it a big blow for online fraudsters”.

Ties to Broader Cybercrime Networks:

  • Huione Guarantee, which once operated under the name Haowang Guarantee, is a subsidiary of Cambodia-based Huione Group, also linked to Huione Pay and Huione Crypto.

  • U.S. officials allege these entities were used by state-sponsored hacking groups, including North Korea’s Lazarus Group, which funneled more than $150,000 in cryptocurrency through Huione Pay.

Earlier this month, the U.S. Treasury Department sanctioned the Huione Group, describing it as the “marketplace of choice for malicious cyber actors,” effectively cutting it off from the U.S. financial system.

Platform Reaction and Future Concerns:

  • In a statement posted to its website, Huione Guarantee confirmed that it had been blocked by Telegram on Tuesday and would “cease operations from now on.”

  • Attempts to reach Xinbi Guarantee or Huione Group for comment were unsuccessful.

While Telegram’s move highlights growing efforts by tech platforms to combat illegal activity, analysts warn that such services may resurface under new identities unless systemic enforcement and financial sanctions continue to evolve alongside cybercrime techniques.

U.S. Lifts Sanctions on Tornado Cash Amid Legal Challenges

The U.S. Treasury Department announced on Friday that it has lifted sanctions on Tornado Cash, a cryptocurrency “mixer” accused of facilitating the laundering of more than $7 billion, including funds stolen by North Korean hackers. The decision follows legal challenges from six Tornado Cash users, who filed a lawsuit against the sanctions, supported by cryptocurrency exchange Coinbase.

In 2022, the U.S. Treasury’s Office of Foreign Assets Control (OFAC) blacklisted Tornado Cash, claiming the firm had been involved in laundering cybercrime proceeds, including $455 million stolen by the Lazarus Group, a North Korean-backed hacking organization. Tornado Cash is designed to obfuscate the origins and recipients of cryptocurrency transactions, making it a popular tool for illicit activities.

Despite the sanctions being lifted, the Treasury reaffirmed its concerns over North Korea’s state-sponsored cyber activities, particularly its use of stolen digital assets to fund government operations. Treasury Secretary Scott Bessent emphasized the importance of protecting the digital asset industry from misuse by North Korea and other malicious actors.

The decision to lift the sanctions comes after a U.S. appeals court ruled in November that OFAC had overreached in its application of the sanctions. The Treasury indicated that the repeal followed a review of legal and policy issues, particularly in light of evolving technology and legal environments.

In 2023, two co-founders of Tornado Cash were charged with facilitating over $1 billion in money laundering, including laundering for the Lazarus Group. One of the co-founders, Roman Storm, is awaiting trial and has denied any wrongdoing. Additionally, Tornado Cash developer Alexey Pertsev was sentenced to five years and four months in prison in the Netherlands for his involvement in money laundering activities.