The U.S. Financial Crimes Enforcement Network has linked approximately $12.7 billion in suspicious financial activity to cryptocurrency investment scams, revealing the enormous scale of fraud networks operating largely through overseas scam compounds.
FinCEN’s analysis covered 33,904 Bank Secrecy Act reports filed by roughly 1,300 financial institutions between September 2023 and December 2025. The findings provide a detailed look at how scammers moved money through banks, cryptocurrency companies, stablecoins, decentralized finance platforms and overseas exchanges.
Many of the schemes were connected to large scam compounds operating in Southeast Asia, where authorities say trafficked workers can be forced to participate in online fraud.
Key Takeaways
- FinCEN identified approximately $12.7 billion in suspicious activity linked to crypto investment scams.
- The agency reviewed 33,904 reports submitted between September 2023 and December 2025.
- Money services businesses identified around $5.5 billion in suspicious activity, while banks reported approximately $6.4 billion.
- At least 22 cryptocurrencies appeared in the reports, with scam proceeds frequently converted into USDT.
- Victims across all 50 U.S. states used savings, retirement funds, mortgages and loans to finance fraudulent investments.
- Many scam operations were connected to compounds in Cambodia, Laos and Burma.
FinCEN Uncovers $12.7 Billion in Suspicious Crypto Activity
FinCEN’s investigation provides one of the clearest pictures yet of the financial infrastructure supporting large-scale cryptocurrency investment scams.
The agency reviewed 33,904 Bank Secrecy Act reports submitted by around 1,300 financial institutions between Sept. 8, 2023, and Dec. 31, 2025.
These reports helped regulators track how money moved through traditional banks, cryptocurrency businesses and securities companies as victims were persuaded to send funds into fraudulent investment platforms.
The schemes are commonly described as crypto investment scams, confidence schemes, romance baiting or “pig butchering.”
Typically, criminals establish relationships with victims using fake identities before gradually introducing supposedly profitable cryptocurrency investment opportunities.
Once trust has been established, victims may be directed toward fake trading platforms or fraudulent investment services where they are encouraged to deposit increasingly large amounts of money.
FinCEN found that victims of these operations were located across all 50 U.S. states as well as several U.S. territories.
Crypto Companies and Banks Flagged Billions
Cryptocurrency-related money services businesses played a major role in identifying suspicious transactions.
These businesses submitted approximately 55% of the reports reviewed by FinCEN and flagged around $5.5 billion in suspicious activity.
Most businesses within this category were digital asset companies.
Banks accounted for another 41% of filings and identified approximately $6.4 billion in suspicious transactions.
Securities firms and other financial institutions represented the remaining share, identifying approximately $784.5 million.
FinCEN also observed a significant increase in reporting throughout the period.
The number of monthly reports increased by an average of 10.9%, while the amount of suspicious activity reported each month grew by an average of 18%.
In October 2023, financial institutions submitted 590 reports covering approximately $485.7 million.
By December 2025, that figure had climbed to 2,482 reports involving approximately $833.5 million.
However, FinCEN warned that the $12.7 billion figure should not be interpreted as the exact amount victims lost.
Suspicious activity reports can include attempted transactions, reporting mistakes and the same transactions being reported by multiple institutions.
As a result, some activity may have been counted more than once.
USDT Became a Major Tool for Moving Scam Proceeds
The analysis also highlights how cryptocurrency was used after victims transferred their money.
Scammers did not generally rely on obscure tokens created specifically for fraudulent schemes.
Instead, at least 22 established cryptocurrencies appeared in the filings, including Ethereum, Tether’s USDT and Circle’s USDC.
However, the cryptocurrency initially purchased by a victim was often not the asset ultimately used to move the stolen funds.
Blockchain analysis cited by FinCEN found that scam proceeds were commonly converted into stablecoins and almost exclusively into USDT.
Those funds could then be transferred through decentralized finance protocols or cryptocurrency exchanges operating outside the United States.
The repeated use of collection addresses also helped financial institutions identify connections between seemingly unrelated victims.
Some addresses were receiving transfers from several victims at the same time, providing investigators with another way to connect individual transactions to larger fraud networks.
Older Americans Accounted for Around a Quarter of Reports
Older adults appeared in approximately 25% of the suspicious activity reports reviewed by FinCEN.
That figure is close to the 24.4% share of the U.S. population aged 60 or older.
Based on this comparison, FinCEN concluded that older Americans were not disproportionately represented among victims within this particular dataset.
However, the financial consequences for individual victims could still be devastating.
FinCEN found cases where victims funded fraudulent investments using retirement accounts, personal loans, second mortgages and home equity lines of credit.
In one example, a woman transferred nearly $640,000 from her retirement fund.
Another victim reportedly lost more than $1 million over approximately six months.
The FBI separately recorded $4.8 billion in fraud losses among Americans over the age of 60 during 2024.
Beyond the financial consequences, FinCEN also highlighted the severe psychological impact these scams can have on victims after they discover their money has been stolen.
Southeast Asian Scam Compounds Fuel the Industry
A major part of the problem extends beyond cryptocurrency itself.
Authorities have connected many large-scale fraud operations to industrial scam compounds in countries including Cambodia, Laos and Burma.
Workers can be recruited through fake job advertisements promising legitimate employment.
After arriving, some workers are reportedly confined inside compounds and forced to participate in online scams.
The United Nations has estimated that hundreds of thousands of people have been trafficked into these operations.
Interpol has also warned that the scam-center business model is no longer limited to Southeast Asia and has expanded into other regions.
Cryptocurrency has become an important part of the financial infrastructure supporting these networks.
A Chainalysis study published in February 2026 found that crypto-linked human trafficking payments increased by 85% during 2025 across the services it tracked.
Stablecoins, regional escrow platforms and laundering networks were among the payment channels associated with the activity.
Authorities Target the Financial Networks Behind Scam Compounds
Law enforcement agencies have increasingly focused on disrupting the infrastructure supporting these organizations rather than only pursuing individual scammers.
In one major operation, the FBI and Thai authorities froze approximately $580 million in cryptocurrency and seized around 8,000 phones while targeting organized fraud groups accused of running pig-butchering schemes against Americans.
FinCEN said scam-center networks can also rely on specialized online marketplaces where operators purchase services needed to run their schemes.
These services may include phishing tools, online accounts and money-laundering infrastructure.
Professional laundering networks can also establish shell companies, open financial accounts, recruit money mules and move stablecoins through cryptocurrency exchanges outside the United States.
This makes the scam ecosystem considerably more complex than a single fraudster contacting a victim online.
Huione Shows the Scale of Scam Infrastructure
Cambodia-based Huione became one of the most prominent examples cited in connection with the financial infrastructure surrounding Southeast Asian scams.
The network had reportedly been linked to more than $89 billion in cryptocurrency transactions.
U.S. authorities had previously designated Huione Group as a primary money laundering concern over its alleged role in processing funds connected to Southeast Asian scams and other illicit activities.
Chinese authorities later took custody of a former Huione Group chairman.
The case illustrates how large the financial networks surrounding scam compounds can become and why authorities increasingly rely on blockchain analysis and international cooperation to investigate them.
U.S. Agencies Expand Crypto Recovery Efforts
American authorities have stepped up efforts to trace and recover cryptocurrency connected to fraudulent investment schemes.
These efforts increasingly combine blockchain tracing, international law-enforcement cooperation and rapid asset freezes.
FinCEN said its Rapid Response Program has interdicted approximately $1.8 billion since 2015.
More than $1 billion has reportedly been recovered for 5,790 U.S. victims.
The program enables FinCEN to rapidly share financial intelligence with foreign financial intelligence units, giving authorities a chance to intervene before stolen funds are transferred beyond recovery.
The agency’s latest guidance also provides financial institutions with indicators that can help identify transactions associated with scam centers.
FinCEN has encouraged voluntary information sharing between qualifying financial institutions under Section 314(b) of the USA PATRIOT Act.
Such cooperation can help institutions identify connected money-laundering activity across different accounts and platforms.
Crackdown on Scam Networks Continues in 2026
Enforcement efforts have continued to expand during 2026.
U.S. prosecutors have targeted organizations accused of combining cryptocurrency investment fraud, money laundering and forced labor.
One major investigation has involved the Cambodia-based Prince Group.
Authorities sought forfeiture of more than 127,000 Bitcoin linked to its founder, Chen Zhi.
Prosecutors alleged that workers held inside scam compounds were forced to contact potential victims and convince them to participate in fraudulent cryptocurrency investments.
Cambodian authorities detained Chen in January and transferred him to China.
U.S. and U.K. authorities have accused Chen and Prince Group of involvement in cryptocurrency fraud, money laundering and forced-labor operations. The company has denied the allegations.
What Should Crypto Investors Watch For?
FinCEN’s findings demonstrate that cryptocurrency investment scams have developed into sophisticated international operations involving social engineering, human trafficking, money laundering and digital assets.
Investors should be particularly cautious when someone they meet online encourages them to invest through an unfamiliar cryptocurrency platform.
Promises of unusually high or guaranteed returns, pressure to deposit additional funds and difficulty withdrawing money are all warning signs that deserve scrutiny.
Victims of cyber-enabled financial fraud should contact their financial institution as quickly as possible. Rapid reporting can improve the chances that authorities or financial institutions can identify and potentially stop suspicious transfers.
The findings also show why blockchain transparency has become increasingly important for investigators. While cryptocurrencies can be used to move illicit funds internationally, transaction records can also help authorities identify common wallets, trace flows and connect seemingly separate scams.
With billions of dollars in suspicious activity identified and international scam compounds continuing to operate, enforcement against crypto investment fraud is likely to remain a major priority for regulators and law-enforcement agencies.
