Despite a high-profile crackdown by Telegram on May 13, the Huione Guarantee and Xinbi Guarantee crypto marketplaces have quickly reemerged under new names and channels, continuing to operate on the same platform that banned them. According to a May 29 report by blockchain intelligence firm TRM Labs, both groups have resumed activity, highlighting the resilience and adaptability of cybercrime networks built around stablecoins and encrypted communications.<\/p>\n\n\n\n
Telegram\u2019s decision to remove channels linked to the notorious Huione and Xinbi markets initially appeared to disrupt their operations. However, TRM Labs now confirms that Huione Group is still running exclusive “VIP” vendor channels on the app, while Xinbi Guarantee resumed operations within days\u2014some of it under a rebranded \u201cXinbi 2.0\u201d name. Huione has also relaunched its crypto exchange, continuing to process transactions using its proprietary USDH stablecoin.<\/p>\n\n\n\n
These rapid recoveries illustrate a familiar playbook: when digital black markets are shut down, operators migrate, rebrand, and reestablish their networks with little friction. Telegram remains their preferred platform due to its large user base and lenient moderation.<\/p>\n\n\n\n
The scale of these marketplaces is staggering. TRM Labs estimates that Huione Group has facilitated over $81 billion<\/strong> in crypto transactions since 2021 eclipsing even infamous darknet markets like Hydra and Silk Road. Xinbi, though smaller, is tied to more than $8.4 billion<\/strong> in USDT movement since 2022.<\/p>\n\n\n\n Unlike traditional darknet platforms that rely on Tor, Huione and Xinbi operated openly on Telegram. They did not sell illicit goods directly but facilitated transactions via escrow services, enabling deals for SIM cards, forged documents, malware kits, surveillance equipment, and fraudulent investment tools. All payments were routed through stablecoins such as USDT to preserve anonymity.<\/p>\n\n\n\n These platforms introduced a twist to typical online crime by offering a layer of \u201ctrust\u201d between buyers and vendors. Known as \u201cguarantee marketplaces,\u201d they used escrow systems and vendor deposits as anti-fraud mechanisms. Sellers were required to put down security deposits that could be forfeited if they were found to be defrauding users. Bots automated everything from listings to payments, minimizing human exposure.<\/p>\n\n\n\n As Elliptic researchers explained, this ecosystem created a controlled, large-scale digital bazaar for illicit services one that mimicked legitimate platforms while serving the needs of organized cybercrime syndicates across Southeast Asia and China.<\/p>\n\n\n\n U.S. authorities have taken action. In early May, the Financial Crimes Enforcement Network (FinCEN) designated Huione Group a \u201cprimary money laundering concern.\u201d<\/strong> On May 29, the Treasury\u2019s Office of Foreign Assets Control (OFAC) sanctioned Philippines-based Funnull Technology for connections to Huione\u2019s services. Despite this pressure, enforcement appears to have had limited impact.<\/p>\n\n\n\n Telegram\u2019s ban reduced Huione\u2019s member count from over 800,000 to around 250,000, but many of those users and vendors have simply regrouped. Some moved to Tudou Guarantee<\/strong>, a Huione-affiliated platform whose user base surged by nearly 30% following the crackdown.<\/p>\n\n\n\n Beyond fraud and document forgery, both TRM Labs and Elliptic found listings for more disturbing items: stun guns, metal restraints, and surrogate women sometimes described with broken or machine-translated captions hinting at exploitation in scam compounds. These marketplaces have become enablers for a broader, professionalized ecosystem of digital and physical crime.<\/p>\n\n\n\n Looking ahead, TRM Labs warns that Huione and Xinbi operators are exploring alternatives to Telegram. They are testing proprietary messaging apps like ChatMe<\/strong> and SafeW<\/strong>, which mimic Telegram\u2019s functionality but offer greater resistance to takedowns. In essence, even as surface-level names and channels change, the infrastructure and criminal networks remain intact.<\/p>\n\n\n\n The reappearance of Huione and Xinbi after Telegram\u2019s ban is a cautionary tale in the fight against digital financial crime. Enforcement actions may disrupt operations temporarily, but without long-term solutions and coordinated tech platform accountability, these groups will continue to evolve. The billion-dollar flows and increasing sophistication of these networks suggest that more aggressive and coordinated global efforts are needed to tackle this growing cybercrime threat at its root.<\/p>\n","protected":false},"excerpt":{"rendered":" Despite a high-profile crackdown by Telegram on May 13, the Huione Guarantee and Xinbi Guarantee crypto marketplaces have quickly reemerged under new names and channels, continuing to operate on the same platform that banned them. According to a May 29 report by blockchain intelligence firm TRM Labs, both groups have resumed activity, highlighting the resilience…<\/p>\n","protected":false},"author":3,"featured_media":9240,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[63,70],"tags":[111,469,496],"class_list":["post-9239","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-news","category-finance","tag-crackdown","tag-crypto-market","tag-telegram"],"yoast_head":"\nHow Guarantee Marketplaces Work<\/h3>\n\n\n\n
Enforcement and Escalation<\/h3>\n\n\n\n
A Growing and Disturbing Market<\/h3>\n\n\n\n
From Telegram to Alternatives<\/h3>\n\n\n\n
Final Thoughts<\/h3>\n\n\n\n