DOJ $225M Pig Butchering Seizure Campaign (2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2RurE3…MNWbSummary
A series of escalating U.S. Department of Justice enforcement actions from 2023 through mid-2026 targeted transnational 'pig butchering' cryptocurrency fraud networks primarily operating out of Southeast Asia. The campaign's most prominent single action was the June 2025 civil forfeiture complaint seeking approximately $225.4 million in USDT — the largest cryptocurrency seizure in U.S. Secret Service history — filed by the U.S. Attorney's Office for the District of Columbia and linked to over 430 suspected victims. Parallel criminal indictments, a coordinated May 2026 international operation producing 276 arrests and the dismantlement of nine scam centers, a February 2026 seizure of $61 million in Tether, and a broader $580 million freeze by the D.C. Scam Center Strike Force collectively represent the most sustained U.S.-led enforcement campaign against crypto investment fraud ever undertaken.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(23 events)
1 May 2023
Shan Hanes, CEO of Heartland Tri-State Bank (Elkhart, Kansas), begins transferring bank funds to a pig butchering scam address, ultimately sending $47.1 million across 10 wire transfers through July 2023.
DOJ USAO-KS28 June 2023
Shan Hanes sends 3,116,350 USDT from Heartland Tri-State Bank to a fraud deposit address later identified in the DOJ's $225 million forfeiture complaint.
TRM Labs1 July 2023
Heartland Tri-State Bank collapses and is taken over by the FDIC following the $47.1 million embezzlement by CEO Shan Hanes.
CNBC21 August 2024
Shan Hanes sentenced to 293 months (approximately 24 years) in federal prison — the longest white-collar sentence in Kansas federal court history.
CNBC1 January 2025
Shunda scam compound begins operations in Min Let Pan, Myanmar.
DOJ OPA: Scam Center Strike Force18 June 2025
U.S. Attorney's Office for the District of Columbia files civil forfeiture complaint seeking approximately $225,364,961 in USDT — the largest cryptocurrency seizure in U.S. Secret Service history. Over 430 victims identified; 93 scam deposit addresses, 35 consolidation wallets, and 144 OKX accounts cited in complaint.
NBC News / TRM Labs25 July 2025
Zoomex spoof domains (zoomex-net.com, zoomex-pay.com) subject USDT frozen by Tether at law enforcement request — approximately 20 months before the July 2026 civil complaint.
Armstrong & Bradylyons8 October 2025
Federal grand jury in the Eastern District of New York returns indictment against Chen Zhi, chairman of Prince Holding Group (Cambodia), charging wire fraud conspiracy and money laundering conspiracy for alleged operation of forced-labor pig butchering compounds.
DOJ OPA14 October 2025
DOJ files civil forfeiture complaint for approximately 127,271 Bitcoin (~$15 billion), the largest forfeiture action in DOJ history, in the Eastern District of New York (No. 1:25-cv-05745). OFAC simultaneously designates 146 individuals and entities tied to Prince Holding Group.
DOJ OPA / CNBC15 October 2025
FinCEN issues Section 311 final rule severing Cambodia's Huione Group — alleged to have laundered over $4 billion — from the U.S. financial system.
Paul, Weiss1 November 2025
U.S. Attorney's Office for the District of Columbia establishes the Scam Center Strike Force under U.S. Attorney Jeanine Ferris Pirro.
DOJ USAO-DC1 November 2025
Shunda scam compound in Min Let Pan, Myanmar seized by the Karen National Liberation Army; defendants Huang Xingshan and Jiang Wen Jie flee but are arrested by Thai authorities in early 2026.
DOJ OPA: Scam Center Strike Force1 January 2026
Tether freezes funds associated with the $78 million BitaGold/SteemFly/Smart Labs/Bdswg.com network — the subject of the July 2026 civil complaint 26-cv-2542.
Armstrong & Bradylyons26 January 2026
UK National Crime Agency refers a British victim case to U.S. authorities, leading to the July 2026 recovery-fraud civil complaint 26-cv-2541 involving impersonation of the NCA, CatLabs, and HMRC.
Armstrong & Bradylyons25 February 2026
U.S. Attorney's Office for the Eastern District of North Carolina announces seizure of $61 million in USDT linked to pig butchering investment scams, in cooperation with Homeland Security Investigations and Tether.
DOJ USAO-EDNC26 February 2026
D.C. Scam Center Strike Force announces total frozen and seized cryptocurrency from Chinese transnational criminal networks has surpassed $580 million in approximately three months of operation.
U.S. Secret Service1 March 2026
FBI Operation Level Up reaches 8,935 victim notifications; 77% of notified victims were unaware of the scam; 93 referred for suicide intervention; $562 million in losses estimated as prevented.
DOJ OPA: Scam Center Strike Force1 March 2026
Southern District of California grand jury returns indictment against Thet Min Nyi (also known as Ko Thet, Pixy), alleged manager and recruiter for Ko Thet Company pig butchering operations (26CR762-RSH).
DOJ OPA1 April 2026
Southern District of California criminal complaints charge Wiliang Awang, Andreas Chandra, Lisa Mariam, and a fugitive co-defendant with wire fraud conspiracy for Sanduo Group and Giant Company pig butchering operations (26MJ2335-AHG; 26MJ2437-AHG).
DOJ OPA8 May 2026
DOJ announces coordinated international operation: at least 276 arrests (275 by Dubai Police, 1 by Royal Thai Police), dismantlement of at least nine scam centers, $701 million in cryptocurrency restrained, and 503 .com domains seized. Named defendants Awang and Chandra among those arrested in Dubai.
DOJ OPA / IRS CI27 May 2026
Tether freezes USDT address associated with the fraudulent investment platform that is the subject of July 2026 civil complaint 26-cv-2543.
Armstrong & Bradylyons21 July 2026
U.S. Attorney's Office for the District of Columbia files five civil forfeiture complaints targeting over $25 million in USDT across five distinct fraud schemes (26-cv-2539 through 26-cv-2543), naming fraudulent platforms MicMarkets, Zoomex spoof domains, BitaGold, SteemFly, Smart Labs, Bdswg.com, and CatLabs (recovery fraud).
Armstrong & Bradylyons / DOJ USAO-DCDecision Log
- hash: AGWHhPtCMqfwaD2wzrQ9yNk1cjvUiA9UysoQojYf6Mts
This investigation is cryptographically anchored to the Solana blockchain (1 event). 0 of 27 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/21/2026, 5:10:07 PM
last updated: 9/21/2026, 5:15:28 PM
avoid.net — verified advice for a post-truth world