[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnIuM_tXd9wpwbdLv0S7DtOUE-GJ1q1KuG_f-L1bMOSc":3},{"article":4,"iocs":48,"watch_terms":53,"solutions":54,"lesson":57},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"a7e37905-22c3-4a74-8ec0-7e64b84054f8","U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto","u-s-disrupts-xinbi-guarantee-scam-marketplace-freezes-52-8-million-in-crypto-8df866","The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the Scam Center Strike Force to Madagascar to help disrupt 13 scam compounds run by Chinese organized crime","The U.S. Department of Justice has dismantled the illicit online marketplace Xinbi Guarantee, which facilitated various scam services. Coordinated actions included seizing Telegram channels, confiscating cryptocurrency wallets holding $52.8 million in USDT, and disrupting scam compounds in Madagascar. The marketplace, a successor to previous illicit storefronts, acted as an intermediary for romance scams and money laundering, reportedly used by North Korean hackers and designated entities.","US disrupts Xinbi Guarantee scam marketplace, freezing $52.8M in crypto.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fus-disrupts-xinbi-guarantee-scam.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjcQQNutHn5K2x_gd-2eyAP0wzneQ3mOSl3jaaRHGFDUY1O95tuckdjL_botXvrBlt_ts6Bjb91JU4Z-B74VAceL1cYa3oMlt91mHSxZP_FiiVTJLfL8UBUgoBIvjJCuI7Nma3dOxJ48n4wS5VvoBWRDNYqwlYIfStXIKTDBUrRXBIWITx_TprflrVXqjum\u002Fs1600\u002Fxinbi.jpg","2026-09-09T18:26:05+00:00","2026-09-09T20:00:39.432559+00:00",8,[17,20,22,25,27,30],{"name":18,"type":19},"Chinese organized crime","threat_actor",{"name":21,"type":19},"North Korean hackers",{"name":23,"type":24},"USDT","product",{"name":26,"type":24},"Telegram",{"name":28,"type":29},"Xinbi Guarantee","vendor",{"name":31,"type":29},"Jin Bei Group Co., Ltd.","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[49],{"type":50,"value":51,"context":52},"malware","pig butchering","Type of romance scam facilitated",[28,31,23],{"controls":55,"vendors":56},[],[],{"slug":58,"title":59,"body":60,"framework_refs":61,"framework_notes":72},"xinbi-guarantee-takedown-highlights-crypto-scam-ecosystem-risks","Xinbi Guarantee Takedown Highlights Crypto Scam Ecosystem Risks","The Xinbi Guarantee marketplace operated as a sophisticated illicit intermediary enabling romance scams, money laundering, and sanctions evasion — including activity linked to North Korean threat actors — largely through unregulated Telegram channels and cryptocurrency transactions. Its longevity as a 'successor' platform demonstrates how criminal ecosystems adapt and rebrand after disruptions, exploiting gaps in cross-border enforcement and crypto traceability. The $52.8 million in frozen USDT illustrates the massive financial harm enabled when organizations and individuals lack awareness of pig-butchering and romance scam tactics. This case matters because financial institutions, crypto exchanges, and everyday users who fail to monitor for sanctions exposure or suspicious transaction patterns become unwitting participants in money laundering chains.",[62,63,64,65,66,67,68,69,70,71],"NIST SP 800-53 SI-4 (Information System Monitoring)","NIST SP 800-53 AC-20 (Use of External Information Systems)","CIS Control 17 (Incident Response Management)","CIS Control 14 (Security Awareness and Skills Training)","FATF Recommendation 16 (Travel Rule for Virtual Assets)","GDPR Article 32 (Security of Processing — for PII involved in scams)","OFAC Sanctions Compliance Program Guidelines","FinCEN SAR Filing Requirements (31 U.S.C. § 5318)","NIST CSF DE.CM-3 (Personnel Activity Monitoring)","ITIL Service Management — Continual Improvement (compliance review cycles)",{}]