Worked example · 2025-01

Huione Guarantee fake-CEX / pig-butchering platform — Southeast Asia / multi-chain — 2025

Loss: aggregate victim deposits estimated at $1.2B+ across the Huione Group-affiliated fake-CEX and investment-platform ecosystem, with Huione Guarantee operating as the platform-escrow engine for the broader Huione compound-operated fraud infrastructure. Individual victim losses range from mid-five-figure to seven-figure USD-equivalent per victim.
OAK Techniques observed: OAK-T11.005.001 (Fake-CEX / Pig-Butchering Platform) — primary; Huione Guarantee operated as a fake centralised exchange / escrow platform with no real exchange backend. Victim deposits in BTC, ETH, and USDT flowed into Huione-controlled wallets via romance-scam and friendship-scam feeder narratives. The platform's balance display, trade dashboard, and profit/loss statements were entirely UI-side fictions. OAK-T11.005.003 (Compound-Operated Investment-Fraud Platforms) — structurally adjacent; Huione Guarantee was the platform-escrow engine operating within the broader Huione Group compound ecosystem in Cambodia.
Attribution: confirmed at the entity level — Huione Group was designated by OFAC and subjected to a FinCEN section 311 final rule in October 2025. The Huione Guarantee platform was specifically named in the FinCEN action as the escrow-and-settlement engine for the broader Huione compound-operated fraud infrastructure.
Key teaching point: Huione Guarantee demonstrates that the fake-CEX / pig-butchering model (T11.005.001) scales to billion-dollar aggregate extraction when integrated with compound-operated fraud infrastructure (T11.005.003) — the platform-escrow layer provides the trust substrate that converts romance-scam feeder narratives into deposit flows at industrial throughput. The federal-record attribution (OFAC designation, FinCEN section 311 final rule) establishes the strongest available public-record confirmation of the compound-operated fake-platform model.

Summary

Huione Group is a Cambodia-based conglomerate with operations spanning Southeast Asia. Its Huione Guarantee subsidiary operated as a fake centralised exchange and investment platform — the escrow-and-settlement engine for the broader Huione compound-operated fraud ecosystem. The platform accepted victim deposits in BTC, ETH, and USDT (predominantly on Tron) from victims worldwide, funnelled through romance-scam and friendship-scam feeder narratives operated by trafficked workers in Huione-affiliated compounds in Cambodia.

The platform presented a legitimate exchange UI — balance display, trade dashboard, profit/loss statements, customer-support interface — all of which were database-side fictions. There was no real exchange backend, no order book, no custody infrastructure, and no proof-of-reserves. Victim deposits went directly to Huione-controlled wallets; withdrawals were either blocked outright or gated behind escalating "tax" / "verification fee" / "anti-money-laundering deposit" preconditions that never resulted in a completed withdrawal.

Huione Guarantee's structural role in the broader Huione ecosystem was the trust-substrate layer: the fake-CEX UI converted the romance-scam feeder narrative ("invest in this platform") into deposit action. The multi-layer fraud stacking was characteristic of the compound-operated model (T11.005.003): victims of the initial platform fraud were subsequently targeted by fake-recovery-service scams ("we can recover your lost funds for a fee") operated by the same compound ecosystem.

In October 2025, FinCEN issued a section 311 final rule designating Huione Group as a primary money-laundering concern, specifically naming Huione Guarantee as the escrow-and-settlement engine for the broader fraud infrastructure. The designation was the strongest federal-record attribution for the compound-operated fake-CEX model at the time.

Timeline (UTC)

When	Event	OAK ref
2020–2024	Huione Group expands compound-operated fraud infrastructure across Cambodia; Huione Guarantee operates as the fake-CEX escrow engine	T11.005.001 + T11.005.003 surface (operational)
2022–2025	Romance-scam feeder narratives operated from Huione-affiliated compounds target victims globally; deposit flows into Huione Guarantee wallets at industrial throughput	T11.005.001 (victim acquisition and deposit)
2024–2025	Multi-layer fraud stacking: victims of initial platform fraud targeted by fake recovery services operated from same compound ecosystem	T11.005.003 (multi-layer stacking)
2025-10	FinCEN section 311 final rule designates Huione Group as primary money-laundering concern; Huione Guarantee specifically named as escrow-and-settlement engine	federal-record attribution
2025-10	OFAC designates Huione-linked entities; aggregate victim deposits estimated at $1.2B+ across the ecosystem	(entity-level attribution)

Realised extraction

Aggregate victim deposits estimated at $1.2B+ across the Huione Group fake-platform ecosystem. Recovery is structurally foreclosed at present — funds have been laundered through Huione-controlled infrastructure with no per-victim restitution channel.

Public references

Cross-reference: T11.005.001 at techniques/T11.005.001-fake-cex-pig-butchering-platform.md.
Cross-reference: T11.005.003 at techniques/T11.005.003-compound-operated-investment-fraud-platforms.md.
Cross-reference: 2023-09-jpex-hong-kong at examples/2023-09-jpex-hong-kong.md (JPEX Hong Kong, ~$200M, canonical T11.005.001 anchor).
Cross-reference: 2024-2025-doj-sec-pig-butchering-enforcement-cohort at examples/2024-2025-doj-sec-pig-butchering-enforcement-cohort.md (DOJ/SEC pig-butchering enforcement cohort).
Cross-reference: 2025-10-huione-compound-fraud-cohort at examples/2025-10-huione-compound-fraud-cohort.md (Huione/Prince Group compound fraud cohort).

Public References

See citations in corresponding technique file.