Key Takeaways
- • South Korean police arrested seven suspects, including a Chinese ringleader, for operating a cryptocurrency Ponzi scheme that defrauded 436 victims of 40.9 billion won ($29.6 million) between December 2024 and March 2026.
- • The criminal network used a fabricated volunteer organization called "Brilliance Team" to build credibility and recruit investors into a worthless token called AIXT Coin, promising guaranteed principal returns and 1,000% gains.
- • Suspects operated 11 branches nationwide and created over 5,700 fraudulent bank accounts under borrowed names to process victim deposits; authorities froze 560 million won ($405,000) in identified criminal proceeds.
- • The scheme operated exclusively on a proprietary application, preventing victims from trading the token on legitimate exchanges, while scammers staged a fake overseas exchange listing to legitimize the investment vehicle.
- • Authorities emphasized that cryptocurrency investors should recognize high-return guarantees and promised principal protection as red flags indicative of fraud, highlighting the persistence of investment scams in South Korea's crypto sector.
Summary
The Gyeonggi Nambu Provincial Police Agency dismantled a major cryptocurrency fraud operation on July 15, 2026, sending seven suspects to prosecutors in custody on charges including organizing a criminal group, fraud, and violations of quasi-receipt fund regulations. The suspects targeted South Korean retail investors through an elaborate scheme spanning from December 2024 through March 2026, ultimately stealing approximately $29.6 million from 436 victims.
The criminal operation centered on AIXT Coin, a self-created virtual token with no legitimate market value. To gain victims' trust, the suspects established a fake volunteer organization called Brilliance Team, which served as the primary recruitment and credibility mechanism. Victims were promised guaranteed principal protection and extraordinarily high returns of up to 1,000%, claims that should have signaled fraudulent intent to sophisticated investors. The token was restricted to trading only on a proprietary application controlled by the scammers, preventing victims from verifying market value or liquidating positions on legitimate exchanges.
The network's operational infrastructure reflected substantial organizational sophistication. Suspects established 11 branches across South Korea to manage victim recruitment and fund collection. To obscure the flow of stolen funds, the group created and utilized over 5,700 bank accounts opened under borrowed names. Law enforcement's forensic analysis identified 560 million won ($405,000) in virtual assets representing direct criminal proceeds, which authorities immediately froze pending asset recovery proceedings.
The scheme also incorporated a fabricated overseas exchange listing, creating an additional layer of deception designed to convince victims that AIXT Coin possessed legitimate institutional validation and fungibility. This false legitimacy, combined with the fake volunteer organization's social credibility, effectively manipulated victims into sustained capital deployment.
Police emphasized that investors should treat guaranteed returns and principal protection promises in cryptocurrency investments as definitive fraud indicators. The case underscores persistent vulnerabilities in South Korea's retail investor base and the continued evolution of Ponzi-style schemes adapted for digital assets.
The criminal operation centered on AIXT Coin, a self-created virtual token with no legitimate market value. To gain victims' trust, the suspects established a fake volunteer organization called Brilliance Team, which served as the primary recruitment and credibility mechanism. Victims were promised guaranteed principal protection and extraordinarily high returns of up to 1,000%, claims that should have signaled fraudulent intent to sophisticated investors. The token was restricted to trading only on a proprietary application controlled by the scammers, preventing victims from verifying market value or liquidating positions on legitimate exchanges.
The network's operational infrastructure reflected substantial organizational sophistication. Suspects established 11 branches across South Korea to manage victim recruitment and fund collection. To obscure the flow of stolen funds, the group created and utilized over 5,700 bank accounts opened under borrowed names. Law enforcement's forensic analysis identified 560 million won ($405,000) in virtual assets representing direct criminal proceeds, which authorities immediately froze pending asset recovery proceedings.
The scheme also incorporated a fabricated overseas exchange listing, creating an additional layer of deception designed to convince victims that AIXT Coin possessed legitimate institutional validation and fungibility. This false legitimacy, combined with the fake volunteer organization's social credibility, effectively manipulated victims into sustained capital deployment.
Police emphasized that investors should treat guaranteed returns and principal protection promises in cryptocurrency investments as definitive fraud indicators. The case underscores persistent vulnerabilities in South Korea's retail investor base and the continued evolution of Ponzi-style schemes adapted for digital assets.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.