Key Takeaways
- • FinCEN identified $12.7 billion in suspicious financial activity tied to cryptocurrency investment scams originating from Southeast Asian compounds between September 2023 and December 2025, based on 33,904 suspicious activity reports filed by approximately 1,300 institutions.
- • Crypto firms and money services businesses filed 55% of reports ($5.5 billion), while banks filed 41% ($6.4 billion), with securities firms accounting for the remainder ($784.5 million), indicating broad exposure across institutional financial infrastructure.
- • Monthly filing volumes grew 18% on average and individual reports increased 10.9% monthly, rising from 590 reports totaling $485.7 million in October 2023 to 2,482 reports worth $833.5 million by December 2025, reflecting either expanding fraud schemes or improved detection and reporting mechanisms.
- • Scammers consistently converted stolen funds into stablecoins—predominantly USDT—and routed proceeds through decentralized finance protocols and offshore exchanges, with blockchain analysis revealing reuse of collection addresses across multiple victims, enabling institutional detection of fraud patterns.
- • Elder exploitation appeared in approximately 25% of reported cases, broadly proportional to the elderly population share, though aggregate FBI data documented $4.8 billion in fraud losses among Americans over 60 during 2024, prompting legislative attention including the proposed GUARD Act to fund blockchain tracing capabilities for local law enforcement.
Summary
The Treasury Department's Financial Crimes Enforcement Network (FinCEN) released an alert and formal analysis on Thursday identifying approximately $12.7 billion in suspicious financial activity connected to cryptocurrency investment scams operated from Southeast Asian compounds. The assessment covers a 27-month period from September 2023 through December 2025 and represents one of the most comprehensive government examinations of organized crypto fraud infrastructure to date.
The suspicious activity reports came from a diverse institutional base of approximately 1,300 entities. Money services businesses, predominantly cryptocurrency firms, filed the plurality of reports at 55% of total filings, collectively reporting $5.5 billion in suspicious activity. Commercial banks accounted for 41% of filings and $6.4 billion in flagged transactions, while securities firms contributed the remaining reports valued at $784.5 million. This distribution underscores how crypto scams generate compliance alerts across traditional banking infrastructure as well as digital asset channels.
The velocity of reported scam activity accelerated substantially over the reporting period. Monthly filing counts increased an average of 10.9%, while the dollar values of reported suspicious activity rose 18% monthly. By December 2025, the market had reached 2,482 monthly reports worth $833.5 million, compared to 590 reports totaling $485.7 million in October 2023. FinCEN cautioned that portions of this growth may reflect broader adoption of its own search terminology introduced in a 2023 alert, and that totals may incorporate double-counting from transferred funds, attempted transactions, and reporting errors.
Operational analysis revealed consistent methodologies across scam networks. Perpetrators employed at least 22 different digital assets, with Ethereum, USDT, and USDC serving as the most prevalent vehicles. Regardless of which token victims initially purchased, blockchain forensics demonstrated that proceeds were almost universally converted into stablecoins—particularly USDT—before transit through decentralized finance protocols or international exchanges operating outside U.S. jurisdiction. Investigators noted that scammers frequently reused collection addresses across multiple victim accounts simultaneously, a pattern that enabled financial institutions to identify coordinated fraud schemes.
Demographic analysis indicated that elder victims comprised approximately 25% of reported cases, a proportion closely aligned with the population distribution of Americans aged 60 and over. This finding contradicted preliminary assumptions that older adults faced disproportionate victimization by crypto scams. However, aggregate FBI data from 2024 documented $4.8 billion in fraud losses specifically among Americans over 60, a statistic cited by senators in introducing the GUARD Act, legislation designed to fund blockchain-tracing infrastructure for local law enforcement. Fraud victims were geographically distributed across all 50 U.S. states.
The suspicious activity reports came from a diverse institutional base of approximately 1,300 entities. Money services businesses, predominantly cryptocurrency firms, filed the plurality of reports at 55% of total filings, collectively reporting $5.5 billion in suspicious activity. Commercial banks accounted for 41% of filings and $6.4 billion in flagged transactions, while securities firms contributed the remaining reports valued at $784.5 million. This distribution underscores how crypto scams generate compliance alerts across traditional banking infrastructure as well as digital asset channels.
The velocity of reported scam activity accelerated substantially over the reporting period. Monthly filing counts increased an average of 10.9%, while the dollar values of reported suspicious activity rose 18% monthly. By December 2025, the market had reached 2,482 monthly reports worth $833.5 million, compared to 590 reports totaling $485.7 million in October 2023. FinCEN cautioned that portions of this growth may reflect broader adoption of its own search terminology introduced in a 2023 alert, and that totals may incorporate double-counting from transferred funds, attempted transactions, and reporting errors.
Operational analysis revealed consistent methodologies across scam networks. Perpetrators employed at least 22 different digital assets, with Ethereum, USDT, and USDC serving as the most prevalent vehicles. Regardless of which token victims initially purchased, blockchain forensics demonstrated that proceeds were almost universally converted into stablecoins—particularly USDT—before transit through decentralized finance protocols or international exchanges operating outside U.S. jurisdiction. Investigators noted that scammers frequently reused collection addresses across multiple victim accounts simultaneously, a pattern that enabled financial institutions to identify coordinated fraud schemes.
Demographic analysis indicated that elder victims comprised approximately 25% of reported cases, a proportion closely aligned with the population distribution of Americans aged 60 and over. This finding contradicted preliminary assumptions that older adults faced disproportionate victimization by crypto scams. However, aggregate FBI data from 2024 documented $4.8 billion in fraud losses specifically among Americans over 60, a statistic cited by senators in introducing the GUARD Act, legislation designed to fund blockchain-tracing infrastructure for local law enforcement. Fraud victims were geographically distributed across all 50 U.S. states.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.