Key Takeaways
- • The U.S. Treasury Department sanctioned 9 individuals and 26 entities linked to the Prince Group Transnational Criminal Organization (TCO), a Cambodia-based network operating scam compounds and laundering cybercrime and cryptocurrency fraud proceeds, in a coordinated action announced June 23, 2026.
- • FinCEN proposed amending its October 2025 restrictions on Huione Group to explicitly cover H-Pay Service PLC and successor entities, targeting what regulators characterize as an attempt by a sanctioned payment processor to continue operations under a new corporate identity.
- • FinCEN's 34-page proposal documents that H-Pay assumed Huione Pay's branches, customer base, branding elements, and operational footprint following Huione Pay's loss of its Cambodian payment services license, with physical signage replacements observed at multiple locations.
- • Historical enforcement context shows Huione Group laundered approximately $4 billion between 2021-2025, including at least $37 million in virtual currency proceeds from North Korean cybercrimes, establishing the scale and severity of the underlying illicit network.
- • The regulatory action signals intensified U.S. focus on successor-entity workarounds, where sanctioned or restricted firms attempt regulatory evasion through corporate restructuring and rebranding rather than genuine business cessation.
Summary
The U.S. Treasury Department escalated enforcement against Southeast Asian financial crime networks on June 23, 2026, through coordinated action by the Office of Foreign Assets Control (OFAC) and Financial Crimes Enforcement Network (FinCEN). OFAC sanctioned nine individuals and 26 entities associated with the Prince Group Transnational Criminal Organization, a Cambodia-based operation accused of managing scam compounds and processing illicit proceeds from cybercrime and cryptocurrency investment fraud schemes.
Simultaneously, FinCEN advanced a regulatory proposal to amend existing restrictions originally imposed on Huione Group in October 2025. The amendment targets H-Pay Service PLC and any future successor entities, reflecting regulator concerns that H-Pay represents a continuation of Huione Group's operations under new corporate branding. According to FinCEN's 34-page proposal, H-Pay inherited critical operational elements from Huione Pay following the latter's loss of its Cambodian payment services license and mounting international regulatory pressure. The agency documented that H-Pay assumed Huione Pay's branch network, customer base, branding infrastructure, and operational footprint, with field observations confirming H-Pay signage replacing Huione Pay branding at multiple physical locations.
The enforcement action reflects broader regulatory strategy to prevent sanctioned or restricted entities from circumventing financial restrictions through corporate restructuring. By explicitly including H-Pay and successor entities in amended restrictions on maintaining U.S. correspondent accounts, FinCEN aims to close an identified evasion pathway without requiring separate enforcement actions against each rebranded iteration.
Historical context demonstrates the scale of underlying illicit activity. FinCEN investigations documented that Huione Group processed approximately $4 billion in illicit proceeds between 2021 and 2025, including at least $37 million in virtual currency stemming from North Korean cyberattacks. TRM data from 2024 identified $120 million in exposure to Huione from scam operations, with approximately 80 percent attributable to pig-butchering fraud schemes. The coordinated Treasury and FinCEN action represents an effort to prevent financial system access for networks that have historically facilitated large-scale cross-border money laundering tied to transnational organized crime and state-sponsored cyber operations.
Simultaneously, FinCEN advanced a regulatory proposal to amend existing restrictions originally imposed on Huione Group in October 2025. The amendment targets H-Pay Service PLC and any future successor entities, reflecting regulator concerns that H-Pay represents a continuation of Huione Group's operations under new corporate branding. According to FinCEN's 34-page proposal, H-Pay inherited critical operational elements from Huione Pay following the latter's loss of its Cambodian payment services license and mounting international regulatory pressure. The agency documented that H-Pay assumed Huione Pay's branch network, customer base, branding infrastructure, and operational footprint, with field observations confirming H-Pay signage replacing Huione Pay branding at multiple physical locations.
The enforcement action reflects broader regulatory strategy to prevent sanctioned or restricted entities from circumventing financial restrictions through corporate restructuring. By explicitly including H-Pay and successor entities in amended restrictions on maintaining U.S. correspondent accounts, FinCEN aims to close an identified evasion pathway without requiring separate enforcement actions against each rebranded iteration.
Historical context demonstrates the scale of underlying illicit activity. FinCEN investigations documented that Huione Group processed approximately $4 billion in illicit proceeds between 2021 and 2025, including at least $37 million in virtual currency stemming from North Korean cyberattacks. TRM data from 2024 identified $120 million in exposure to Huione from scam operations, with approximately 80 percent attributable to pig-butchering fraud schemes. The coordinated Treasury and FinCEN action represents an effort to prevent financial system access for networks that have historically facilitated large-scale cross-border money laundering tied to transnational organized crime and state-sponsored cyber operations.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.