Cloud Seizure Hits Scam Laundering Backbone

The real break is that enforcement is now going after the hosted systems that let scam markets move money at scale. Seizing the cloud backend cuts off the control layer that kept escrow, marketplace access, and laundering workflows running. DOJ said it seized a cloud account used by HuiOne Group subsidiaries, including HuiOne Guarantee, which it tied to an illicit Telegram marketplace and billions in transactions from 2021 to 2025. Treasury also sanctioned nine individuals and 26 entities linked to Prince Group, widening the pressure from the marketplace itself to the financial network around it. That shifts the response from naming operators to disrupting the infrastructure that makes the business work. The same model can apply to other abuse-heavy cloud, messaging, and payments services when the backend becomes part of the laundering chain.

Part of the PlainSec briefing for 2026-06-25

Sources