Huione Group: World's Largest Illicit Marketplace and the USDH Stablecoin Risk

Huione Group now operates what blockchain analytics firm Elliptic has identified as the largest illicit online marketplace ever recorded, with cryptocurrency wallets linked to its Telegram-based platform and vendors having received at least $24 billion in total inflows. On top of that, the Cambodian conglomerate has launched its own US dollar-pegged stablecoin, USDH, explicitly marketed as immune to the regulatory oversight and asset-freeze mechanisms that apply to other stablecoins. For accounting firms, auditors, and CFOs managing crypto exposure, both developments carry direct AML and counterparty risk implications.

What Huione Guarantee Is and Why It Matters Now

Huione Guarantee is a Chinese-language marketplace that operates through a network of channels on the Telegram messaging platform. It primarily serves fraudsters in South-East Asia, including those running so-called pig butchering scams, where victims are cultivated over weeks or months before being defrauded of large sums. Vendors on the platform offer money laundering services, stolen personal data, fraud technology, and other inputs that enable organised cybercrime at industrial scale.

Scale that dwarfs every prior illicit marketplace

Elliptic's updated figures place cumulative inflows to Huione Guarantee wallets and vendor wallets at a minimum of $24 billion. That figure eclipses Hydra, the previously largest darknet marketplace, which received roughly $5 billion over its entire six-year lifespan. Monthly inflows to Huione have risen by 51% since Elliptic's initial July 2024 report, and the platform's user base has grown to over 900,000. A Telegram-based gambling bot linked to the platform has separately processed close to $6 billion in crypto flows, much of which Elliptic flags as potentially constituting money laundering.

Huione Group's broader footprint

Huione Group is a Cambodian conglomerate with reported links to the country's ruling family. It operates Huione Pay, a payments business that has itself been identified as a money laundering service provider on the marketplace. One of Huione Pay's accounts was frozen by Tether in mid-2024 after receiving funds connected to a theft attributed to North Korea's Lazarus Group. Despite attempts by Huione Guarantee to rebrand itself as "Haowang Guarantee" and distance itself from the parent group, Huione Guarantee has acknowledged that Huione Group remains a strategic partner and shareholder.

USDH: An Unregulated Stablecoin Built to Evade Freezing

In September, Huione Group launched USDH, a US dollar-backed stablecoin. The product's own website promotes its core selling point as the absence of asset-freeze functionality and freedom from what it describes as "traditional regulatory agencies". This is a direct contrast to stablecoins such as Tether's USDT, which include freeze mechanisms that regulators and law enforcement can request issuers to invoke against wallets linked to illicit activity.

Technical infrastructure and distribution

USDH has been issued across the Ethereum, BNB Smart Chain, and Tron blockchains, as well as Huione's own recently launched blockchain, referred to as Huione Chain or Xone Chain. The group has also launched a native crypto wallet, a decentralised exchange allowing USDH to be swapped for other assets, and ChatMe, a Telegram-like messaging application. The native blockchain token, HC, has been offered through an initial coin offering. Together, these products reduce Huione's dependence on third-party infrastructure, including Telegram and USDT, and make the ecosystem harder to disrupt through existing enforcement channels.

For context on why stablecoin design choices carry systemic consequences, see the wider stablecoin systemic risk warnings from the BIS, which separately flags the fragmentation risk created by proliferating unregulated token ecosystems.

AML Risk Implications for Accounting and Compliance Professionals

Elliptic has identified thousands of wallet addresses linked to Huione businesses and vendors on Huione Guarantee. Any firm or individual holding crypto assets that can be traced, even indirectly, through those wallets faces potential exposure under AML and sanctions frameworks across the US, EU, Australia, and Canada.

Key exposure vectors for firms to assess

The risk categories most relevant to accounting and compliance teams include the following areas. First, counterparty screening: any client or counterparty transacting in USDT, USDC, or other assets through South-East Asian entities should be assessed against known Huione-linked wallet clusters. Second, stablecoin acceptance policies: firms that accept or process USDH directly face clear regulatory risk given its explicit design to circumvent freeze mechanisms. Third, indirect exposure through DeFi liquidity pools: USDH's listing on decentralised exchanges means it can enter liquidity pools alongside other assets, creating indirect contamination risk for institutional DeFi positions. Fourth, client due diligence on crypto-native businesses: firms onboarding crypto exchanges, payment processors, or gaming platforms with South-East Asian connections need heightened scrutiny.

For a detailed look at the earlier US law enforcement action targeting Huione, see the FBI's earlier action against Huione Group and its $134 billion illicit marketplace case.

What Firms Should Do Now

The USDH launch and the continued growth of Huione Guarantee after Elliptic's initial disclosure demonstrate that voluntary rebranding and partial policy changes have not materially disrupted operations. Compliance teams should treat Huione-linked wallet addresses as high-risk indicators requiring enhanced due diligence under existing AML frameworks, not as blocked entities only if a formal designation has been issued. The scale of this ecosystem, combined with its deliberate design to resist regulatory intervention, makes it a live risk that standard transaction monitoring may not catch without specific rule configurations targeting Huione-linked clusters.

Source: Elliptic

Frequently Asked Questions

What is Huione Guarantee and why is it significant for compliance teams?

Huione Guarantee is a Telegram-based marketplace that facilitates fraud infrastructure, money laundering services, and stolen data sales, primarily for organised cybercrime groups in South-East Asia. Elliptic's analysis places cumulative crypto inflows to the platform at a minimum of $24 billion, making it the largest illicit online marketplace ever identified. That scale means the probability of indirect exposure through crypto transactions is materially higher than with smaller darknet markets.

What is USDH and what makes it a specific AML risk?

USDH is a US dollar-backed stablecoin launched by Huione Group that is explicitly marketed as lacking the freeze functionality found in mainstream stablecoins. It has been issued on Ethereum, BNB Smart Chain, Tron, and Huione's own blockchain, and is tradeable on a Huione-operated decentralised exchange. Accepting, processing, or holding USDH creates direct AML and regulatory exposure under frameworks in the US, EU, UK, Australia, and Canada.

How can a firm's crypto portfolio be exposed to Huione-linked wallets indirectly?

Indirect exposure can arise through DeFi liquidity pools that contain USDH alongside other assets, through counterparties that have received or sent funds via Huione-linked addresses, or through centralised exchange accounts that have not adequately screened for Huione wallet clusters. Elliptic has identified thousands of relevant addresses, which can be used to configure transaction monitoring rules.

Does a firm need a formal sanctions designation before treating Huione exposure as high risk?

No. AML obligations in most jurisdictions require firms to conduct enhanced due diligence on high-risk relationships based on their own risk assessments, not solely on formal designation lists. Given the documented scale and nature of Huione Guarantee's operations, a risk-based approach would treat any material connection to Huione-linked wallets as requiring enhanced scrutiny regardless of formal designation status.

What policy changes should firms consider in response to the USDH launch?

Firms should review and update their stablecoin acceptance policies to explicitly address tokens that lack freeze or compliance mechanisms. Any onboarding or transaction monitoring framework that treats all dollar-pegged tokens equally without assessing their compliance architecture is likely inadequate given regulatory expectations in the US, EU, and Australia. Client-facing policies should also address the indirect DeFi exposure risk created by USDH's presence in decentralised liquidity pools.