OFAC sanctions Xinbi Guarantee, the marketplace that absorbed Huione's scam-center trade

Two guarantee markets were sanctioned before this one, and their merchants did not stop trading. TRM Labs attributes Xinbi's rise directly to the decline of Huione Guarantee and Tudou Guarantee, and puts the growth at nearly doubled daily inflows between May and December 2025 ^[6]. One market absorbed the business of two. Nothing in this action addresses that pattern, and the pattern is what determines where the flow sits in six months ^[13].

The two companion designations show where OFAC now thinks the plumbing is. SafeW Technology, based in Singapore, publishes an end-to-end encrypted messaging app ^[11]. Anwen Technology, headquartered in Cambodia, builds the XinbiPay wallet, also sold as NewPay ^[12]. A messaging app and a wallet developer, not a marketplace or an exchange. A screening program built around marketplace names and deposit addresses does not catch a chat client or a consumer wallet app, and both are now inside the perimeter.

The US Secret Service and blockchain intelligence firm Elliptic said they identified and froze $52.8m in cryptoassets tied to Xinbi ^[7]. Against Treasury's $24bn of throughput since 2022 ^[3] that is 0.22 percent; against TRM's figure it is 0.15 percent ^[14]. Those are not recovery rates, since a frozen balance is a snapshot and throughput is cumulative, but they bound how much money this action touched. Elliptic's claim is a different one: merchants and users now operate knowing their wallets may be identified and frozen at any time, and that uncertainty undermines the mechanism these marketplaces depend on ^[15].

Treasury's $24bn is the government's number ^[3]. TRM's $36bn is one analytics firm's, about $12bn and roughly 50 percent higher ^[16][17]. For anyone tuning transaction monitoring against this network, the official figure is the floor, not the measurement.

TRM describes listings for stolen personal data, fake identity documents, AI deepfake tools, satellite internet equipment, and over-the-counter crypto exchanges ^[4]. That is the input side of the fraud rather than the proceeds side, which is why this reaches fraud teams that never touch sanctions work. The same firm says the scam operations these services support run on trafficked foreign nationals recruited with the promise of legitimate work ^[5].

Two things here are single-sourced and should be read that way. Xinbi appearing offline, and Telegram deleting the main associated channels and banning linked usernames, is Elliptic's account ^[8]. The designations, the named entities, and the $24bn are on the record ^[1][11][12]. The UK got there first, sanctioning Xinbi Guarantee in March ^[9]. Treasury secretary Scott Bessent framed the US action around scam centers in Southeast Asia stealing billions of dollars from American victims each year ^[10].

If the Huione sequence repeats, the successor market's inflow curve will be visible in chain data before the next designation names it.