US Treasury Sanctions $24B Xinbi Guarantee Marketplace That Fled Tether (USDT)

A $24 Billion Escrow Hub

The US Treasury’s Office of Foreign Assets Control on Wednesday designated Xinbi Guarantee, a Chinese-language marketplace at the center of Southeast Asia’s cyber-fraud economy, as a transnational criminal organization, adding it to the SDN list alongside two technology vendors. The move, executed under President Trump’s executive order targeting transnational cyber scams, blocks any US assets tied to the designated parties and forbids American persons from transacting with them. Per the Treasury’s own announcement, the platform has processed more than $24 billion in digital assets and fiat currency since roughly 2022, operating as an escrow layer for scam compounds whose customer base has reportedly included North Korea-linked hacking groups and syndicates already under US sanctions, among them the Jinbei and Prince groups. Treasury Secretary Scott Bessent said scam centers in the region strip billions of dollars from American victims every year. The designation closes a loop that opened when FinCEN moved against Huione Pay, the Cambodian payment processor that had served the same clientele — Treasury was explicit that cybercriminals decamped to Xinbi, which kept offering substantially similar services to an overlapping user pool. In practice, escrow — the platform holding payment until both sides of a criminal deal confirmed delivery — gave fraud networks a trusted settlement rail. The marketplace had anticipated pressure: around June 2025, its administrators shifted merchant communications onto SafeW, an end-to-end encrypted messenger, and rolled out XinbiPay, a wallet built by Cambodia’s Anwen Technology. Both developers — Singapore’s SafeW Technology and Anwen — were named in Wednesday’s action, extending sanctions from the marketplace itself to the tooling that kept its flows off the surveillance grid. Britain’s Foreign, Commonwealth and Development Office had already designated the platform in March.

52 Wallets, $52.8M in Tether Frozen

The financial squeeze preceded the formal designation. On Tuesday, 52 wallets carrying $52.8 million in tether were frozen, working from intelligence that blockchain analytics firm Elliptic supplied to the US Secret Service. The Justice Department’s Scam Center Strike Force then seized the marketplace’s infrastructure and digital-asset wallets in tandem with Treasury’s action, taking control of two of the frozen addresses — roughly $12 million — under a warrant unsealed Wednesday. A federal district court had authorized seizure of the Telegram channels hosting the marketplace on Monday, and Xinbi’s main channel was offline by Wednesday. Cooperating with federal prosecutors in Washington DC, the Strike Force also backed raids on fraud compounds as distant as Madagascar. Tether, the issuer of the largest dollar-pegged token, cooperated with the account freezes during the investigation, and the average balance across the 52 addresses — about $1 million apiece — reflects whale-scale positioning rather than retail remnants. Xinbi’s operators did not absorb the loss quietly: in Telegram messages to users they denounced what they called Tether’s “arbitrary freezing” of addresses — a statement Elliptic attributed to the platform — and told merchants they were migrating to USDD, a Tron-based stablecoin whose issuance leaves no equivalent off-switch for US authorities to press. The pivot is a practical escape plan rather than reflexive FUD, and it targets the very feature — issuer-level freezing — that made USDT the workhorse of both legitimate settlement and laundered proceeds. Unlike the self-custodial model behind products such as Tangem Pay, USDD keeps an issuer but removes the US-reachable freeze switch, and its Tron-centric, omnichain-style deployments complicate any single-jurisdiction takedown. Treasury’s campaign on this beat has been steady — in April it sanctioned a Cambodian senator over a pig-butchering network. Readers tracking the market in real time can follow live spot and futures prices on Bybit.

The Freeze Arms Race Continues

The through-line across both actions is that freezability has become the decisive policy lever in stablecoin enforcement. COINOTAG’s reading: issuer cooperation turned $52.8 million into a same-week chokepoint, and the Treasury filing we reviewed states plainly that the designated persons’ US assets are blocked and US-person dealings prohibited — Wednesday’s infrastructure seizure shows those clauses being executed, not merely published. But Xinbi’s flight to USDD signals where this pressure leads: activity is displaced, not eliminated. Expect the tug-of-war between issuer freeze powers and the migration away from them to keep defining this enforcement cycle.