OFAC sanctions Xinbi Guarantee over $24 billion in Southeast Asia scam proceeds

What happened

The US Office of Foreign Assets Control (OFAC) designated Xinbi Guarantee on September 9, 2026, naming the Chinese language marketplace a significant transnational criminal organization. According to The Hacker News, OFAC described Xinbi as sitting at the center of Southeast Asia’s cyber scam economy.

Xinbi ran an escrow backed marketplace that connected scam syndicates with vendors selling stolen data, fake identity documents, deepfake tools, and cash out services. Transactions settled primarily in USDT on the TRON blockchain. Vendors on the platform also offered custom fake investment websites, laundering services, and help recruiting trafficking victims to work inside Southeast Asia scam compounds, per the same report.

Since emerging around 2022, Xinbi has processed more than $24 billion in digital assets and fiat currency. US authorities froze $52.8 million in crypto tied to the marketplace and its merchant network. The Department of Justice (DOJ) seized two wallets holding roughly $12 million and sought restraint of another 47 wallets tied to suspected money laundering.

OFAC also sanctioned two developers behind Xinbi’s core tooling: Anwen Technology, which built the XinbiPay and NewPay wallet, and SafeW Technology, which built the SafeW messaging app. Telegram banned Xinbi from its platform as of September 9, 2026. Two days earlier, on September 7, the US District Court for the District of Columbia authorized seizure of the Telegram channels that hosted the Xinbi marketplace.

Why it matters

The designation targets infrastructure, not just individuals. By sanctioning the wallet developer and the messaging app developer alongside the marketplace itself, OFAC is signaling that it will treat the toolmakers behind scam compound logistics as culpable as the syndicates using the tools. That is a broader net than typical designations focused on a single entity or its principals.

The scale is the notable part of this case, in an analytical sense. A marketplace that processed more than $24 billion since 2022 while settling primarily through Telegram coordination and USDT on TRON suggests the scam compound economy has built financial rails that function largely outside dollar clearing and correspondent banking. The freeze of $52.8 million against a reported $24 billion in lifetime volume also illustrates how much of that flow likely already moved beyond reach before disruption.

The parallel seizure of Telegram channels alongside Telegram’s own platform ban points to messaging platforms becoming a second enforcement surface alongside blockchain analytics in scam compound cases. This newsletter has only this single case as evidence, so the pattern’s frequency across other scam compound cases cannot yet be assessed here.

Practitioner angle

This designation carries an Act now urgency rating, not a Monitor one.

• Screen wallet addresses and counterparties against the TRON based USDT wallets tied to Xinbi Guarantee, Anwen Technology, and SafeW Technology named in OFAC’s September 9 designation, and update sanctions screening lists without delay.
• Apply enhanced due diligence to USDT-TRON transaction patterns consistent with escrow marketplace settlement, particularly repeated transfers to newly created counterparty wallets.
• Review any customer facing investment platform for resemblance to the custom fake investment websites vendors built for Xinbi, and treat unverified Southeast Asia based investment platforms as elevated risk pending further diligence.
• Flag customer communications that reference coordinating payments through Telegram channels, since Xinbi’s marketplace operated primarily through Telegram before the platform ban and the court ordered channel seizures.

Check exposure against the two wallets DOJ seized and the 47 wallets named in its restraint request today, not this quarter. The obligation here is immediate.