A new US Treasury analysis ties $12.7 billion in suspicious transactions to digital asset investment scams, most of them run by transnational criminal organizations operating from compounds in Southeast Asia.
The Financial Crimes Enforcement Network, or FinCEN, published the analysis and an alert to financial institutions on Thursday. It examined 33,904 bank secrecy act reports filed by roughly 1,300 institutions between September 8, 2023 and December 31, 2025. The reports covered pig butchering schemes, romance baiting and cryptocurrency confidence schemes, where victims are manipulated into investing with false promises of large returns.
Victims appeared in all 50 states and several US territories, across every age group. The scams rely on fake personas posing as romantic partners, friends or business contacts, plus websites and mobile apps built to imitate legitimate investment services. A victim might spend months talking to a fabricated person before a single dollar moves, which is part of what makes the fraud so effective and so hard to interrupt. Scammers often start with small deposits, show the victim a fake dashboard with rising balances, and only push for large transfers once trust is built.
Digital asset investment scams pose one of the most significant fraud threats facing Americans today, said Gene Lange, performing the duties of Under Secretary for Terrorism and Financial Intelligence.
How the money moves
The report describes an industrial pipeline. Scam center operators buy services on so-called guarantee marketplaces, online markets where they purchase account creation, phishing and money laundering services like any other business input. Professional launderers then open financial accounts and shell companies to move proceeds, integrating them into the formal banking system through money mule networks and stablecoin transfers to exchanges outside the United States.
Stablecoins, especially USDT, are the main rail. FinCEN found proceeds were often converted into stablecoins and pushed through DeFi protocols or offshore exchanges, where the trail goes cold. The report also notes connections between scam compounds and human trafficking operations in Southeast Asia, where workers are reportedly held and forced to run the schemes against their will.
| FinCEN analysis at a glance | Figure |
|---|---|
| Suspicious transaction volume | $12.7 billion |
| Bank secrecy act reports reviewed | 33,904 |
| Reporting institutions | About 1,300 |
| Reporting window | Sep 2023 to Dec 2025 |
| Main laundering rail | Stablecoins, mostly USDT |
What banks are being told
The alert lists red flags for financial institutions to detect and report. These include customer transfers to exchanges in high-risk jurisdictions followed by rapid conversion patterns, account activity inconsistent with stated income or occupation, and new accounts that immediately begin high-value crypto purchases. FinCEN stressed that bank secrecy act reporting is what feeds law enforcement investigations and victim recovery efforts, and it urged institutions to keep filing.
The scale of the problem has grown faster than enforcement. Lawmakers in affected countries, including Myanmar and Cambodia, have pushed crackdowns on the compounds, but operations relocate across borders when squeezed. US agencies have combined designations, indictments and diplomatic pressure, yet the FinCEN numbers show reporting volume still climbing through the end of 2025. United Nations estimates have put hundreds of thousands of people to work in these compounds across the region.
Implications for the market
For exchanges and stablecoin issuers, the report adds pressure to tighten travel-rule compliance and screening for flows touching Southeast Asian platforms. It lands while Congress debates stablecoin and market structure bills, giving supporters of stricter reserve and transfer rules fresh material. Compliance teams should expect higher reporting expectations in upcoming supervisory guidance, and offshore venues that ignore freeze requests will face correspondent banking pressure.
For victims, recovery remains rare. Funds converted to stablecoins and moved through offshore exchanges within hours are difficult to freeze, and cross-border asset recovery depends on cooperation with jurisdictions where those exchanges operate, some of which have no asset seizure treaties with the US. FinCEN’s alert is at least an acknowledgment that the scale requires institutional response, not just individual caution. The agency said it will publish further analysis as new reporting comes in.
discussion