Cyberscoop Chinese National Extradited for $37M Cryptocurrency Scam Targeting U.S. Victims
Article Content
- •Zheng Zhao was extradited for his role in a $37 million cryptocurrency scam targeting U.S. victims.
- •The scam involved fake investment platforms and deceptive communication methods to gain victim trust.
- •Zhao faces up to 20 years in prison, with eight co-conspirators already sentenced.
Zheng Zhao, a 44-year-old Chinese national, was extradited from the Netherlands to the U.S. and arraigned for allegedly participating in a cryptocurrency investment scam that defrauded 174 American victims out of nearly $37 million. The scheme involved building trust with victims through social media, phone calls, and dating sites, before directing them to fake investment platforms. Funds were transferred from U.S. bank accounts to a Deltec Bank account in the Bahamas, where they were converted to Tether (USDT) and sent to digital wallets controlled by co-conspirators in Cambodia. Zhao faces a maximum of 20 years in prison if convicted of conspiracy to commit money laundering. Eight accomplices have already pleaded guilty, with sentences ranging from 46 to 51 months in prison. The FBI reported that investment scams stole over $8.6 billion in 2025, highlighting the growing threat of such frauds.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Axis Digital Limited in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How much money was involved in the scam?
What are the charges against Zheng Zhao?
What should victims do if they were affected?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…