Back

Massive Online Scam Industry Exploiting Stablecoins and Human Trafficking

Severity: High (Score: 70.0)

Sources: www.rusi.org, Wired-Gov, Modernghana

Published: 2026-05-19 · Updated: 2026-05-20

Keywords: online, scams, stablecoins, operating, global, bazaars, through

Severity indicators: global, rat

Summary

The online scam industry has reached epidemic levels, causing an estimated $442 billion in losses globally in 2025. Scams include 'pig butchering', impersonation, and sextortion, with operations heavily facilitated by Telegram-based guarantee marketplaces. These marketplaces allow scammers to sell tools and services for fraud, using stablecoins like Tether's USDT for transactions, which evade traditional banking checks. A significant humanitarian issue is also present, with around 300,000 trafficked individuals forced to commit fraud under duress. The largest marketplace, Huione Guarantee, processed at least $31 billion in transactions since its inception in 2021. The growth of these scams was exacerbated by the COVID-19 pandemic, as criminal networks repurposed empty resorts for cybercrime operations. Countries like Ghana and Nigeria are increasingly affected, with local fraud actors integrated into global scam networks. Law enforcement has begun to respond with arrests and raids, but the scale of the problem remains daunting. Key Points: • Online scams caused $442 billion in losses globally in 2025, with a rise in sophisticated fraud methods. • Telegram-based guarantee marketplaces are pivotal in facilitating scams and laundering money via stablecoins. • An estimated 300,000 trafficked individuals are forced into online fraud operations under severe threats.

Detailed Analysis

**Impact** Global losses from online scams reached approximately $442 billion in 2025, affecting millions of victims worldwide. Key sectors impacted include financial services, telecommunications, and social media platforms, with significant activity in Southeast Asia, West Africa (notably Ghana and Nigeria), South Africa, and Kenya. Approximately 300,000 trafficked individuals are forced to operate scam schemes under coercion in compounds, creating a severe humanitarian crisis alongside financial damage. Local fraud actors in Africa often function as nodes within larger transnational scam networks. **Technical Details** Attackers use stolen personal data from breaches, social media scraping, and data brokers to identify targets. Communication and fraud execution rely on SIM cards, social media accounts, fake investment websites, and Telegram-based online bazaars known as guarantee marketplaces. These marketplaces facilitate the sale of data, technology, and money laundering services, transacting primarily in Tether’s USDT stablecoin on the TRON blockchain to bypass traditional AML controls. Key marketplaces include Huione Guarantee (Haowang Guarantee), Tudou, and Xinbi Guarantee, which collectively processed tens of billions in illicit transactions. Physical control devices such as tasers and electrified shackles are used to detain trafficked workers. No specific malware or CVEs were reported. **Recommended Response** Prioritize monitoring and blocking Telegram channels linked to guarantee marketplaces and associated cryptocurrency wallets, especially those transacting in USDT on TRON. Enhance detection of SIM swap activity and social media account impersonations, focusing on indicators of coordinated fraud campaigns. Financial institutions should strengthen AML controls around stablecoin transactions and collaborate internationally on cross-border enforcement. Law enforcement and cybersecurity teams should monitor developments related to Huione Group and Prince Group investigations. No patching guidance is available due to the nature of the threat.

Source articles (3)

  • Click here for the full press release — www.rusi.org · 2026-05-19
    Online bazaars operating through Telegram are key enablers of online scams using stablecoins for payments and industrialised money laundering, totalling hundreds of billions of dollars. Online scams h…
  • Multi-Billion Dollar Guarantee Marketplaces Exploit Stablecoins for Scams — Wired-Gov · 2026-05-19
    Online bazaars operating through Telegram are key enablers of online scams using stablecoins for payments and industrialised money laundering, totalling hundreds of billions of dollars. Online scams h…
  • The Global Scam Industry Nobody Dares To Stop — Modernghana · 2026-05-19
    Inside the Multi-Billion-Dollar Shadow Economy Built on Deception And How It Is Playing Out Across Ghana and Africa There is a global criminal economy operating with industrial precision, exploiting d…

Timeline

  • 2021-01-01 — Huione Guarantee marketplace launched: Huione Guarantee began operations, facilitating transactions for online scams and money laundering.
  • 2025-01-01 — Scam losses reach $442 billion: Global losses from online scams were estimated at $442 billion for the year 2025, marking a significant increase.
  • 2025-05-01 — COVID-19 pandemic exacerbates scams: The pandemic led to a surge in online scams as criminal syndicates repurposed empty resorts for fraud operations.
  • 2026-05-19 — Ongoing law enforcement actions: Ghana's Cyber Security Authority conducted multiple raids, arresting suspects linked to international fraud networks.

Related entities

  • Data Breach (Attack Type)
  • Phishing (Attack Type)
  • Sakawa Evolution (Campaign)
  • Yahoo Plus (Campaign)
  • Cambodia (Country)
  • China (Country)
  • Ghana (Country)
  • Kenya (Country)
  • Nigeria (Country)
  • South Africa (Country)
  • CWE-200 - Exposure of Sensitive Information (Cwe)
  • rusi.org (Domain)
  • [email protected] (Email)
  • Financial (Industry)
  • T1566 - Phishing (Mitre Attack)
  • Instagram (Platform)
  • M-Pesa (Platform)
  • Telegram (Platform)
  • TRON (Platform)
  • WhatsApp (Platform)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed