Huione

Huione Group is a Cambodia-based illicit financial and cybercrime-enabling enterprise that has operated as a major laundering and service hub for transnational criminal activity. It has been described as combining an online marketplace, money-laundering services, and cryptocurrency trading infrastructure, including support for its own stablecoin ecosystem, and has processed very large volumes of cryptocurrency transactions since 2021. The group has been publicly linked to laundering proceeds from cybercrime, cryptocurrency theft, online investment fraud, and pig-butchering scam operations, and has been sanctioned and cut off from access to the U.S. dollar financial system. Huione Group has been associated with laundering at least billions of dollars in illicit proceeds between 2021 and 2025, including funds tied to scams and investment fraud. It has served as a one-stop-shop for criminal operators by facilitating movement and obfuscation of illicit proceeds and by supporting scam ecosystems with marketplace and payment services. Reporting also links the group to Chinese-language criminal service networks and to Southeast Asian scam infrastructure. The group has additionally been identified as a financial intermediary for North Korean cyber-enabled theft activity. High-confidence reporting links Huione Group to handling cryptocurrency stolen by Lazarus Group and to working with North Korea's Reconnaissance General Bureau to move or convert stolen virtual assets into fiat currency. In this role, Huione Group functioned as a post-theft laundering and cash-out facilitator rather than as the intrusion operator itself. Known names include Huione and Huione Group. A subsidiary, Huione Pay, has been associated with cross-chain cryptocurrency trading and fiat conversion services. Huione Group's observed role is primarily financial facilitation for cybercrime and fraud ecosystems, especially laundering, crypto movement, and support to scam operations, rather than direct network intrusion operations.