‘Thunder Attack’ Busts $1.7B Tether-fueled Money Laundering Ring

Chinese police say they’ve dismantled an enormous money laundering ring that washed illicit funds for criminals via stablecoin tether

article-image

Source: Shutterstock

share

Chinese authorities say they’ve arrested 63 people in a self-styled “thunder attack” on a money laundering gang suspected of washing more than $1.7 billion via crypto. 

In a coordinated bust, the Horqin branch of the Tongliao Public Security Bureau in northeastern China dispatched more than 200 police across 17 provinces and municipalities, according to a statement.

It took more than three months to dismantle the ring, police said, who noted the gang used leading stablecoin tether (USDT) to launder gambling and other illicit proceeds on behalf of domestic and foreign criminal groups. 

Roughly $18.6 million in cash and assets have been seized. The gang allegedly persuaded individuals via Telegram to register accounts with crypto exchanges — mules for criminal funds. 

The gang was described to have a clear division of labor, with its operations stretching across China. Once the gang accepted money laundering requests, related tasks were assigned to teams, with leaders recruiting bottom-level grunts to carry out actions online and offline.

All gang members reportedly received commissions in different proportions after each money laundering operation was completed.

Authorities said the retrieval of assets has been complicated but blockchain analysis and work with international crypto exchanges eventually led to several persons being interrogated.

Investigations began after suspicious banking activity was detected in June, including some monthly transactions exceeding $1.4 million.

After preliminary investigations, the Horqin branch dispatched some 230 officers on Sept. 7 to Liaoning, Jilin, Heilongjiang, Guangdong, Fujian and Henan, among other provinces. 

By that time, two major suspects of the criminal gang had fled to Bangkok, Thailand but were successfully persuaded to return back to China a month later, police said.

The bust follows another from September, in which authorities claimed to have arrested 93 people for their involvement in a crypto money laundering ring valued at $5.6 billion.

Money laundering in crypto has long been a hot topic of debate. While such activity has increased over the years, analytics unit Chainalysis attributed $8.6 billion in crypto transaction volume to money laundering last year, just 0.05% of the annual total volume.

Between $800 billion and $2 trillion is estimated to be laundered via fiat currencies every year. The firm however warns money laundering in crypto could continue to rise alongside adoption.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Unlocked by Template (7).png

Research

Union’s improvements upon Tendermint consensus through CometBLS, coupled with ZK proving through Galois, allow for a broadly scalable, cost efficient, and low latency IBC implementation that is feasibly scalable across every existing blockchain, virtual machine and runtime. The implementation offers modular crosschain interoperability without the need for trusted intermediaries.  

article-image

Kraken’s chief security officer Nick Percoco said the exchange turned the tables on a North Korean hacker

article-image

Or is it approximately the least cypherpunk thing we could do?

article-image

Over 20% of SOL-USD swap volume goes through SolFi

article-image

CEO Vlad Tenev calls expected clarity on listing crypto asset securities “a big opportunity”

article-image

Big Tech pulled US indexes back into the green Thursday, as investors waited for two more Mag 7 first-quarter reports after the bell

article-image

Charts and takeaways from Tuesday’s jobs report and Wednesday’s GDP print, as the economy digests the tariff war