Record-Breaking Criminal Enterprise : Haowang Guarantee operated as the world's largest crypto-fueled black market, facilitating $27 billion in illicit transactions since 2021. Operating through Telegram channels, this criminal enterprise dwarfed traditional dark web marketplaces in scale and accessibility. Its May 13, 2025 shutdown marked the largest cybercrime marketplace takedown in internet history, dealing significant blows to international criminal organizations.
Sophisticated Criminal Marketplace : The platform functioned as a "guarantee marketplace" providing escrow services for third-party vendors conducting illegal transactions. This business model created trusted environments where criminals safely conducted money laundering, stolen data sales, and scam infrastructure deals. Chinese-language cybercrime communities particularly relied on these guarantee marketplaces for high-value illegal transactions while shielding operators from direct liability.
Horrifying Service Portfolio : Haowang's criminal offerings included money laundering through Tether cryptocurrency, stolen personal data markets, and deepfake software for identity theft. Most disturbing were human trafficking tools including GPS-enabled collars and electric batons used in Southeast Asian scam compounds. The platform's telecommunications infrastructure enabled large-scale romance and investment scams targeting victims worldwide.
Huione Group Criminal Network : Haowang operated as subsidiary of Cambodia-based Huione Group, controlling multiple entities including Huione Pay and Huione Crypto. The group maintained direct connections to North Korea's Lazarus hacking group, receiving funds from state-sponsored cybercrime operations. U.S. Treasury Department sanctions banned the entire organization from American financial systems due to money laundering concerns.
Investigative Breakthrough and Shutdown : Blockchain analytics firm Elliptic's investigation, combined with WIRED's journalistic inquiry, exposed the platform's massive criminal operations to authorities. Telegram responded by banning thousands of associated accounts, dismantling communication infrastructure. Platform operators acknowledged defeat, posting broken-English messages announcing permanent cessation of operations following coordinated investigative pressure.
Criminal Migration Patterns : Following Haowang's shutdown, criminal operators immediately migrated users to alternative platforms, particularly Tudou Guarantee, sharing administrative connections with the defunct marketplace. Elliptic monitoring revealed surge patterns in new registrations across replacement platforms as criminals maintained illegal operations. This demonstrates cybercrime network resilience and rapid adaptation to law enforcement pressure.
Global Cybercrime Evolution : The Haowang case illustrates criminal marketplace shifts from dark web platforms to mainstream apps like Telegram, dramatically lowering criminal participation barriers. This accessibility revolution enabled unprecedented cybercrime growth by removing technical expertise requirements. The platform's success highlights how cryptocurrency integration transforms traditional crime through instant, pseudo-anonymous global transactions requiring coordinated international prevention efforts.
Join our WhatsApp Channel to get the latest news, exclusives and videos on WhatsApp