Contents
Contents
The Prince Group bitcoin forfeiture case seeks approximately 127,271 bitcoin, alongside an indictment accusing the Cambodian conglomerate’s founder and chairman of directing cryptocurrency investment scams from forced-labor compounds. Behind the fake investment profits, prosecutors describe records a banking, payments or operations insider would recognize: account-opening forms, payrolls, phone inventories and diagrams showing where the money went.
The Justice Department’s October 2025 indictment charges the chairman with wire fraud conspiracy and money laundering conspiracy. Its separate civil complaint targets bitcoin allegedly connected to the operation.
Prince Holding Group presented itself as a Cambodian business spanning real estate development, financial services and consumer services. The indictment charges that its executives used that corporate network to operate scams and launder the money.
The indictment describes pig-butchering as investment fraud built on a manufactured relationship. A fictitious identity, sometimes introduced through an apparently mistaken message, opened the conversation. Repeated contact built trust before an investment opportunity, emergency or romance supplied the reason to send money.
The government’s civil complaint explains how the supposed investment became another part of the deception:
Many perpetrators would convince victims to use fraudulent websites or applications, controlled by scammers, to invest in virtual currency. Perpetrators coached victims through the investment process, showed them fake profits and encouraged them to invest more.
In that account, the person recommending the investment and the screen showing its success belonged to the same deception. The complaint describes the final stage as cutting off contact once the money had been stolen. An employee who understood how those profiles and balances were created could explain the gap between the customer’s screen and the actual movement of funds.
The civil complaint alleges that Prince Group built and operated at least ten scam compounds in Cambodia, where trafficked workers carried out fraud under threat of violence. It describes dormitories behind high walls and barbed wire. A ledger allegedly kept by the chairman assigned different schemes to particular buildings and floors at one compound.
The phone infrastructure matched that organization. According to the complaint, internal documents described two facilities with 1,250 mobile phones controlling 76,000 social-media accounts. Other documents covered bulk account registration and instructions for building rapport with victims. The supposedly personal introduction had an account inventory behind it.
The complaint alleges that a Brooklyn network helped scammers at Prince Group’s Jinbei Compound collect investments from U.S. victims. Introducers handed victims to purported account managers, who supplied wire instructions and created trading profiles. The destination accounts belonged to shell companies based in Brooklyn and Queens.
The account managers allegedly manipulated the profiles to display growing investments and initially allowed small withdrawals. Larger requests met demands for transaction fees, taxes or legal fees, followed eventually by silence. We see the cruelty in that sequence: apparent access to the money helped persuade victims to put more of it beyond reach.
According to the complaint, the network moved more than $18 million from over 250 victims between approximately May 2021 and August 2022. The alleged money trail ran through shell-company bank accounts, conversion into USDT, a stablecoin tied to the U.S. dollar, and transfers through unhosted wallets. Other funds were withdrawn as cash and used to buy cryptocurrency before moving onward. The complaint says the money went back through scammers at Jinbei and elsewhere before returning to Prince Group and its executives.
A separate criminal case shows the same payment machinery. In a guilty plea announced in November 2024, a money launderer admitted directing others to open U.S. shell-company accounts, monitoring victim wire transfers, and following their conversion into USDT and transfer to controlled wallets. For an insider, the useful connection is the chain from the bank account to the conversion instruction and the wallet receiving the funds.
The Prince Group civil complaint puts the bank’s account-opening paperwork beside the activity that followed. It alleges that Future Technology Investment described a business of mining, buying and selling digital assets with its own capital, while falsely identifying personal wealth as the source of income. Its director projected approximately $2 million each in monthly deposits and withdrawals.
The account statements told a much larger story. In February 2019, according to the complaint, the account recorded approximately $28 million in deposits and $27 million in withdrawals. Amber Hill Ventures Limited allegedly used the same personal-wealth explanation and understated its expected activity. We see the absurdity in that comparison: the modest business on the application and the money pouring through its account were both in the bank’s own files.
The complaint also says that the bank announced settlements in 2024 with the Federal Reserve, California’s Department of Financial Protection and Innovation, and the Securities and Exchange Commission over alleged transaction-monitoring violations involving cryptocurrency customers. That gives the account paperwork a further significance for bank insiders: what the institution did with the activity it could see.
For customer-onboarding and transaction-monitoring staff, that is a concrete point of entry into the alleged laundering. What the company said it would do can be compared with who actually funded the account and where the money went. We connect those records with the explanations, approvals and decisions inside the institution that a bank statement cannot supply.
The complaint alleges that Prince Group used functioning businesses as well as shell companies to launder proceeds. Professional money houses allegedly collected bitcoin or stablecoins, converted them into conventional currency, and used the cash to buy cryptocurrency again. Other proceeds moved through the group’s online gambling and mining operations, with money ultimately funding luxury purchases including yachts, private jets and homes.
According to the complaint, a manager kept payroll ledgers for the online gambling operations. The complaint quotes an instruction in those ledgers:
Employee wages – Please use clean money to pay.
That instruction says more about the alleged business than another photograph of a yacht. Whoever handled payroll had allegedly been told to distinguish the money used for wages. The ledger gives an insider a specific decision to explain: how that distinction was made and who decided which funds could pay employees.
Mining supplied a different explanation for incoming bitcoin. Miners receive newly generated cryptocurrency for verifying transactions, so a mining operation has a recognizable source of receipts. The complaint alleges that Prince Group funded mining operations with illicit proceeds and also mixed other funds with newly mined cryptocurrency in mining-associated wallets. It names Warp Data, its Texas subsidiary and Lubian among the operations used. According to the complaint, the chairman boasted that the mining profits came without costs because victims supplied the operating capital.
The government alleges that associates repeatedly split cryptocurrency across many wallets and gathered it back into fewer wallets, a pattern described as spraying and funneling. Some funds ended in exchange wallets or bank accounts after conversion into conventional currency. Others allegedly ended in unhosted wallets personally controlled by the chairman.
The bitcoin forfeiture complaint, filed on October 14, 2025, alleges that the funds were fraud proceeds or property involved in laundering. It states that the bitcoin was in U.S. custody at filing.
The complaint identifies cryptocurrency addresses in unhosted wallets allegedly controlled and tracked by the chairman. It also says he maintained records of the addresses and the seed phrases associated with their private keys. A private key authorizes transfers from an address, and a seed phrase can restore access to that key. Those records speak to control of the funds as well as their movement.
According to the complaint, FBI analysts grouped the addresses by similar funding patterns. They traced funds from mining operations and indirectly from centralized exchange wallets, including accounts controlled by Future Technology Investment, Amber Hill and other shell companies.
One example is particularly telling. The complaint describes mining-pool funds divided among 22 addresses and exchange funds divided among 27 addresses, then recombined at the same funneling address. Their transfer timing and amounts closely mirrored each other. The government alleges that the exchange funds were deliberately moved to resemble mining receipts and mixed with them, obscuring their origin.
That allegation makes the mining records important alongside the blockchain trace. A person who knew which receipts came from mining, which came from exchange accounts and who ordered the transfers could help explain the transactions the government grouped together.
The complaint also contrasts the public business with the alleged scam earnings. It says internal records suggested that, as of January 2024, annual revenue from legitimate operations likely did not exceed several hundred million dollars, while some key entities had negative cash flows. An associate had described earnings of over $30 million a day from scams and related illicit activities in 2018. The figures concern different years, but the complaint uses the internal accounts to test whether the public businesses could explain the money.
For a scheme like the one alleged here, useful proof connects the customer-facing story, the actual transfers and the people controlling them. A compound ledger can connect a scheme to a location. Account-opening records can show what a company told its bank, while exchange records and wallet permissions can connect balances and transfers to the people directing them.
The distinction matters because a public blockchain transfer and an exchange customer’s account are different records. A hosted exchange can move balances on its internal ledger without recording every movement separately on the public chain. An unhosted wallet puts control with the user, and the Prince Group complaint specifically ties its allegations to private-key and seed-phrase records.
Your view inside the business can connect those pieces. A payments employee may understand the conversion instructions, a platform employee the displayed returns, and an operations employee the ledgers or account inventories. We work with you to turn that knowledge into an explanation of who controlled the money and what the business told customers and financial institutions.
For crypto information, we assess whether the underlying conduct involves securities violations or commodity fraud and which whistleblower program may apply. We work through that program’s reward requirements with you, including which enforcement action and collected funds could support an award.
If you saw fabricated investment returns, misleading bank paperwork or instructions moving scam proceeds through mining and exchange accounts, speak to one of our Whistleblower Experts about the accounts behind the screen. We build the case around the transactions and decisions you can explain, bring in crypto fraud and money laundering whistleblower lawyers, and stay beside you through the pursuit of your matter.