South Korean Customs Bust $107M Crypto Laundering Ring Run by Chinese Nationals

ccn.comPubblicato 2026-01-19Pubblicato ultima volta 2026-01-19

Introduzione

South Korean customs authorities have uncovered a $107 million cryptocurrency laundering ring operated by three Chinese nationals. The scheme, which ran from September 2021 to June 2025, disguised illicit foreign exchange transactions as legitimate payments for cosmetic surgery and university tuition. Overseas clients transferred funds in foreign currencies to the operators, who converted the money into cryptocurrency via overseas exchanges. The crypto was then moved to South Korean wallets, sold for local currency, and funneled through domestic bank accounts. The operation exploited regulatory gaps in monitoring high-value service industries and crypto off-ramps. All suspects have been arrested and referred for prosecution under the Foreign Exchange Transactions Act.

Key Takeaways

  • South Korean customs busted a $107 million crypto laundering operation run by three Chinese nationals.
  • The ring disguised illicit transfers as payments for cosmetic surgery and university tuition from 2021 to 2025.
  • Funds passed through overseas crypto exchanges before operators converted them into Korean won through local bank accounts.

South Korean customs authorities have uncovered an international cryptocurrency laundering ring involving approximately 150 billion Korean won ($107 million).

The operation reportedly ran from September 2021 to June 2025.

It exploited legitimate cross-border payments for services such as cosmetic surgery and education to disguise illicit foreign exchange transactions.

Try Our Recommended Crypto Exchanges
Sponsored
Disclosure
We sometimes use affiliate links in our content, when clicking on those we might receive a commission at no extra cost to you. By using this website you agree to our terms and conditions and privacy policy.
"}' data-trk="68df7fd8872238d510dfbf06" href="https://links.ccn.com/links?code=6932940e4a5bcb6231949f91" rel="nofollow" target="_blank">
XM.com<\/h3>"}' data-trk="68df7fd8872238d510dfbf06" href="https://links.ccn.com/links?code=6932940e4a5bcb6231949f91" rel="nofollow" target="_blank">

XM.com

promotions
Get 100% Bonus up to $100 on your first Deposit.<\/strong>"}' data-trk="68df7fd8872238d510dfbf06" href="https://links.ccn.com/links?code=6932940e4a5bcb6231949f91" rel="nofollow" target="_blank"> Get 100% Bonus up to $100 on your first Deposit.
Coins
28
Claim Offer
"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank">
Bitunix<\/h3>"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank">

Bitunix

promotions
Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.<\/strong>"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank"> Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.
Coins
151
Claim Offer
"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank">
Bitget<\/h3>"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank">

Bitget

promotions
New user rewards up to 6,200 USDT.<\/strong>"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank"> New user rewards up to 6,200 USDT.
Coins
88
Claim Offer
Explore All Offers

How the Billion-Won Crypto Laundering Scheme Worked

The crypto laundering ring operated as a sophisticated, unauthorized foreign exchange network.

Overseas clients—primarily individuals seeking cosmetic surgery procedures or paying for university tuition in South Korea—transferred funds in foreign currencies, such as U.S. dollars and Chinese yuan, to the operators.

The operators converted the funds into crypto on overseas exchanges. They would then move the crypto to wallets in South Korea and sell it on local platforms for Korean won.

To further obscure the trail, perpetrators routed the funds through multiple domestic bank accounts under the guise of legitimate expenses.

The scheme averaged nearly $27 million annually, totaling 148.9 billion won over its four-year run.

The perpetrators leveraged sectors such as medical tourism and education, which naturally involve large and irregular international transfers.

This made the transactions appear routine and allowed them to evade early detection by financial authorities.

Regulatory Gaps and Enforcement Challenges

Despite South Korea’s strict crypto framework, including real-name banking rules and the Virtual Asset User Protection Act introduced in 2021.

Authorities say gaps remain in enforcing the FATF Travel Rule across virtual asset service providers.

The case has renewed calls for stronger due diligence in high-value service industries, renewed data sharing between agencies, and greater scrutiny of crypto “off-ramps,” where digital assets are converted into fiat currency.

Officials have also pointed to the potential role of a future central bank digital currency (CBDC) in improving transaction transparency.

The Chinese Connection

Local reports say all three suspects are Chinese nationals, highlighting a direct link to China.

One suspect, a Chinese man in his 30s, allegedly played a central role in coordinating the operation.

The use of Chinese yuan in client payments and reliance on overseas exchanges—some with ties to China—helped facilitate the initial conversion into cryptocurrency.

While similar laundering networks in the region have been linked to cybercrime or scam syndicates, investigators said this operation focused on exploiting South Korea’s service export industries rather than digital theft.

The Seoul Main Customs Office led the investigation, arrested all three suspects, and referred them to prosecutors for violating the Foreign Exchange Transactions Act.

Authorities described the case as part of a broader crackdown on crypto-enabled foreign currency smuggling, noting that similar schemes have accounted for an estimated $6.8 billion in illicit activity over the past five years.

Top Trending Crypto Articles
  • Best Exchanges Check Out Our Recommended Exchanges Here
  • Buy Crypto Fast How To Buy Crypto with a Credit Card Now
  • Safe Crypto Gambling See Our Picks for the Best Crypto Gambling Sites

Domande pertinenti

QWhat was the total value of the cryptocurrency laundering operation busted by South Korean customs?

AThe total value of the cryptocurrency laundering operation was 150 billion Korean won, which is approximately $107 million.

QHow did the laundering ring disguise their illicit financial transfers?

AThe ring disguised the illicit transfers as legitimate payments for services such as cosmetic surgery and university tuition.

QWhat was the role of overseas cryptocurrency exchanges in this laundering scheme?

AThe operators converted the illicit funds into cryptocurrency on overseas exchanges before moving them to South Korea and selling them on local platforms for Korean won.

QWhat regulatory gap did the perpetrators exploit, according to the authorities?

AThe perpetrators exploited gaps in the enforcement of the FATF Travel Rule across virtual asset service providers, despite South Korea's strict crypto framework.

QWhat was the nationality of the three main suspects involved in the operation?

AAll three main suspects were Chinese nationals.

Letture associate

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

North Korean hackers, particularly the notorious Lazarus Group and its subgroup TraderTraitor, have stolen over $500 million from cryptocurrency DeFi platforms in less than three weeks, bringing their total theft for the year to over $700 million. Recent major attacks on Drift Protocol and KelpDAO, resulting in losses of approximately $286 million and $290 million respectively, highlight a strategic shift: instead of targeting core smart contracts, attackers are now exploiting vulnerabilities in peripheral infrastructure. For instance, the KelpDAO attack involved compromising downstream RPC infrastructure used by LayerZero's decentralized validation network (DVN), allowing manipulation without breaching core cryptography. This sophisticated approach mirrors advanced corporate cyber-espionage. Additionally, North Korea has systematically infiltrated the global crypto workforce, with an estimated 100 operatives using fake identities to gain employment at blockchain companies, enabling long-term access to sensitive systems and facilitating large-scale thefts. According to Chainalysis, North Korean-linked hackers stole a record $2 billion in 2025, accounting for 60% of all global crypto theft that year. Their total historical crypto theft has reached $6.75 billion. Post-theft, they employ specialized money laundering methods, heavily relying on Chinese OTC brokers and cross-chain mixing services rather than standard decentralized exchanges. Security experts, while acknowledging the increased sophistication, emphasize that many attacks still exploit fundamental weaknesses like poor access controls and centralized operational risks. Strengthening private key management, limiting privileged access, and enhancing coordination among exchanges, analysts, and law enforcement immediately after an attack are critical to improving defense and fund recovery chances. The industry's challenge now extends beyond secure smart contracts to safeguarding operational security at the infrastructure level.

marsbit5 min fa

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

marsbit5 min fa

Circle CEO's Seoul Visit: No Korean Won Stablecoin Issuance, But Met All Major Korean Banks

Circle CEO Jeremy Allaire's recent activities in Seoul indicate a strategic shift for the company, moving away from issuing a Korean won-backed stablecoin and instead focusing on embedding itself as a key infrastructure provider within Korea’s financial and crypto ecosystem. Despite Korea accounting for nearly 30% of global crypto trading volume—with a market characterized by high retail participation and altcoin dominance—Circle has chosen not to compete for the role of stablecoin issuer. Instead, Allaire met with major Korean banks (including Shinhan, KB, and Woori), financial groups, leading exchanges (Upbit, Bithumb, Coinone), and tech firms like Kakao. This approach reflects a broader industry transition: the core of stablecoin competition is shifting from issuance rights to systemic positioning. With Korean regulators still debating whether banks or tech companies should issue stablecoins, Circle is avoiding regulatory uncertainty by strengthening its role as a service and technology partner. The company is deepening integration with trading platforms, building connections, and promoting stablecoin infrastructure. This positions Circle to benefit regardless of which entity eventually issues a won stablecoin. Allaire also noted the potential for a Chinese yuan stablecoin in the next 3–5 years, underscoring a regional trend of stablecoins becoming more regulated and integrated with traditional finance. Ultimately, Circle’s strategy highlights that future influence in the stablecoin market will belong not necessarily to the issuers, but to the foundational infrastructure layers that enable cross-system transactions.

marsbit33 min fa

Circle CEO's Seoul Visit: No Korean Won Stablecoin Issuance, But Met All Major Korean Banks

marsbit33 min fa

SpaceX Ties Up with Cursor: A High-Stakes AI Gambit of 'Lock First, Acquire Later'

SpaceX has secured an option to acquire AI programming company Cursor for $60 billion, with an alternative clause requiring a $10 billion collaboration fee if the acquisition does not proceed. This structure is not merely a potential acquisition but a strategic move to control core access points in the AI era. The deal is designed as a flexible, dual-path arrangement, allowing SpaceX to either fully acquire Cursor or maintain a binding partnership through high-cost collaboration. This "option-style" approach minimizes immediate regulatory and integration risks while ensuring long-term alignment between the two companies. At its core, the transaction exchanges critical AI-era resources: SpaceX provides its Colossus supercomputing cluster—one of the world’s most powerful AI training infrastructures—while Cursor contributes its AI-native developer environment and strong product adoption. This synergy connects compute power, models, and application layers, forming a closed-loop AI capability stack. Cursor, founded in 2022, has achieved rapid growth with over $1 billion in annual revenue and widespread enterprise adoption. Its value lies in transforming software development through AI agents capable of coding, debugging, and system design—positioning it as a gateway to future software production. For SpaceX, this move is part of a broader strategy to evolve from a aerospace company into an AI infrastructure empire, integrating xAI, supercomputing, and chip manufacturing. Controlling Cursor fills a gap in its developer tooling layer, strengthening its AI narrative ahead of a potential IPO. The deal reflects a shift in AI competition from model superiority to ecosystem and entry-point control. With programming tools as a key battleground, securing developer loyalty becomes crucial for dominating the software production landscape. Risks include questions around Cursor’s valuation, technical integration challenges, and potential regulatory scrutiny. Nevertheless, the deal underscores a strategic bet: controlling both compute and software development access may redefine power dynamics in the AI-driven future.

marsbit1 h fa

SpaceX Ties Up with Cursor: A High-Stakes AI Gambit of 'Lock First, Acquire Later'

marsbit1 h fa

Trading

Spot
Futures
活动图片