FinCEN Ties $12.7 Billion in Reported Crypto Scam Flows to Overseas Fraud Rings
Key Takeaways
- •FinCEN identified about $12.7 billion in reported financial activity linked to suspected digital asset investment scams, drawn from 33,904 Bank Secrecy Act filings between September 8, 2023 and December 31, 2025.
- •FinCEN stated the $12.7 billion total does not represent confirmed victim losses, as the data may include attempted transactions, duplicate reporting, and amended filings.
- •The scams are typically operated by transnational organized crime groups based in Southeast Asia, which use outsourced services, shell companies, mule accounts, and stablecoins to launder funds.
- •A FATF report found that stablecoins accounted for 84% of illicit virtual asset transactions in 2025, and UNODC estimated regional scam losses at $88.3 billion to $114.1 billion that year.
- •FinCEN advised banks and cryptocurrency firms to share scam-related information voluntarily under Section 314(b) of the USA PATRIOT Act and encouraged prompt reporting to the FBI's IC3 to aid fund recovery.

The Financial Crimes Enforcement Network (FinCEN), a division of the U.S. Treasury, has identified approximately $12.7 billion in financial activity reported by U.S. institutions that is linked to suspected digital asset investment scams. According to FinCEN, these scams are typically run by transnational organized crime groups based in Southeast Asia.
The findings, released on September 3, 2026 through FinCEN's Financial Trend Analysis and an accompanying alert to financial institutions, add to the burden on exchanges, stablecoin issuers, and regulators, since fraudulent funds continue to move through the same channels as those of legitimate customers. For consumers, the alert is a reminder that losses reported here flow through ordinary payment rails and crypto wallets, which is what makes the schemes hard to distinguish from legitimate activity at the point of transfer.
FinCEN has advised banks and cryptocurrency firms to watch for signs of scam operations and to share scam-related information voluntarily under Section 314(b) of the USA PATRIOT Act, a provision designed to let financial institutions pool information about suspected money laundering and terrorist financing without breaching customer privacy rules. Tightening cross-border controls without impeding legitimate cryptocurrency activity, however, remains a difficult balance.
Two Years of Filings, $12.7 Billion Flagged
The $12.7 billion figure comes from 33,904 reports submitted under the Bank Secrecy Act between September 8, 2023 and December 31, 2025. The majority of these reports came from money services businesses heavily dependent on the digital assets industry, while depository institutions accounted for as much as 96% of all reports.
FinCEN noted that the total does not represent confirmed victim losses. The data may include attempted transactions, duplicate reporting, transfers in both directions, and amendments to previously filed reports.
The volume of reports filed increased by an average of 10.9% month over month, while the amount of money reported grew by roughly 18%. Victims were identified across all 50 states and some U.S. territories. FinCEN cautioned that the rise in reporting reflects an expanded vocabulary used in alerts and should not be read as evidence of growth in scam activity itself.
"Digital asset investment scams pose one of the most significant fraud threats facing Americans today," and the organizations behind them "exploit both emerging technologies and human vulnerabilities," said Gene Lange, performing the duties of Under Secretary for Terrorism and Financial Intelligence.
Where the Money Goes: Guarantee Marketplaces and Stablecoin Off-Ramps
FinCEN's alert describes a fully outsourced criminal ecosystem. Criminals operate through "guarantee marketplaces" to obtain services ranging from account creation and phishing to money laundering. Professional laundering providers establish shell companies and mule accounts to move illicit funds through the financial system, including via stablecoins transferred to exchanges outside the United States.
Findings from other regulators support this picture. A FATF report released in March on stablecoins and unhosted wallets, citing Chainalysis, found that stablecoins accounted for 84% of illicit virtual asset transactions in 2025. FATF also detailed how unhosted wallets and sophisticated laundering techniques are used to obscure the origin of funds.
A September 3 FATF report on underground banking and hawala documented the emergence of "digital hawala," in which operators communicate through encrypted messaging apps such as WhatsApp, Telegram, and Signal and settle accounts using virtual assets, including stablecoins.
A Single Southeast Asian Crime Economy
A July assessment from UNODC found that crime syndicates in Southeast Asia form a growing service-based economy in which fraud, trafficking, and money laundering share the same infrastructure.
UNODC estimated scam losses across East Asia, Southeast Asia, Australia, and New Zealand at between $88.3 billion and $114.1 billion in 2025. It also reported that people from at least 80 countries and territories had been identified in scam compounds across the region.
These networks also reach individual courtrooms. In August, Hong Kong's Court of Appeal upheld a 56-month sentence for a recruiter who lured five people to Southeast Asia. Some of those victims were confined to KK Park in Myanmar, and the court treated human trafficking and forced labor as aggravating circumstances in the fraud case.
The Compliance Squeeze
The FinCEN alert increases pressure on cryptocurrency companies to invest further in transaction surveillance, mule account monitoring, and prompt international information sharing. However, as the FATF's March report on offshore virtual asset service providers showed, the more pressing issue is uneven oversight across jurisdictions, which criminals can exploit.
FinCEN said its Rapid Response Program allows it to work with foreign financial intelligence units to identify and recover fraudulent transactions, but individuals are still urged to report cases promptly to the FBI's Internet Crime Complaint Center (IC3), since the speed of reporting affects whether frozen funds can still be recovered. The open question is how quickly and effectively such cooperation can operate as criminals increasingly rely on professional money laundering services.