Washington and London Close on Xinbi, the Marketplace That Banked the Scam Centres
On 9 September the Office of Foreign Assets Control designated Xinbi Guarantee, the Chinese-language escrow marketplace that Treasury says has moved the equivalent of more than 24 billion United States dollars since 2022, together with the two South East Asian software companies that build its wallet and its messaging app. Hours later the United Kingdom varied its own Xinbi entry, adding cryptocurrency wallet addresses to a designation it made back in March. Separately OFAC designated the Ecuadorian group Los Tigueriones as a Foreign Terrorist Organisation, and published nine administrative corrections to existing entries that add no new sanctions but do change identifiers your screening engine matches on. Four designations, one variation, nine corrections, no removals. Xinbi Guarantee is not a scam centre. It is the shop the scam centres buy from. Treasury describes it as an illicit online marketplace that sits as a central node between transnational criminal syndicates, including scam centre operators, and the merchants who sell them financial services, technology and other goods, and which provides escrow so that neither side has to trust the other.
This issue
- New designations
- 4
- Removals
- 0
- Entries amended
- 10
- Sources monitored
- 85
One Marketplace, Two Apps and a Transatlantic Pincer
Xinbi Guarantee is not a scam centre. It is the shop the scam centres buy from. Treasury describes it as an illicit online marketplace that sits as a central node between transnational criminal syndicates, including scam centre operators, and the merchants who sell them financial services, technology and other goods, and which provides escrow so that neither side has to trust the other. Since it started around 2022 it has processed the equivalent of more than 24 billion United States dollars in digital assets and fiat, mostly across South East Asia. Treasury records that North Korean hackers have used the platform, as have already designated entities including Jin Bei Group Co., Ltd. and parts of the Prince Group transnational criminal organisation. The growth has a cause: after FinCEN named Huione Pay a financial institution of primary money laundering concern in October 2025, cybercriminals moved to Xinbi Guarantee, which carried on offering substantially the same services to a substantially overlapping customer base. The designation is made under Executive Order 13581, as amended, and carries 52 TRON wallet addresses on the entry.
The two companies designated alongside it are the reason the marketplace still functions. Around June 2025, as law enforcement pressure grew, Xinbi Guarantee moved its merchant and money laundering networks onto SafeW, an end-to-end encrypted messaging application built by Singapore-registered SafeW Technology Co., Ltd., and now tells its users to coordinate there. At the same time it launched XinbiPay, also called the NewPay wallet, a cryptocurrency payment and wallet application built by Cambodia-registered Anwen Technology Co., Ltd., whose address is a unit in the Prince International Plaza in Phnom Penh. Both are designated for materially supporting Xinbi Guarantee. The action was timed with the Department of Justice's Scam Center Strike Force, which seized Xinbi Guarantee infrastructure and digital asset wallets the same day, and it builds on the Prince Group designations of October 2025 and June 2026 and on FinCEN's Huione Group section 311 rule.
Party detail
Every row below was read against the issuing authority's own notice, not against a press report. Aliases are reproduced in full, including non Latin script forms, because the alias field is where a screening run usually fails. Identifiers are published sanctions data.
| Party | Action and instrument | Identifiers | Grounds |
|---|---|---|---|
| Xinbi Guarantee | DesignationExecutive Order 13581 (Blocking Property of Transnational Criminal Organizations), as amended by Executive Order 13863; Transnational Criminal Organizations Sanctions Regulations [TCO] | Website: https://xinbi.comIdentifier: Target type criminal organisationIdentifier: 52 TRON digital currency addresses recorded on the entry: TW5tokvhEfrb77z98Rc8HqbkzQJ6sxYtGXIdentifier: TBKpozurdWLrbKkxtDqkveeq1dSB8Axj3VIdentifier: TWqcMjV7Wq2RHe2CSiKQHpkn6A7B2AWUPeIdentifier: TG83Fk56S2mycAUMYHZyZp9wMg6DCf4bUnIdentifier: TYkE8VwX1SGHM3Q2CA29nka5U2F2khKAj5Identifier: TEECjwHqVG8sDmM3VtscjuCaRe5p351MU7Identifier: TDU61o35UEe5hdB3R16c116DrPSV4kiyKzIdentifier: TKRNCETxbiMmyyMraCkgdXKdLr1ZkmKxV5Identifier: TTWRf2MD6zJ26bS4uKCNrcp84aAr7AmTjmIdentifier: TYvjt4ZKfsipHjA52nzgjUjDBF622SLCihIdentifier: TXHX2NUvcgft4zs6MkkUtdNVERPTavHDWNIdentifier: TWPma8xH48AEN93x2krdukV9e1j6sPsBeSIdentifier: TK3n8pGHvDTcK53mpfeDAMzdwjb22qvFU3Identifier: TGSGw4aUeAMNCfD8WqLRLe8ErQiJ1vqghjIdentifier: TBNjCi1d5Ns6ec5aMp28LpfKcX7xTpykANIdentifier: THH9JJNbLDN7qs1CyTxJQEjhC9y5FnZUhUIdentifier: TQhT3QWAbFiy6GEYuBrbK97uP3XVmTpRD8Identifier: TXka5xc6mEkcoVXR7F2TFDKernyLt3XyW4Identifier: TH1yknksde3pBY3oWVhUxVTbWbLqdafqYTIdentifier: TLHWeZcDmXk6idnaGwsQ9CEmK24KpoGgRMIdentifier: TTmvr41Fa9LeWJQ8NKQ5t4wFUspgEA1mJFIdentifier: THifikwE6RtxYNWdcP9CWUjXS8Gh1xBCoaIdentifier: TR983hNyUNgrNSB1xncG9thZNhgYpbNvShIdentifier: TNwe3WoEX6XrQ5NPAeWPkvpTtdaf27XYxKIdentifier: TGcewGsDLy7Fzc66kXXEB8Kh2b6u2XCvnVIdentifier: TYq3iRujcBELXX89i9JY32UmLxcyZAJe7EIdentifier: TRyQivSkQChryfnYnE1bUmJhnL3TvKUpvSIdentifier: TGjYoJLhfAiD2BRV9hwCeuHhZ54D3gLKTdIdentifier: TXT9atp8qBMXKbFYnRyWkM88UXYyobQNLPIdentifier: TThRMUSidD4gQeCnu56cFfCmqS421Nmbu7Identifier: TAkpWPt2JZdiLSkG7ZX2VAQkZQsnGZ1nqhIdentifier: TZ8zsUe9M9tkhrFtfE7vMMmEwgVEF3n2UNIdentifier: TM9c5uR2UKwd5fMySgaoYSjphRyi3AjAtcIdentifier: TTjHn8qNVxazB3UroiekGRPuM2w2GwvNbnIdentifier: TWHwre81Mv4hvupNdHnsYX9FPocm29dQQQIdentifier: TT4WKPQscK7fkxrPj1E9PjZp1HTVBUpoTmIdentifier: TYZKYK2fbvw3EAPES2daFvoV4DqPna43JdIdentifier: TF7LUSoZQyDFxTFzCL11saBHAqMAyPh8dKIdentifier: TSmcHwvTR27Ao4NN8HhPFCVcPU5aTEqLDtIdentifier: TJ6NznpBV5uUpp5uZGDub9zD1999999999Identifier: TPD4pmojFA2f2RvgnSDa7YCuGJ4BeS9yK2Identifier: TXtH3iUipk6DZnYNu3kgjDsnSSLHLz8ZZUIdentifier: TBEqQGTxXRWXXeqe7ZwmSB6hc5MMMMMMMMIdentifier: TTYf9kcvABTSizXsdbC2E5co6jx9jvJ111Identifier: TTrHak4biV5ZtNwN1K8oi7916CjmeVVeH8Identifier: TCoKgVdQbSyPnJnf9oNUNQn3dWMDD9wbQLIdentifier: TNUQ2rZSRjZaGhtbwaFZEvuaemMj5z5FnmIdentifier: TTWBrNgoooSs9HQQKMty3ZQDbS9LzgjNiHIdentifier: TGu8xk3u1QcA9FNCQZ4RUTvniiCjNkjXkAIdentifier: TAQPzv9941nVuTj4ng2vd6L11Re57r42pWIdentifier: TMdZfVVAsxKsbXGmV3kBnEgM69z3QHH3kzIdentifier: TZ42sU5kQ2n5rLZ6PhEGkmfLtmHjoi2vprAddress: Burma; Thailand; Laos | Designated on 9 September 2026 by OFAC pursuant to Executive Order 13581, as amended, for being a foreign person that constitutes a significant transnational criminal organisation. Treasury records that Xinbi Guarantee operates an illicit online marketplace acting as a central node between transnational criminal syndicates, including scam centre operators, and the merchants that supply them with financial services, technology and other goods, and that it provides those operators with escrow services. Since its inception around 2022 the marketplace has processed the equivalent of more than 24 billion United States dollars in digital assets and fiat currency, principally in South East Asia. Treasury states the platform has reportedly been used by North Korean hackers and by designated entities including Jin Bei Group Co., Ltd. and entities forming part of the Prince Group transnational criminal organisation, and that cybercriminals migrated to it after FinCEN listed Huione Pay as a financial institution of primary money laundering concern. |
| Anwen Technology Co., Ltd. | DesignationExecutive Order 13581 (Blocking Property of Transnational Criminal Organizations), as amended by Executive Order 13863; Transnational Criminal Organizations Sanctions Regulations [TCO] | Identifier: Organisation established 05 May 2025Identifier: Organisation type computer programming activitiesTax ID: K009-902502292 (Cambodia)Business registration number: 00078312 (Cambodia)Address: Prince International Plaza Building No. 616, Russia Federation Boulevard, Phum Se Pe Se, Phnom Penh, Cambodia | Designated on 9 September 2026 by OFAC pursuant to Executive Order 13581, as amended, for having materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of, Xinbi Guarantee. Treasury records Anwen as the Cambodia-based developer of XinbiPay, also referred to as the NewPay wallet, the cryptocurrency payment and digital wallet application Xinbi Guarantee launched as it moved its merchant and money laundering networks onto its own tooling. The SDN entry links the company directly to Xinbi Guarantee. |
| SafeW Technology Co., Ltd. | DesignationExecutive Order 13581 (Blocking Property of Transnational Criminal Organizations), as amended by Executive Order 13863; Transnational Criminal Organizations Sanctions Regulations [TCO] | Identifier: Organisation established 2018Identifier: Organisation type computer programming activitiesWebsite: https://www.safew-app.orgIdentifier: alternative website https://safew.orgAddress: Singapore | Designated on 9 September 2026 by OFAC pursuant to Executive Order 13581, as amended, for having materially assisted, sponsored, or provided financial, material, or technological support for, or goods or services to or in support of, Xinbi Guarantee. Treasury records that around June 2025, in response to growing law enforcement scrutiny, Xinbi Guarantee began migrating its merchant and money laundering networks to SafeW, a highly private end-to-end encrypted messaging application developed by SafeW Technology, and encourages its users to use SafeW as the coordination platform between buyers and sellers. |
| Los Tigueriones | DesignationExecutive Order 13224, as amended by Executive Order 13886 (Global Terrorism Sanctions Regulations); Foreign Terrorist Organisation designation [FTO] [SDGT] | Identifier: Organisation type transnational terrorist groupIdentifier: Target type criminal organisationIdentifier: Secondary sanctions risk under section 1(b) of Executive Order 13224, as amended by Executive Order 13886Address: Ecuador; Peru | Designated on 9 September 2026 by OFAC in the counter terrorism element of the same Recent Actions notice, and carried on the SDN List with the Foreign Terrorist Organisation and Specially Designated Global Terrorist programme tags. The entry records the group as a transnational terrorist group and a criminal organisation operating in Ecuador and Peru, under the alternative names Los Fenix and Los Igualitos. The Treasury press release accompanying the notice addresses the Xinbi Guarantee designations only, so no further published grounds were available for this party at the time of this edition. |
| Xinbi Company Limited | AmendmentThe Global Human Rights Sanctions Regulations 2020, United Kingdom | Website: Xinbi.comIdentifier: recorded subsidiary Xinbi GuaranteeIdentifier: UK Sanctions List entry last updated 09/09/2026Address: Not specified on the UK entry | Designated by the United Kingdom on 26 March 2026. The UK statement of reasons records that the Secretary of State considers there are reasonable grounds to suspect Xinbi Company Limited is an involved person under the Global Human Rights Sanctions Regulations 2020 on two bases: that it is or has been involved in providing financial services or making available funds, economic resources, goods or technology knowing or having reasonable cause to suspect they will or may contribute to human rights abuses; and that it is or has been involved in profiting financially or otherwise obtaining a benefit from human rights abuses. The statement records that Xinbi has enabled and profited from the operation of scam centres in South East Asia, and that the treatment of individuals in those centres amounts to a serious abuse of the right not to be subjected to cruel, inhuman or degrading treatment or punishment and of the right to be free from slavery, servitude and forced or compulsory labour. |
| Boukich Abdelhakim | AmendmentExisting OFAC designation, authority unchanged | Identifier: Date of birth 15 Dec 1993Identifier: alternative date of birth 01 Jan 1991Identifier: place of birth The Hague, NetherlandsIdentifier: alternative place of birth Aleppo, SyriaIdentifier: nationality NetherlandsIdentifier: gender maleNational ID: 02040063438 (Syria)Identifier: alternative names ALHOLANDI, Abu Sulayman and BABILI, MuhammadAddress: Syria | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| York Louis Celestino Herrera | AmendmentExisting OFAC designation, authority unchanged | Identifier: Date of birth 07 Nov 1996Identifier: place of birth La Vega, Dominican RepublicIdentifier: nationality Dominican RepublicIdentifier: alternative nationality SpainIdentifier: gender malePassport: XDB250498 (Spain)Identifier: alternative Passport EM0642806 (Dominican Republic) issued 28 Feb 2013 expires 28 Feb 2019Address: Barcelona, Spain | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| Dot One Value Creation Group | AmendmentExisting OFAC designation, authority unchanged | Identifier: Organisation established 17 Nov 2024Identifier: Organisation type activities of holding companiesNational ID: 14013956780 (Iran)Registration number: 641700 (Iran)Website: https://one-holding.irIdentifier: alternative website https://dotone.irIdentifier: Persian script name: گروه بین المللی توسعه مالی و اقتصادی آوانAddress: DotOne Tower, Jahan Koodak, Tehran, Iran; Ground Floor, No. 33, Africa Street, Kaman Alley, Kavousieh, Tehran, Iran | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| ISIL Khorasan | AmendmentExisting OFAC designation, authority unchanged | Identifier: Organisation established 10 Jan 2015Identifier: Organisation type transnational terrorist groupIdentifier: three Monero digital currency addresses and more than one hundred and thirty TRON digital currency addresses on the entryIdentifier: alternative names include ISIS-K, IS-KHORASAN, ISLAMIC STATE KHURASAN and ISIL'S SOUTH ASIA BRANCHAddress: Afghanistan; Pakistan | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| Walid Makled Garcia | AmendmentExisting OFAC designation, authority unchanged | Identifier: Date of birth 06 Jun 1969Identifier: nationality VenezuelaIdentifier: citizen VenezuelaIdentifier: Cedula No. 18489167 (Venezuela)Passport: 18489167 (Venezuela)Identifier: alternative names MAKLED GARCIA, Valed, WAKLED GARCIA, Walid and EL TURCO WALIDAddress: Calle Rio Orinoco, Ankara Building, Valle de Camoruco, Valencia, Carabobo, Venezuela; Guacara, Carabobo, Venezuela; Valencia, Carabobo, Venezuela; Puerto Cabello, Carabobo, Venezuela; Maracaibo, Zulia, Venezuela | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| Netherlands Caribbean Bank N.V. | AmendmentExisting OFAC designation, authority unchanged | Identifier: Cuba programme entryIdentifier: two recorded addressesAddress: Kaya WFG (Jombi) Mensing 14, P.O. Box 3895, Willemstad, Curacao; 5ta. Ave. No. 6407 esq. a 66, Miramar, Municipio Playa, La Habana, Cuba | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| O, In Chun | AmendmentExisting OFAC designation, authority unchanged | Identifier: Date of birth 03 Jul 1969Identifier: nationality Korea, NorthIdentifier: gender malePassport: PS745220146 (Korea, North)Identifier: Korean script name: 오인준Identifier: alternative name O, In JunAddress: Vladivostok, Russia | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| Royal Yapi Insaat Emlak Gida ve Tekstil Urunleri Turizm Sanayi Dis Ticaret Limited Sirketi | AmendmentExisting OFAC designation, authority unchanged | Identifier: Organisation established 23 Feb 2015Identifier: Istanbul Chamber of Commerce No. 960442 (Turkey)Identifier: Latin script name: ROYAL YAPI İNŞAAT EMLAK GIDA VE TEKSTIL ÜRÜNLERI TURIZM SANAYI DIŞ TICARET LIMITED ŞIRKETIAddress: Oruc Reis Mah. Tekstil Kent Caddesi A22/IO-A/29 Esenler, Istanbul, Turkey | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
| Sudanese Muslim Brotherhood | AmendmentExisting OFAC designation, authority unchanged | Identifier: Organisation established 01 Jan 1954Identifier: Organisation type advocacy organisationIdentifier: alternative names MUSLIM BROTHERHOOD IN SUDAN and SUDANESE ISLAMIC MOVEMENTAddress: Sudan | Published on 9 September 2026 in the Unrelated Administrative List Changes section of the OFAC Recent Actions notice. OFAC states that these administrative corrections fix errors in existing listings only, that no new listings have been added and that no new sanctions apply to these names. The party remains designated on the authority already recorded against it. |
What this means for your organisation
- 01
Load the wallet addresses, not just the names: This action is mostly identifiers. Xinbi Guarantee carries 52 TRON addresses on the OFAC entry and Xinbi Company Limited carries 40 on the UK entry. The UK set is a subset: the OFAC entry carries 12 addresses the UK entry does not, so screening on the UK list alone will pass 12 blocked addresses. Ingest both entries in full today, and check that your matcher treats a digital currency address as an exact-match field rather than a fuzzy name.
- 02
Re-screen every entry that was administratively corrected: OFAC changed identifying data on nine existing listings. Reload the corrected values: the ISIL Khorasan Monero address 45ezvPejNsKYntjhyyeb7fbfzi1sxYQozc5Ffseh8jPGW4JZQQVXykNTfK5uGFiij7Hp3qPv3T5HCR7F3Fnmz2mzE1aKQwo, Royal Yapi Insaat Turkish registration 962966-0, York Louis Celestino Herrera national identity number 24558183W issued by Spain, and the primary name Boukich, Abdelhakim. A record that still holds the superseded string will silently fail to match.
- 03
Sweep payment, wallet and messaging-adjacent exposure in South East Asia: The designated parties are a Cambodian and a Singaporean software company and a marketplace operating from Burma, Thailand and Laos. Screen technology, payment processing and application development counterparties across those markets, and check any exposure to the XinbiPay or NewPay wallet and to the SafeW application. Fifty per cent ownership rules reach subsidiaries that are not named on either list.
- 04
Treat the Los Tigueriones listing as a terrorism exposure, not only a narcotics one: The group is carried with Foreign Terrorist Organisation and Specially Designated Global Terrorist tags and a secondary sanctions risk under section 1(b) of Executive Order 13224, as amended. Screen Ecuadorian and Peruvian counterparties, correspondent flows and trade finance against Los Tigueriones, Los Fenix and Los Igualitos, and route any hit through the terrorist financing escalation path rather than the general sanctions queue.
- 05
Book the typology, not just the names: Escrow marketplaces are the pattern here, and the migration from Huione Pay to Xinbi Guarantee shows how quickly the customer base moves when one venue is closed. Add guarantee and escrow platform typologies to transaction monitoring, and note that 22 of the 85 sources could not be retrieved this cycle and are carried forward for re-check rather than reported as clear.
Where this issue came from
The map plots the sources Youverify monitors. The pulsing markers are the two authorities cited in this issue: FCDO and OFAC. Hover any marker to name the sources read there.
Method statement
Parties are taken from the issuing authorities' list data and notices as recorded in the Youverify Sanctions Monitor of 10 September 2026, one row per party. Website copy for this archive edition is compiled from that day's published briefing.
Corrections
No corrections issued for this issue. Corrections are published on the issue they affect, dated, with the original text retained.Cite this issue
Vyra from Youverify. "Washington and London Close on Xinbi, the Marketplace That Banked the Scam Centres." Youverify Sanctions Monitor, issue 122, 10 September 2026. https://youverify.co/en/sanctions/2026-09-10. Accessed 10 September 2026.