The U.S. Attorney’s Office for the District of Columbia announced a Scam Center Strike Force on November 12, 2025 to target Southeast Asian cryptocurrency investment fraud. The multi agency effort coordinates the DOJ, FBI, U.S. Secret Service, State, Treasury including OFAC, and Commerce to charge leaders, recover stolen assets, and disrupt U.S. infrastructure used by scammers.
The stakes are high. In 2024, about 150,000 Americans lost an estimated 9.3 billion dollars to crypto fraud. Authorities report over 400 million dollars already seized and another 80 million pursued through civil forfeiture, with operations in Myanmar, Indonesia, and Thailand. Web3 operators should expect faster seizures, tighter sanctions enforcement, and broader infrastructure takedowns.
Inside the D.C. Scam Center Strike Force
Federal prosecutors in Washington D.C. have launched a multi agency Strike Force that unifies criminal investigations, asset forfeiture, and rapid infrastructure disruption against transnational crypto fraud that targets U.S. users and services. The concept is simple. Centralize expertise, move faster on seizures and takedowns, and coordinate with partners at home and abroad to blunt pig butchering schemes at scale. The Justice Department says the unit will chase both the money and the infrastructure while prioritizing victim restitution and speed of response (DOJ).
Mission and Objectives
- Identify and charge leaders of cryptocurrency scam organizations, not only low level money mules
- Trace and seize stolen funds with a focus on returning assets to victims
- Disable U.S. infrastructure that enables fraud campaigns, including accounts, hosting, and communications
Who Is Involved
The Strike Force is anchored by the DOJ Criminal Division and the U.S. Attorney’s Office for the District of Columbia, with investigative muscle from the FBI and the U.S. Secret Service. It is designed to work shoulder to shoulder with the State Department, the Treasury Department including OFAC, and the Commerce Department. The model aligns prosecutions, forfeiture actions, and sanctions designations so that disruptions land in sequence and across multiple jurisdictions (TRM Labs).
Infrastructure Disruption Priorities
Prosecutors are elevating infrastructure takedowns to reduce the speed and scale of victimization. Priorities include U.S. ISP accounts and hosting services that coordinate scam operations, social media and messaging accounts used to groom victims, and cloud platforms that host fake trading portals. The Strike Force is building rapid pathways for data preservation, account freezes where lawful, and seizure warrants to pull the plug before more deposits flow into controlled wallets (DOJ).
The Threat Landscape and Victimization Pattern
Federal partners describe a persistent wave of pig butchering schemes run by transnational criminal organizations in Southeast Asia. These groups blend long play social engineering with on chain obfuscation and off ramp networks that wash funds through nested services and OTC brokers.
How Pig Butchering Works
Fraud teams approach targets through social and romance outreach, often via text, dating apps, or social platforms. They groom for weeks or months, then steer victims toward fake investment portals that mimic legitimate trading interfaces while using real crypto rails. Deposits are drained through controlled wallets and moved across chains and services to complicate tracing.
Scope by the Numbers
Law enforcement and policy briefings peg the scale of harm at a national level. In 2024, about 150,000 U.S. victims were tied to an estimated 9.3 billion dollars in losses, a 66 percent year over year increase. The U.S. Secret Service reports engagement with roughly 3,000 victims in fiscal year 2025 as part of case support and asset recovery efforts (Sher Tremonte).
Criminal Networks and Targeting
Authorities link the fraud to transnational criminal organizations with Chinese organized crime affiliates operating in Cambodia, Laos, and Myanmar. The ecosystem often overlaps with human trafficking, where victims are forced to work in scam compounds. Targeting relies on romance and social media outreach that skews toward older adults and recent retirees who hold savings and are more receptive to high yield narratives (TRM Labs).
Enforcement Results and Strategic Implications for Web3
The Strike Force model is already pairing seizures with cross border coordination and a domestic infrastructure focus. For Web3 exchanges, wallet providers, and intermediaries, this changes compliance expectations and the tempo of law enforcement requests.
Asset Recovery and Operational Reach
Authorities report over 400 million dollars in cryptocurrency seized and forfeited to date through criminal and civil actions. Additional civil forfeiture filings seek about 80 million dollars more tied to pig butchering flows. Operational coordination includes actions and partners in Myanmar, Indonesia, and Thailand, with a priority on repatriating funds to U.S. victims and freezing assets before they are off ramped into cash or goods (DOJ) (Sher Tremonte).
Policy Alignment and National Security Lens
DOJ guidance centers prosecutions on individuals who victimize digital asset investors and use crypto to further criminal offenses. The Strike Force frames pig butchering as a national security problem given links to sanctioned and transnational groups. Expect more combined use of criminal charges, civil forfeiture, and OFAC sanctions, timed with support from State and Commerce to push host nations for arrests, extraditions, and infrastructure takedowns (TRM Labs).
What Web3 Companies Should Do Now
Web3 operators should raise controls and be ready for faster law enforcement coordination. The playbook is mature and will be tested.
- Tighten KYC, sanctions screening, and blockchain analytics coverage. Build rules to flag grooming style deposits, repeated small balance top ups, and withdrawals to known TCO clusters
- Implement escalation pathways and freeze policies where lawful for suspected pig butchering flows. Pre authorize emergency freezes under clear terms of service
- Stand up a 24 by 7 law enforcement response channel. Maintain evidence preservation protocols for accounts, chat logs, device fingerprints, and IP telemetry
- Expand user warnings and introduce transaction friction for risky patterns, including prompts on first time crypto purchases, high risk geographies, and transfers to newly created or lightly used wallets
- Monitor wallet designations, typologies, and geolocation risk. Apply region based controls and enhanced due diligence for traffic linked to high risk compounds and services
Bottom line for operators. The Strike Force raises the cost of noncompliance and turns slow burn romance fraud into a priority target with criminal, civil, and sanctions exposure. Exchanges, wallets, and infrastructure providers that can spot the patterns, preserve evidence, and move quickly on freezes will reduce losses for users and lower legal risk for the business.
Expect more coordinated seizures, civil forfeiture filings, and rapid infrastructure takedowns as agencies align crypto fraud enforcement with national security priorities. Centralized and decentralized operators should anticipate faster outreach from investigators, expanded sanctions actions on wallets and services, and increased pressure to preserve data and interrupt flows tied to grooming scams.
Teams that invest now in analytics coverage, response playbooks, sanctions hygiene, and user protections will reduce enforcement risk and customer harm. The enforcement arc points toward sustained cross border operations, deeper compliance expectations, and sharper scrutiny of intermediaries that enable scam liquidity and communications.
Key Takeaways
- The D.C. Scam Center Strike Force targets Southeast Asian crypto fraud with a focus on leaders, assets, and U.S. infrastructure
- Reported 2024 losses reached 9.3 billion dollars across about 150,000 victims
- Over 400 million dollars seized and another 80 million sought via civil forfeiture
- Enforcement will lean on sanctions, forfeiture, and cross border operations
- Web3 entities should harden KYC, analytics, incident response, and user fraud defenses
Related FAQs
- What is the Scam Center Strike Force and what is its mission?
The Strike Force is a multi agency initiative led from D.C. that aims to charge scam organizers, recover stolen funds for victims, and disrupt U.S. based infrastructure used in cryptocurrency fraud. - How could this affect exchanges wallets and DeFi protocols?
Firms should expect more subpoenas, preservation orders, and seizure actions, broader sanctions screening needs, and higher expectations for blocking risky flows and warning users about grooming scams. - What red flags should compliance teams watch for?
Romance or social outreach leading to investment portals, rapid migrations across new wallets, withdrawals to high risk regions, and reuse of known scam infrastructure or domains. - How are authorities tracing and seizing crypto tied to scams?
Investigators use blockchain analytics, traditional financial tracing, partner cooperation, and forfeiture tools to identify custodial touchpoints and lawfully recover assets.
