Chinese language underground banking methods, recognized informally as “fei qian” or “flying cash,” have change into central to the operations of organized crime teams world wide. Functioning past the attain of regulated banking channels, these shadow monetary methods facilitate the covert switch of billions of {dollars} throughout borders.
Increasing Felony Attain By Crypto and Casinos
A latest report by blockchain intelligence agency TRM Labs, Shadow Bankers [pdf], explains how these networks are more and more counting on cryptocurrency to hold out fast and pseudonymous cross-border transfers for legal shoppers. Amongst these benefiting from these providers are Mexican drug cartels, Chinese language Triad gangs, North Korean hackers, and Russian crime syndicates.
Based on the report, Triad organizations similar to 14K and Solar Yee On have absolutely embraced the mix of underground banking and digital belongings to launder legal proceeds. Traditionally dominant in Hong Kong and Macau playing junkets, they’ve expanded their attain throughout Southeast Asia by means of each bodily and on-line casinos. Many of those venues function as laundering hubs, shifting funds derived from drug trafficking, human trafficking, and large-scale fraud.
The COVID-19 pandemic prompted additional adaptation, with Triads repurposing on line casino networks into cyber-scam compounds that conduct “pig-butchering” romance and funding frauds. The illicit income from these schemes, typically in cryptocurrency, are cycled by means of on line casino accounts, betting credit, and high-volume wagers. By mixing these funds with legit playing exercise, the cash finally emerges as declared winnings or enterprise income, successfully disguising its origins.
The UN Workplace on Medication and Crime has noticed that such casino-based laundering now strikes cash “in a lot larger and extra untraceable methods than prior to now,” making it more and more difficult for authorities to disrupt.
TRM Labs notes that Triad-linked operations regularly mix casino-based laundering with trade-based cash laundering, or TBML. Felony money is used to buy high-value items, typically by means of entrance firms, that are then exported and offered overseas to supply legitimate-looking income. Cryptocurrency is turning into a typical factor at numerous phases of this course of, whether or not for paying suppliers or shopping for items, including additional anonymity to the transactions.
The Mirror Alternate Linking Cartels and Chinese language Brokers
Mexican cartels, together with the Sinaloa Cartel, work with Chinese language cash laundering organizations by means of what is named a mirror alternate system. On this association, a Chinese language dealer purchases cartel-held U.S. money and pays the cartel’s contacts in Mexico with pesos drawn from funds already beneath their management in that nation.
The identical dealer then sells these U.S. {dollars} to rich Chinese language shoppers searching for to maneuver cash overseas, gathering fee in yuan inside China. Because of this, the {dollars} and yuan stay of their respective international locations, however the worth is transferred between events completely exterior the formal banking system.
Cryptocurrency has enhanced the pace and secrecy of this methodology. Cartel associates can convert bulk money into Bitcoin utilizing crypto ATMs or exchanges in america, sending it to wallets managed by Chinese language networks. These networks can then convert the cryptocurrency into fiat forex or use it to buy items for the cartel. The complete course of avoids cross-border financial institution wires and reduces the chance of interception.
The TRM Labs report additionally particulars how North Korea’s state-sponsored hackers, who’ve stolen billions in cryptocurrency by means of cyberattacks, depend on Chinese language over-the-counter crypto brokers to money out their proceeds. In a 2023 U.S. indictment, North Korean banker Sim Hyon Sop and three brokers — Wu Huihui, Cheng Hung Man, and “Jammy Chen” — have been charged with laundering stolen belongings.
These brokers routed the hacked cryptocurrency by means of exchanges and shell firms, changing it into U.S. {dollars} that have been then used to buy sanctioned items through Hong Kong-based entrance firms. The laundering course of typically included mixers and cross-chain “bridges” to make the transaction path harder to observe earlier than closing cash-out.
The report states, “In different instances, North Korean-linked wallets have despatched funds to accounts on Russian-run exchanges and mixers, suggesting collaboration — or at the very least shared facilitators.”
TRM Labs has recognized at the very least $85 million since 2021 despatched to wallets tied to Russian and Chinese language entities engaged within the commerce of navy and dual-use tools, creating what it describes as a sanctions evasion pipeline powered by cryptocurrency. Chinese language firms manufacturing navy {hardware}, similar to drones and optical tools, have offered to Russia, with crypto used because the fee methodology.
North Korea has equally used Chinese language brokers to channel stolen cryptocurrency into purchases of sanctioned items. Russian darknet marketplaces and crypto exchanges have additionally facilitated laundering for each Chinese language and North Korean actors. This relationship types an interconnected community during which North Korea offers stolen digital belongings, Chinese language networks launder and settle the funds, and Russian actors provide platforms, cyber instruments, and marketplaces.
The report emphasizes that these underground monetary networks exploit regulatory gaps, technological blind spots, and worldwide jurisdictional divides. They function in areas with weak Know Your Buyer guidelines, layer transactions by means of a number of accounts, and rely closely on mixers, privateness cash, and fast blockchain transfers to obscure cash trails.
When enforcement actions do handle to disrupt an operator — similar to when Binance froze Wu Huihui’s accounts in 2022 — the networks adapt shortly, shifting to new platforms or utilizing intermediaries to proceed operations.
TRM Labs concludes that countering these actions would require a mixture of superior blockchain analytics, world cooperation, and progressive enforcement methods. The networks’ means to merge long-standing underground banking practices with fashionable digital asset expertise makes them a persistent and extremely adaptable menace to the integrity of the worldwide monetary system.
