PEKEN Global (KuCoin)

đź”´ High Risk

The PEKEN/KuCoin case exposes a dangerous regulatory gap: a Seychelles‑domiciled virtual‑asset operator can build a global platform with millions of U.S. and Canadian users while systematically avoiding AML/KYC, registration, and suspicious‑activity reporting obligations. By keeping ownership and licensing in a lightly supervised offshore jurisdiction, PEKEN effectively turned KuCoin into a pseudo‑anonymous mixer for darknet‑market, ransomware, and fraud proceeds, undermining the integrity of North‑American financial‑intelligence systems. This pattern highlights how offshore crypto shells can be weaponized for “regulatory arbitrage,” where illicit value flows through legitimate‑looking exchanges that are only lightly tethered to any serious supervisory regime, demanding tighter global coordination on crypto‑exchange oversight.

The case against PEKEN Global Limited (operator of KuCoin – Seychelles) centers on its role as a Seychelles‑incorporated virtual‑asset business that ran a global cryptocurrency exchange while allegedly facilitating large‑scale money laundering and other financial‑crimes‑related activity. Prosecutors in the U.S. District Court for the Southern District of New York charged PEKEN with operating an unlicensed money‑transmitting business under the Bank Secrecy Act, admitting that it processed billions of dollars in crypto transactions without implementing effective AML/KYC controls or registering with FinCEN. From roughly 2017–2023, KuCoin allowed millions of users to trade without meaningful identity verification, and failed adequately to detect or report suspicious flows tied to darknet markets, ransomware, fraud, and other illicit sources. Parallel enforcement by Canada’s FINTRAC revealed that PEKEN/KuCoin also neglected to file thousands of large‑value and suspicious‑transaction reports, exposing Canadian financial‑intelligence systems to unchecked crypto‑laundering risks. The Seychelles‑based structure allowed PEKEN to position itself as a neutral offshore operator while actually serving as a conduit for North‑American and global criminal finance, leading to a $297‑million+ penalty package in the U.S., a C$19.5‑million administrative fine in Canada, and a court‑ordered exit from the U.S. market for at least two years. Overall, the case illustrates how an offshore‑registered crypto exchange can become a high‑risk laundering node when it prioritizes growth‑at‑all‑costs over transparency and compliance.

Countries Involved

United States, Seychelles, Canada, and broader global money‑laundering networks

The primary enforcement actions in this case involve the United States and Canada, but the Seychelles‑based domicile of PEKEN Global Limited is structurally central to the alleged laundering scheme. U.S. authorities in New York (Southern District of New York) brought the criminal money‑transmission charge, while Canada’s Financial Transactions and Reports Analysis Centre (FINTRAC) imposed the largest‑ever administrative penalty on a crypto‑exchange operator, both pointing to the risks posed by a Seychelles‑registered entity controlling global crypto flows.

From a money‑laundering perspective, the Seychelles layer is critical because PEKEN Global Limited was incorporated there and used that entity to operate KuCoin, enabling it to position itself as a “foreign” money‑services business insulated from U.S. and Canadian regulatory regimes. Yet, investigators alleged that despite its Seychelles‑headquarters status, the platform’s customer base, transaction volume, and illicit flows were overwhelmingly tied to the U.S. and Canada, with roughly 1.5 million U.S. users and thousands of large‑value transactions routed through PEKEN‑linked accounts. This mismatch between legal domicile (Seychelles) and operational risk (North America) underpins the regulatory theory that offshore‑based crypto firms can become de‑facto laundering channels unless they are explicitly registered and monitored.

Canada’s investigation further exposed Seychelles‑linked cross‑border laundering patterns, showing that PEKEN/KuCoin processed virtual‑currency transactions connecting to darknet‑market participants, illicit chemical‑industry actors, and OFAC‑designated entities, using Seychelles‑registered shells to obscure the origin and destination of funds. In short, the case is not just about a Seychelles‑filed company but about how Seychelles‑incorporated structures can be leveraged to move suspect money across North‑American and global markets, while the true flows of illicit value remain hidden in decentralized crypto rails.

March 2024 (indictment) – January 2025 (guilty plea) – September 2025 (Canada FINTRAC penalty)

The first formal public discovery of the PEKEN/KuCoin pattern of money‑laundering‑related violations came in March 2024, when the DOJ unsealed an indictment against PEKEN Global Limited and its founders, Chun Gan (“Michael”) and Ke Tang (“Eric”), in the Southern District of New York. At that time, prosecutors alleged that the Seychelles‑based operator had run KuCoin as an unlicensed money‑transmitting business for years, processed billions in suspicious transactions, and failed to register with FinCEN, all of which pointed to systemic AML‑compliance failures.

The case entered a more concrete enforcement phase in January 2025, when PEKEN Global Limited pleaded guilty to one count of operating an unlicensed money‑transmitting business under the Bank Secrecy Act, admitting that it had failed to implement effective AML/KYC programs and had not reported suspicious activity on billions of dollars of transactions. This guilty plea effectively crystallized the timeline of discovery: authorities had been investigating the Seychelles‑linked KuCoin operation since at least 2022–2023, but the public revelation of money‑laundering‑related misconduct came through the 2024 indictment and subsequent 2025 plea.

Parallel to that, Canada’s FINTRAC announced its enforcement action in September 2025, imposing a C$19.5 million administrative monetary penalty after FINTRAC’s own analysis revealed that Peken Global Limited had failed to report large‑value virtual‑currency transactions and suspicious activities involving Canadian customers and entities. Canadian authorities specifically cited that they had identified hundreds of transaction indicators linked to darknet markets and illicit chemical‑industry actors, all run through KuCoin’s Seychelles‑based operator, which demonstrated that the Seychelles‑headquartered entity had been a money‑laundering‑risk node in North‑American financial intelligence networks for years before the penalty was formally issued.

BTC, ETH, USDT, Monero, etc. Example: Bitcoin (BTC), Ethereum (ETH), USDT, USDC, and other major tokens.

Money laundering and terrorist‑financing‑related violations, facilitated via unlicensed money transmission and deficient AML/KYC

The core type of crime alleged against PEKEN Global (KuCoin) is money laundering and related financial‑crimes‑enabling activity, prosecuted under the Bank Secrecy Act’s money‑transmission and AML framework. More specifically, authorities charged PEKEN with operating as an unlicensed money‑transmitting business while systematically failing to implement adequate AML/KYC controls, which turned KuCoin into a de‑facto channel for laundering the proceeds of ransomware, darknet marketplaces, fraud, and other serious crimes.

From a Seychelles‑based‑operator angle, the gravamen is that PEKEN Global Limited, as a Seychelles company operating a global crypto‑exchange, chose to grow its user base without the basic safeguards expected of a regulated financial institution, thereby maximizing platform liquidity at the expense of detecting and blocking illicit value. Prosecutors and regulators argued that this failure did not amount merely to “weak compliance” but to an intentionally permissive environment where criminals could freely deposit stolen funds, rapidly convert them across crypto assets, and withdraw them through other channels, all while the Seychelles entity avoided formal registration and reporting obligations.

Canadian authorities similarly framed the behavior as a systematic failure to comply with Canada’s money‑laundering‑detection regime, because PEKEN/KuCoin failed to report large‑value transactions and suspicious activities that would have been visible inside its own systems. In this light, the case is not just about executive malfeasance or technical oversight, but about a Seychelles‑registered virtual‑asset business that structurally enabled ongoing money‑laundering and terrorist‑financing‑risk accumulation by opting out of registration, KYC, and reporting altogether.

PEKEN Global Limited (KuCoin – Seychelles), Canadian‑based Mek Global, U.S. and Canadian regulators, and global illicit networks

The primary legal entity at the center of the case is PEKEN Global Limited, a Seychelles‑incorporated company that prosecutors and Canadian authorities explicitly identify as the operator of KuCoin. This entity is described as the foreign‑money‑services business through which billions of dollars in virtual‑currency transactions were processed, often without the KYC, AML, or reporting safeguards required in major financial‑regulation jurisdictions.

From a jurisdictional perspective, PEKEN Global Limited’s Seychelles‑incorporated status is critical because it positions the company outside the direct prudential oversight of the U.S. and Canada, yet it still controls a platform that did substantial business with those countries’ users. Parallel to PEKEN, Canadian and U.S. authorities reference Mek Global Limited, another KuCoin‑related entity, as part of the broader corporate structure handling exchange operations and derivatives‑market access, further illustrating how multiple offshore‑registered shells can be layered around a single high‑risk platform.

Other key entities involved include U.S. regulators (DOJ, FinCEN, CFTC) and Canadian regulators (FINTRAC), which collectively brought criminal, civil, and administrative enforcement actions against PEKEN/KuCoin. These agencies collaborated to trace how Seychelles‑based virtual‑asset accounts connected to darknet‑market actors, ransomware‑related wallets, and OFAC‑designated entities, using the same underlying infrastructure provided by PEKEN Global Limited. In essence, the case involves a Seychelles‑headquartered virtual‑asset business (PEKEN), its Canadian and U.S.‑touching operations (KuCoin), and the global criminal networks that used the platform to launder proceeds through its unregulated crypto rails.

No clear evidence of PEP (Politically Exposed Person) involvement made public

Public enforcement documents and media reports on the PEKEN Global (KuCoin) case do not identify any Politically Exposed Persons (PEPs) as direct defendants, beneficial owners, or victims. The DOJ indictment and subsequent guilty‑plea materials focus on cryptocurrency‑exchange‑related AML/KYC and unlicensed‑money‑transmission violations, naming the Seychelles‑based operator (PEKEN) and its founders (Chun Gan and Ke Tang), along with U.S. regulators and Canadian authorities, without reference to foreign officials or high‑profile politicians.

In the Canadian FINTRAC enforcement action, the narrative similarly centers on KuCoin’s failure to report suspicious transactions and large‑value virtual‑currency flows, including links to darknet markets and illicit chemical‑industry operators, but there is no mention of PEP‑linked accounts or politically sensitive beneficiaries. Because the case is framed around cybercrime, ransomware, darknet‑market fraud, and general crypto‑hygiene failures, rather than grand‑corruption or state‑linked kleptocracy, regulators have not highlighted PEP involvement in their public descriptions.

That said, the absence of public PEP allegations does not mean that politically sensitive individuals could never have used KuCoin via Seychelles‑registered accounts; rather, authorities have not yet tied identifiable PEPs to the misconduct in the official enforcement documents. In AML‑risk‑assessment terms, the KuCoin/PEKEN case is therefore treated as a high‑risk virtual‑asset exchange with systemic money‑laundering vulnerabilities, but not as a PEP‑driven or state‑capture‑type case in the current public record.

Layering through multiple crypto hops, misuse of anonymity‑friendly KYC, and concealment of U.S./Canada‑linked flows via Seychelles‑based shell

The laundering techniques alleged in this case revolve around exploiting the technical and regulatory gaps between a Seychelles‑incorporated crypto‑exchange and its substantial North‑American and global user base. Prosecutors and Canadian authorities describe how PEKEN Global Limited enabled criminals to deposit illicit funds into KuCoin, rapidly swap them across different cryptocurrencies, and then withdraw them to other wallets or off‑ramps, all while avoiding meaningful identity checks and suspicious‑activity reporting.

A key technique was operating a largely anonymous or pseudo‑KYC platform for years: until mid‑2023, KuCoin did not require customers to provide any identifying information, allowing darknet‑market users, ransomware affiliates, and fraudsters to create accounts and deposit stolen funds without leaving any traceable customer profiles. Even after introducing KYC for new users, the platform reportedly did not back‑apply those checks to existing accounts, leaving millions of pre‑existing users effectively unvetted and exploitable for money‑laundering purposes. For Seychelles‑linked accounts, this created a “safe harbor” effect: criminals could route funds through Seychelles‑registered infrastructure without facing the same scrutiny as they would in a Tier‑1 financial jurisdiction.

Another technique was layering and mixing through multiple crypto hops. Investigators identified that PEKEN‑linked accounts received inflows from wallets with known exposure to darknet marketplaces and mixing/tumbling services, then converted that value into other tokens or moved it to other addresses, obscuring the chain of custody. Because the Seychelles‑based operator did not flag or report these patterns, the platform effectively acted as a soft‑mixer, helping criminals distance proceeds from their original source while presenting the flow as ordinary trading activity.

For the PEKEN Global (KuCoin) – Seychelles case, the estimated value laundered through the platform is described in U.S. enforcement‑related analyses as over $5.39 billion in received criminal proceeds and over $4.09 billion in outgoing criminal proceeds.

This figure reflects funds allegedly processed on KuCoin from darknet markets, ransomware schemes, sanctioned individuals and geographies, and other illicit sources, after flowing through or out of the Seychelles‑based operator’s accounts. Authorities treat this not as a one‑off sum but as a cumulative notional value of suspicious and criminal‑origin crypto flows that KuCoin handled over the years, underlining the scale of the money‑laundering‑risk posed by the Seychelles‑linked exchange.

Transaction analysis in the PEKEN Global (KuCoin) – Seychelles case reveals a pattern of high‑volume, cross‑border crypto flows with minimal identity checks and poor suspicious‑activity reporting. Investigators found that KuCoin, operated by PEKEN Global Limited, processed billions of dollars’ worth of virtual‑currency transactions over several years, many of which originated from or were linked to darknet markets, ransomware‑related wallets, and other known illicit sources. These flows were characterized by rapid deposits, multiple on‑chain hops across different cryptocurrencies (including BTC, ETH, and USDT‑denominated transfers), and withdrawals to downstream accounts, effectively obscuring the chain of custody and distancing proceeds from their original criminal origin.

From a Seychelles‑risk perspective, the analysis shows that PEKEN‑linked accounts accepted large‑value inflows from wallets with documented exposure to mixing services and darknet‑market actors, while the platform’s weak KYC and AML controls failed to flag or report these patterns. Canadian regulators in particular identified hundreds of transaction indicators tied to darknet‑market participants and OFAC‑designated entities, demonstrating that the Seychelles‑incorporated operator served as a node in a broader North American and global money‑laundering network. The cumulative estimated value laundered—over $5.39 billion in received criminal proceeds and over $4.09 billion in outgoing criminal proceeds—underlines how the platform’s structure and offshore base enabled large‑scale, low‑visibility laundering through routine crypto trading activity.

Regulatory / Enforcement Actions Taken
The PEKEN Global (KuCoin) – Seychelles case triggered coordinated regulatory and enforcement actions across multiple jurisdictions, primarily in the United States and Canada, targeting the Seychelles‑incorporated operator of KuCoin for its role in facilitating large‑scale money‑laundering‑related activity. In the U.S., the Department of Justice (DOJ) obtained a criminal guilty plea from PEKEN Global Limited on one count of operating an unlicensed money‑transmitting business under the Bank Secrecy Act. As part of the resolution, PEKEN agreed to pay over $297 million in combined criminal forfeiture and fines (around $184.5 million forfeited and $112.9 million in criminal penalties) and to exit the U.S. market for at least two years, effectively barring U.S. customers from KuCoin’s trading system.

Parallel to that, the U.S. Commodity Futures Trading Commission (CFTC) secured a civil settlement under which the court entered a permanent injunction against PEKEN Global Limited, required it to cease U.S. derivatives‑related activity unless it registered as a foreign board of trade, and imposed a $500,000 civil monetary penalty. In Canada, the Financial Transactions and Reports Analysis Centre (FINTRAC) issued an administrative monetary penalty of about C$19.5 million (approximately $14 million USD) for PEKEN’s failure to register as a foreign money‑services business and to file thousands of required large‑value and suspicious‑transaction reports involving virtual‑currency flows tied to darknet‑market participants and sanctioned‑related actors. Collectively, these actions mark one of the largest enforcement packages against an offshore‑domiciled crypto exchange, forcing PEKEN Global Limited to unwind key market access rights, restructure internal controls, and submit to heightened supervisory scrutiny, while underscoring how regulators treat Seychelles‑based virtual‑asset operators as high‑risk nodes in global money‑laundering networks.

PEKEN Global (KuCoin)
Case Title / Operation Name:
PEKEN Global (KuCoin)
Country(s) Involved:
Canada, Seychelles, United States
Platform / Exchange Used:
Binance, KuCoin, LocalBitcoins, etc. KuCoin (operated by PEKEN Global Limited).
Cryptocurrency Involved:

BTC, ETH, USDT, Monero, etc. Example: Bitcoin (BTC), Ethereum (ETH), USDT, USDC, and other major tokens.

Volume Laundered (USD est.):
Estimated amount in USD. Example: “Over $5 billion in received criminal proceeds and over $4 billion in outgoing criminal proceeds” (DOJ‑cited).
Wallet Addresses / TxIDs :
Known wallets or transaction hashes. Example: “Inflows from wallets with known links to darknet markets and tumblers; specific KuCoin‑linked addresses listed in DOJ/FINTRAC filings.” (Placeholder: exact addresses to be populated from official docs.)
Method of Laundering:

Mixing, Tumblers, Layering via NFTs, ICO Fraud, Stablecoin Transfers. Example: Layering via multi‑crypto swaps and stablecoin transfers on KuCoin, use of anonymous or weak‑KYC accounts to avoid identity checks, and routing through Seychelles‑based PEKEN Global Limited shell.

Source of Funds:

Darknet, ransom, corruption, tax fraud, embezzlement, etc. Example: Proceeds from darknet marketplaces, ransomware attacks, fraud schemes, and OFAC‑designated entities’ flows.

Associated Shell Companies:

Related entries from Shell Company Database. Example: PEKEN Global Limited (Seychelles); Mek Global Limited (linked KuCoin‑related entity).

PEPs or Individuals Involved:

Related PEPs or persons of interest. Example: Chun Gan (“Michael”) and Ke Tang (“Eric”), founders of KuCoin/PEKEN; no PEPs explicitly named in public enforcement documents.

Law Enforcement / Regulatory Action:
Summary of raids, investigations, seizures, court orders. Example: DOJ guilty plea by PEKEN Global Limited for unlicensed money transmission; $297‑million+ U.S. penalty; FINTRAC C$19.5‑million administrative fine; CFTC permanent injunction; ordered U.S. market exit for at least two years.
Year of Occurrence:
Year laundering activity was uncovered. Example: 2024 (indictment) / 2025 (guilty plea, U.S. and Canadian penalties).
Ongoing Case:
Closed
đź”´ High Risk