PlusToken Ponzi Scheme

πŸ”΄ High Risk

The PlusToken Ponzi scheme represents one of the most significant and complex cryptocurrency frauds in recent history, primarily impacting investors in China and South Korea. Under the guise of a high-yield crypto wallet, it amassed billions of dollars before collapsing, revealing extensive money laundering operations designed to conceal illicit proceeds. This case highlights not only the vulnerabilities within the rapidly evolving crypto market but also the challenges faced by regulatory and law enforcement agencies in combating cross-border financial crimes fueled by digital assets.

The PlusToken Ponzi scheme stands as one of the largest cryptocurrency frauds in history, primarily affecting victims in China and South Korea. Launched in early 2018, it promised extraordinary returns to investors via a proprietary wallet and token system. The fraudulent platform attracted millions, accumulating over $2 billion in investor funds in diverse cryptocurrencies. In mid-2019, the scheme collapsed as the founders absconded, locking funds and triggering investigations. Chinese authorities swiftly acted, arresting key perpetrators and seizing vast crypto assets worth billions. South Korean authorities responded to investor pressures with investigations and law enforcement action. The aftermath included massive laundering efforts to obfuscate the trail of stolen cryptocurrencies through complex wallet dynamics, exchange transactions, and offshore asset purchases. Sentencing of operators combined with ongoing asset tracing and liquidations highlights the extensive cross-border crackdown. Still, significant portions of the stolen funds remain elusive, showing the challenges of combating sophisticated crypto Ponzi schemes laundering across China and South Korea. This case underscores the urgent need for robust crypto regulation and international law enforcement collaboration in Asia.

Countries Involved

China, South Korea

Mid-2019

BTC, ETH, BCH, LTC, XRP, DOGE, DASH, EOS

Ponzi scheme, Fraud, Money Laundering

PlusToken founders and operators, investors from China and South Korea, Chinese law enforcement agencies, South Korean authorities

No publicly confirmed involvement of Politically Exposed Persons (PEPs)

The PlusToken scheme operated as a classical Ponzi scheme promising high returns paid to earlier investors using the capital from newer investors. After its collapse in mid-2019, large sums of cryptocurrencies were laundered through multiple techniques. These included moving funds through multiple wallet addresses to obfuscate origins, consolidating stolen Ether into fewer wallets, and channeling funds to exchanges including over-the-counter (OTC) brokers predominantly operating via platforms like Huobi. The criminals also used proceeds to buy luxury cars, high-end real estate in China, and pay for insurance policies in Hong Kong. Rigorous blockchain analytics revealed attempts to re-obfuscate Ether funds shortly before parts were liquidated. The widespread laundering efforts aimed to convert and move ill-gotten gains into more usable forms while concealing transaction trails to evade detection by authorities.

The scam defrauded investors out of an estimated $2.25 billion worth of cryptocurrencies based on court documents in China, with media reporting seizures exceeding $4.2 billion worth of crypto assets. The scheme attracted over 2.6 million investors and amassed huge amounts of BTC, ETH, BCH, LTC, XRP, DOGE, DASH, and EOS tokens. Police seizures included approximately 194,775 BTC, 833,083 ETH, and billions of tokens across other cryptocurrencies, collectively worth billions USD. While a significant portion of assets was seized and frozen, much of the laundered value likely remains untraced or moved through unregulated channels.

Blockchain transaction analysis showed massive flows of PlusToken-controlled assets following the scheme’s collapse. Thousands of wallets received stolen funds, which were then gradually consolidated into fewer addresses before partial liquidation. Significant quantities of Ether, roughly 540,000 ETH, were identified moving from PlusToken wallets into exchanges or mixing services starting August 2024. The movement patterns indicated intent to sell or further launder assets. The laundering method involved layering through numerous wallet transfers, mixing new investment funds to camouflage illicit proceeds, and using OTC brokers to bypass traditional exchange oversight. This complex transaction web made tracing the complete flow challenging but also highlighted the sophistication of the laundering operation spanning China and South Korea.

Authorities in China and South Korea took coordinated enforcement actions. In China, 109 individuals linked to PlusToken were arrested, with key operators sentenced to terms ranging from 2 to 11 years in prison, along with fines up to nearly $1 million. The Yancheng Intermediate People’s Court in Jiangsu province oversaw these convictions and ruled that the seized assets be forfeited to the national treasury. South Korean authorities launched investigations and manhunts in response to investor complaints, cooperating with Chinese law enforcement. Major asset seizures totaling over $4 billion in digital currencies were officially reported, along with asset freezes on related wallets. Despite these efforts, some high-level perpetrators remain at large, and ongoing movements in PlusToken-linked wallets suggest that laundering and liquidation continue.

PlusToken Ponzi Scheme
Case Title / Operation Name:
PlusToken Ponzi Scheme
Country(s) Involved:
China
Platform / Exchange Used:
Huobi (noted OTC brokers), various cryptocurrency exchanges involved in laundering processes
Cryptocurrency Involved:

BTC, ETH, BCH, LTC, XRP, DOGE, DASH, EOS

Volume Laundered (USD est.):
Estimated $2.25 billion defrauded; seizures exceeding $4.2 billion in cryptocurrency assets
Wallet Addresses / TxIDs :
Thousands of wallet addresses involved, including 194,775 BTC and 833,083 ETH found in seized wallets
Method of Laundering:

Wallet layering, mixing, multiple transfers to obscure origin; use of OTC brokers; purchasing luxury assets

Source of Funds:

Proceeds from Ponzi scheme fraud targeting millions of investors in China and South Korea

Associated Shell Companies:

No publicly identified shell companies reported in relation to PlusToken laundering

PEPs or Individuals Involved:

No confirmed PEP involvement; 109 operators arrested and prosecuted in China

Law Enforcement / Regulatory Action:
Arrests, asset seizures valued over $4 billion, prosecution of key members with prison terms and fines; cross-border cooperation between Chinese and South Korean authorities
Year of Occurrence:
2019
Ongoing Case:
Ongoing
πŸ”΄ High Risk