Treasury Has Put 50 Tron Wallets on the Sanctions List. The Marketplace Behind Them Moved More Than $24 Billion.

The Treasury Department and the Justice Department acted against the same target on 9 September 2026. Treasury sanctioned Xinbi Guarantee, a Chinese-language online marketplace, and named fifty of its cryptocurrency wallet addresses. The Justice Department seized two of those wallets and moved to restrain forty-seven more.

The wallet listings are what make this a compliance event rather than a headline. Once an address appears on the Specially Designated Nationals list, every US exchange, custodian, stablecoin issuer and analytics provider has to screen against it.

What was designated

The Office of Foreign Assets Control acted under Executive Order 13581, as amended by Executive Order 13863, the authority covering transnational criminal organizations. Three entities were designated:

• Xinbi Guarantee, listed with jurisdictions in Burma, Thailand and Laos, and the website xinbi.com
• SafeW Technology Co., Ltd., a Singapore company established in 2018, linked to Xinbi Guarantee
• Anwen Technology Co., Ltd., registered in Phnom Penh, Cambodia and established on 5 May 2025

Fifty separate entries appear under the Xinbi Guarantee listing, each identified as a digital currency address on Tron. That chain matters operationally: Tron is the principal settlement rail for dollar-denominated stablecoin transfers in the region, which is why the addresses cluster there rather than on Ethereum or Bitcoin.

The scale Treasury describes

Since its inception around 2022, Xinbi Guarantee's marketplace has processed the equivalent of over $24 billion in digital assets and fiat currency through its marketplace and via its platforms, primarily facilitating transactions in countries located in Southeast Asia.

Treasury said the platform has reportedly been used by North Korean hackers and by several already-designated entities, including Jin Bei Group Co., Ltd. and entities forming part of the Prince Group transnational criminal organization.

The department also described an adaptation: after law-enforcement attention around June 2025, Xinbi moved operations onto SafeW, an end-to-end encrypted messaging application, and launched a payments product variously called XinbiPay and the NewPay wallet. The action complements a March 2026 sanctions designation by the UK Foreign, Commonwealth and Development Office.

Scam centers in Southeast Asia steal billions of dollars from American victims each year. The Trump Administration is united in its efforts to dismantle these overseas criminal enterprises, and Treasury will continue using its tools to disrupt the networks behind this egregious fraud and protect Americans.

The seizures

The Justice Department Scam Center Strike Force, working out of the US Attorney office for the District of Columbia, seized the Telegram channels hosting the marketplace and two cryptocurrency wallets Xinbi used to collect vendor payments, holding approximately $12 million between them. Law enforcement sought restraint of forty-seven additional wallets. The court authorisation is dated 7 September 2026.

In total, approximately $52 million of cryptocurrency was restrained in one day, which the department said brought the Strike Force cumulative total to approximately $938 million.

If Chinese organized crime can buy a custom website and a money laundering service the way you order takeout, then every American with a retirement account is in the blast radius.

The physical side

Announced alongside the marketplace action was an operation in Madagascar in which thirteen scam centres were taken down. The department reported a team in country for two weeks, more than 3,200 electronic devices processed, roughly 400 people arrested, and about 30 Chinese leaders repatriated to China.

What a designation actually does

Sanctioning an address freezes property and interests in property within US jurisdiction and prohibits US persons from transacting with it. It does not seize funds held abroad, and it does not stop the blockchain from processing transactions. What it does is make the listed addresses radioactive to any regulated intermediary that wants to convert the balances into spendable money — which is where these networks have historically been most exposed.