Xinbi Guarantee answers a $52.8m seizure by migrating to a harder-to-freeze stablecoin

$52.8 million against at least $24 billion cleared since 2022 is 0.22 percent of throughput ^[3][8][20]. The leverage sat in the currency. Every payment on Xinbi settled in Tether's USDT ^[9], and Tether cooperated with the Scam Center Task Force, which is how investigators reached two wallets holding $12 million of collected vendor payments plus dozens more ^[14]. Those two addresses account for 23 percent of everything seized ^[21]. Xinbi's administrators then told users they would move to USDD on the TRON blockchain, which Elliptic describes as harder to seize ^[15], and called Tether's freezes arbitrary ^[16].

That response has a precedent worth reading closely. Telegram removed Huione Guarantee after international pressure, by which point it had processed $31 billion ^[10]. Xinbi grew into the vacancy, and Telegram declined to remove it even after researchers asked ^[11]. Across the two platforms, $55 billion has passed through the guarantee layer ^[24]. A channel deletion moved the business to a new channel; a designation follows the operators and the two firms named alongside them, including Anwen Technology, the Cambodia-based developer of the XinbiPay app, and SafeW Technology ^[18].

DarkTower counted more than 4,600 crime-as-a-service vendors on the platform last week ^[12], which works out to roughly $5.2 million of lifetime throughput each ^[23]. What those vendors bought was escrow: assurance that a supplier of laundering, stolen personal data or deepfake tooling actually got paid ^[9]. That is the function the warrant hit. A district court authorized seizure of the hosting Telegram channels on Monday, and by Wednesday the main channel was down and associated usernames deactivated ^[6][5].

The same announcement complicates any clean story about enforcement moving up a layer. The task force, created last November to target scams run largely by Chinese organized crime groups in Southeast Asia ^[13], said it would expand its scope to scam compounds globally and had already sent a team to Madagascar, where 13 centers were taken down and dozens of alleged leaders arrested ^[19]. US attorney for the District of Columbia Jeanine Pirro said those leaders were quickly repatriated to China ^[19]. The arrests in Wednesday's package were Madagascan. The Xinbi package was sanctions, a warrant and wallet freezes ^[2][7][3].

Elliptic cofounder Tom Robinson told The Record he expects Xinbi to try to rebuild and relaunch, and that sanctions will make that very challenging ^[17]. The testable part is narrower than the forecast: whether an issuer other than Tether freezes addresses on request. If USDD holds, the capability that produced $52.8 million does not transfer to whatever replaces Xinbi, and the next disruption will need a different handle.