US sanctions Philippines tech firm accused of aiding crypto scams

The U.S. Treasury Department has sanctioned Philippines-based Funnull Technology and its administrator, Liu Lizhi, for allegedly providing services to crypto scam websites linked to over $200 million in victim losses. Funnull is accused of purchasing and selling IP addresses to scammers, enabling them to impersonate legitimate investment platforms and steal cryptocurrency. The sanctions prohibit U.S. individuals and entities from engaging in transactions with Funnull and Lizhi, and freeze any U.S. assets they hold, potentially impacting the broader network of related scam operations.

Analysis

The US Treasury's Office of Foreign Assets Control (OFAC) has sanctioned Philippines-based Funnull Technology and its alleged administrator, Liu Lizhi, for their significant role in facilitating a vast network of cryptocurrency scams. Funnull is accused of purchasing IP addresses in bulk and selling them to cybercriminals, enabling the creation of fraudulent websites that mimic legitimate investment platforms, which resulted in victim losses exceeding $200 million, as reported to the FBI. OFAC further detailed that Funnull, in one 2024 instance, purchased and maliciously altered a repository of code used by web developers to redirect visitors of legitimate websites to scam websites and online gambling sites, underscoring the sophistication of their methods in aiding criminals to impersonate trusted brands and evade detection by quickly shifting domain names and IP addresses. The sanctions, which include adding Lizhi to the Specially Designated Nationals (SDN) list, effectively freeze any US-held assets and prohibit US persons from transacting with Funnull or Lizhi where they hold a more than 50% stake. Blockchain analytics firm Chainalysis corroborated the severity of Funnull's operations, identifying it as a central actor in the "Triad Nexus" network—encompassing over 200,000 unique hostnames tied to investment scams—and linked two sanctioned wallet addresses to payments Funnull likely received from cybercriminals. This enforcement action highlights a determined regulatory effort to disrupt the infrastructure supporting crypto-related financial crime and signals increased scrutiny on entities enabling such illicit activities.

Key Decisions for Investors

• Investors should acknowledge the increasing regulatory focus on dismantling illicit financial networks within the cryptocurrency space, emphasizing the critical need for enhanced due diligence on all digital asset ecosystem participants, including infrastructure and service providers.
• The crucial role of blockchain analytics and cybersecurity firms in identifying and combating these sophisticated scam operations, as demonstrated by Chainalysis's findings, may signal growth potential and investment opportunities in this specialized sector.
• These enforcement actions, while potentially causing localized disruptions, are fundamentally positive for the digital asset market's long-term health and integrity, as they aim to reduce fraud and could thereby strengthen investor confidence in compliant platforms and assets.