South Korean police arrested and charged suspects for laundering cryptocurrency proceeds on behalf of a phishing group based in Cambodia [1], [2].

The operation highlights the growing use of digital assets to move illicit funds across borders, complicating efforts to track and recover stolen assets from international scam rings.

Seoul police targeted a network designed to move proceeds from phishing scams and disguise them as legitimate cryptocurrency transfers [1], [2]. The scale of the arrests varies by report, with some sources stating 23 suspects were charged [1], while other reports indicate 56 people were arrested in the takedown [3].

The laundered funds totaled approximately $11.1 million [1]. Other reports estimate the amount at 16.8 billion won, which is roughly $11.2 million [3]. The network primarily focused on moving these assets to obscure their origin before they could be traced by authorities.

This enforcement action is part of a broader crackdown on financial crimes in the region. In a separate case involving customs, authorities dealt with a ring involving $107 million [4].

The phishing organization operated out of Cambodia, utilizing the South Korean laundering ring to integrate stolen funds into the global financial system [1], [3]. By converting phishing proceeds into cryptocurrency, the group attempted to bypass traditional banking monitors and international wire transfer flags.

Police continue to investigate the full extent of the network's reach and whether additional accomplices remain active in South Korea or abroad [2].

“South Korean police arrested and charged suspects for laundering cryptocurrency proceeds on behalf of a phishing group based in Cambodia.”

This crackdown underscores the vulnerability of cryptocurrency to 'money mule' networks that facilitate international cybercrime. By using a decentralized financial layer, phishing groups in Southeast Asia can effectively decouple their criminal activity from the final destination of the funds, requiring police to coordinate across multiple jurisdictions to dismantle the infrastructure.