
Ad Unit (2345678901)
UK Xinbi sanctions are not just another crypto-compliance headline. On March 26, Britain sanctioned Xinbi, Legend Innovation, and three individuals tied to scam-centre operations in Southeast Asia, treating online fraud as a system built from compounds, trafficked labour, crypto payments, and support services rather than as a series of isolated victim scams.
UK Xinbi sanctions target infrastructure, not only scammers
The UK government’s announcement makes that framing explicit. It says the action is aimed at a network operating illegal scam centres across Southeast Asia and identifies Xinbi as a major cryptocurrency-based marketplace where stolen personal data can be sold to fraudsters. It also says the UK is the first country to sanction Xinbi and describes the marketplace as providing scam centres with services including stolen data and satellite internet equipment used to contact victims.
Reuters’ March 26 report adds the physical side of the story. Britain designated Legend Innovation as the operator of “#8 Park,” which the government said is Cambodia’s largest scam compound, with capacity to accommodate 20,000 trafficked workers. Reuters also reported that the sanctions cover two entities and three individuals and freeze several London properties linked to the network, including a £9 million penthouse near Westminster.
That is the important shift. A lot of fraud coverage still treats crime as if it begins and ends with a fake romance pitch or a fake investment chart. The UK is treating it more like a production chain. One end of that chain is a labour compound where people are coerced into fraud. The other end is a crypto marketplace that sells the tools, data, and financial rails needed to scale the scams.
UK government announcement on the Xinbi sanctions
Xinbi looks less like a website and more like a service layer for fraud
The official sanctions notice gives the legal rationale in unusually direct terms. It says Xinbi has enabled and profited from the operation of scam centres in Southeast Asia and that it has been involved in providing financial services, funds, goods, or technology while knowing or having reasonable cause to suspect that those services would contribute to human-rights abuses. The same notice links Xinbi to forced-labour conditions in scam centres and imposes an asset freeze and director-disqualification sanction on the entity.
The notice also includes something closer to on-chain evidence than many sanctions releases usually provide: it lists two Tron addresses associated with Xinbi. That does not amount to a full wallet map or flow analysis, but it does show the UK was willing to anchor part of its designation in identifiable crypto infrastructure rather than only in corporate names and narrative allegations.
Independent blockchain researchers have tried to quantify Xinbi’s scale. Elliptic said on March 26 that Xinbi had seen more than $19.7 billion in inflows and described it as one of the largest illicit online marketplaces in the region. That figure is Elliptic’s estimate, not an official UK number, but it helps explain why Britain treated Xinbi as more than a side character. In this enforcement model, the marketplace is part of the machine, not just a venue where bad actors happen to meet.
Reuters on Legend Innovation and the London property freeze
#8 Park shows the physical backbone of crypto-enabled fraud
The UK announcement and Reuters report both emphasize the same physical hub: #8 Park in Cambodia. Britain says it is believed to be the country’s largest scam compound and capable of holding 20,000 trafficked workers. The sanctions notice ties Legend Innovation and Soklim Eang to the development and operation of a Cambodian scam centre involving forced labour and says those activities amount to serious abuses of the right to be free from slavery and cruel, inhuman, or degrading treatment.
That matters because it breaks the convenient fiction that crypto fraud is weightless and purely digital. Scam-centre fraud still needs buildings, management, communications equipment, local protection, financial channels, and labour. The UK’s sanctions package treats those elements as connected. Legend Innovation is not being targeted because it issued a dubious token. It is being targeted because the British government says it sits inside the physical infrastructure that enables industrial fraud and forced labour.
The same logic extends to the named individuals. The sanctions notice identifies Soklim Eang, Thet Li, Xiaoyan Wang, and An Ming Wu, also known as Xiaowei Hu, as designated persons under the Global Human Rights sanctions regime. Reuters summarized that part as sanctions against three individuals in addition to the two entities. Read together, the reporting and the notice suggest Britain is trying to map not only corporate structures but also the personal networks that connect compounds, finance, and property holdings.
The London property freeze is the most concrete sign of follow-the-money enforcement
The £9 million penthouse detail is easy to dismiss as colour, but it is actually one of the most useful facts in the case. Reuters reported that the sanctions freeze several London-linked properties associated with the network, including that Westminster penthouse. That turns the story from “Britain disapproves of scam centres” into “Britain is trying to immobilize the wealth produced by scam-centre operations.”
This is what infrastructure-focused enforcement looks like in practice. Authorities are not only naming an offshore platform and a Cambodian compound. They are also reaching for the real-estate and asset layer that stores the proceeds. That is important because scam infrastructure survives when criminal revenue can leave the compound, pass through crypto service rails, and land in durable assets with legal protection and resale value. If that last step becomes harder, the economics of the whole chain change.
There is also a political continuity point here. The UK said this action follows sanctions announced with the United States in 2025 against the Prince Group and its chairman Chen Zhi, which the government says triggered investigations, arrests, and freezes and seizures of assets worth more than £1 billion. This week’s designations therefore look less like an isolated press cycle and more like a second wave aimed at adjacent infrastructure that remained operational after the first crackdown.
The real lesson is that crypto fraud has an industrial supply chain
The most valuable angle in this case is not “another regulator goes after crypto.” It is that Britain is formalizing a model many investigators have been arguing for: large fraud operations are supply chains. They need compounds where workers are coerced, marketplaces where stolen data and technical services are sold, communications tools to reach victims, and money rails that can move or store proceeds. Xinbi is significant because the UK says it sits in that middle layer where logistics and monetization meet.
That is also why no aggregate victim-loss total appears in the sanctions materials. The action is not built around one discrete theft. It is built around participation in an enabling system. Reuters gave a concrete asset-freeze number for the London penthouse, but the larger harm is diffuse: scam compounds and supporting marketplaces fuel many frauds at once across jurisdictions and victim types.
For crypto users and investigators, that means looking beyond wallet-level scams. The more strategic question is which platforms supply the tools, contacts, connectivity, and financial channels that keep scam operations running at scale. If sanctions and law enforcement begin targeting those nodes consistently, the industry may finally start treating fraud as infrastructure to be dismantled rather than content to be moderated after victims are hit.
The next thing to watch is whether other governments follow Britain’s lead and designate the service layer around scam compounds, not just the compounds themselves. If that happens, the Xinbi case may mark a more serious phase of crypto-fraud enforcement: one that treats marketplaces, shell entities, properties, and communications tools as part of the same criminal architecture.
Reference Desk
Sources & References
Ad Unit (3456789012)
Filed Under
Tags
Zashleen Singh is a blockchain journalist and investigative reporter specializing in Web3 infrastructure, decentralized applications, and crypto fraud. She has covered over 200 Web3 projects and broken several major rug pull investigations that led to community action. Maya previously worked at a fintech investigative outlet and brings forensic rigor to every story she covers in the crypto space.
Continue Reading
Related Articles
Additional reporting and adjacent stories connected to this topic.
about 5 hours ago
Resolv Labs AWS KMS Exploit: How a Compromised Key Minted $25M in USR
On March 22, a compromised AWS KMS key let attackers mint 80M USR for $200K in USDC. The depeg spread bad debt across Morpho Blue, Euler, and Fluid.

Yesterday
Balancer V2 Rounding Exploit: $128M Drained in 30 Minutes
On November 3, 2025, an attacker drained $128M from Balancer V2 Composable Stable Pools across six blockchains in under 30 minutes — using a rounding error that survived 11 audits.

Mar 31, 2026
ONUS Vietnam Arrests: Anatomy of a Fake-Liquidity Scam
Vietnam’s ONUS arrests point to a familiar fraud template: exchange-controlled tokens, fabricated liquidity, and platform-run pricing sold as organic market demand.



