on-chain
DOJ extradites Zheng Zhao from the Netherlands over $36.9M Cambodia pig-butchering network
The Secret Service-led case alleges 174 US victims lost $36.9M through fake crypto sites, routed via Deltec Bank to USDT and on to Cambodia. Max 20 years.
The U.S. Department of Justice unsealed on October 23, 2026 that Zheng Zhao, 44, a Chinese national, had been extradited from the Netherlands and arraigned the same day in the U.S. District Court for the Central District of California on one count of conspiracy to commit money laundering. The charge was filed in August 2025 and carries a maximum of 20 years. The announcement is DOJ press release No. 26-1258 on justice.gov and was reported in parallel by Crypto Briefing.
What happened
Prosecutors allege Zhao participated in a cryptocurrency-investment scam run from scam compounds in Cambodia that targeted U.S. victims. The scheme, consistent with the "pig butchering" pattern, lured victims through fake crypto-trading websites and funneled the proceeds through a shell-company bank account before converting them to USDT and sending them on to Cambodia.
The money trail
- Victim side. Prosecutors identified 174 U.S. victims who lost more than $36.9 million.
- Correspondent step. Victim funds moved from U.S. bank accounts into a single account at Deltec Bank in the Bahamas, consistent with the shell-company structure already seen in prior pig-butchering indictments.
- Conversion. From Deltec, proceeds were converted to USDT (Tether).
- Settlement. USDT was sent to wallets controlled by operators in Cambodia.
The DOJ press release names Deltec explicitly as the Bahamas correspondent. The crypto segment of the trail is where the operation becomes attractive to prosecutors: once in USDT, the funds move at the speed of a block confirmation, and the exit side is in a jurisdiction without a mutual legal assistance treaty with the U.S.
Who prosecutes it, and with which agencies
- Trial attorneys. Tamara Livshiz (Criminal Division, White Collar and Corporate Enforcement) and James S. Yoon (Acting Assistant Deputy Chief, Computer Crime and Intellectual Property Section).
- Line prosecutors. Nisha Chandran and Alexander Gorin, Assistant U.S. Attorneys, Central District of California.
- Lead investigative agency. U.S. Secret Service, Global Investigative Operations Center.
- Partners. Homeland Security Investigations (El Camino Real Financial Crimes Task Force), CBP National Targeting Center, the State Department's Diplomatic Security Service, the U.S. Marshals Service, and the DOJ Office of International Affairs, which coordinated the extradition with Dutch authorities. The FBI is not among the agencies listed.
Zhao's next hearing is November 30, 2026.
The co-conspirator ladder
The case already has eight guilty pleas. Two are now sentenced:
- ShengSheng He — 51 months.
- Jingliang Su — 46 months.
Both pleaded to conspiring to operate an unlicensed money transmitting business — a reminder that the DOJ increasingly charges the money-movement layer, not only the fraud layer, when the facilitators are reachable in the U.S.
Why this one matters
Three things set the Zhao case apart from the ambient drumbeat of pig-butchering prosecutions:
- European extradition. The Netherlands handed Zhao over despite no U.S.-China treaty applying here. The Dutch co-operation is run through the DOJ Office of International Affairs. For operators who travel into Schengen, the practical safe-harbour perimeter is contracting.
- Correspondent-banking fingerprint. Deltec Bank remains a recurring node in pig-butchering indictments involving USDT; the pattern — U.S. domestic bank → Bahamas correspondent → USDT → Cambodia — has now been formally pleaded in multiple cases and is close to a doctrinal template on the prosecution side.
- Secret Service lead. The Secret Service's GIOC-led role, with HSI as deputy, is the newer prosecutorial-task-force shape for crypto-involved fraud, now firmly ahead of the FBI on volume in this fact pattern.
What to watch
- The November 30 arraignment and whether Zhao's defence contests the extradition conditions.
- Any additional conspirators named in a superseding indictment.
- Whether Tether is asked, formally, for records on the receiving wallets — a continuation of the pattern we covered in the September Blumenthal Senate PSI report on USDT and sanctions evasion.
Context
This is the latest in a 2026 series of U.S. extraditions and prosecutions aimed at the operator and launderer layer of the Southeast Asian scam-compound economy. The sentencing numbers (46–51 months) and the correspondent trail are now rote; what is new is the European handover. The chokepoint is not the chain. It is the airport.