US Treasury officials have documented a sprawling pattern of suspected cryptocurrency investment fraud, linking roughly $13 billion in reported financial activity to international scam networks that prey on people across the United States.
The finding, released on September 3, 2026, comes from the Financial Crimes Enforcement Network, the Treasury bureau that collects and analyzes reports filed under the Bank Secrecy Act.
FinCEN paired the analysis with an alert telling banks, money transmitters, casinos, and other covered institutions to watch for the same tactics and to file suspicious activity reports when they appear.
The agency reviewed 33,904 BSA reports submitted between September 8, 2023, and December 31, 2025.
Those filings described about $12.7 billion in transactions that investigators associated with suspected digital asset investment scams.
Officials presented the number as a measure of activity visible in the reporting system, not as a full accounting of every dollar stolen.
Even so, the scale is large enough to mark these schemes as one of the most damaging fraud threats now facing American households.
The operations are commonly called pig-butchering scams, romance baiting, or cryptocurrency confidence schemes.
The labels differ, but the method is consistent.
Criminals invent identities and use social engineering to create a sense of trust.
They may appear as a potential romantic partner, a new friend, or a business contact.
After weeks or months of conversation, they introduce what looks like a professional investment opportunity.
Victims are directed to websites or mobile applications designed to resemble legitimate trading platforms.
Once money or cryptocurrency is sent, the funds are diverted. Withdrawals are delayed, blocked, or never honored.
FinCEN said the campaigns are largely run by transnational criminal organizations based in Southeast Asia.
Many operate from industrial-scale compounds that function like factories for fraud.
Those compounds rely on large supporting networks that handle recruitment, account creation, customer contact, and the movement of proceeds.
Reporting indicated that victims spanned every age group and lived in all 50 states as well as several US territories.
The geographic spread undercuts the idea that these schemes only hit a narrow slice of the public.
After the initial theft, the money rarely sits still.
The analysis described “guarantee marketplaces,” online venues where scam operators buy illicit services such as account creation, phishing assistance, and professional laundering.
Specialized money launderers then open financial accounts, form shell companies, and move value through networks of money mules.
Stablecoin transfers to digital asset exchanges outside the United States are a common next step, because they can help convert stolen crypto into funds that look more ordinary.
The purpose is integration: taking proceeds generated by fraud and placing them into the formal financial system where they are harder to distinguish from legitimate commerce.FinCEN’s alert is intended to give compliance teams practical warning signs.
Those indicators include customers who suddenly send large sums to newly created investment platforms after meeting someone online, accounts used as pass-throughs for many unrelated people, and patterns consistent with mule activity or rapid conversion of funds into crypto.
The bureau emphasized that BSA reporting is not paperwork for its own sake. Timely, detailed filings help law enforcement connect victims, wallets, accounts, and facilitators.
They also support efforts to freeze or recover funds before they disappear overseas.
The agency encouraged financial institutions to use voluntary information sharing under Section 314(b) of the USA PATRIOT Act.
That provision allows firms to exchange information about possible money laundering while receiving legal safe harbor, provided they follow the rules.
FinCEN also pointed to its Rapid Response Program, which can quickly share financial intelligence with counterpart financial intelligence units abroad. Foreign authorities can then try to stop or reverse transfers under their own laws.
For victims, the immediate steps remain the same: contact the financial institution that sent the money, then file a complaint with the FBI’s Internet Crime Complaint Center and, where appropriate, the nearest US Secret Service field office.Officials placed the release in a wider policy context.
Gene Lange, performing the duties of Under Secretary for Terrorism and Financial Intelligence, said digital asset investment scams exploit both emerging technology and ordinary human vulnerability.
The result, he argued, is devastating loss for people who believed they were building a relationship or making a sound investment.
Treasury framed the alert and trend analysis as part of a larger effort to defend the US financial system against cybercrime, fraud, and predatory schemes, including objectives set out in Executive Order 14390.
The picture that emerges is not of isolated con artists working one victim at a time.
It is of organized enterprises that combine social manipulation, fake platforms, forced-labor compounds in some jurisdictions, and professional laundering services.
The $12.7 billion captured in BSA reporting is therefore a signal of industrial fraud rather than a handful of opportunistic tricks.
Banks and other institutions sit at a critical choke point because the stolen value still has to pass through accounts, transfers, and exchanges.
FinCEN’s message is that those institutions should treat the red flags as operational priorities, report what they see, and share information when the law allows.
That combination of detection, reporting, and international cooperation will not end every scam.
But it is one of the few ways to shrink the window in which criminals can convert a victim’s savings into untraceable proceeds. The Treasury analysis makes clear that the window has already been open long enough to move billions of dollars.