Loading…
Loading…
Section 311 of the USA PATRIOT Act (codified at 31 U.S.C. § 5318A) authorizes the Secretary of the Treasury — via FinCEN — to designate a foreign jurisdiction, foreign financial institution, class of international transaction, or type of account as being of "primary money-laundering concern" and to impose one or more of five graduated "special measures." This rule imposes the fifth and most severe special measure: a categorical prohibition on US covered financial institutions opening or maintaining correspondent accounts for the designated FFI, plus a derivative special-due-diligence obligation on US covered institutions' foreign correspondent accounts to prevent indirect Huione access.
The 311 toolkit is a financial-perimeter instrument distinct from OFAC SDN listings: it does not block property and does not require individual evidence of sanctions-program nexus. Instead it weaponises US-dollar correspondent access as a chokepoint against entities whose primary harm is money-laundering volume rather than designated-program support. Historic 311 fifth-special-measure targets are a small set: ABLV (Latvia, 2018), Bank of Dandong (DPRK, 2017), FBME (Tanzania/Cyprus, 2014), VTB Bank (Belarus, 2004), Banco Delta Asia (Macau, 2005), and the recent Mexican triad CIBanco / Intercam / Vector (June 2025) — Huione joins this lineage.
Huione Group entities between August 2021 and January 2025 (FinCEN factual finding).
(online-marketplace payment-guarantee service), Huione Pay PLC (Cambodia-licensed payment-services-provider), Huione Crypto (virtual-asset operations).
regulatory text + supporting analysis).
Huione Group is the financial-plumbing layer of the Southeast Asian cyber-scam economy that has metastasized across Cambodia, Myanmar (Shan State / KK Park), Laos (Bokeo SEZ), and the Philippines since 2021. Its services — escrow, payment guarantee, fiat-on/off-ramp, crypto custody — provided the settlement infrastructure for both: (a) "pig-butchering" / romance-investment-scam compounds run by PRC-linked organized-crime networks using trafficked labour, and (b) DPRK state-actor cyber-heist proceeds (Lazarus Group and adjacent units), which require laundering rails to convert stolen virtual assets to usable currency.
The Section 311 designation thus sits at the intersection of counter-cybercrime policy, DPRK sanctions-evasion enforcement, and human-trafficking response. It complements parallel Treasury / OFAC listings of Huione affiliates and follows the May 2025 notice of proposed rulemaking that opened the comment period.
exit any direct or indirect Huione exposure by the November 17, 2025 effective date and document special-due-diligence procedures.
facto pressure to drop Huione exposure (the special-due-diligence obligation operates as an extraterritorial chokepoint).
cybercrime-financing infrastructure as opposed to traditional bank-secrecy-jurisdiction targets — an evolution of the tool toward virtual-asset rails.
contained: Huione is not a top-tier domestic bank, and the National Bank of Cambodia retains its own AML/CFT regulatory authority over unrelated institutions.
Cambodia / Myanmar / Laos cyber-scam-zone payment networks identified in 2024-2025 UN Office on Drugs and Crime reporting?
and DeFi front-ends that processed Huione flows, or remain limited to traditional covered-FI categories?
Huione domestically, or pushback against extraterritorial US financial measure?