The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has imposed sanctions on Funnull Technology Inc., a Philippines-based digital infrastructure provider, for allegedly enabling large-scale cryptocurrency investment scams known as "pig butchering."

Funnull Technology's Alleged Role in Fraudulent Schemes

According to OFAC, Funnull Technology purchased internet protocol addresses in bulk and resold them to cybercriminals operating fraudulent websites. These websites were used to deceive victims into investing in fake cryptocurrency schemes. The company is accused of providing critical infrastructure that supported these scams, which have become increasingly sophisticated and global in scope.

Liu Lizhi, a 40-year-old Chinese national and alleged administrator of Funnull, has also been sanctioned. Efforts to contact Liu or locate Funnull in the Philippines' corporate registry have been unsuccessful.

Understanding Pig Butchering Scams

"Pig butchering" scams involve building trust with victims over time, often through social media or dating apps, and convincing them to invest in fraudulent cryptocurrency platforms. Once the victims have invested significant sums, the scammers disappear with the funds. These scams have become a billion-dollar industry, often run by organized crime groups and fueled by human trafficking.

Global Impact and Expansion

Originally emerging in China, pig butchering scams have spread worldwide, including to regions such as the Middle East, Eastern Europe, Latin America, and West Africa. In Nigeria, for example, the existing culture of online scams has made it fertile ground for the adoption of pig butchering tactics.

The FBI reported nearly $4 billion in losses from these scams in 2023, and global losses may exceed $75 billion. The rise of generative algorithms has further enhanced scammers' ability to target victims, contributing to record-high revenues from such activities.

Infrastructure Laundering and Cloud Services

Cybersecurity firm Silent Push and blockchain analytics firm Chainalysis have linked Funnull to numerous scam, gambling, and money laundering websites. Funnull has been accused of conducting a supply-chain attack by acquiring the domain polyfill.io, previously used for a widely-used open-source code library, and redirecting visitors to malicious sites. The company allegedly utilized major U.S. cloud providers to blend malicious traffic with legitimate services, making it harder to detect and block fraudulent activities.

Human Trafficking and Scam Centers

Many pig butchering operations are linked to scam centers in Southeast Asia, where individuals are trafficked and forced to work in fraudulent schemes. These centers often operate in countries with weak governance and limited enforcement capacities, allowing organized crime groups to flourish. In the Philippines, authorities have conducted raids on scam hubs, rescuing hundreds of victims and confiscating significant amounts of cash.

Implications and Future Actions

The sanctions against Funnull Technology highlight the importance of scrutinizing digital infrastructure providers and their role in facilitating cybercrime. Companies must perform due diligence to ensure they are not inadvertently supporting fraudulent activities. Regulators and law enforcement agencies are expected to increase efforts to combat pig butchering scams and hold enablers accountable.