Fake health tech firm laundered $1.6 billion in USDT on TRON over 16 months before a victim’s tip broke the case

For 16 months, a fraudulent platform called Verily HK posed as an AI-powered health technology company, deliberately mimicking the branding of Alphabet’s legitimate Verily Life Sciences to attract investors.

By the time blockchain analytics firm Blocksec mapped the wallet structure, $1.6 billion in USDT had moved through the TRON network across at least 15 rotating collection wallets, and the operation only unravelled after a victim handed investigators the first wallet address.

Crypto Ponzi Scheme Uncovered Through On-Chain Forensics

The crypto ponzi scheme was brought to light after a victim disclosed key wallet addresses, enabling investigators to map out the movement of funds across multiple layers.

According to Blocksec, the fraudulent network operated for over 16 months, between October 2024 and February 2026.

“Blockchain transparency allows us to reconstruct even the most complex fund flows,” Blocksec researchers noted. “In this case, the wallet structure clearly revealed hallmarks of a coordinated crypto ponzi scheme.”

The investigation identified several wallet tiers, including deposit collectors, intermediary addresses, payout distributors, and liquidation endpoints.

Together, they created a highly efficient system for cycling funds—one of the defining features of any large-scale crypto ponzi scheme.

Crypto Ponzi Scheme Masked as Health Tech Innovation

At the center of the operation was Verily HK, a platform posing as a cutting-edge health technology company.

The firm claimed to leverage artificial intelligence, big data, and medical devices to generate returns—classic bait in many modern crypto ponzi scheme setups.

The branding closely mimicked legitimate firms, particularly Alphabet’s Verily Life Sciences, creating an illusion of credibility.

This tactic proved effective in attracting unsuspecting investors into the crypto-ponzi scheme, many of whom believed they were funding real technological innovation.

“The misuse of credible narratives is what makes today’s crypto-ponzi scheme models so dangerous,” said a blockchain compliance analyst familiar with the case.

“They blur the line between legitimate investment and outright fraud.”

Crypto Ponzi Scheme Wallet Activity Surged to $1.6B

Over time, the crypto ponzi scheme scaled aggressively. Investigators tracked at least 15 rotating collection wallets across eight distinct generations, each handling increasing transaction volumes.

The final wave of wallets alone processed approximately $900 million in under four months, contributing to a total turnover of $1.6 billion.

While not all transactions represented direct user deposits—some were likely recycled funds—the scale highlights the operational depth of the crypto ponzi scheme.

Blocksec also revealed that it intercepted around $1.6 million in suspicious transaction flows during the investigation, suggesting that some efforts were made to disrupt the fraudulent activity.

Further analysis showed that the crypto ponzi scheme extended beyond internal wallet transfers.

Funds were traced to addresses associated with Huione Group, a Cambodian-based escrow service previously flagged in multiple cybercrime investigations.

The connection suggests that the crypto-ponzi scheme leveraged established laundering channels to obscure the origin of funds.

Approximately $4.6 million flowed through these linked addresses, alongside smaller direct deposits.

“This pattern reinforces the role of intermediary platforms in enabling crypto-ponzi scheme laundering operations,” a compliance expert stated. “It’s rarely an isolated system—it’s part of a broader ecosystem.”

Crypto Ponzi Scheme Highlights Risks of USDT on TRON

The exposure of this crypto ponzi scheme raises renewed concerns about USDT on TRON, one of the most widely used stablecoin networks globally.

With a supply exceeding 86 billion tokens and over 73 million wallets, the network processes tens of millions of transactions daily.

Its speed, low fees, and accessibility have made it a preferred channel—not just for legitimate transfers, but also for illicit financial flows tied to crypto ponzi scheme activity.

Data shows that TRON handles roughly 34 million transactions per day, including around 15,000 transactions exceeding $1 million.

While this reflects robust adoption, it also creates opportunities for high-volume fraud operations like this crypto ponzi scheme.

Crypto Ponzi Scheme Detection Still Relies on Victims

Notably, the crypto ponzi scheme remained undetected for months until victims reported losses.

This highlights a critical gap in proactive monitoring and enforcement across blockchain ecosystems.

Despite increasing scrutiny, only a fraction of suspicious wallets linked to USDT on TRON have been frozen, allowing many crypto-ponzi scheme operations to continue operating under the radar.

“User awareness remains the first line of defense,” Blocksec emphasized. “Even the most advanced analytics depend on initial signals from affected participants.”

The scale of this crypto-ponzi scheme is likely to intensify calls for tighter oversight of stablecoins and blockchain networks.

Regulators worldwide have already raised alarms about the misuse of digital assets in fraud and money laundering.

As the industry matures, cases like this serve as stark reminders that innovation must be matched with accountability—or risk enabling the next billion-dollar crypto ponzi scheme.