Interpol’s 97-Country Sweep Finds One 20-Year-Old’s Crypto Wallet Moved $123M in Romance-Scam Cash

A single crypto wallet — controlled by a 20-year-old Thai national — processed roughly $123 million in romance-scam proceeds, Interpol revealed this week as part of Operation First Light, a coordinated law enforcement sweep spanning 97 countries that netted 5,811 arrests and intercepted $293 million in illicit funds. Two Thai nationals were taken into custody in connection with the wallet, according to Decrypt, though the agency hasn’t named either suspect or detailed the full scope of charges.

Nine figures. One wallet. Even for investigators who’ve spent careers tracking crypto’s role in financial crime, that number lands differently. Romance scams — called “pig butchering” in crypto circles — work by having perpetrators build fabricated online relationships over weeks or months, then gradually steering targets to transfer funds into wallets or bank accounts under the scammer’s control; the pseudonymous nature of wallet addresses, combined with the sheer ease of cross-border transfers, makes crypto infrastructure the preferred plumbing for moving those proceeds. It’s a dynamic regulators and on-chain analytics firms have flagged repeatedly over the past two years, as stablecoin-mediated fraud surged.

Operation First Light: Scale and Significance

Operation First Light’s footprint was vast. Interpol coordinated participation across 97 countries, targeting online fraud and romance scams specifically, and the 5,811 arrests alongside $293 million in intercepted funds rank the sweep among the largest multinational fraud actions on record. The Thai wallet case will likely become a reference point for regulators pushing mandatory on-chain analytics and stricter wallet-identification rules — because the argument they’ve been making in Washington, Brussels, and Singapore is right there in the numbers: one wallet, one 20-year-old, $123 million in illicit flows concentrated at a single node. That’s the exact architecture Travel Rule extensions and mix-service restrictions are designed to break.

Tether, Stablecoins, and a Distressed Market

UUSDT$0.9992▲0.01%‘s USDT keeps turning up. The dominant stablecoin — market cap $184.13B, currently trading at $0.9991 — is cited repeatedly in law enforcement actions as the instrument of choice for moving illicit funds; its deep liquidity and dollar peg make it frictionless in ways that genuinely complicate tracing. The broader crypto market isn’t helping the mood: total market cap sits at $2,237.42B, and the Fear & Greed Index has dropped to 22, firmly in Extreme Fear territory. Regulators have long argued that distressed market conditions and aggressive scam activity targeting investors chasing recovery plays tend to move in tandem — and the current backdrop fits that pattern to an uncomfortable degree.

Stablecoin Issuers Under Scrutiny

The stablecoin issuer landscape is drawing its own scrutiny. An unverified Reddit thread contains claims that Circle, issuer of UUSDC$1.0000▲0.01% — trading at $0.9999 with a market cap of $73.15B — rebuffed efforts to help scam victims recover funds, with users characterizing the alleged rebuff as emblematic of a broader industry pattern in which issuers prioritize legal shielding over victim restitution. Those claims are unconfirmed social-media reporting, not established fact. But the underlying tension is real enough: stablecoin issuers profit from transaction volume, and building aggressive fraud-response protocols carries reputational and operational costs that issuers have little incentive to absorb without regulatory compulsion forcing their hand.

A Tightening Enforcement Architecture

That tension isn’t unique to any single issuer. The Australian Federal Police recently assisted a Europol-led investigation targeting an offshore money launderer who washed $542 million for cybercriminals, according to an AFP post. Taken together, the AFP-Europol case and Operation First Light signal something meaningful about where enforcement is heading — away from reactive, single-jurisdiction investigations and toward synchronized sweeps that trace funds across borders in something approaching real time. Jurisdictional limits haven’t disappeared. But the coordination architecture is getting measurably tighter.

For Interpol, the Thai wallet is the headline. A 20-year-old controlling $123 million in scam proceeds through a single address illustrates precisely how crypto infrastructure can concentrate enormous illicit flows at one point of control — and how a 97-country operation can still find and disrupt that node when the intelligence-sharing actually works. Whether the arrests produce prosecutions, any meaningful asset recovery for victims, or policy movement at the stablecoin-issuer level remains unresolved. Interpol has indicated that ongoing analysis of seized wallets and transaction histories will continue across participating jurisdictions.