OPERATION MERIDIAN

Restricted

KINETIC PARTNERS · CRYPTO & DIGITAL INTELLIGENCE
OPERATE · FLOW WATCH

Active flows

Live corridors of illicit funds under watch. Every flow is a victim-to-off-ramp corridor with a reachable choke point. Movement fires an alert; staging a freeze routes it to authority. Operating data shown is staged for format review; live wiring lands with Nexus.

NEXUS T0 · STAGED FEED
214
WATCHED WALLETS
9
ACTIVE FLOWS
3
MOVING NOW
41.8$M
VALUE IN MOTION · 24H
61.4$M
FROZEN TO DATE
FLOWS UNDER WATCH · 9
FLOWORIGIN ENTITYRAILLAST HOPVALUEVELOCITYSTATE
OML-F-031KK Park clusterUSDT · TRON · guarantee mkt4 min ago$12.6M$2.1M/hMOVING
OML-F-029Fake platform set · Funnull CDNUSDT · TRON11 min ago$4.2M$0.8M/hMOVING
OML-F-027Sihanoukville block 5BTC · peel chain26 min ago$8.9M$1.4M/hMOVING
OML-F-025Shwe Kokko / YataiUSDT · TRON · junket credit3 h ago$6.1MWATCHING
OML-F-022GT SEZ casino cageBTC + USDT mixed9 h ago$5.5MWATCHING
OML-F-019PH POGO remnant · BambanUSDT · TRON2 d ago$2.3MSTAGED · FREEZE
OML-F-014Huione successor railUSDT · guarantee mkt5 d ago$1.8MFROZEN
OML-F-031 · KK PARK CLUSTER · CORRIDORMOVING
VICTIM SIDEDeposits onto 3 fake platforms · 41 victim wallets · 72 h window$3.4M
↓ consolidation · 2 hops
COMPOUNDKK Park consolidation set · 12 wallets · Nexus T0 attribution$12.6M
↓ rail entry · 4 min ago
RAILUSDT on TRON · guarantee marketplace (Huione successor)$2.1M/h
↓ projected · 6-18 h
CHOKE POINTExchange custody off-ramp · KYC'd VASP · reachable by AMLC notice + ADB-backed directiveFREEZE HERE
MOVEMENT ALERTS
14:18OML-F-031 hop → guarantee mkt · $1.2M USDT
14:07OML-F-029 new wallet joined set · Funnull domain rotation
13:51OML-F-027 peel chain split 6 → 14 outputs
13:32OML-F-031 velocity 2× baseline · watch level raised
WATCHERS ON THIS FLOW
KINM. Dow · Kinetic 02
DOJSeat invited · pending
ADBDirective desk · proposed
OPERATE · COMPOUNDS & PLATFORMS

Entity registry

Every physical compound and digital platform with known scam wallets tied to it. Wallet sets are graded, watched, and feed directly into seize cases.

18
COMPOUNDS TRACKED
13
DIGITAL PLATFORMS
214
TIED WALLETS
387$M
ATTRIBUTABLE EXPOSURE
KK Park
COMPOUND · MYAWADDY MM · 12 WALLETS · T0
Shwe Kokko / Yatai
COMPOUND · KAREN STATE MM · 9 WALLETS · T1
Sihanoukville block 5
COMPOUND · KH · 22 WALLETS · T0
Golden Triangle SEZ
COMPOUND · LA · 14 WALLETS · T1
Bavet / Poipet belt
COMPOUND · KH · 8 WALLETS · T2
PH POGO remnant · Bamban
COMPOUND · PH · 6 WALLETS · T1
Fake platform set A
PLATFORM · 34 DOMAINS · FUNNULL CDN · T1
Guarantee marketplace rail
PLATFORM · HUIONE SUCCESSOR · T1
Junket credit network
PLATFORM · CROSS-BORDER · T2
ENTITY
KK PARK
TIED WALLETS
12
LIVE BALANCE
$84.2M
LIFETIME IN
$1.9B
IN MOTION
$12.6M
CASE
OML-C-014
WALLETCHAINBALANCELIFETIME INLAST ACTIVEGRADESTATE
TQmX…9f4ATRON$31.2M$640M4 minT0MOVING
TXk2…77BcTRON$18.7M$412M2 hT0WATCHING
bc1q…m3zeBTC$14.1M$388M1 dT1WATCHING
TWpR…QQ1dTRON$9.8M$207M3 dT1STAGED
bc1q…8vLkBTC$6.3M$151M6 dT1FROZEN
TNb7…c2FsTRON$4.1M$96M12 dT0DORMANT
OPERATE · SEIZE CASES · OML-C-014

Case OML-C-014 · KK Park cluster

A seize case binds a wallet set to evidence, authority, and an execution route. Identify is done, freeze is staged at the exchange choke point, seizure routes through AMLC with the ADB directive lane as the powerhouse behind it.

12
WALLETS IN SET
84.2$M
LIVE EXPOSURE
T0·T1
EVIDENCE GRADE MIX
9d41…e77f
CUSTODY HASH · SHA-256
72 H
FREEZE WINDOW · PROJECTED
PIPELINE
FREEZE STAGED · AWAITING AUTHORITY
01 · IDENTIFY
COMPLETE

12 wallets attributed to the KK Park operating set. Nexus T0 clustering + two public T1 corroborations. Evidence pack sealed, custody hash written.

02 · FREEZE
STAGED

Choke point is a KYC'd exchange off-ramp. AMLC notice drafted under RA 9160 §10. ADB directive lane engaged for institutional weight and member-state pressure.

03 · SEIZE
PENDING

Civil forfeiture package prepared for DOJ filing under §12. Victim restitution schedule attaches on execution. Every action audit-logged.

AUTHORITY ROUTING · WHO EXECUTES
LEGAL HOOK · PH
AMLC · RA 9160

The freeze order itself. §10 freeze, §11 inquiry, §12 forfeiture. AMLC notifies the VASP; the exchange holds the funds.

POWERHOUSE · CAPITAL + DIRECTIVE
ADB · AMERICA FIRST LANE

Stewarded by the US Director's seat. ADB brings the money weight: member-state directives, conditioned lending, and the institutional cover that makes exchanges and regulators move fast.

PROSECUTION + ALLIANCE
DOJ · US EMBASSY

DOJ files forfeiture; the Ambassador's seat gives it alliance framing. US victims in the evidence pack open OFAC and MLAT parallel tracks.

OPERATE · SEIZE LEADS

Lead repository

Flagged scam addresses from external feeds, sorted by network, typology, and source. Qualified leads promote into watched flows and seize cases.

◔ LIVE INGEST PENDING · daily CSV feed from the scam-address pipeline connects here · 9,423 addresses / 34 networks staged
9,423
FLAGGED ADDRESSES
34
NETWORKS
5
FEEDS · OFAC SDN + 4
61
PROMOTED TO FLOWS
TOP LEADS · BY EXPOSURE
ADDRESSNETWORKTYPOLOGYSOURCEEXPOSURESTATE
TYs4…k82DTRONPig butcheringOFAC SDN$18.4MPROMOTED · OML-F-031
bc1q…w4YtBTCFake platformCHAINABUSE$7.1MQUALIFYING
0x9c…E4a1ETHApproval drainerSCAMSNIFFER$3.8MQUALIFYING
TKp9…1uVbTRONTask scamCRYPTOSCAMDB$2.2MNEW
bc1q…pp3NBTCRomance / investmentCA DFPI$1.6MNEW
WIKI · CANONICAL RULE SET

How this operation runs

The living rule set for every invited seat. What this is, how we operate, what is in and out of scope, and the record of how our power and reach expand. Updated as we progress; every change is logged below.

01 · WHAT THIS IS
1.1

One operation, one graph. A crypto and digital intelligence operation over the transnational scam economy: Philippines core, APAC theater. The ops center tracks live flows, tied wallets, and seize cases; the intelligence library sits behind the internal layer.

1.2

Doctrine is IDENTIFY · FREEZE · SEIZE. Follow the funds from victim deposit to exchange off-ramp; act at the reachable choke point.

1.3

Legal hook is RA 9160 (AMLA): §10 freeze, §11 inquiry, §12 forfeiture. ADB directive weight and US alliance framing sit beside it as the powerhouse lanes.

02 · OPERATING RULES
2.1

Every claim carries an evidence grade. T0 = graph attribution · T1 = official government record · T2 = institutional reporting · T3 = corroborated press. Nothing ungraded enters a case.

2.2

Every action is audit-logged. Who authorized it, under which provision, against which target, with what evidence grade. Immutable and replayable.

2.3

A freeze is staged only at a reachable choke point with a named authority route. No symbolic freezes; every staged order must be executable.

2.4

No real victim names on any surface. Adversary records use enforcement-record names only. Public-record principals (sanctioned or charged) are citable; victims never are.

2.5

Seats see what their lane requires. Visibility is set per seat in Access Control; the internal layer is Kinetic-only. Keys rotate on any personnel change.

2.6

Bright line: this operation builds intelligence, tracing, target packages, and legal instruments. No field ISR, no offensive cyber, no armed or deputized action. Physical action belongs to sworn authorities.

03 · SEATS & LANES
3.1

KINETIC runs the engine: attribution, custody, evidence packs, this platform.

3.2

DOJ authorizes and prosecutes: forfeiture filings, target confirmation.

3.3

AMLC executes freezes: institution notices under RA 9160.

3.4

ADB directive desk brings capital weight: member-state directives and conditioned lending that make institutions move.

3.5

US Embassy frames the alliance: protect-Americans mandate, OFAC and MLAT parallel tracks.

04 · MILESTONES
2026-08-17MILESTONEOperation consolidated under MERIDIAN; ops center + internal library architecture locked; opmeridian subdomain provisioned.
2026-08MILESTONEAdversary register complete: 8 priority syndicates profiled with graded records; 6 compound theaters mapped.
2026-05MILESTONETwo US principal seats identified in Manila: alliance lane and capital lane, confirmed same day.
2026 H1MILESTONEDirect working line to PH DOJ established; operating console and doctrine pack delivered.
05 · CHANGE LOG · LIVING
2026-08-17CHANGEv2.0 · Platform restructured: OPERATE screens (Flow Watch, Compounds & Platforms, Seize Cases, Seize Leads) open to invited seats; full intelligence guide moved behind INTERNAL; this wiki added as canonical rule set.
2026-08-17CHANGEv1.1 · Header register switched to technical mono; operator settings and access control added.
2026-08-17CHANGEv1.0 · Nine-tab intelligence platform built; internal layer with funding thesis added.

Rule changes require the Kinetic admin seat and land here with a dated entry. If a screen and this wiki disagree, the wiki is wrong until updated, and the update is mandatory.

OPERATION MERIDIAN · SITUATION ROOM

The command picture

One operation, one graph. Crypto and digital intelligence over the transnational scam economy, Philippines core, APAC theater. Read the numbers, then enter a tab.

568.7$M
LIVE ON-CHAIN EXPOSURE
sanctioned BTC set, current balance · nexus 2026-08-04
12.25$B
LIFETIME RECEIVED
same BTC set, all-time · nexus 2026-08-04
37$B
REGIONAL LOSS · 2023
UNODC upper estimate, E/SE Asia · UNODC 2024
300K+
TRAFFICKED / COERCED
held across SE Asia compounds · UN OHCHR
8
PRIORITY SYNDICATES
profiled adversary records · internal
6
COMPOUND THEATERS
PH + APAC physical sites · internal
INTELLIGENCE MODULES8 TABS
LIVE WIREMOVEMENT
2025-11-20ENFORCEMENTT3

Alice Guo convicted of human trafficking, jailed for life (PH). Bamban / Baofu POGO hub.

2025-11-12ENFORCEMENTT3

Thailand extradites She Zhijiang (Yatai / Shwe Kokko) to China.

2025-10-20FIELDT3

KK Park (Myawaddy) cleared; 2,000+ workers released, 30 Starlink units seized.

2025-10POLICYT1

US State Dept designates Cambodia a 'state sponsor' of human trafficking (Tier 3).

2025-05-01FINANCET1

FinCEN §311 primary money-laundering finding against Huione Group.

2025SEIZURET1

DOJ EDNY: 127,271 BTC (~$15B) forfeiture named against Chen Zhi / Prince Group.

ADVERSARY REGISTER

The bad guys, by record

Every priority syndicate as a graded record: principals, model, footprint, on-chain exposure, and enforcement status. Click a row for the full file.

PRIORITY SYNDICATES8 RECORDS
SYNDICATETYPEBASEKNOWN SCALEACTIONGRADE
PRINCE GROUP / CHEN ZHI Conglomerate front Cambodia 127,271 BTC named (~$15B) DOJ EDNY + OFAC · 2025 T1
HUIONE GROUP Laundering marketplace / rail Cambodia $4B illicit proceeds (2021-Jan 2025) FinCEN §311 · 2025 T1
SHE ZHIJIANG / YATAI (SHWE KOKKO) Territorial developer front Myanmar (Karen State) $15B purported 'New City' US + UK sanctions · extradited 2025 T1
ZHAO WEI / KINGS ROMANS SEZ / casino TCO Laos (Golden Triangle SEZ) GTSEZ enclave · Laos 20% stake OFAC TCO · 2018 T1
L.Y.P. GROUP / LY YONG PHAT Business-group operator Cambodia (O-Smach) O-Smach compounds OFAC · 2024 T3
FUNNULL TECHNOLOGY INC Infrastructure syndicate Cloud CDN / domains $200M+ US victim losses OFAC · 2025 T1
LAZARUS GROUP (DPRK) State cyber / heist actor North Korea Multi-$B crypto heists OFAC · ongoing T1
PH POGO NETWORK (BAMBAN ET AL.) Host-country hub cluster Philippines 800+ rescued at Bamban alone POGO ban 2024 · convictions 2025 T1
SUBJECT · PRINCE GROUP / CHEN ZHI · INDICTED

Prince Group / Chen Zhi record

127,271BTC NAMED IN FORFEITURE
~$15BSTATED VALUE · DOJ 2025
2025DOJ / OFAC ACTION
GLOBALVICTIMS · CAMBODIA BASE
QUALITATIVE · ACTOR

Operating profile

  • Principal: Chen Zhi, chairman of Prince Holding Group.
  • Model: Corporate conglomerate alleged to front forced-labor scam compounds and laundering behind banks, casinos, and real estate.
  • Footprint: Cambodia-centered holdings, compounds, and financial channels; victims worldwide.
  • Action: US indictment, OFAC sanctions, and civil forfeiture complaint (2025), the largest US crypto forfeiture action to date.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Executives, facilitators, compound managers, nominee directors
  • Holding companies, banks, casinos, real estate, service providers
  • Forfeiture wallets and downstream custody at exchanges
SUBJECT · HUIONE GROUP · §311 CONCERN

Huione Group record

$4BILLICIT PROCEEDS · FinCEN
$57.2BUSDT-TRON WITHDRAWALS · 18MO
80K+ACTIVE DEPOSIT ADDRESSES
2025FinCEN §311 FINDING
QUALITATIVE · ACTOR

Operating profile

  • Model: Chinese-language guarantee marketplace + payment rail (Huione Guarantee / HuionePay) that clears scam and heist proceeds, largely in USDT on TRON.
  • FinCEN finding: At least $4B in illicit proceeds laundered 2021-Jan 2025, incl. ~$37M from DPRK cyber heists and ~$36M from investment ('pig-butchering') scams.
  • On-chain scale: ~$57.2B USDT withdrawals / ~$54.5B deposits across HuionePay TRON wallets, Jan 2024-Jun 2025; active deposit addresses grew from <30K to >80K.
  • Persistence: Continued operating under successor branding after the May 2025 action, disruption is complex, not terminal.
QUALITATIVE · PIVOTS

Investigation surfaces

  • HuionePay TRON deposit/withdrawal clusters
  • Successor / rebrand platforms
  • Correspondent-account and stablecoin issuer touchpoints
SUBJECT · SHE ZHIJIANG / YATAI (SHWE KOKKO) · EXTRADITED

She Zhijiang / Yatai (Shwe Kokko) record

$15BPURPORTED DEV VALUE
2025EXTRADITED TO CHINA
KAREN BGFMILITIA JOINT VENTURE
US+UKSANCTIONED
QUALITATIVE · ACTOR

Operating profile

  • Principal: She Zhijiang, extradited from Thailand to China (Nov 2025); founder of Yatai International Holding Group.
  • Model: Yatai New City at Shwe Kokko: a purported $15B real-estate mega-development that functions as a front for cyber-scam centers and illegal casinos.
  • Enabler: Joint venture with the Karen Border Guard Force (BGF) militia, territorial control is the operating moat.
  • Status: She Zhijiang and Yatai sanctioned by the US and UK for rights abuses tied to the scam farms.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Karen BGF militia leadership and toll/rent structure
  • Yatai corporate registrations (HK / regional)
  • Casino cage and junket laundering channels
SUBJECT · ZHAO WEI / KINGS ROMANS · SANCTIONED

Zhao Wei / Kings Romans record

2018OFAC TCO DESIGNATION
20%LAOS STATE STAKE IN SEZ
GTSEZBOKEO PROVINCE ENCLAVE
ACTIVEOPERATIONS ONGOING
QUALITATIVE · ACTOR

Operating profile

  • Principal: Zhao Wei and wife Su Guiqin, named by OFAC as heads of the 'Zhao Wei Transnational Criminal Organization' (2018).
  • Model: Kings Romans casino anchoring the Golden Triangle Special Economic Zone: narcotics, trafficking, wildlife trade, and cyber-scam infrastructure.
  • Enabler: Laos granted development rights in 2007 and holds a ~20% state stake in the SEZ; no host-state action against Zhao.
  • Fronts: Two Hong Kong-registered companies under the Kings Romans Group named as corporate fronts.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Kings Romans HK corporate fronts
  • SEZ concession and Laos state-stake counterparties
  • Casino cage / cross-border Mekong logistics
SUBJECT · L.Y.P. GROUP / LY YONG PHAT · SANCTIONED

L.Y.P. Group / Ly Yong Phat record

2024OFAC DESIGNATION
O-SMACHPRIMARY DOCUMENTED SITE
ACTIVEPUBLIC-RECORD STATUS
T3CITED PUBLIC RECORD
QUALITATIVE · ACTOR

Operating profile

  • Principal: Ly Yong Phat, Cambodian senator and tycoon; L.Y.P. Group.
  • Model: Named business group connected to physical compounds and forced-labor allegations at O-Smach.
  • Action: OFAC designation (2024) citing serious human-rights abuse tied to scam-compound forced labor.
QUALITATIVE · PIVOTS

Investigation surfaces

  • L.Y.P. Group corporate holdings
  • O-Smach compound operators and landlords
  • Political / patronage protection layer
SUBJECT · FUNNULL TECHNOLOGY INC · DESIGNATED

Funnull Technology Inc record

$200M+US VICTIM LOSSES · FBI/OFAC
1DESIGNATED ETH ADDRESS
4NAMED COMPANY DOMAINS
2025OFAC DESIGNATION
QUALITATIVE · ACTOR

Operating profile

  • Model: A bounded infrastructure syndicate: a CDN / domain provider that hosts and rotates pig-butchering and investment-scam sites at scale.
  • Enforcement: OFAC designation (2025) with FBI-cited US victim losses of $200M+; one designated ETH address and four named company domains.
  • Value: The cleanest single-record archetype: corporate identity, domains, named operator, designated wallet, loss estimate, and action in one cited file.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Domain registration and rotation infrastructure
  • Designated ETH address and downstream flows
  • Hosting / CDN reseller counterparties
SUBJECT · LAZARUS GROUP (DPRK) · SANCTIONED

Lazarus Group (Dprk) record

$B+CRYPTO STOLEN · MULTI-YEAR
DPRKSTATE-DIRECTED
MIXERSPRIMARY LAUNDERING
OFACLONG-SANCTIONED
QUALITATIVE · ACTOR

Operating profile

  • Model: State-directed cyber theft: exchange and bridge exploits, then laundering through mixers and, per FinCEN, rails like Huione.
  • Convergence: Overlaps the scam economy at the cash-out layer, a shared laundering surface with SE Asia syndicates.
  • Action: Long-standing OFAC sanctions; addresses tracked in the live sanctioned set.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Mixer and bridge cash-out clusters
  • Overlap with Huione and stablecoin rails
  • Exchange KYC touchpoints on cash-out
SUBJECT · PH POGO NETWORK (BAMBAN ET AL.) · BANNED / PROSECUTED

Ph Pogo Network (Bamban Et Al.) record

2024NATIONWIDE POGO BAN
800+RESCUED · BAMBAN RAID
LIFEGUO SENTENCE · 2025
7NATIONALITIES AT ONE SITE
QUALITATIVE · ACTOR

Operating profile

  • Model: Offshore-gaming (POGO) licenses used as legal cover for forced-labor scam compounds; local officials captured to shield operations.
  • Bamban / Baofu: The Baofu compound in Bamban, Tarlac, tied to then-mayor Alice Guo, was raided in 2024; 600-800 people of seven nationalities rescued, torture documented.
  • Enforcement: President Marcos ordered a nationwide POGO ban (end-2024); Guo convicted of human trafficking and jailed for life (Nov 2025). Tens of thousands of workers repatriated, but sites persist.
  • Belt-and-Road note: US TIP 2025 flags Chinese nationals at PH worksites affiliated with China's Belt and Road as a forced-labor risk surface.
QUALITATIVE · PIVOTS

Investigation surfaces

  • Captured local officials and license-holders
  • Compound landlords and shell operators
  • Cross-border worker-trafficking corridors
COMPOUND ATLAS

The physical theater

Where the crime lives on the ground: purpose-built scam cities and captured enclaves across the Mekong and the Philippines. Two victim sets, the defrauded and the enslaved.

DOCUMENTED SITES6 THEATERS

KK PARK

T3
LOCATION · Myawaddy, Myanmar (Thai border)
OPERATOR · Chinese crime networks + Karen BGF
SCALE · Part of border cluster estimated up to 100,000 workers

Purpose-built scam city; Oct 2025 clearance released 2,000+ and seized 30 Starlink units. Operations rebuilding.

SOURCE ↗

SHWE KOKKO / YATAI NEW CITY

T3
LOCATION · Karen State, Myanmar
OPERATOR · She Zhijiang / Yatai + Karen BGF
SCALE · $15B purported development footprint

'City built on scams', casinos + cyber-fraud behind a real-estate front. She extradited to China Nov 2025.

SOURCE ↗

SIHANOUKVILLE CLUSTER

T2
LOCATION · Preah Sihanouk, Cambodia
OPERATOR · Chinese-led, S. Korean middlemen
SCALE · Part of ≥53 compounds documented across Cambodia (Amnesty)

Former Chinese-casino boomtown repurposed into scam mills after the 2019 online-gambling ban.

SOURCE ↗

GOLDEN TRIANGLE SEZ

T1
LOCATION · Bokeo, Laos
OPERATOR · Zhao Wei / Kings Romans
SCALE · SEZ enclave, Laos holds ~20% stake

OFAC-designated TCO anchor (2018): casino + narcotics + trafficking + cyber-scam infrastructure on the Mekong.

SOURCE ↗

O-SMACH

T3
LOCATION · Oddar Meanchey, Cambodia
OPERATOR · L.Y.P. Group / Ly Yong Phat
SCALE · Named compound cluster

Primary documented site behind the 2024 OFAC designation of Ly Yong Phat.

SOURCE ↗

BAMBAN / BAOFU (POGO)

T1
LOCATION · Tarlac, Philippines
OPERATOR · POGO front, captured mayor
SCALE · 600-800 rescued, 7 nationalities

The raid that broke the PH POGO story open; led to the nationwide ban and Alice Guo's life sentence.

SOURCE ↗
METHODS & TYPOLOGIES

How it works

The playbook end to end, approach, forced labor, laundering rails, infrastructure, and the technology edge. Follow it and you have the map from victim to off-ramp.

APPROACH

Pig-butchering (sha zhu pan)

Long-con investment/romance fraud: build trust over weeks, steer the victim onto a fake crypto or trading platform, allow small 'withdrawals', then drain on the large deposit. The dominant loss driver in the region.

Task & job scams

'Easy money' micro-task and commission traps that escalate into deposits the victim can never recover. High-volume, lower-per-victim, feeds top-of-funnel.

LABOR

Forced-labor workforce

Workers recruited with fake jobs, trafficked across borders, held behind walls, and beaten or tortured into scamming. Two victim sets in one crime: the defrauded and the enslaved.

RAIL

Stablecoin laundering (USDT/TRON)

Proceeds move as USDT on TRON through guarantee marketplaces and payment platforms (e.g. Huione) into deposit-address clusters, then to exchange off-ramps.

Casino / junket layering

Cage buy-ins, junket credit, and SEZ enclaves convert and layer value where host-state enforcement is absent or captured.

INFRA

Domain & hosting rotation

Infrastructure syndicates (e.g. Funnull) supply and rotate the fake-platform domains and hosting at scale, the connective tissue behind thousands of front sites.

TECH

Connectivity & AI tooling

Starlink terminals keep cleared compounds online; UNODC notes syndicates adopting deepfakes and generative tooling to scale persuasion and evade detection.

MONEY MAP

Follow the funds

The doctrine is a follow-the-money operation. From victim deposit to exchange off-ramp, the flow narrows to reachable choke points where authority can freeze and seize.

THE CORRIDOR
VICTIM

Fiat or crypto deposit onto a fake platform

COMPOUND

Credited to the operating syndicate; forced-labor workforce runs the con

RAIL

USDT on TRON through guarantee marketplaces / payment platforms (Huione and successors)

$57.2B 18-mo TRON flow
LAYER

Casino cage, junket credit, SEZ enclaves, domain/hosting spend

OFF-RAMP

Exchange custody, the reachable choke point for freeze and disclosure

$568.7M live exposure
EXPOSURE ENGINENEXUS · T0
568.7$M
LIVE ON-CHAIN EXPOSURE
sanctioned BTC set, current balance · nexus 2026-08-04
12.25$B
LIFETIME RECEIVED
same set, all-time · nexus 2026-08-04

The graph is the moat. Products feed it; it is never sold raw. Monetization runs through programs like this one and contribute-to-access coalition terms.

TARGETING

IDENTIFY · FREEZE · SEIZE

Legal spine: RA 9160 (AMLA) §10 freeze / §11 bank inquiry / §12 forfeiture, the Philippine legal spine.

IDENTIFY

Resolve the target: on-chain clusters + corporate fronts + physical site + named operators, each graded T0-T3. Output = a Confirmed Target Package (CTP).

FREEZE

Route the CTP to authority: AMLC / court freeze under §10, exchange holds at the off-ramp, correspondent-account pressure on rails.

SEIZE

Civil forfeiture and asset recovery under §12; coordinate with US actions (DOJ/OFAC) where the flow touches US persons or dollars.

PRIORITY MATRIXREACHABILITY × EXPOSURE × HOST POSTURE
SYNDICATEREACHABILITYEXPOSUREHOST-STATE POSTUREPRIORITY
Prince Group / Chen ZhiHigh, US action live~$15B namedCambodia capturedP1
Huione railHigh, on-chain + §311$4B+ clearedCambodia capturedP1
PH POGO networkHigh, host actingTens of thousands freedPH cooperativeP1
Yatai / Shwe KokkoMedium, operator held$15B footprintMyanmar contestedP2
Kings Romans / Zhao WeiLow, no host actionSEZ enclaveLaos partneredP3
Funnull infraMedium, designated$200M+ lossesCloud / borderlessP2
BRIGHT LINE

Kinetic builds tracing, IATL, Confirmed Target Packages, secure delivery, and reporting. No field ISR, IMSI/RF, offensive cyber, or armed/deputized action, those require Philippine counsel, signed authority, and licensed operators.

COALITION & PRINCIPALS

The legitimizers

Who blesses, who funds, who operates. The US institution + capital pairing in Manila, and the Philippine authority seats.

US PRINCIPALS · MANILAPRE-OP READ

LEE M. LIPTON

US Ambassador to the Philippines
LEVER Political / diplomatic cover; US-PH alliance frame.
READ Affiliative host. Relationship-driven, coalition-builder. Persuade through trust, belonging, shared mission, and a legacy win, not data dumps.
HOOK Protect Americans and strengthen the alliance by dismantling Chinese-linked criminal networks on PH soil.

ROBERT W. SWEENEY

US Director, Asian Development Bank (rank of Ambassador)
LEVER Financial-institution + multilateral-finance channel, in Manila.
READ Analytical operator. ROI-driven, hedges, thinks in capital and taxpayer value. Persuade through evidence, reform, and measurable China-counter proof points.
HOOK Illicit finance is a development-finance and taxpayer-value problem, here is the money map and the measurable disruption.
THE ADB

The Asian Development Bank, a regional development bank owned by 69 members, headquartered in Manila (US Governor = Treasury Secretary; Sweeney holds the US Director chair). ADB already runs AML/CFT and trade-based-laundering work and flagged ~$700B lost to scams in 2024. Scam-center laundering sits inside its stated concern set.

DOCTRINE & SOURCES

Provenance

Every claim in this platform is graded. T0 internal primary · T1 government / court · T2 UN / NGO · T3 press. Adversary labels never propagate across weak links.

DOCTRINE

One operation, one graph. Kinetic is the crypto and digital intelligence unit: we identify, package, and deliver. Authority freezes and seizes. The graph is the moat and is never sold raw. No recovery guarantees; no field or kinetic action without Philippine counsel, signed authority, and licensed operators.

SOURCE MANIFEST9 PRIMARY LINES
PUBLISHERRECORDGRADELINK
UNODCCyberfraud industry expands in SE Asia (loss est. $18-37B, 2023)T2OPEN ↗
US State Dept2025 Trafficking in Persons Report (Cambodia / Burma / Philippines)T1OPEN ↗
FinCEN§311 finding: Huione Group primary money-laundering concern (2025)T1OPEN ↗
DOJ EDNYUS v. Chen Zhi / Prince Group, indictment & forfeiture (2025)T1OPEN ↗
OFACTCO designations: Zhao Wei/Kings Romans (2018), Ly Yong Phat (2024), Funnull (2025)T1OPEN ↗
UN OHCHROnline scam operations & trafficking, SE Asia (2023) + 2025 forced-scamming statementT2OPEN ↗
ChainalysisHuione persistence despite shutdown (2025)T3OPEN ↗
Bloomberg / BBC / Reuters / OCCRP / AP / SCMPCompound field reporting (KK Park, Shwe Kokko, Sihanoukville, GTSEZ, Bamban)T3OPEN ↗
NorthPoint NexusLive sanctioned-address exposure engine (internal, T0)T0OPEN ↗
INTERNAL · SEAT-ONLY

The engine room

Everything the public face does not show: the consolidation map, what we already own, the principals read, the authority pipeline, the funding thesis, and what happens next. Coded handles only, no true secrets in this build.

CONSOLIDATION MAPONE OPERATION, ONE GRAPH
THESIS

OPERATION MERIDIAN is the single platform that consolidates every PH and APAC adversary asset we have built or planned into one operation with one graph. Dragonfly is not retired, it becomes engagement #1 inside the Line.

ASSET
WHAT IT IS
ROLE IN THE LINE
OPERATION DRAGONFLY
PH DOJ engagement, console, seat model, Lane-3 docs
Becomes Engagement 01 inside the Line; the seat + audit model is the Authority tab.
NORTHPOINT NEXUS
The graph: sanctioned-address exposure, syndicate records, corridors
Powers the Situation Room and Money Map as a read-only feed. Never sold raw.
OPERATION FIREHORSE
Enforcement hub: case board, fund flow, freeze-and-disclose playbook
The execution surface the Action Queue routes into.
LODESTAR
Public-docket registry + attribution engine
Feeds new targets into the Adversary Register.
MERIDIAN DISPATCH
Public intelligence publication on compounds + enforcement
Feeds the Live Wire and the public-face narrative.
DRAGNET / DEFENDER
Impersonation + phishing infrastructure scanning
Contributes adversary infrastructure to the graph.
ASSET INVENTORY8 BUILT ASSETS
ASSETWHERESTATEGRADE
Dragonfly consoledragonfly.meridianoffice.orgLIVE, 8 screens, per-seat keysT0
Operational workflows branchfeat/operational-workflowsBuilt, not deployed, 7 audit-logged mutationsT0
NorthPoint Nexusnexus.kineticpartners.orgLIVE, gated graph + exposure engineT0
Lane-3 handoff docsGreen Light Brief + OPORD + Appendices A-EDelivered in Drive, authored as BureauT0
Firehorse hubdesk.meridianoffice.orgLIVE enforcement consoleT0
LODESTAR registryoperation-lodestar.vercel.app405 prospects + 448 gov-forfeitureT0
Meridian Dispatchmeridianoffice.org/dispatchLIVE public publicationT0
Awareness reelSE Asia scam-compound reelDelivered, pipeline reusableT0
PRINCIPALS · PRE-OP READMANILA

LEE M. LIPTON

US Ambassador to the Philippines
LEVER Political / diplomatic cover; US-PH alliance frame.
READ Affiliative host. Relationship-driven, coalition-builder. Persuade through trust, belonging, shared mission, and a legacy win, not data dumps.
HOOK Protect Americans and strengthen the alliance by dismantling Chinese-linked criminal networks on PH soil.

ROBERT W. SWEENEY

US Director, Asian Development Bank (rank of Ambassador)
LEVER Financial-institution + multilateral-finance channel, in Manila.
READ Analytical operator. ROI-driven, hedges, thinks in capital and taxpayer value. Persuade through evidence, reform, and measurable China-counter proof points.
HOOK Illicit finance is a development-finance and taxpayer-value problem, here is the money map and the measurable disruption.
SEAT MODEL4 SEATS
SEAT

DOJ

Philippine Department of Justice

Authorizes. The direct private-sector line; framework partner for Identify·Freeze·Seize.

SEAT

AMLC

Anti-Money Laundering Council

Notifies institutions and executes freeze/inquiry under RA 9160.

SEAT

BUREAU

Bureau Defense Group

Named private-sector partner (PSP) facing the DOJ; operates and packages.

SEAT

KINETIC

Kinetic Partners

Builds and powers the engine: tracing, graph, CTP production, secure delivery.

ACTION QUEUE + AUDITIDENTIFY → FREEZE → SEIZE
1
QUEUED

Freeze requests staged for authority

2
AUTHORIZED

Signed and routed to AMLC / court

3
EXECUTED

Freeze / seizure confirmed

4
LOGGED

Immutable audit entry written

AUDIT LAW

Every action carries who authorized it, under which RA 9160 provision, against which target, with what evidence grade, immutable and replayable.

FUNDING · THE RECOVERY FLYWHEELSELL SHARES IN RECOVERED ASSETS
THESIS

Stop pitching a program. Sell shares in recovered assets. Kinetic does not fund this off the balance sheet: OPERATION MERIDIAN is funded by the institutions whose mandate it already serves, and repaid by the assets it seizes. Every funder gets a return lane, every seizure endows the next operation, and the scoreboard is denominated in dollars seized and victims paid.

1
FUND Capacity in

ADB TA grants + trust fund, US State/INL, philanthropic capital, and program fees pay for the targeting engine.

2
OPERATE Targets out

The OML platform runs FIND and FIX: Nexus graph, Watchtower monitoring, Trace Explorer, sealed court-ready target packages with custody hash.

3
FREEZE / SEIZE Sovereign execution

PH AMLC + DOJ freeze and forfeit under RA 9160 sec. 10/11. US DOJ, OFAC, and FinCEN run forfeiture, sanctions, and 311 severance. Authority stays sovereign, always.

4
REMIT Money back through the trust

Recovered assets route through an ADB-administered recovery trust: victims first, then a fixed operations share that endows the program, then sovereign shares (US Strategic Bitcoin Reserve, PH asset-sharing under AMLA).

THE INCENTIVE LOOP

Every seizure pays victims, endows the next operation, accretes the US reserve, and posts a scoreboard win for Washington and Manila. Funders are not donors. They are shareholders in recovered assets.

ADB · FOUR INSTRUMENTSTHE MONEY SEAT AT BOTH ENDS

TA GRANTS LIVE LANE [adb, 2025]

MECHANICS ADB funds member-state capacity. Its 2025 Anticorruption and Integrity Report opens a new program helping members meet FATF standards including virtual-asset and VASP risk. ADB has already delivered AML/CFT technical assistance in the Philippines (AMLC and SEC capacity).
WHY IT FITS OML is the delivery vehicle for a program ADB just opened: platform, training, and target production for AMLC and DOJ. We slot into an existing lane, we do not ask ADB to invent one.

MULTI-DONOR TRUST FUND PRECEDENT [yolanda mdtf]

MECHANICS ADB acts as trustee or administrator of 11+ active multi-partner trust funds. The Typhoon Yolanda MDTF is the exact Philippines precedent: donors pool at ADB, a steering committee governs, ADB disburses under audited regulations.
WHY IT FITS A Meridian Recovery Trust Fund at ADB takes US, allied, and philanthropic money under one audited roof, and doubles as the remission vehicle for recovered assets. The US Director seat gives Washington visible stewardship of every dollar.

REGIONAL CONVENING COALITION LANE

MECHANICS Scam centers are a regional problem across PH, Cambodia, Myanmar, and Laos. ADB funds regional cooperation, standards, and knowledge programs.
WHY IT FITS Funds the coalition layer: the cross-border freeze protocol, seat onboarding, and the OML doctrine published as a regional standard under ADB's flag.

LENDING CONDITIONALITY LEVERAGE

MECHANICS ADB moves billions in policy-based and program lending; financial-integrity performance can ride those operations.
WHY IT FITS Not cash to the program. It is the pressure instrument that keeps member states executing freezes when the politics get slow. Free leverage.
ADB IN FREEZE / SEIZE / REMIT

Straight truth: ADB cannot freeze or seize anything, and any pitch pretending otherwise dies in ADB legal review. Freeze and seizure authority sits with PH AMLC and DOJ under RA 9160 and with US DOJ, OFAC, and the courts. ADB's seat is the money at both ends: it FUNDS the front (TA, trust fund, convening), it TRUSTEES the back (the remission vehicle that pays victims and endows operations), and it CONVENES and CONDITIONS the region in between. The line for the US Director: you will not carry a badge, you will carry the fund that pays the victims and the program, and every recovered dollar routes through your institution's books. A main-player seat with zero legal exposure.

FUNDER REGISTER7 LANES · STACK, DO NOT CHOOSE

ADB (via the US Director seat)

Four instruments: TA grants, multi-donor trust fund as trustee, regional convening, lending conditionality
PITCH Scam-center laundering drains the region ADB is chartered to build. Fund the financial-integrity engine through the FATF/virtual-asset program you already opened, and steward the recovery trust that pays victims back.
WHAT UNLOCKS IT The Money Map + a live seizure through the console. The US Director seat carries the concept to the board with a China-counter proof point.

US STATE / INL + J/TIP

Counter-TCO, narcotics/law-enforcement, and anti-trafficking program lines
PITCH Fund the unit that operationalizes the US TIP posture in the Philippines: identify, package, and hand enforcement-ready targets on forced-labor scam compounds to a treaty ally.
WHAT UNLOCKS IT The trafficking angle is the strongest grant narrative we own: Adversary Register + Compound Atlas + documented rescues (Bamban, KK Park).

US TREASURY (FinCEN / OFAC)

Sanctions, 311 special measures, financial-intelligence partnership
PITCH They already executed the Huione 311 severance and the joint UK-US sanctions package on Southeast Asian scam networks. OML feeds them attribution; they feed the freeze list.
WHAT UNLOCKS IT Data-sharing beats cash here: a standing package lane from OML target production into OFAC designation workups.

US DOJ FORFEITURE / REMISSION

Civil forfeiture proceeds, equitable sharing, victim remission programs
PITCH Prince Group proved the pipeline: $15B BTC in one action. Forfeiture programs can compensate cooperating foreign partners and fund victim remission at scale.
WHAT UNLOCKS IT The remission channel into the ADB trust is the mechanism that turns one-off forfeitures into a standing recovery system.

MULTILATERAL AML (UNODC / StAR / FATF-aligned)

Regional FIU capacity funds, World Bank-UNODC Stolen Asset Recovery legitimacy
PITCH Fund the tracing and secure-delivery layer that turns UNODC threat reporting into freeze and seize actions under RA 9160 and peer statutes.
WHAT UNLOCKS IT StAR co-branding on the remit protocol is the legitimacy stamp that de-risks the trust fund for every other funder.

PHILANTHROPIC CAPITAL

Counter-trafficking and survivor-focused foundations
PITCH Two victim sets, one crime. Fund the intelligence that frees people and returns money: a humanitarian force multiplier with no procurement cycle.
WHAT UNLOCKS IT Fastest money in the stack; funds the gap while institutional lanes clear.

PROGRAM FEES

Authority seats license the platform: government and institutional operating contracts
PITCH Sovereign and institutional clients pay to run the engine on their theater: seats, package production, secure delivery, reporting.
WHAT UNLOCKS IT Small revenue, big signal: proves commercial discipline to every grant committee reading the file.
THE WASHINGTON LAYERHOOKS ALREADY BUILT
HOOKFACT ON THE GROUNDWHAT OML GIVES THEM
BIGGEST-EVER WINSPrince Group: 127,271 BTC (~$15B) civil forfeiture, the largest in DOJ history, against a Cambodian scam-compound syndicate. [doj, 2025-10-14]A pipeline that produces the next record seizure, repeatably, with the Philippines as the theater.
STRATEGIC BITCOIN RESERVEThe 2025 executive order routes forfeited crypto into the US strategic reserve; the Prince Group assets were floated for it in the Senate. [icij, 2026-03]Every OML seizure accretes the reserve. Enforcement that literally grows a signature presidential asset.
COUNTER-CHINAThe US Director's own Senate testimony frames ADB as the answer to Belt-and-Road and the AIIB. The target syndicates are PRC-linked TCOs. [sfrc, 2026-02-12]Dismantling PRC-linked criminal networks through the US-led bank in Beijing's backyard. America First, in ADB's own theater.
AMERICAN VICTIMS PAIDPig-butchering drains billions per year from Americans; remission today is slow and rare.A standing victims-first remission trust with a public counter: dollars returned to Americans.
ZERO TAXPAYER ASKA fixed operations share of recoveries endows the program after the first proof event.Self-funding enforcement is the one budget line this administration cannot resist.
THE SENTENCE THAT TRAVELS TO THE TOP

A self-funding enforcement machine, run through America's bank in Asia, that seizes billions from China-linked criminal syndicates, pays American victims back, and grows the Strategic Bitcoin Reserve. Five priorities in one clause.

THE MANILA LAYER4 SOVEREIGN INCENTIVES

SOVEREIGN REVENUE

Asset-sharing under AMLA gives Manila a direct revenue line from every forfeiture executed on its soil.

THE POGO WIN

Scam-center dismantlement is the signature enforcement narrative of the POGO ban era; OML gives it a scoreboard.

FATF STANDING

Every executed freeze and forfeiture hardens the Philippines' standing with FATF and the regional FIU community.

ALLIANCE DIVIDEND

Visible joint wins with US Treasury and DOJ, run through Manila-headquartered ADB, are the alliance made concrete.

ASSETSEXTERNAL-FACING
CONCEPT BRIEF · PDF

The external-facing brief: Kinetic wordmark, branded Operation Meridian, light mode, Confidential watermark. Cover, Recovery Flywheel, and the concept page prepared for the Office of the US Director, ADB. Download the brief →

FUNDING SEQUENCETHE REALISTIC PATH
1
The money-map brief lands with the US Director seat NEXT

ADB champion for the TA slot and the trust-fund concept. Direct line confirmed: no cold intermediaries, the brief lands first-person.

2
Ambassador lane opens in parallel PARALLEL

Direct line confirmed to the embassy principal as well: convening cover and DOJ-PH revival move together, not sequentially.

3
First live seizure through the console with AMLC THE GATE

The proof event. One executed freeze-to-forfeiture cycle with sealed custody is worth every deck ever written.

4
Proof event converts the stack PAYOFF

Treasury and State take notice, the trust fund stands up with a sovereign sponsor, remission flows, the loop closes.

CAVEATS, STATED PLAINLY

Two honest caveats. ADB procurement is slow: TA cycles run months and the trust fund needs a sovereign sponsor to propose it. And the remission split is stated nowhere until PH and US counsel have signed the mechanics. Both are sequencing problems, not blockers.

WHAT THE PLATFORM DEMONSTRATES

The platform itself is the fundraise. It shows real graded intelligence, a working seat and audit model, a legal spine (RA 9160), and a reusable engine already deployed once. That is what converts a mandate into a funded program.

NEXT ACTIONS5 OPEN
1
Deploy Dragonfly operational branch READY

One deploy turns the console into a live Identify-Freeze-Seize pipeline; makes the reference deployment real for funders.

2
Revive the PH DOJ line WARM

Bureau docs + console are demo-ready; the paternity-break stall is warm and revivable.

3
Rotate per-seat keys REQUIRED

Before any external seat sees the console, rotate DGFLY keys.

4
Lock the funder pitch order DECISION

Sequence State/INL and the ADB angle via Sweeney first; philanthropic + program fees follow.

5
Nexus read-only Situation Room pane QUEUED

Wire the curated graph feed into the deck; graph stays in the vault.

OPERATOR SETTINGS

Your seat

Identity, access, and session control for the operating seat. Changes here affect only this operator.

PROFILE
ACCESS
KINETIC · ADMIN
••••••••••••
UNLOCKED · seat key held
REQUIRED AT SIGN-IN ON
SESSIONS
THIS DEVICE · MANILA GMT+8active now
WORKSTATION · SF GMT-72h ago · revoke
PREFERENCES
PH + APAC
DAILY 06:00 ON
STANDARD · compact available

ADMINISTRATION · manage who gets invited and who sees what →

ADMINISTRATION · KINETIC ADMIN ONLY

Access control

Who gets invited, what seat they hold, and what each seat sees. Every grant and revocation is audit-logged. Server-enforced at build; this mock shows the operating surface.

MEMBERS · 5
MEMBERSEATROLESTATUSLAST SEENACTIONS
M. DOWKINETICADMINACTIVEnowrotate key · revoke
KINETIC 02KINETICOPERATORACTIVE1hrotate key · revoke
DOJ SEAT 01DOJVIEWERINVITEDresend · cancel
AMLC SEAT 01AMLCVIEWERNOT SENTsend invite
BUREAU SEAT 01BUREAUOPERATORNOT SENTsend invite
INVITE
DOJ · AMLC / BUREAU / OBSERVER
VIEWER · operator / admin
72 HOURS · single use · device bound
SEAT DEFAULTS
KINETICeverything · admin
DOJall intel · no internal
AMLCmoney + methods lanes
BUREAUoperating lanes · no coalition
OBSERVERsituation + doctrine only
VISIBILITY MATRIX · TAB × SEAT
TABKINETICDOJAMLCBUREAUOBSERVER
SITUATION ROOMVIEWVIEWVIEWVIEWVIEW
ADVERSARY REGISTERVIEWVIEWVIEWVIEW
COMPOUND ATLASVIEWVIEWVIEWVIEW
METHODS & TYPOLOGIESVIEWVIEWVIEWVIEWVIEW
MONEY MAPVIEWVIEWVIEWVIEW
TARGETINGVIEWVIEWVIEW
COALITION & PRINCIPALSVIEWVIEW
DOCTRINE & SOURCESVIEWVIEWVIEWVIEWVIEW
INTERNALVIEW
ACCESS AUDIT · RECENT
2026-08-17 23:58M. DOW unlocked INTERNAL · this device
2026-08-17 23:41shell key accepted · Manila GMT+8
2026-08-17 22:10invite drafted · DOJ SEAT 01 · not sent
INTERNAL · GATED

Seat authentication

The internal library is restricted to the operating seat: full intelligence guide, consolidation map, principals, authority pipeline, and the funding thesis. Enter the internal key.

◵ SEAT AUTHENTICATION REQUIRED