One Hundred and Seventeen Companies That Do Nothing

A scam network does not hide money in a vault. It hides money in paperwork — and on 14 October 2025 two governments published enough of that paperwork, on the same day, to show the shape of it.

This piece is about the structure, not the compounds. It is about why a fraud operation ends up owning seventeen flats through companies registered four thousand miles away, what a list of 117 businesses that do nothing is actually for, and where the money goes once a government is holding it. Everything here comes from filings and official announcements, linked at the end. Allegations in a complaint are allegations, and the defendant is presumed innocent unless proven guilty.

Key facts

How do scam networks hide money?

They hide it in paperwork. A network registers companies that have no real trade, places them in front of one another so that ownership becomes a chain instead of a fact, spreads that chain across jurisdictions so no single regulator sees the whole of it, and then holds real assets — property, accounts — at the end of the chain. On 14 October 2025 the U.S. Treasury put a number on one such structure: 117 affiliated businesses, the vast majority of them offshore shell companies with no apparent real commercial activity.

The rest of this piece is that structure taken apart, in the order the two governments published it.

Start with the house, because it is the smallest thing on the list

The British government said a £12 million mansion on Avenue Road, in north London, had been frozen. It described the owner as a multinational network responsible for using forced labour to run online fraud.

A mansion is easy to picture. That is exactly why it is the wrong place to stop. Most of what happened that day is paperwork, and paperwork is hard to see; a house on a street is not. But the mansion was not the portfolio. The same announcement listed a £100 million office building on Fenchurch Street, in the City of London — the financial district, the part of the city that exists to move other people’s money. Not a flat above a shop. A tower.

And seventeen flats, in New Oxford Street and Nine Elms.

Seventeen is an odd number to own. One flat is a home. Two is an investment. Seventeen is a different kind of decision, and it is the kind you make when the point is not the flats.

The companies that held all of it were registered thousands of miles away, in the British Virgin Islands.

There is one detail of grammar in that announcement worth keeping. Read it carefully and the mansion had already been frozen — past tense. For the rest of it, the office block and the flats, the text says the sanctions will freeze them, with immediate effect. Different verbs, same day. That tells you which parts of this were finished before anyone announced anything.

One hundred and seventeen companies that do nothing

On the same day, the U.S. Treasury designated a network of 117 businesses affiliated with the group. In the Treasury’s own words, the vast majority of them were offshore shell companies that engage in no apparent real commercial or business activity.

That sentence is worth sitting with, because it explains the mansion.

Property needs a name on a document. A house has an address; an address has an owner; the owner has to be recorded somewhere. If the name cannot be yours, you need a company. If that company can still be traced to you, you need another one standing in front of it. And another in front of that.

Do that across thirty countries and you do not end up with a company. You end up with a hundred and seventeen of them.

The complaint alleges the group operated more than a hundred business entities in over thirty countries. That is not a filing cabinet. That is an organisational chart designed so that no single document contains both the money and the person.

The number that does not fit

Here is the part that does the most work, and it is a comparison the filing makes possible.

Prosecutors say internal company documents suggested that, as of January 2024, the annual revenue from the group’s legitimate businesses probably did not exceed a few hundred million dollars. Some of those businesses were losing money outright.

Now hold that against the other number in the same case: a co-conspirator, according to the complaint, boasted that back in 2018 the operation was earning over $30 million a day from fraud. The document itself does the annualisation — roughly $11 billion a year.

A few hundred million on one side. Eleven billion on the other.

That gap is the whole reason the structure exists. If the legitimate businesses could plausibly have produced the money, you would not need 117 companies. You need 117 companies precisely because the visible business cannot explain the invisible income. The shells are not there to make money. They are there to make money look explained.

This is the part that generic explainers miss. Nearly every article about shell companies describes the mechanics in the abstract — placement, layering, integration, obscuring beneficial ownership. Very few show the arithmetic that makes the mechanics necessary. Here the arithmetic is on the record.

Why the British Virgin Islands, and not somewhere nearer

The companies that held the London property were incorporated in the British Virgin Islands, and the choice is not sentimental. Jurisdictions get used for this because of what they require, not where they are.

What a network is buying when it registers there is distance between two facts that would otherwise sit on the same page: who owns the asset and who benefits from it. In a jurisdiction with light disclosure, the register may show a company and a registered agent — a professional firm whose address serves hundreds of entities — and nothing about the person the money belongs to.

None of this is illegal in itself, and that matters for reading cases like this one honestly. There are ordinary reasons to hold property through a company: liability, joint ownership, estate planning. Registering offshore is not evidence of fraud. What prosecutors allege here is the combination — a chain of entities, in a place chosen for opacity, holding assets that internal documents suggest the visible business could not have paid for.

The tell is never the structure alone. It is the structure plus an income the structure cannot explain.

That combination is what anti-money-laundering rules exist to catch, and it is why a case like this one is a useful example of how offshore shell companies are used in money laundering — not because a shell company is exotic, but because here the count, the countries and the arithmetic are all on the public record instead of being described in the abstract. What the banks call layering — moving value through enough intermediaries that the origin stops being visible — is, in this filing, a hundred entities in thirty countries with a mansion at the end of it.

Three different instruments, used on the same day

Coverage of a day like this tends to compress everything into “the government cracked down.” The announcements actually describe three separate legal tools doing three separate jobs, and confusing them is how readers end up with the wrong idea about what happens next.

Three instruments, one day, one network. The criminal charges against a person sit alongside all three and are separate again.

The practical consequence: a very large number in a forfeiture headline says nothing about whether anyone was arrested, and a very long sanctions list says nothing about whether any money moved.

Five jurisdictions, one announcement

Read the two announcements together and the map keeps widening:

• Cambodia — where the compounds are.
• The United Kingdom — where the property is.
• The British Virgin Islands — where the companies are.
• The Isle of Man, whose Proactive International Money-Laundering Investigations Team the Justice Department thanked by name — the unit’s title is itself a description of what a structure like this is investigated as.
• Palau, in the Pacific, where the Treasury said the group’s operations were growing.

Five jurisdictions, in one announcement, about one group. That is the cost of moving on a structure built to sit in more than thirty countries at once — and it is the practical reason these cases take years. Each border is a separate legal request to a separate authority under a separate law.

It also explains why the structure works for as long as it does. Any one country sees a company, a flat, a payment. No one country sees the chain.

What a sanctions list actually is

The word sanctions does a lot of hiding, so be concrete.

The Treasury did not sanction one man. It sanctioned 146 targets inside the group and designated the group itself a transnational criminal organisation under an existing executive order.

Note that 146 is a different count from the 117 companies. The companies are the structure; the targets are what fell that day. Two lists, published together, counting different things — and they are routinely added together by people reporting on cases like this. They should not be.

A designation is not a fine and it is not a warning letter. It is a list of names — people, companies, addresses — and once a name is on it, regulated institutions have to stop dealing with that name. Nothing is carried away. What changes is that the named party is locked out of the system that enforces the list.

That is why a designation and a seizure feel similar and are not. A seizure takes a specific thing. A designation makes a name unusable.

The bank that was switched off

On the same day, America’s financial crimes network finalised a rule under Section 311 of the Patriot Act, cutting a Cambodia-based financial services conglomerate out of the United States financial system.

Not fined. Not warned. Severed.

That sounds bureaucratic until you translate it. Almost every cross-border payment of any size eventually touches an American bank, because it eventually touches dollars. An institution that cannot reach the dollar is not a slower bank or a smaller bank. At this scale it stops being a bank.

The way to picture it is not a vault being emptied. It is a phone line being disconnected. The building is still there. The staff are still there. The money on the ledger is still on the ledger. What is gone is the ability to call anyone outside and have them pick up.

And remember what the rest of the structure is for. The mansion, the tower, the seventeen flats, the 117 companies — all of it exists to make money look like it came from somewhere ordinary. All of that depends on somewhere the money can sit and be counted.

The house was frozen. The companies were designated. The bank was switched off.

The money, and the word that is not there

Filed in Brooklyn on the same date: a civil forfeiture complaint.

A forfeiture complaint is a strange kind of document, because it is not filed against a person. It is filed against money. The defendant, legally speaking, is the money — approximately 127,271 bitcoin, worth about $15 billion at the time. The Justice Department noted this is the largest forfeiture action in its history.

The complaint says the coins sat in unhosted wallets — wallets with no company behind them. No exchange, no account, no customer service line, nobody to serve a subpoena on. And it says the private keys were held personally, with a footnote saying he personally kept records of the wallet addresses and the seed phrases for each one.

Fifteen billion dollars, and the thing standing between it and the rest of the world was a list a man kept himself.

Then the part that is easy to miss. The complaint is 68 pages long, and the word “seized” does not appear in it once. The filing says where the coins are — in the custody of the United States, at virtual currency addresses known to the government — and never says how the government came to control them.

That is a fact about the document, not an accusation. Filings are written to prove specific things, and a complaint against property must establish where the property is, not narrate every step that got it there. But if you are reading coverage of a case like this, the difference between we took it and it is in our custody is the difference between a story and a filing.

What happens to seized bitcoin?

This is the question almost nobody connects to cases like this one, and the answer changed recently.

Seizure and forfeiture are two different things. Seizure means the government has taken control. Forfeiture is the court process that decides whether ownership passes to the government permanently. A seizure does not always end in a forfeiture.

Since an executive order signed on 6 March 2025, bitcoin finally forfeited to the United States is placed in the Strategic Bitcoin Reserve. The order defines the category as “all BTC held by the Department of the Treasury that was finally forfeited as part of criminal or civil asset forfeiture proceedings,” and says the Reserve’s holdings “shall not be sold” — they are maintained as reserve assets of the United States.

Before that order, forfeited cryptocurrency was typically routed toward sale.

The same order carves out an exception, and it is the sentence that matters most to anyone reading this because they lost money: digital assets may be released when officials determine they should be “returned to identifiable and verifiable victims of crime.”

Read that clause slowly. Identifiable and verifiable are not decoration — they are a burden, and the burden falls on the victim. A forfeiture is a case about who owns property. The people who were defrauded are not automatically parties to it. A headline number in a press release tells you nothing about whether any individual has been repaid.

Seizure, forfeiture, restitution: three words that are not the same

Most confusion about cases like this comes from treating these as synonyms. They are three stages, and money can stop at any of them.

Seizure is control. The government has the asset — or, with cryptocurrency, the ability to move it. Nothing has been decided about who owns it.

Forfeiture is ownership. A court decides whether title passes to the government permanently. In a civil forfeiture the case is filed against the property itself, which is why complaints carry names like United States v. approximately 127,271 Bitcoin. The property has no right to a lawyer; a person who claims it must come forward and assert an interest. A seizure does not always end in forfeiture, and forfeiture can take years.

Restitution or remission is repayment. This is a separate process again, in which somebody who lost money petitions to be recognised as a victim of that specific case and supports the claim with documents.

The gap between the second and the third is where most public misunderstanding lives. “The government seized $15 billion from a scam network” reads, to anyone who has lost money, like the beginning of getting some back. In the paperwork it is not the same event, not the same process, and not automatic.

What “in the custody of the United States” actually tells you

The complaint’s phrasing — the coins are currently in the custody of the United States, at virtual currency addresses known to the government — is doing precise work.

It asserts a present fact about location and control. It makes no claim about how that control was obtained, and it does not say the case is over. Custody is not ownership. Until a court rules, the government is holding property whose title is still in dispute.

For a reader, the useful habit is to check which verb a document uses. Frozen means it cannot move. In custody means somebody else can move it. Forfeited means it changed hands. Press coverage flattens all three into “seized”, and the three have completely different consequences for anybody hoping to be repaid.

And the man the paperwork does not have

The Justice Department’s own sentence, on the day, was five words long: the defendant is at large. He is charged, faces a maximum penalty of 40 years if convicted, and is presumed innocent unless proven guilty beyond a reasonable doubt.

So the ledger of that single day reads: the property, frozen. The companies, designated. The bank, severed. The money, in custody. The man, not there.

Two governments, years of investigation and 68 pages moved that money once.

What this actually changes for you

Here is the part that is about you, and it is short.

Your card has a button. A card payment can be disputed; the money moves back through the same rails it moved out on, and somebody else carries the loss while it is argued about.

A bank transfer and a cryptocurrency transfer mostly cannot be reversed. What it took to move $15 billion once — two governments, years, a 68-page filing — is the same machinery that does not exist for a single transfer of a few thousand.

So the rule that comes out of a case this size is not about compounds or sanctions. It is this:

If someone you have not met in person tells you the only way to pay is a transfer, or crypto, or a gift card, that is not a payment preference. That is the whole plan.

How the structure works, step by step

This is the anatomy, drawn from what the two governments published.

1. The income cannot be explained by the visible business. A few hundred million in legitimate revenue cannot account for an alleged $30 million a day.
2. A company is placed where a name would be. Property, accounts and contracts are held by an entity instead of a person.
3. Another company is placed in front of that one. Ownership becomes a chain, not a fact.
4. The chain crosses borders. More than thirty countries, so no single regulator sees the whole picture and no single request reaches the end.
5. The registrations sit where disclosure is light. In this case, the British Virgin Islands.
6. The proceeds are converted into things that hold value and look ordinary — London property, held through the chain.
7. A friendly financial institution sits at the centre, where value can rest and be counted.

Take away step 7 and the rest becomes much harder to operate. That is what a Section 311 rule does.

How to spot the pattern in ordinary life

You will not meet a 117-company structure. You will meet its small end:

• The payment method is non-negotiable and irreversible. Transfer, crypto, gift cards.
• The receiving name does not match the person you are talking to. Payment is requested to a company or a third party you have never heard of, in a country nobody mentioned.
• The story about the entity does not survive one question. A company with a website and no trading history, an address that is a registration agent, a “regulated” claim you cannot check on a regulator’s own site.
• The urgency arrives at the moment of payment, not before.

None of these is proof. Together, and with money leaving irreversibly, they are enough to stop.

Do victims get money back from a forfeiture?

Not automatically, and not as part of the forfeiture itself. A forfeiture decides whether ownership of the property passes to the government. Repayment is a separate process in which somebody who lost money has to come forward, be recognised as a victim of that specific case, and support the claim with documents. A large figure in a press release is not evidence that any individual has been repaid — and the executive order that now routes forfeited bitcoin to the Strategic Bitcoin Reserve puts the condition in plain words: assets may be released to victims who are identifiable and verifiable.

That is a burden, and it falls on the person who was robbed.

What to do if it has already happened

Report it. In the United States that is ic3.gov, the FBI’s complaint centre — cases the size of the one in this article begin with reports like it.

Then keep the records. This is the practical consequence of the phrase in the executive order. Getting money back is not automatic and it is not part of the forfeiture; it runs through a separate process where a victim has to be identifiable and verifiable. Invoices, receipts, transfer confirmations, wallet addresses, screenshots of the conversation, dates — the documents you keep now are the ones that decide whether you can ever be identified as a victim of a specific case later.

Nobody files that for you.

How not to be next

Treat any investment introduced by someone you met online as belonging to that person, not to you — the moment it cannot be withdrawn on demand, it is not yours. Check who is actually receiving the money before it moves, not after. And be suspicious of structure that exists for no reason: an ordinary transaction does not need a company in a jurisdiction neither of you has any connection to.

The people who lose money to this are not careless. They are standing at the small end of something that was built to be too large to see from where they are.

Watch the full documentary

The full case — the house, the two lists, the bank and the money — is in the video at the top of this page. Watch it here. The compounds themselves, and how individual victims were selected, are covered in the pieces linked below.