DeFi Intel

USDT trail helps uphold prison term in Hong Kong trafficking case

A Hong Kong appeals court has upheld a 56-month prison sentence for Ma Zhihao after investigators used blockchain records to link ransom payments from a human trafficking operation to a crypto exchange account registered in his name, Caixin reported on Aug. 20. The case involved five victims recruited between 2021 and August 2022 through fake job offers on Facebook, Telegram and Instagram. Police traced roughly 9,527 USDT paid as ransom by one victim's family, following 8,127 USDT to an exchange account opened with Ma's real name and Hong Kong identity documents. The funds were converted to about HK$63,000 and sent to Ma's personal HSBC bank account. The Court of Appeal said the transaction trail supported findings that Ma participated in the scheme and received proceeds.

A Hong Kong appeals court has upheld a 56-month prison sentence for Ma Zhihao after investigators used blockchain records to link ransom payments from a human trafficking operation to a crypto exchange account registered in his name, Caixin reported on Aug. 20. The case involved five victims recruited between 2021 and August 2022 through fake job offers on Facebook, Telegram and Instagram. Police traced roughly 9,527 USDT paid as ransom by one victim's family, following 8,127 USDT to an exchange account opened with Ma's real name and Hong Kong identity documents. The funds were converted to about HK$63,000 and sent to Ma's personal HSBC bank account. The Court of Appeal said the transaction trail supported findings that Ma participated in the scheme and received proceeds.

Background

The case stems from a trafficking network that lured victims to Southeast Asia with false employment and business offers circulated on social media platforms including Facebook, Telegram and Instagram. Recruiters advertised jobs at Cambodian casinos, assignments buying and transporting luxury handbags from Thailand, and work carrying expensive watches, according to case details reported by Hong Kong media. Some offers promised payments reaching tens of thousands of Hong Kong dollars. Once a victim accepted, network members helped arrange passports and airline tickets. After arriving in Southeast Asia, victims could have their phones and travel documents taken before being moved to compounds controlled by criminal groups. One 20-year-old victim responded to a Telegram advertisement offering HK$20,000 for travelling to Thailand and buying luxury goods for resale in Hong Kong. After arriving in August 2022, he was transported to Myanmar's KK Park, where criminals told him he had been purchased and demanded $20,000 for his release. His girlfriend transferred more than 9,500 USDT, worth about HK$75,000 at the time, to secure his return. Investigators later followed most of that cryptocurrency through the blockchain to the exchange account associated with Ma. Hong Kong police have since developed more specialized tools for such investigations, including the CryptoTrace system unveiled in May 2025.

What happened

According to crypto.news on Aug. 21, 2026, the Hong Kong Court of Appeal rejected Ma Zhihao's request for a reduced sentence, leaving intact a 56-month prison term imposed over his role in a scheme that lured victims to Southeast Asia with fake job offers before some were confined and forced into scam operations. Caixin reported on Aug. 20 that blockchain transaction records became a key part of the prosecution after Hong Kong police traced a ransom paid by the family of one victim. Investigators found that roughly 9,527 Tether (USDT) had been transferred to a cryptocurrency wallet specified by the criminals. Police then tracked 8,127 USDT from the ransom to an exchange account opened using Ma's real name and Hong Kong identity documents, according to Caixin. The funds were converted into roughly HK$63,000 and sent to Ma's personal HSBC bank account. The Court of Appeal said the transaction trail supported the finding that Ma had participated in the scheme and received proceeds from it. Judges also said his punishment would have been substantially heavier had the District Court not been restricted by its seven-year sentencing limit. The case involved five victims recruited between 2021 and August 2022 through false employment and business offers on platforms including Facebook, Telegram and Instagram. One 20-year-old victim responded to a Telegram advertisement offering HK$20,000 for travelling to Thailand and buying luxury goods for resale in Hong Kong. After arriving in August 2022, he was transported to Myanmar's KK Park, where criminals told him he had been purchased and demanded $20,000 for his release. His girlfriend eventually transferred more than 9,500 USDT, worth about HK$75,000 at the time, to secure his return. Investigators later followed most of that cryptocurrency through the blockchain to the exchange account associated with Ma.

Market impact

The sources provide no market price data, trading volumes, or broader cryptocurrency market reactions. The only figures present are case-specific: roughly 9,527 USDT transferred to a wallet specified by the criminals; 8,127 USDT tracked from the ransom to an exchange account opened using Ma's real name and Hong Kong identity documents; conversion of those funds into roughly HK$63,000 sent to Ma's personal HSBC bank account; and a separate ransom of more than 9,500 USDT, worth about HK$75,000 at the time, paid by the girlfriend of a 20-year-old victim. The sources do not state the date of the USDT transfers, the exchange rate used, or any impact on USDT markets. They also do not describe any effect on exchange policies, stablecoin flows, or trading activity. The case is presented as a law-enforcement and judicial matter, not a market event. Any market implications would be speculative and are not supported by the source texts.

Why it matters

The sources support the conclusion that blockchain transparency can serve as evidence in criminal cases. The Court of Appeal said the transaction trail supported the finding that Ma had participated in the scheme and received proceeds from it. Police followed most of the cryptocurrency through the blockchain to the exchange account associated with Ma, giving them a record connecting the ransom wallet, the exchange account and the subsequent withdrawal into the traditional banking system. The case also shows that Hong Kong police have developed specialized tools for such investigations. The Cyber Security and Technology Crime Bureau unveiled its CryptoTrace system in May 2025 after developing the platform with the University of Hong Kong. CryptoTrace uses blockchain analytics and transaction visualization to help officers follow suspected illicit funds and identify connections between wallets. Police had already trained frontline officers on the system before its public unveiling, according to the earlier report. The sources do not describe any broader regulatory or market consequences beyond this case and the development of police tools.

DeFi Intel’s take

Editorial analysis, not a statement of fact.

DeFi Intel's take: this case suggests that the same public-ledger transparency that underpins decentralized finance can also function as a forensic record for law enforcement. We read the Court of Appeal's reliance on the USDT trail as a signal that stablecoin flows between ransom wallets, exchange accounts and traditional bank accounts are increasingly traceable, at least when investigators can connect an exchange account to real-name identity documents. That does not mean every illicit flow is recoverable, but it does suggest that the boundary between on-chain and off-chain finance is porous in both directions. For market participants, the case is a reminder that compliance at exchange on-ramps and off-ramps matters, though the sources offer no data on broader market effects. We would not extrapolate from a single case to any conclusion about USDT pricing or liquidity.

Sources used for this analysis

DeFi Intel wrote this analysis from the reporting above. Any figure or quotation can be checked against those pages.

Frequently asked questions

How much USDT was traced in the Hong Kong trafficking case?

According to Caixin, investigators found that roughly 9,527 USDT had been transferred to a cryptocurrency wallet specified by the criminals. Police then tracked 8,127 USDT from the ransom to an exchange account opened using Ma Zhihao's real name and Hong Kong identity documents. The funds were converted into roughly HK$63,000 and sent to Ma's personal HSBC bank account.

What was the outcome of Ma Zhihao's appeal?

The Hong Kong Court of Appeal rejected Ma's request for a reduced sentence, leaving intact a 56-month prison term, according to crypto.news. The court said the transaction trail supported the finding that Ma had participated in the scheme and received proceeds from it. Judges also said his punishment would have been substantially heavier had the District Court not been restricted by its seven-year sentencing limit.

What is CryptoTrace and when was it unveiled?

CryptoTrace is a system developed by Hong Kong police's Cyber Security and Technology Crime Bureau with the University of Hong Kong. It was unveiled in May 2025, according to a previous crypto.news report. The platform uses blockchain analytics and transaction visualization to help officers follow suspected illicit funds and identify connections between wallets. Police had already trained frontline officers on the system before its public unveiling.

Read full article on Gnews_tether_usdt →

DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Gnews_tether_usdt.

Entities in this story

Discussion

Comments are reviewed before publication.

No comments yet.

Stay current on entity-tagged crypto news

Get the weekly DeFi Intel brief — entity-graph intelligence covering protocols, tokens and incidents, free to your inbox.