Chinese cybercriminals increasingly abandon the traditional dark web infrastructure. Operations involving sophisticated phishing campaigns, stolen credit card trafficking, money laundering, and the recruitment of accomplices have migrated overwhelmingly to Telegram. Within this messaging platform, criminal syndicates construct robust channels, thriving storefronts, and comprehensive service marketplaces that operate remarkably like legitimate online businesses. A prominent example of this evolution is the Tajin Group, a highly organized Chinese-speaking syndicate specializing in phishing, carding operations, financial fraud, and the systematic extraction of illicit funds.

At a glance Actor or group: Tajin Group (suspected Chinese-speaking cybercriminal syndicate) Activity type: Phishing, payment card theft, and money laundering Targets or victims: Mainland Chinese citizens, global banks, and cryptocurrency exchanges Scale: Claimed 208,848 USDT marketplace deposit; processing up to $7,382 per unauthorized withdrawal Jurisdiction or law-enforcement status: Active threat group operating on sanctioned platforms (Xinbi Guarantee recently disrupted by the U.S.

Tajin Group is a Chinese-speaking threat group that uses Telegram-based guarantee marketplaces, Fragment Market, and multiple payment gateways to run phishing, carding, money laundering, and cash-out operations across many countries. The group has shifted from Dabai Guarantee to Xinbi Guarantee, while buying Telegram usernames and anonymous numbers to improve OPSEC and expand its financial crime services. #TajinGroup #DabaiGuarantee #XinbiGuarantee #FragmentMarket #CCAvenue #Geidea #NGenius #Selfridges #ChowTaiFookJewelleryHongKong