A federal court in the Central District of California sentenced Daren Li to the statutory maximum of 20 years in prison in absentia on Feb. 9, 2026, after authorities tied his transnational “pig butchering” operation to large-scale laundering through U.S. financial rails. The government described a pipeline in which at least $73.6 million from victims moved through bank accounts linked to the scheme before major portions were pushed through shell-company structures and converted into cryptocurrency.
The underlying playbook is familiar but still highly effective: build trust at scale through social engineering, manufacture repeat deposits, then move value across jurisdictions and asset types to blur provenance. This case underscores how quickly organized fraud can industrialize cash-flow generation and then use crypto conversion as the consolidation layer for value extraction.
The money trail and the sentencing posture
The transaction footprint presented in court materials lays out clear stages and timestamps that help explain both the scale and the sequencing of the activity. Investigators traced at least $73.6 million into accounts associated with Li and co-conspirators, and they highlighted roughly $59.8 million that was routed through U.S. shell companies and converted into crypto as a core laundering pathway.
The timeline also matters because it frames the sentence as both punitive and operationally urgent given Li’s status at the time of judgment. Li pleaded guilty on Nov. 12, 2024 to conspiracy to launder proceeds of fraud, absconded from electronic monitoring in Dec. 2025, and was sentenced in absentia to 20 years in prison plus three years of supervised release on Feb. 9, 2026, with the Justice Department announcing the judgment on Feb. 10.
One detail in the record can look counterintuitive at first glance: the crypto linked to the broader network exceeds the deposits directly traced from victims. Court records referenced more than $341 million in cryptocurrency tied to the wider scheme, illustrating how consolidation and re-circulation can expand wallet balances beyond the subset of deposits quantified in a single tranche of victim flows.
Put differently, the numbers describe a laundering assembly line: fiat inflows, domestic layering through corporate accounts, and then a conversion step that concentrates value into on-chain holdings. That conversion-and-consolidation phase helps explain why linked wallets can reflect larger totals than the victim-deposit figure alone would suggest.
What this means for enforcement and compliance controls
The investigation reflects a coordinated play that blends domestic capabilities with international cooperation, which is increasingly the only workable approach against cross-border scam centers. The U.S. Secret Service led the probe with support from the Department of Justice, the Diplomatic Security Service, and foreign partners, and prosecutors also secured convictions of eight co-conspirators, signaling pressure across multiple layers of the network.
Officials framed the outcome as proportional to the damage, while industry observers used the case to describe the broader economics of organized cyber-fraud. Assistant Attorney General A. Tysen Duva said the punishment “reflects the gravity of Li’s conduct,” and TRM Labs’ Ari Redbord argued that Cambodia-based scam centers now operate at a scale that can rival or exceed other major illicit industries in total revenue.
For exchanges, fintech operators, and compliance teams, the operational takeaway is not abstract: the laundering pattern is detectable when fiat structuring and rapid conversion line up in consistent ways. Stronger KYC at fiat on-ramps and sharper detection for shell-company deposit bursts followed by bulk crypto purchases would directly degrade the efficiency of this pipeline by raising friction, extending settlement paths, and increasing the cost of moving value on chain.
