Skip to main content

Data from The GDELT Project · Reviewed and interpreted by RSRC

← Back to your results

Reported case

Exclusive | North Korea-linked gang ‘stole’ billions from Americans through ‘pig butchering’ romance scams

nypost.comEnglishObserved 2025-05-01–2025-05-02
Included for relevance; source claims are not independently verified. This record is based on saved titles and descriptions unless a separate deeper-reading assessment is explicitly shown. Observation dates are not incident dates. An arrest or charge is not a conviction.

Story groups for this report

Contextual research groupings, not verified case membership.

How to read this record

NorthKorea-linked alleged network/HuioneCambodian organization accused Romance and other cyberheists. Mixed billions not all Romance losses/cash recovered, proposedcrackdown not actual arrests or conviction. Nationality/link not proven operatorcountry or trafficking. Current qualification: FinCEN provider received4billion proceeds and37mDPRK/36mCVCinvestment/300mothers subsets differ publisher336mRomance wording; not all Romance victim loss. Proposed311 restriction not completed ban/arrest, nationality ties not every operator location. FailedNYP fullbody remains unclaimed and Beth illustration not demonstrated Huione fund connection.

Places in the available evidence

Victim location: United States

Unlisted locations remain unknown. Nationality, language and web address alone do not establish where a scam happened.

Source readings and additional context

Researcher summaries preserve attributed findings and reading limits. Additional sources appear separately from the included collection.

Separate source context

Source text reviewed

May1 proposed311 banking restriction; Huione laundering-service node.4billion receivedproceeds August2021–January2025 differs37millionDPRKheists/36millioninvestment/300millionothercyber subsets. Not all Romance losses, arrested ring or completed ban.

Open this source (opens a new tab)

Themes reported in the text

These labels describe the available reporting. “Not reported” does not mean a harm did not happen. A theme's stage applies to that statement, not every claim in the article.

Financial and property harm

unspecifiedallegationStage: completed

NorthKorea-linked alleged network/HuioneCambodian organization accused Romance and other cyberheists. Mixed billions not all Romance losses/cash recovered, proposedcrackdown not actual arrests or conviction. Nationality/link not proven operatorcountry or trafficking.

Interpretation details
Scope
mixed fraud
Person or institution described
targeted person
Link to romance fraud
mixed scheme
Causal claim
not established

Organization and division of labor

networkallegationStage: completed

NorthKorea-linked alleged network/HuioneCambodian organization accused Romance and other cyberheists. Mixed billions not all Romance losses/cash recovered, proposedcrackdown not actual arrests or conviction. Nationality/link not proven operatorcountry or trafficking.

Interpretation details
Scope
mixed fraud
Person or institution described
alleged offender
Link to romance fraud
mixed scheme
Causal claim
not established
All 24 assessed themes
ThemeAssessment
Blame, stigma and responsibility framingnot reported in available text
Homicide and lethal violencenot reported in available text
Disruption of daily lifenot reported in available text
Financial and property harmreported in available text
Suicide and self-harmnot reported in available text
Family and social harmnot reported in available text
Protection or recovery of assetsinsufficient context
Policy and regulatory responsenot reported in available text
Justice proceedings and outcomesnot reported in available text
Coercion and exploitationinsufficient context
Psychological distressnot reported in available text
Blackmail and extortionnot reported in available text
Help, reporting and preventionnot reported in available text
Physical or sexual harmnot reported in available text
Investment pretextnot reported in available text
Technical facilitationnot reported in available text
Investigation and operational responseinsufficient context
Organization and division of laborreported in available text
Relationship-based deceptionnot reported in available text
Involvement in other offendingnot reported in available text
Continued or renewed targetingnot reported in available text
Prior circumstances and claimed vulnerabilitynot reported in available text
Institutional barriers or harmful responsenot reported in available text
Moving money for a schemenot reported in available text

Connected reporting

Only direct reviewed connections are shown. Shared wording is weaker evidence than a supported case connection. A connection through a third article does not establish that two reports concern the same case.

Shared wording

US cracks down on North Korea-linked Cambodian firm behind $4 Billion romance scam ring - The Times of India

Own NorthKorealink/August2021/TreasuryMay1announcement and actualcollectedTOI originalNYP-attribution/FinCEN311/HuionePayCryptoHaowang support qualifiedsame policy-reporting work. OriginalNYP open failed. Actuallyread officialFinCEN describes laundering node and proposed bankingrestriction, not arrested ring/conviction orall4billionRomance losses.37millionDPRKheists/36millionCVCinvestment/300millionothercyberscams differ from TOI336millionRomance-plusinvestment wording. Funding/service facilitation not everycrimeoperator, nationalitylinks not actualcountriesofalloffenders; no directrelationship between BethHyland funds and Huione demonstrated.

Research provenance

1 saved revision. Corrections preserve earlier versions.

A page can change after it first appears. Observation dates record when its URL was seen; they do not prove that the wording assessed here was present on every date.

Record: 9caa8ef8d4442288075f29f61c1d175ca32746d9584af43c75bc0bf9435cbc47
Decision: 4eba65ec7b67b2f3fbd3a06c8a117a8a5fe7fb51c1a37df4bf643322ad4fb548
Current revision: 4b4623ff716a1e186087b0b577a48bacc4d10cf50e028bf8e31805d631aa56b3

The local research archive retains source hashes, quoted evidence and review records. This collection does not redistribute full publisher articles.