Heists & Mysteries6 min readBitcoin (BTC)

"Sorry, We Have Run": The $3B Asian Ponzi and the 190,000 Bitcoin Dump That Crashed the Market

A Chinese court put PlusToken’s proven scale at 2.7 million members and 14.8 billion yuan (US$2.25 billion), while earlier media and blockchain estimates tracked different pools of cryptocurrency. Six suspects were detained in Vanuatu. Chainalysis found a significant correlation between identified cash-outs and Bitcoin price declines, but explicitly said the available data could not prove that the sales caused those declines.

"Sorry, We Have Run": The $3B Asian Ponzi and the 190,000 Bitcoin Dump That Crashed the Market

Key Points

  • A Yancheng court record reported 2.7 million PlusToken members and 14.8 billion yuan (US$2.25 billion) in cryptocurrency contributions; earlier media and on-chain estimates measured different totals.
  • Authorities in Vanuatu detained six Chinese nationals in June 2019; reporting at the time cautioned that Reuters could not independently confirm the local account.
  • Chainalysis traced 45,000 BTC to addresses it could identify as controlled for laundering and found cash-outs correlated with price drops, while stating that causation could not be proved.

Chronological Timeline

Early 2018A recruitment-driven wallet launches

PlusToken presents a crypto wallet promising high returns tied to deposits and member recruitment.

June 2019Six detained in Vanuatu

Local reporting says six Chinese nationals wanted over an internet scam are detained in Port Vila.

Late 2019Analysts follow the cash-out trail

Chainalysis maps mixers, peel chains and OTC brokers as PlusToken-linked funds continue moving.

December 2019Correlation, not a causal verdict

Chainalysis reports a relationship between identified cash-outs, volatility and price declines, but cannot prove causation.

November 2020Court scale and sentences emerge

The Yancheng ruling reports 2.7 million members, 14.8 billion yuan and prison terms of up to 11 years.

1. The number that belongs to the court record

PlusToken appeared in early 2018 as a cryptocurrency wallet that offered unusually high returns and rewarded members for recruiting other members [1], [4]. The later Yancheng criminal ruling described no genuine underlying business: returns to earlier participants came from money contributed by later participants, the defining mechanism of a Ponzi scheme [1].

The most defensible scale is the one tied to that ruling. South China Morning Post reported 2.7 million members and approximately 14.8 billion yuan, or US$2.25 billion, contributed in eight cryptocurrencies, including more than 310,000 BTC [1]. Those are members and contributions recorded in the court account—not a license to relabel every member as a victim in a particular country.

Other figures describe other datasets. Contemporary media described roughly US$3 billion, while Chainalysis tracked about US$2 billion flowing into identified PlusToken wallets: 180,000 BTC, 6.4 million ETH, 111,000 USDT and 53 OMG [2], [4]. The estimates can coexist only when their provenance and scope remain visible; they should not be blended into one supposedly exact total.

2. Vanuatu: six detainees, not 109

On June 29, 2019, Reuters reporting carried by South China Morning Post said authorities in Vanuatu had detained six Chinese nationals in Port Vila after complaints from Chinese authorities about an internet scam [3]. Chinese law-enforcement officials reportedly helped identify the premises before the raid.

The contemporaneous report also included an important restraint: Reuters said it could not independently confirm the local report or reach Vanuatu police, while China’s foreign ministry did not immediately comment [3]. Later Chainalysis and Bitcoin Magazine coverage connected those six arrests with PlusToken, but that does not turn six into 109 or prove every dramatic detail repeated online [2], [4].

This narrower account is more useful than a cinematic escape story. It shows cross-border enforcement reaching a Pacific jurisdiction while preserving what the source did—and did not—establish. Claims about a luxury villa, an exact taunting withdrawal message or the entire leadership fleeing together are omitted because the live sources used here do not substantiate them.

3. What the blockchain analysis actually tracked

Chainalysis followed about US$2 billion in cryptocurrency sent to PlusToken wallets, but warned that some transfers could have been payments to early participants rather than assets retained by operators [2]. It identified roughly 800,000 ETH and 45,000 BTC that it could say were moved to addresses controlled for laundering; by its December 2019 analysis, about 25,000 of that BTC and at least 10,000 ETH had been cashed out [2].

The Bitcoin trail crossed more than 24,000 transfers and over 71,000 addresses. Analysts observed mixers, peel chains and eventual transfers to OTC brokers operating on Huobi [2]. Those mechanisms—not an unsupported daily dump rate—explain the forensic difficulty: the public ledger exposes movement, but an exchange’s internal order book does not reveal which trades came from a particular depositor.

Early reporting also documented disagreement among analytics firms about wallet attribution and whether observed movements had actually reached exchanges [4]. That dispute is not a flaw to hide. It is the central lesson of on-chain investigation: transaction data may be exact while the identity, ownership and economic purpose assigned to an address remain probabilistic.

4. A market signal with a bright uncertainty band

Chainalysis compared transfers from PlusToken-linked wallets to identified Huobi OTC brokers with Bitcoin–Tether trading and Bitcoin prices [2]. Spikes in on-chain flow correlated with later increases in trading and with price declines; a September cash-out of roughly US$34 million preceded a fall from just over US$10,000 to about US$8,000 [2].

But the researchers drew a boundary around the result. They could not distinguish PlusToken-related trades inside Huobi’s books from everybody else’s trades, and therefore said they could not say for sure that the cash-outs caused Bitcoin’s price to fall [2]. Their regression supported increased volatility and a significant correlation, not a verdict that one Ponzi scheme created an entire bear market.

The update published in March 2020 reinforces that caution. Although PlusToken-linked Bitcoin moved before another sharp market decline, little reached exchanges at that time, so Chainalysis concluded those liquidations were likely not the cause; broader COVID-19 market turmoil offered a stronger explanation [2]. A responsible history keeps the market impact visually and verbally uncertain.

5. Sentences, unresolved disposal, and the durable warning

In late 2020, the Yancheng court sentenced the scheme’s ringleaders to prison terms of up to 11 years [1]. The court reporting establishes the size of member contributions and the criminal outcome. It does not, by itself, establish every token balance later circulated online, nor does it prove that every tracked asset was seized, sold and transferred to the national treasury.

That distinction matters because four different quantities are often collapsed: cryptocurrency contributed by members, funds identified by analysts, assets controlled by operators, and property ultimately recovered by authorities. Each has a different evidentiary basis [1], [2], [4]. This story therefore does not claim a certain state liquidation or promise that victims received a particular recovery.

PlusToken’s lasting lesson is less sensational and more durable. A glossy wallet interface, recruitment rewards and technical language can make an old pyramid appear new. Public blockchains can expose the later cash-out, but they cannot make implausible yield safe—or turn a suggestive market chart into proof of causation [1], [2].

Key Takeaways for Investors & Builders

Market / Investor

A visible sell-off is not automatically a single-cause market story

The on-chain timing was meaningful, but Bitcoin prices also respond to liquidity, sentiment and macro events; correlation must not be rewritten as certainty.

Engineering / Product

Transparent ledgers still require careful attribution

Analysts could trace large flows, yet distinguishing scam-controlled wallets, early-investor payouts and exchange trades required explicit confidence limits.

Philosophy / Governance

Recruitment rewards can turn trust into infrastructure

PlusToken used social recruitment and promised returns to scale, showing why custody and yield claims must be verified independently of community enthusiasm.

The next question

Continue reading

Explore the topic through other cases and contexts.

Sources & References

  1. [1]Source 1: Chinese court reports 2.7 million members and US$2.25 billion PlusToken schemeSouth China Morning Post · 2020-12-01
  2. [2]Source 2: Chainalysis traces PlusToken funds and tests the link between cash-outs and Bitcoin pricesChainalysis · 2019-12-16
  3. [3]Source 3: Six Chinese internet-scam suspects detained in VanuatuSouth China Morning Post / Reuters · 2019-06-29
  4. [4]Source 4: Early reporting on PlusToken scale, recruitment and disputed fund trackingBitcoin Magazine · 2019-08-19