Episode Summary
Executive Summary: Laura Shin interviews DOJ prosecutors Zia Faruqi and Jesse Brooks about how U.S. law enforcement uses civil forfeiture and blockchain analysis to disrupt terrorist financing, child exploitation, and North Korean theft. They explain coordinated “strike force” tactics, why criminals still cash out through Bitcoin, and how public blockchain data makes crypto both useful for crime and easier to trace.
Main Topics: How DOJ built a crypto-focused strike force (Priority: 5/5): Faruqi and Brooks describe how their different backgrounds in sex offenses, money laundering, and asset recovery led to an informal, cross-agency team focused on cryptocurrency and cybercrime. Civil forfeiture versus criminal prosecution (Priority: 5/5): They explain civil forfeiture as action against property rather than a person, why it can be more effective than criminal charges in some national-security cases, and how burdens of proof differ. Terror financing cases: Hamas, Al-Qaeda, ISIS (Priority: 5/5): The guests detail how terrorist groups used Twitter, Telegram, static and dynamic Bitcoin addresses, and fake charity fronts to solicit funds, and how DOJ seized domains and mirrored websites to keep funds from reaching terrorists. North Korea and the Lazarus Group hacks (Priority: 5/5): They discuss major exchange hacks tied to North Korea, the use of malware, phishing, stolen identities, and chain hopping, and how blockchain tracing helped identify and disrupt the laundering paths. Crypto’s role in laundering and cash-out strategies (Priority: 4/5): The conversation covers mixers, unlicensed money service businesses, privacy coins, and why criminals often return to Bitcoin or fiat rails to cash out despite trying to obscure trails. Interagency and international coordination (Priority: 4/5): They emphasize that successful cases depend on IRS, HSI, FBI, DOJ, foreign police, Cyber Command, and private analytics firms working together and sharing expertise. Cryptocurrency, crime, and the future of regulation (Priority: 4/5): Both guests argue crypto is not inherently criminal; rather, criminals adapt to whatever financial rails exist, while regulation and enforcement must evolve to cover DeFi, mixers, and new laundering methods.
Key Arguments: Civil forfeiture is powerful because it targets the property itself, allowing DOJ to disrupt illicit funds even when a person is خارج U.S. jurisdiction or unreachable for criminal prosecution. Terrorist groups increasingly use sophisticated online fundraising tactics—social media, static/dynamic addresses, and fake charities—but public blockchain data and domain seizures can still disrupt them. North Korean actors used relatively basic phishing and malware techniques, but large-scale thefts became possible because exchanges and users could be tricked into handing over access or identities. Criminals tend to return to Bitcoin because it is liquid, widely accepted, and easier to cash out than obscure coins, even if they briefly use privacy coins or chain-hop through multiple assets. Mixers and unlicensed money service businesses function as gatekeepers in the laundering chain; DOJ focuses on them because they enable the conversion of illicit crypto into spendable value. Crypto is not uniquely criminal; fiat cash has always been used for crime too, and the real issue is adapting law, compliance, and analytics to new technology. Interagency collaboration is essential because no single office has all the technical, legal, or investigative capabilities needed to trace blockchain activity and seize funds effectively.
Data Points: Al-Qassam website seizure duration: 30 days - DOJ ran a mirror version of the Hamas-linked fundraising website after seizing the domain. Hamas fundraising address type: Static, then dynamic addresses - Al-Qassam Brigades moved from a single Bitcoin address to dynamically generated donation addresses. Terrorist groups discussed in one campaign: 3 - The guests described a larger dismantling of three cyber-oriented terrorist campaigns. North Korea-related theft: $250 million - Laura cites a Lazarus-linked cryptocurrency case involving roughly $250 million in stolen funds. North Korea-related theft described in the discussion: $280 million - Brooks and Faruqi refer to a major exchange hack in which North Korean actors stole about $280 million. Website takedown impact in child exploitation case: 25 children rescued - The Welcome to Video / Dark Scandals investigation led to the rescue of children actively being abused. Potential offenders identified: 300 potential pedophiles - Faruqi says the investigation helped identify roughly 300 potential offenders. Bitcoin yield promoted by sponsor read: Up to 8.5% per year - Sponsor copy mentioned Crypto.com BTC earnings, not part of the substantive discussion. Crypto.com card cashback: Up to 8% - Sponsor copy mentioned cash back on purchases, not part of the substantive discussion.
Pivotal Quotes: "we formed our own informal strike force, which we called because we thought it sounded cool" — Zia Faruqi: Explaining how DOJ prosecutors and agents built an informal crypto-focused team. "civil forfeiture is against the thing. It's the United States versus 220 cryptocurrency accounts" — Jesse Brooks: Defining the legal distinction between civil forfeiture and criminal prosecution. "it's the same scheme. They just want someone to send them their credit card information, send them their PII" — Zia Faruqi: Describing the ISIS COVID-related fake PPE scam and how stolen identity data was used to launder funds.
Implications: The episode shows that crypto crime enforcement is increasingly data-driven and collaborative. Public blockchains, exchange compliance, and domain seizures can materially disrupt terrorists and hackers, but regulators will need to keep pace with DeFi, mixers, and new laundering tactics.