Federal Prosecutors Are Charging Crypto Market Makers with Wire Fraud and Market Manipulation
In October 2024, the Department of Justice announced one of the most significant criminal enforcement actions in the history of cryptocurrency markets. Federal prosecutors in Boston charged 18 individuals and entities with market manipulation and wire fraud for running wash trading operations across dozens of cryptocurrency tokens. The operation was called Operation Token Mirrors. Its centerpiece was a fake token called NexFundAI that the FBI built from scratch, listed on public exchanges, and used as a honeypot to document how professional manipulation services were offered, negotiated, and delivered.
The operation did not end in October 2024. It expanded. Additional indictments followed in 2025. Defendants have been arrested in Singapore, Portugal, and the United Arab Emirates. Three were extradited to the United States and appeared in federal court in Oakland. Guilty pleas have been entered. Forfeiture totals have crossed $23 million for a single firm. The SEC filed parallel civil fraud actions against multiple defendants at the same time DOJ unsealed criminal charges.
This is what a sustained, coordinated federal enforcement campaign looks like. It is not over.
Three indictments form the core of this enforcement wave. Each involves a different company, different tokens, and different defendants. But the charging theories are nearly identical. The evidence is nearly identical. The words the defendants used to describe their own services are nearly identical. Understanding these cases matters for anyone who provides, procures, or advises on cryptocurrency market-making services.
Operation Token Mirrors: What the FBI Actually Did
The FBI launched NexFundAI in March 2024 as a live Ethereum-based token. It was marketed as a legitimate AI and cryptocurrency initiative. Federal agents posing as potential clients then approached market-making firms, expressed interest in retaining their services for NexFundAI, and documented what those firms actually offered. The undercover employee recorded calls, preserved Telegram messages, and executed contracts. Then FBI and IRS-Criminal Investigation agents watched in real time as the firms ran wash trades through hundreds of cryptocurrency wallets, generating millions of dollars in artificial volume on the Uniswap exchange.
This was deliberate. The DOJ built a record that could not be explained away as legitimate trading. The transactions existed on the blockchain. The communications documenting what the defendants agreed to do existed on Telegram. The contracts documenting the pricing existed in writing.
Jodi Cohen, Special Agent in Charge of the FBI's Boston Division: "The FBI took the unprecedented step of creating its very own token and company to identify, disrupt, and bring these alleged fraudsters to justice." The operation represented the first time DOJ had criminally charged financial services companies in the cryptocurrency sector for market manipulation.
The SEC moved simultaneously. On October 9, 2024, the Commission filed civil fraud charges against ZM Quant, CLS Global, MyTrade, and Gotbit under Section 10(b) of the Securities Exchange Act and Rule 10b-5. Criminal and civil proceedings are now running in parallel for multiple defendants.
The Three Indictments
United States v. Gotbit Consulting LLC, Kedrov, and Jalili (D. Mass.)
The Gotbit indictment was filed in the District of Massachusetts in June 2024. It charges Gotbit Consulting LLC (registered in Belize), Fedor Kedrov (Director of Market Making), and Qawi Jalili (Director of Sales). Both individual defendants lived in Russia. The charges are conspiracy to commit market manipulation and wire fraud under 18 U.S.C. § 371 and wire fraud under 18 U.S.C. § 1343.
Beginning in approximately 2022, Gotbit conspired to manipulate the trading volume and price of multiple cryptocurrencies through wash trades designed to inflate prices and induce retail investors to purchase tokens at artificially elevated values. The indictment covers two real-world manipulations: the Robo Inu Token and the Saitama Token, which at its peak had a market capitalization of approximately $7.5 billion.
The Telegram messages are the core of the government's proof.
Vy Pham asked how long it would take to raise volume to $1 million on Bitmart. Co-conspirator 2 responded: "I can do it in 6 hours, it will cost about $200." A separate co-conspirator warned against raising volume too quickly: "CMC itself can detect suspicious activity in the market and exclude volumes from bitmart." The recommended approach: raise volume "step by step" so the market "looks organic."
Vy Pham: "the basic goal right now is to create that FOMO [fear of missing out] by looking as organic volume." Co-conspirator 4 confirmed that raising volume above $1 million per day on Bitmart is "very cheap to maintain" but the firm recommended keeping it "fluctuating, sometimes having it go below" to "make it look more naturally appearing."
Gotbit's CEO, Aleksei Andriunin, had publicly stated in 2019 that he had made a business of faking trade volumes at crypto exchanges. Andriunin was arrested in Portugal and later entered a plea agreement. Gotbit agreed to forfeit approximately $23 million and cease operations.
United States v. ZM Quant Investment Ltd, Ou, and Liu (D. Mass.)
The ZM Quant superseding indictment was filed in the District of Massachusetts in September 2024. It charges ZM Quant Investment Ltd (registered in the British Virgin Islands), Baijun Ou (who lived in Hong Kong), and Ruiqi Liu (who lived in the United Kingdom and Hong Kong). The charges mirror Gotbit: conspiracy under 18 U.S.C. § 371 and wire fraud under 18 U.S.C. § 1343.
ZM Quant received more than $3 million in cryptocurrency payments through its manipulation services. The indictment covers the Saitama Token manipulation, an offer to manipulate the VZZN Token, and the NexFundAI sting. The recorded calls from the NexFundAI engagement are detailed.
Ruiqi Liu, explaining ZM Quant's method: "The way we do market making on [Uniswap] is pretty easy. . . . We will use multiple wallets, for example, one thousand wallets, two thousand wallets, and we do the transactions maybe ten times each hour, or ten times every minute to reach the trading volumes." In a subsequent call, Liu stated that ZM Quant would "pump the price from one dollar to two dollars" and confirmed the firm would "cash out at the peaks" after artificially inflating volume and price.
Baijun Ou, on wallet rotation: "We will not, like, keep using the fifteen wallets or twenty wallets. We will keep changing the wallets. Otherwise, like, people can check on the . . . that just these fifteen wallets or twenty wallets keep trading. That looks so fake."
The government's blockchain analysis confirmed that during the NexFundAI launch window, 922 of 942 total buy and sell transactions in the token were conducted by the CONTRARIAN wallets provided by defendants. Eighteen organic trades came from five independent retail investors, who collectively lost approximately $1,459. The manipulation rate was 97.9 percent.
United States v. Singh, Srivastava, Singh, and Sharma (N.D. Cal.)
The ANTIER and CONTRARIAN indictment was filed in the Northern District of California, Oakland Division, in September 2025. It charges Manu Singh (CEO of CONTRARIAN), Kushagra Srivastava (CTO), Sabby Singh (Business Development Manager at ANTIER), and Vasu Sharma (Business Development Associate at CONTRARIAN). The charges are conspiracy to commit wire fraud under 18 U.S.C. § 1349 and wire fraud under 18 U.S.C. § 1343.
ANTIER was registered in India and billed itself as "Pioneers in Crypto Market Making." CONTRARIAN was registered in the British Virgin Islands. ANTIER solicited clients and outsourced the wash trading to CONTRARIAN for approximately $3,000 per month plus a percentage of token liquidation proceeds. What makes this indictment distinct is the documentary evidence. Manu Singh maintained an internal flow chart explicitly describing every step of the manipulation cycle.
The chart was labeled "Price Pump" at the start of the cycle. The stated steps included: using "fake accounts/bots to make numbers look decentralized and active," syncing volume with "CT narratives to create a hot market," and using "the power of media and CT to make people emotional trade." The goal of the pump was explicitly to "Attract more investors, especially normies, people that don't understand the market, to ensure smooth dump." The cycle concluded with the "Final Dump," which included steps for "forced sell off" and instructions to "prepare for the next token MM."
Undercover employee asked whether CONTRARIAN could pump volumes and the market cap for the Powerlink token. Vasu Sharma responded: "Definitely. Definitely. That's what we do." Sharma further stated: "We begin with volume generation and then increasing the market cap in terms of circulating [the Powerlink token] and fully diluted valuations as per your required benchmarks."
Undercover employee to M. Singh via Telegram: "why does the volume need to correlate to the size of the liquidity pool?" Singh replied: "So that it looks authentic."
Blockchain analysis confirmed that CONTRARIAN generated nearly all trading volume in the Powerlink token. Of 942 total transactions, 922 were conducted by CONTRARIAN wallets. The Powerlink token, like NexFundAI, was created at the direction of law enforcement. The FBI did not rely on a single undercover token. It deployed multiple tokens across multiple investigations to document how different firms provided the same manipulation services.
The indictment also documents what happened after DOJ's October 9, 2024 press release announcing the first wave of Operation Token Mirrors charges. Shortly after the press release, the undercover employee observed that messages in the Telegram chat were deleted. CONTRARIAN stopped trading the Powerlink token. Manu Singh did not join a scheduled videoconference the following day. Deleting messages after learning of a federal investigation is consciousness of guilt. It is also a separate federal crime under 18 U.S.C. § 1519, which carries up to 20 years in prison for destroying documents or records with intent to obstruct a federal investigation. Three defendants were arrested in Singapore and extradited to Oakland.
What These Cases Have in Common
Read the three indictments together and the pattern is unmistakable.
| Feature | Gotbit (D. Mass.) | ZM Quant (D. Mass.) | ANTIER/CONTRARIAN (N.D. Cal.) |
|---|---|---|---|
| Charges | 18 U.S.C. §§ 371, 1343; 15 U.S.C. §§ 78i, 78ff | 18 U.S.C. §§ 371, 1343; 15 U.S.C. §§ 78i, 78ff | 18 U.S.C. §§ 1349, 1343 |
| Method | Algorithmic wash trading via coordinated bots | 1,000+ wallets, transactions every minute to create volume | Bots + fake accounts; volume synced with marketing |
| Communication Channel | Telegram encrypted messaging | Telegram; WhatsApp; video teleconferences | Telegram; email; video teleconferences |
| Public vs. Private Offering | Website advertised legitimate services; private channels offered manipulation | Website advertised legitimate services; private channels offered manipulation | Website advertised legitimate services; private channels offered manipulation |
| Concealment of Scheme | Raise volume "step by step" to avoid CMC detection | Rotate wallets constantly to avoid detection | Vary volume to "look more naturally appearing" |
| Outcome for Investors | Retail investors purchased at inflated prices; defendants sold | Retail investors purchased at inflated prices; defendants sold | Retail investors purchased at inflated prices; defendants sold |
| Key Evidence | Telegram messages; video calls; algorithm settings | Recorded calls; blockchain analysis; service agreements | Internal flow chart; recorded calls; blockchain analysis (97.9% wash) |
Every indictment alleges the same core deception: defendants presented themselves publicly as legitimate market makers while privately offering a service specifically designed to defraud retail investors. Every indictment relies on the defendants' own words, obtained through Telegram messages and recorded undercover calls, to prove they knew exactly what they were doing. Every indictment is buttressed by blockchain forensics showing that virtually all trading activity in the target tokens was self-generated by the defendants.
That evidentiary combination is what makes these cases powerful for the government. But it is also what makes them unusual. The defendants documented their own intent in writing, on recorded calls, and in internal planning documents. Most crypto market manipulation investigations do not produce that kind of evidence. Without it, the government faces a fundamentally harder case. Blockchain data can show the trades. It cannot show what the defendant was thinking. And the difference between legitimate market making and criminal wash trading is entirely a question of intent.
The lesson is clear. These indictments were built on the defendants' own words. If you use bots to manufacture fake trading volume, describe it in writing as a way to generate "FOMO," and explicitly plan for a "dump" after the pump, federal prosecutors will treat your communications as a confession. Without those communications, the government's burden is significantly heavier.
The Charges in Detail
Understanding the legal framework matters for anyone assessing exposure in this space.
Wire Fraud: The Government's Preferred Weapon in Crypto Cases
Wire fraud is the most important charge in these cases. It carries the highest penalty. It does not require that the token be classified as a security. It applies whenever wire communications are used to execute a scheme to defraud, and every internet-based cryptocurrency transaction satisfies the wire element. Understanding how the government proves wire fraud in a cryptocurrency market manipulation case is essential to evaluating criminal exposure.
The Four Elements
To convict a defendant of wire fraud under 18 U.S.C. § 1343, the government must prove four elements beyond a reasonable doubt.
The fourth element is the simplest. Every blockchain transaction, every Telegram message, every email, every video call over the internet satisfies it. The government does not need to prove that the defendant personally made the wire transmission. It is enough that the defendant caused it to be used.
What Counts as a "False Representation" in a Wash Trading Case
This is the core of the government's theory. In a traditional fraud case, the false representation is a lie someone tells another person: a fake financial statement, a forged document, a promise the defendant never intended to keep. In a wash trading case, the government takes the theory a step further. It argues that the trading activity itself is the false representation.
That theory is aggressive. Wash trades generate volume data that appears on exchanges, on CoinMarketCap, and on every platform that aggregates trading activity. The government argues that volume data tells investors the market is active and liquid, that other traders have confidence in the token, and that the demand is real. When the volume is manufactured, the government says, every signal it generates is false.
But the theory has limits. Not all volume generation is fraudulent. Market makers routinely provide liquidity by placing orders that generate volume. Token projects routinely engage firms to support trading activity around exchange listings. The question is not whether the defendant generated volume. The question is whether the defendant did so with the intent to deceive investors. That distinction matters. It is the difference between a federal crime and a legitimate business service. And it is a distinction that depends almost entirely on what the defendant intended, which the government must prove beyond a reasonable doubt.
In the Operation Token Mirrors cases, the indictments rely on the defendants' own words to close that gap. The Gotbit defendants described their goal as making volume "look organic." The ZM Quant defendants described their goal as making a token appear to be a "top gainer on Uniswap" so that retail users would "chase the price." The CONTRARIAN CEO's internal flow chart described the goal as using fabricated activity to "make people emotional trade." Without those statements, the government would have to prove deceptive intent through circumstantial evidence alone. That is a harder case to make.
The government treats these statements as direct evidence that the trading activity was a false representation communicated through the blockchain, through exchange data feeds, and through public market aggregation platforms. The theory is that the volume data was designed to induce retail investors to purchase tokens at artificially inflated prices. That is the scheme to defraud.
The indictments also highlight the written contracts. Gotbit provided its client a "Market Maker Agreement" that described the manipulation as a "[t]rading volume system and liquidity system on the Exchanges." The agreement specified pricing: $15,000 USDT for three months, 2% of token liquidation, and 20% of net profit. ZM Quant circulated "MM Service Quotes" listing prices for "creating volume" on Uniswap and Pancakeswap. These documents are significant evidence. They show that the defendants priced, contracted for, and delivered the services as a commercial product. A defendant facing this evidence must explain why a legitimate market maker would contractually guarantee a specific volume output, collect a percentage of token liquidation proceeds, and charge by the exchange. But written agreements are not always what they appear. Defense counsel examines whether the contract language is standard in the industry, whether the client understood the services as legitimate market making, and whether the defendant believed the services fell within accepted market practices. Context matters.
Materiality: Why the Supreme Court's Standard Matters
Materiality is an essential element of wire fraud. The Supreme Court settled this in Neder v. United States, 527 U.S. 1 (1999). The standard is objective. A misrepresentation is material if it has a natural tendency to influence, or is capable of influencing, a person's decision to part with money or property. The government does not need to prove that any specific investor was actually deceived. It does not need to prove actual reliance. It is enough that the misrepresentation was the type of information a reasonable person would consider important when deciding whether to invest.
In the Operation Token Mirrors cases, the government argues that the materiality question is straightforward: trading volume is one of the most important signals in any market. But materiality is a jury question. Defense counsel can challenge materiality by demonstrating that cryptocurrency investors are sophisticated, that inflated volume is widely understood in crypto markets, that independent information about the token was available, or that the alleged misrepresentation was too peripheral to the investor's decision to be material. The Supreme Court in Kousisis emphasized that the "demanding materiality requirement" is the key limiting principle on wire fraud prosecutions. That requirement is not a formality. It is a substantive element that the government must prove beyond a reasonable doubt.
The 2025 decision in Kousisis v. United States, 605 U.S. ___ (2025), does broaden the government's theory. The Court unanimously held that a defendant can be convicted of wire fraud for inducing a victim to enter a transaction under materially false pretenses, even without proof of net economic loss. But the Court also reiterated that the materiality element substantially narrows the universe of actionable misrepresentations. A defense built on challenging materiality remains viable, particularly in cases where the government cannot identify specific investors who relied on the inflated volume data when making their purchase decisions.
Intent: The Hardest Element to Prove
Wire fraud requires specific intent to defraud. The government must prove the defendant knew the scheme was fraudulent and acted with the purpose of deceiving investors. This is the hardest element for prosecutors to establish in any fraud case. It is particularly difficult in market manipulation cases, where the line between aggressive trading and criminal fraud depends almost entirely on what the defendant was thinking when the trades were placed.
Without communications evidence, proving intent in a wash trading case is an uphill fight for the government. Blockchain data shows that trades occurred. It can show that a single entity controlled wallets on both sides of a transaction. But blockchain data alone does not prove why the trades were made. A defendant can argue the trading was designed to provide genuine liquidity, to test an algorithm, to support a token launch, or to meet exchange listing requirements. Those are legitimate business purposes. The government needs more than trading data to defeat those arguments.
That is what makes the Operation Token Mirrors cases unusual. The defendants handed prosecutors the evidence of intent. When a defendant describes the goal of his service as creating "FOMO by looking as organic volume," that is direct evidence of intent to deceive. When a defendant warns a colleague to raise volume gradually so that CoinMarketCap's fraud detection systems will not flag the activity, that is evidence of concealment. When a defendant creates an internal document mapping out a "Price Pump" followed by a "Final Dump" targeting investors who "don't understand the market," that is a roadmap of the scheme written by the person who designed it.
But strip out the communications and the government's case looks different. Blockchain analysis can establish that the same entity controlled both sides of a trade. It cannot, standing alone, establish why. A market maker who provides liquidity by posting simultaneous buy and sell orders generates trading patterns that may resemble wash trading on the blockchain. Distinguishing the two requires evidence of the defendant's purpose. That evidence almost always comes from communications, cooperating witnesses, or undercover recordings. The same evidentiary challenge drove the DOJ's precious metals spoofing prosecutions, where trading data alone was insufficient to prove intent and the government relied heavily on chat messages and cooperator testimony to secure convictions. Scott Armstrong served as lead trial counsel in a federal trial at DOJ against two senior Deutsche Bank traders in the Northern District of Illinois. He understands what these cases look like from the inside, and where the government's proof is weakest.
Good faith is a complete defense to wire fraud. A defendant who genuinely believed the trading activity was legitimate, that the volume served a business purpose, and that investors were not being deceived lacks the required intent. In cases where the government does not have the defendant's own words establishing fraudulent purpose, good faith is a powerful defense.
Why the Token Security Classification Matters
Charging market manipulation under the Exchange Act requires that the tokens be securities. The DOJ and SEC have taken the position that the tokens involved in these cases, including the Saitama Token and the Robo Inu Token, were securities under the Howey test. Whether a specific token qualifies as a security is a fact-intensive question that depends on the token's structure, marketing, and the reasonable expectations of purchasers.
The wire fraud counts do not require securities status. The government can prosecute wash trading as wire fraud regardless of how the token is classified. This is important. Even if a defendant successfully argues that a particular token is a commodity rather than a security, that argument does not defeat the wire fraud charges. It defeats only the Exchange Act counts.
Spoofing and Layering: Related but Distinct Charges
The Operation Token Mirrors cases focus on wash trading. But spoofing and layering are closely related manipulation techniques that federal prosecutors charge under the same statutes. Wash trades execute. Spoof orders do not. Both create false market signals. Both are charged as wire fraud and market manipulation. And sophisticated manipulation schemes often combine both techniques in a single conspiracy. Scott Armstrong tried the first federal criminal case involving algorithmic cryptocurrency market manipulation through over $300 million in spoof orders and wash trades and served as lead trial counsel in a federal trial at DOJ against two senior Deutsche Bank traders convicted of spoofing precious metals futures. For a detailed analysis of how federal spoofing charges work in cryptocurrency markets, see our companion post on crypto spoofing and layering defense.
What "Market Making" Actually Means Under Federal Law
Every defendant in these cases marketed their services as "market making." The indictments are explicit about what prosecutors think that label obscures.
Legitimate market making involves a firm posting simultaneous buy and sell orders at different prices, earning the spread between them, and facilitating real transactions between independent counterparties. No single entity controls both sides of any transaction. Beneficial ownership genuinely changes hands. The trades reflect real supply and demand.
What these defendants offered was different. They controlled both sides of every transaction. No ownership transferred. The volume was entirely artificial. The indictments describe it clearly: a ZM Quant representative told the undercover employee that ZM Quant would use one to two thousand wallets executing transactions ten times per minute. A Gotbit co-conspirator said he could raise trading volume to $1 million in six hours for $200. A CONTRARIAN representative described the goal as generating "FOMO" to draw in investors who "don't understand the market" before the final dump.
None of that is market making. At least, not according to the government.
But the line between the two is not as clear as the government wants it to be. In traditional equity and futures markets, market making is tightly regulated and well-defined. In decentralized cryptocurrency markets, the concept of market making is newer, less standardized, and subject to legitimate debate. Token projects routinely engage firms to support trading activity, provide initial liquidity on DEX platforms, and ensure that a token can be bought and sold without excessive slippage. Some of that activity may look like wash trading on a blockchain even when the intent is to build genuine market infrastructure. The critical question is always intent. And intent cannot be read from the blockchain alone.
The government's position is straightforward. Wash trading has been illegal in U.S. securities markets since 1934. Calling it "market making" and billing it to a crypto token project does not change what it is. But where the government sees fraud, a defendant may see a legitimate service in a nascent and poorly regulated market. The factual and legal distinction between the two is where trials are won and lost.
Parallel Proceedings and What They Mean for Defense
These cases involve simultaneous DOJ criminal prosecution and SEC civil enforcement. That combination creates specific defense challenges.
How the Government Obtains Encrypted Communications
Every indictment in Operation Token Mirrors relies on Telegram messages as its evidentiary foundation. The government obtained these communications through device seizures under Federal Rule of Criminal Procedure 41, the Stored Communications Act, the CLOUD Act, undercover operations, and cooperating witnesses. Encrypted messaging does not provide protection from federal investigators. But the government's dependence on this communications evidence is also the key insight for defense. Without the defendants' own words, the prosecution's case rests on blockchain data and trading patterns that can be explained by legitimate market-making activity. That distinction is where defense begins. For a detailed analysis of how federal agents collect Telegram messages, encrypted communications, and metadata in cryptocurrency investigations, see our companion post on encrypted communications in federal crypto investigations.
Frequently Asked Questions
What is wash trading and why is it a federal crime?
Wash trading occurs when a trader, or coordinated group of traders, simultaneously buys and sells the same asset to generate artificial volume without any genuine change in beneficial ownership. In traditional markets, it has been prohibited since the Commodity Exchange Act of 1936. In cryptocurrency markets, DOJ charges wash trading under 15 U.S.C. § 78i(a)(2) and wire fraud under 18 U.S.C. § 1343. The Operation Token Mirrors cases established that these prohibitions apply in full to digital asset markets.
What is Operation Token Mirrors?
Operation Token Mirrors is an FBI and DOJ undercover investigation launched in 2024 in which the FBI created a fake cryptocurrency called NexFundAI, listed it on exchanges, and approached market-making firms to document how manipulation services were solicited and executed. The operation resulted in charges against 18 or more individuals and entities, seizure of over $25 million in cryptocurrency, and prosecutions in the District of Massachusetts and the Northern District of California. Firms charged include Gotbit, ZM Quant, CLS Global, MyTrade, ANTIER, and CONTRARIAN.
What are the elements of wire fraud in a cryptocurrency market manipulation case?
Wire fraud under 18 U.S.C. § 1343 requires proof of four elements beyond a reasonable doubt. First, the defendant knowingly participated in or devised a scheme to defraud, or a scheme to obtain money or property by means of false or fraudulent pretenses. Second, the false representations were material, meaning they had a natural tendency to influence a person's decision. Third, the defendant acted with specific intent to defraud. Fourth, the defendant used or caused to be used an interstate or foreign wire communication in furtherance of the scheme.
In the Operation Token Mirrors cases, the false representations are the artificial trading volume generated by wash trades. That volume appeared on exchanges and market aggregation platforms as organic activity. It signaled demand that did not exist. The Supreme Court confirmed materiality as an essential element in Neder v. United States, 527 U.S. 1 (1999). The 2025 decision in Kousisis v. United States, 605 U.S. ___ (2025), further held that wire fraud does not require proof of net economic loss to the victim, strengthening the government's hand in fraudulent inducement cases.
What federal statutes apply to cryptocurrency market manipulation?
Wire fraud under 18 U.S.C. § 1343 carries up to 20 years and applies to any scheme using interstate wire communications to defraud. Conspiracy under 18 U.S.C. § 371 carries up to five years. Securities market manipulation under 15 U.S.C. §§ 78i(a)(2) and 78ff(a) applies where the token qualifies as a security. The SEC brings parallel civil fraud charges under Section 10(b) of the Exchange Act and Rule 10b-5. The CFTC can pursue manipulation charges under the Commodity Exchange Act where tokens qualify as commodities.
How did prosecutors prove intent to commit fraud rather than legitimate market making?
The indictments rely on the defendants' own Telegram messages and recorded calls. Gotbit's algorithm was set to generate 160,000 in artificial volume per day and could be raised to $1 million in six hours for $200. Co-conspirators explicitly warned each other to raise volume gradually so CoinMarketCap's fraud detection would not flag it. ZM Quant described using thousands of wallets executing trades ten times per minute to create volume, with the stated goal of "cashing out at the peaks." CONTRARIAN's CEO maintained an internal flow chart explicitly describing a "Price Pump" followed by a "Final Dump" targeting investors who "don't understand the market." These communications establish not just the conduct but the intent.
Does it matter that the NexFundAI token was created by the FBI?
No, not as to the core charges. The use of an undercover token is a standard investigative technique. Federal courts have long recognized the government's authority to conduct undercover operations in financial crime investigations. Entrapment requires that the government induced a defendant with no predisposition to commit the crime. The Telegram messages, prior conduct involving real tokens, and the defendants' willingness to immediately agree to manipulation demonstrate predisposition. The NexFundAI manipulation is also corroborated by identical manipulation of actual tokens like the Saitama Token and Robo Inu Token.
What is the difference between legitimate market making and criminal wash trading?
Legitimate market making involves posting simultaneous buy and sell orders at different prices, earning the spread, and facilitating real transactions between independent parties. No single entity controls both sides of any transaction. Beneficial ownership genuinely changes hands. In the cases charged here, defendants controlled both sides of every trade. No ownership transferred. Volume was entirely artificial. The ZM Quant indictment describes the goal explicitly: use thousands of wallets executing trades at high frequency to make the token appear to be at "the top gainer on Uniswap" so retail users would "chase the price" and "come to do trading."
Has the shift in DOJ crypto enforcement priorities affected these cases?
No. The DOJ's April 2025 memorandum on "Ending Regulation by Prosecution" directed prosecutors to avoid cases that amount to imposing regulatory frameworks on digital assets. The memorandum explicitly carves out fraud and manipulation. Operation Token Mirrors involves documented deception of retail investors, manufactured market data used to induce purchases, and defendants who explicitly described their goal as creating artificial fear of missing out before dumping tokens into the inflated market. In March 2026, the DOJ announced additional indictments against ten executives and employees from Gotbit, Vortex, ANTIER, and CONTRARIAN, with three defendants extradited from Singapore. The expansion of Operation Token Mirrors after the policy shift confirms that crypto fraud and manipulation remain core DOJ enforcement priorities.
What prison sentence does a crypto market manipulation conviction carry?
The sentencing exposure depends on the charges. Wire fraud under 18 U.S.C. § 1343 carries a maximum of 20 years per count. Conspiracy to commit wire fraud under 18 U.S.C. § 1349 also carries up to 20 years. Conspiracy under 18 U.S.C. § 371 carries up to five years. Securities market manipulation under 15 U.S.C. § 78ff(a) carries up to 20 years.
Actual sentences are driven by the Federal Sentencing Guidelines, which calculate a recommended range based on the loss amount, the number of victims, the defendant's role in the offense, and other factors. In the Operation Token Mirrors cases, Gotbit's CEO received eight months (time served). But the Guidelines range can be significantly higher where the manipulation involves large volumes of trading and multiple victims. Every wire fraud count is a separate count of conviction, and the court can impose consecutive sentences. Defendants also face forfeiture of all proceeds, restitution to victims, fines up to $250,000 per count, and supervised release following any term of imprisonment.
What should I do if I receive a target letter or grand jury subpoena in a cryptocurrency investigation?
Retain experienced federal criminal defense counsel immediately. A target letter means the government has identified you as a target of a grand jury investigation and believes there is substantial evidence linking you to a federal crime. A grand jury subpoena for documents or testimony means the investigation is active and the government is building its case. What you say and produce in the early stages shapes the entire case.
Do not speak with federal agents without counsel present. Do not destroy, delete, or alter any documents, messages, or data. Destruction of evidence during a federal investigation is a separate federal crime under 18 U.S.C. § 1519 and can result in up to 20 years in prison. An experienced defense attorney will communicate with the government on your behalf, evaluate the scope of the investigation, advise on Fifth Amendment rights, assess whether cooperation or pre-charge resolution is appropriate, and develop a defense strategy before charging decisions are made. Scott Armstrong and Drew Bradylyons have handled federal cryptocurrency investigations from the earliest stages through trial, both as prosecutors and defense counsel.
Can a crypto market maker be charged with wire fraud for providing volume support services?
Yes. The Operation Token Mirrors indictments establish that the DOJ treats wash trading marketed as "market making," "volume support," or "liquidity provision" as wire fraud when the trading is designed to create false market signals and induce investors to purchase tokens at artificially inflated prices. The label a firm uses for its services does not determine whether the conduct is criminal. What matters is whether the firm controls both sides of the transactions, whether the volume is artificial, and whether the purpose is to deceive investors.
Legitimate market making involves posting genuine buy and sell orders at different prices and earning the spread on real transactions between independent counterparties. When a firm uses hundreds or thousands of wallets to trade against itself, generating volume with no genuine change in beneficial ownership, that conduct constitutes wash trading regardless of what the service agreement calls it. The Supreme Court's 2025 decision in Kousisis v. United States reinforces this point: wire fraud does not require proof that the victim suffered a net economic loss. It is enough that the defendant induced the transaction through material false pretenses.
How do Scott Armstrong and Drew Bradylyons defend cryptocurrency market manipulation cases?
Scott Armstrong is the only federal criminal defense attorney who personally tried the first-ever federal criminal case involving algorithmic cryptocurrency market manipulation, a case involving over $300 million in spoof orders and wash trades. He also served as co-lead trial counsel in the multi-week trial of two senior Deutsche Bank traders convicted of a years-long spoofing scheme in the precious metals futures markets. As an Assistant Chief at DOJ's Fraud Section, he supervised prosecutions of cryptocurrency Ponzi schemes, rug pulls, pig butchering schemes, and investment fraud involving digital assets. Drew Bradylyons, former Chief of EDVA's Financial Crimes and Public Corruption Unit, supervised cryptocurrency investment fraud prosecutions and coordinated parallel SEC and CFTC enforcement actions. Their cryptocurrency market manipulation defense practice includes evaluating undercover evidence, challenging token security status, contesting wash trading intent, challenging search warrant affidavits and the admissibility of seized communications, and assessing forfeiture exposure from the first day of an investigation.
Facing a Crypto Manipulation or Spoof Trading Investigation?
As a former Assistant Chief at DOJ's Fraud Section, Scott Armstrong tried the first federal criminal case involving algorithmic cryptocurrency market manipulation and served as lead trial counsel in a federal trial at DOJ against two senior traders who manipulated precious metals futures. He understands how DOJ builds these cases from the inside. As former Chief of EDVA's Financial Crimes and Public Corruption Unit, Drew Bradylyons supervised complex cryptocurrency fraud prosecutions and coordinated enforcement with the SEC and CFTC. Armstrong & Bradylyons PLLC defends individuals and companies in federal cryptocurrency market manipulation, wash trading, wire fraud, and securities fraud investigations nationwide.
