China-Linked Fentanyl Ring Used Fake Zksync.jp Token in Crypto Scam, Nikkei Says

Daily Feed
China-Linked Fentanyl Ring Used Fake Zksync.jp Token in Crypto Scam, Nikkei Says

A Nikkei investigation says a China-linked fentanyl precursor network also ran a crypto fraud scheme through Japan, using a fake “Zksync.jp” token, Japanese domains, and blockchain trails that reportedly tied together deception, laundering, and drug supply chains.

  • Fake “Zksync.jp” token used to mimic a real crypto project
  • China-linked fentanyl precursor network allegedly involved in fraud and laundering
  • Hundreds of millions of yen in reported losses
  • Japanese domains used as a trust signal
  • On-chain tracing reportedly linked wallets to sanctioned entities

According to Nikkei, the network at the center of the mess was not just moving chemicals tied to fentanyl production. It was also allegedly using crypto to scam users and move money through Japan in ways that made the operation look more legitimate than it was. The counterfeit token, “Zksync.jp”, appears designed to piggyback on the reputation of ZKsync, the real Ethereum Layer 2 network built by Matter Labs.

For readers who don’t live and breathe crypto plumbing: a Layer 2 is a system built on top of Ethereum that helps process transactions faster and cheaper. In plain English, it’s one of the ways the network avoids turning into a slow, expensive traffic jam. Scammers love borrowing legitimate names because they know brand recognition lowers suspicion. Put a familiar label on a fake asset and some people will click first, think later.

Nikkei said the group used Japanese internet domains to make the fraud appear more credible to users abroad. That is not a small detail. A site ending in a Japan-linked domain can look more trustworthy to victims who assume it must have some degree of oversight or local legitimacy. As Chainalysis noted:

“Japanese domains can make fraud sites appear more credible to users abroad.”

That trust veneer is exactly what bad actors want. They are not just selling fake tokens; they are selling the illusion of professionalism. Scam websites often fail on the technical side but succeed on psychology. The logo is polished, the branding sounds familiar, and the domain looks respectable. That is enough to separate a lot of people from their money.

The investigation puts Hubei Amarvel Biotech, a Wuhan-based chemical company, near the center of the network. In 2025, two Amarvel executives were cleared of the top fentanyl charge but convicted of conspiring to import a fentanyl precursor chemical and conspiring to launder money. That distinction matters. A fentanyl precursor is not fentanyl itself, but it is a substance used to make it. These chemicals sit earlier in the supply chain, which is why they are so valuable to trafficking networks and so important to regulators.

In other words, this was not just a petty crypto scam with a bad logo. It reportedly sat inside a broader criminal infrastructure that mixed chemicals, shell companies, cross-border payments, and blockchain-based transfers. Criminal groups do this because they want speed, flexibility, and fewer friction points than traditional banks provide. Crypto is not the root cause of fentanyl trafficking, but it can be a useful tool for moving funds, laundering proceeds, and hopping between jurisdictions when the people behind the scheme think they are being clever.

Nikkei also pointed to a Nagoya-based company, Firsky, which allegedly acted as a Japanese front for the network before being liquidated in July 2024. The outlet identified Xia Fengzhi, a Chinese national, as linked to logistics and funds moving from Japan. Using wallet addresses disclosed in U.S. court evidence, Nikkei said it mapped fund flows tied to Amarvel and its Japan-linked base.

The report said those flows included more than 120 crypto transactions connected to entities under U.S. sanctions, clustered around parties linked to Wuhan Yuancheng Group. For anyone still pretending blockchain is some kind of invisibility machine, that is the part that should sting. Public blockchains are not magic hiding places. They are ledgers. They leave a permanent trail. The bad news for criminals is that once investigators know what to connect, the breadcrumbs are sitting there in broad daylight.

Blockchain tracing, or on-chain analysis, is the process of following transactions recorded on the blockchain and linking wallet activity to real-world entities. That does not mean every wallet address is instantly identifiable. It means analysts can often cluster wallets, identify patterns, and use court records, exchanges, or leaked evidence to connect dots. That is how firms like Chainalysis and TRM Labs earn their keep, and why criminals who think crypto is “untraceable” are usually just advertising that they have not done their homework.

The U.S. enforcement backdrop is already hot. The U.S. State Department has offered a $5 million reward for information leading to the arrest of Chuen Fat Yip, who U.S. authorities accuse of leading a transnational drug operation. In May, the DEA also signed a memorandum with the Japan Coast Guard to strengthen fentanyl-smuggling enforcement. That matters because this is no longer just a domestic crime issue for one country. It is a cross-border logistics problem, a financial crime problem, and a crypto tracing problem all at once.

TRM Labs has already been flagging the scale of crypto use in precursor chemical networks. The firm reported that 97% of 120 Chinese precursor manufacturers it studied accepted crypto, and wallets linked to them received more than $26 million in 2023. That figure does not prove every transaction was illicit, but it does show that digital assets have become a normal settlement tool in parts of the shadow economy. Fast, borderless payments are useful for legitimate commerce. They are also useful for people trying to move suspicious funds without asking a bank to play hall monitor.

Japan sits in a tricky position here. On one hand, it is trying to expand a regulated crypto market and make the country more attractive for legitimate digital asset businesses. On the other hand, it is also trying to keep its reputation, infrastructure, and trust signals from being exploited by criminal networks. Japan’s lower house passed a bill to reclassify crypto under the Financial Instruments and Exchange Act, and a linked tax plan targets a 20% crypto tax rate in 2028. That is a serious attempt to build a more mature, normal market instead of treating crypto like some unruly internet goblin.

But the timing creates a difficult backdrop for regulators. The more open and recognizable a jurisdiction becomes, the more attractive it can be for criminals trying to borrow legitimacy. A Japanese domain, a Japan-linked front company, and a token name that resembles a real project can together create a convincing scam wrapper. That is the real tension: openness helps innovation and adoption, but it also gives bad actors something to imitate.

There is also a broader reputational issue for the crypto sector. A fake token using the name of a legitimate Ethereum scaling project is not just a crime problem; it is a trust problem. It can confuse users, stain brand names, and reinforce the lazy narrative that crypto is mostly a fraud machine. That narrative is too simplistic, but scammers absolutely keep feeding it. The industry does itself no favors when it shrugs at copycat tokens, phishing sites, and the endless parade of “yield” nonsense that is really just a dressed-up trap.

The better takeaway is less comfortable but more honest: crypto is a tool. In the right hands, it supports open finance, privacy, and decentralized systems that challenge a suffocating status quo. In the wrong hands, it becomes a settlement layer for fraud, laundering, and transnational crime. The technology did not create fentanyl trafficking, but it can be used to grease the gears. At the same time, that same transparency is what lets investigators trace the money when the actors behind it get sloppy. That is the part the scammers always forget until the knock on the door arrives.

  • What was the alleged scam?
    A counterfeit “Zksync.jp” token was reportedly used to lure crypto users, with Japanese domains making the scheme look more credible.
  • Why does Japan matter here?
    Japanese domains and a Japan-linked company reportedly helped the network appear legitimate to foreign users, even though the activity was tied to a China-linked criminal operation.
  • How does fentanyl trafficking connect to crypto?
    Nikkei said blockchain tracing and court evidence linked wallet activity to entities associated with fentanyl precursor production and money laundering.
  • Was the fake token connected to ZKsync?
    No legitimate connection was identified. The name appears to have been chosen to imitate ZKsync and exploit its recognition.
  • What does on-chain tracing show?
    The report says more than 120 transactions connected the network to entities under U.S. sanctions.
  • Does crypto enable this kind of crime?
    Crypto is not the root cause, but it can be used for cross-border laundering and fraud. The upside is that blockchain records often leave a trail investigators can follow.
  • What is the big takeaway for users?
    Verify token contracts, check official project channels, and treat lookalike domains as hostile until proven otherwise. Scam artists thrive on speed and carelessness.

The same rails that support decentralization, privacy, and permissionless value transfer can also be abused by people moving poison and laundering proceeds. That is not a reason to throw the whole system in the bin. It is a reason to keep building better tools, keep tightening enforcement, and keep treating scammers like the parasites they are.

Share this article

Back to Blog