Physically based or working in China — lived, ran an office, met victims or was stationed here, per the record. Hacking a target here does not count.
China
WHAT THEY DID HERE, AND WHEN
Jan 2026–Held in China after extradition; no charges made public, no trial reported.SOURCE: CNN
Anhui province and Beijing, China
WHAT THEY DID HERE, AND WHEN
July 2014–Dec 2015Runs Ezubao from Yucheng Group; fake leasing projects raise ¥50B+ from ~900,000 investors.SOURCE: Beijing No.1 Intermediate People's Court, Sept 2017
Jan 2016Arrested; sentenced to life in Sept 2017.SOURCE: Xinhua
Dalian, China
WHAT THEY DID HERE, AND WHEN
2011–2013Park Jin Hyok works at Chosun Expo, a front company in Dalian, according to the DOJ.SOURCE: DOJ complaint, Sept 2018 Tianjin, China
WHAT THEY DID HERE, AND WHEN
2014–2017Lantian Gerui raises ~£4.6B from ~128,000 investors on promised returns of up to 300%; the proceeds are turned into bitcoin.SOURCE: Met Police; sentencing remarks 2017Flees as Chinese police close in.SOURCE: Malay Mail
Shanghai, China
WHAT THEY DID HERE, AND WHEN
24 Dec 2019Reportedly last seen at Shanghai Disneyland; a fugitive since.SOURCE: press reports; Malaysian police
Shanghai, China
WHAT THEY DID HERE, AND WHEN
2017Founds Binance in Shanghai; leaves after China bans crypto exchanges that autumn.SOURCE: case brief
Shenzhen, China
WHAT THEY DID HERE, AND WHEN
30 Jan 2024Handed to Chinese police with his son and eight others.SOURCE: Wikipedia; Xinhua
Sept–Nov 2025Tried at the Shenzhen Intermediate People's Court; sentenced to death on 3 November 2025; dies of illness in custody on 11 November.SOURCE: Global Times; Xinhua
Wenzhou, China
WHAT THEY DID HERE, AND WHEN
29 Sept 2025Wenzhou Intermediate People's Court sentences 11 to death.SOURCE: CNN
29 Jan 2026The 11 executed after the Supreme People's Court approves the sentences.SOURCE: CNN; SCMP; Global Times
Shenzhen, China
WHAT THEY DID HERE, AND WHEN
2016–2023Lives in Shenzhen and runs Bitzlato, the exchange that the DOJ says moved ~$700M for darknet markets including Hydra.SOURCE: DOJ E.D.N.Y.
China
WHAT THEY DID HERE, AND WHEN
Nov 2025–Arrested on arrival in Nanjing; new proceedings pending.SOURCE: HKFP; ABC News
Dalian, China
WHAT THEY DID HERE, AND WHEN
c.2011–2014Works at Chosun Expo Joint Venture, the front company through which the DOJ says the operations were run.SOURCE: DOJ complaint (alleged)
China
WHAT THEY DID HERE, AND WHEN
before 2021Chinese national; lived in China before moving to Cambodia and the UAE, according to the DOJ.SOURCE: DOJ