A Chinese criminal network with documented links to fentanyl distribution orchestrated a cryptocurrency fraud scheme centered on a counterfeit token marketed as 'zksync.jp', according to Nikkei reporting cited by The Block. Losses from the scam exceeded $1 million.
The fake token exploited the legitimate zkSync protocol name to lure victims into transferring assets to attacker-controlled addresses. The operation's connection to a fentanyl-trafficking organization signals a broader convergence: traditional drug networks are now using crypto fraud as a parallel revenue stream, a pattern that complicates enforcement across both drug and financial crime units.
The scam was distributed to targets worldwide, though the Japan-based domain registration and Nikkei's discovery suggest operational or targeting infrastructure rooted in that geography. No confirmed timeline for when the token first appeared or when the scheme was shut down has been disclosed.
Open questions remain on the operational mechanics: how the attacker group acquired or spoofed the zksync.jp domain, whether the fake token exploited any protocol vulnerability or relied purely on social engineering, what on-chain forensics revealed about fund movements, and whether any law enforcement action has been taken. The Block's report does not specify whether victims were targeted via social media, phishing campaigns, or other methods.
The linkage between a known fentanyl network and crypto-fraud infrastructure underscores a persistent enforcement gap. Drug agencies and financial crime investigators have historically operated in separate lanes, and a single criminal organization operating across both domains can exploit that fragmentation. zkSync, the legitimate protocol, has not announced any statement on the fraud or steps taken to protect users from domain-spoofing attacks.