How 45 Shell Companies Were Allegedly Tied to a $43M Fraud Case
Approximately 45 shell companies. About 140 company bank accounts. At least $43 million in alleged investment fraud proceeds.
Federal prosecutors disclosed those figures when an indictment against Zhuoying Chen and Haojie Zhang was unsealed in the Eastern District of New York on July 16, 2026. Prosecutors alleged that a shared network of people managed companies and accounts used to launder proceeds from cyber investment fraud, commonly called pig butchering schemes.
The charges remain allegations and both defendants are presumed innocent unless and until proven guilty.
DOJ did not allege that the companies shared phone numbers, addresses, devices, or formation agents. Those are broader data points investigators may compare when reviewing connections across entities.
What Federal Prosecutors Alleged in the $43 Million Case
According to the U.S. Attorney’s Office for the Eastern District of New York, Chen and Zhang allegedly managed more than a dozen individuals based in Queens and Brooklyn between 2020 and 2022.
Those individuals allegedly opened company bank accounts as part of the broader operation. Chen, Zhang, and other co-conspirators allegedly oversaw how the businesses and accounts were used.
The government also alleged that Chen and Zhang worked with China-based co-conspirators to transfer funds involved in the schemes abroad.
The connection prosecutors actually identified was people.
Prosecutors alleged that the same broader group was involved in managing the companies and opening the related bank accounts.
Why Reviewing One Company at a Time Can Miss the Larger Risk
Traditional business onboarding often starts with one entity.
A team may review the company’s name, ownership information, business address, contact details, documents, and related identity information. Each field may appear reasonable when checked within that single record.
Cross-record review asks another question:
Does This Company Connect To Other Businesses Or People Already In Our Data?
Consider a new business applicant whose information appears complete. The company name is valid. The contact number works. The owner provides identifying information. Nothing alone creates an obvious concern.
Then an analyst compares the record with previous applications.
The same person may appear as an owner or authorized user on several businesses. The phone number may appear on another account. The mailing address may connect to several companies. Other internal systems may show common devices or login activity.
But together, they may give a compliance team a reason to ask whether the relationship makes sense or needs enhanced due diligence.
Shared Identifiers AML Teams Can Compare Across Records
The more data points available, the more useful cross-record review becomes. What teams can compare will vary, but several categories come up often.
People and Identity Information
People are often one of the strongest links between records.
Teams may compare:
- Beneficial owners
- Company officers
- Account applicants
- Authorized users
- Account signatories
- Associated individuals
- Other people connected with the business
A person appearing across several companies is not automatically suspicious.
An entrepreneur may operate several businesses. An attorney or accountant may be associated with many clients. A parent company may control multiple subsidiaries.
What matters is whether the relationship has a reasonable explanation.
This is also the type of relationship directly relevant to the July 2026 case. Prosecutors alleged that Chen and Zhang managed a group of people who opened accounts for the shell companies.
Phone Numbers and Contact Information
Phone data can provide another comparison point.
An investigator may find that the same number appears across multiple business applications or that a number is associated with different names in existing records.
Teams can also review phone characteristics such as whether a number is active, its line type, carrier information, and other available data.
A phone match should not be treated as proof of common ownership or fraud.
Businesses may share a central office number. Employees may manage calls for several related companies. Contact information can also become outdated or be entered incorrectly.
A phone match becomes more useful when it lines up with other information in the record.
Addresses
Addresses can also connect records.
Investigators may compare business addresses, mailing addresses, and addresses associated with owners or applicants.
Several entities using the same address can have a normal explanation. Office buildings, coworking spaces, registered-agent services, and shared households can all create legitimate matches.
A repeated address means more when the analyst looks at who uses it, which companies are tied to it, and whether the relationship makes sense.
Devices and Digital Identifiers
Banks and fintech companies may also have internal device and access information.
That can include:
- Device identifiers
- IP addresses
- Login history
- Browser or session information
These signals can help show whether supposedly separate applications or accounts are being accessed in similar ways.
Device intelligence is not a Searchbug service discussed here. It may come from a bank, fintech platform, fraud system, or another provider.
Analysts can combine those internal signals with verified identity and contact information when conducting a broader review.
Formation and Banking Relationships
Investigators may also consider connections involving:
- Registered agents
- Formation agents
- Account signatories
- Beneficiaries
- Financial institutions
- Account-opening activity
These relationships can also be relevant in other investigations.
They were not identified by DOJ as recurring links among the approximately 45 shell companies in the Chen and Zhang case.
One Match Is a Signal. A Pattern Deserves More Review
A single repeated field may have a simple explanation.
An accountant can work with several companies. Multiple subsidiaries can use the same phone number. Companies can operate from the same office. A registered agent can represent thousands of unrelated businesses.
Analysts should look at the full pattern, not one matching field.
Analysts can consider:
- How many identifiers overlap
- Which identifiers overlap
- How often the same people appear
- Whether the relationship has a clear business explanation
- Whether the information matches the customer’s stated business activity
- Whether other onboarding or transaction risks are present
Several consistent connections may support further review even when no single data point would justify action on its own.
These connections give analysts more information to decide what deserves a closer look.
Where Cross-Record Review Fits Into AML and Business Onboarding
Cross-record checks can be useful before onboarding, during ongoing monitoring, and when an investigation begins.
During Business Onboarding
A new applicant can be compared with previous customer, account, or application records.
This can help teams identify people or contact information already associated with other entities before onboarding is complete.
During Enhanced Due Diligence
A risk signal may require closer examination of an entity’s owners, associated people, contact information, and business relationships.
Cross-record comparisons can show analysts which details need another check.
During Ongoing Monitoring
Customer information changes.
New phone numbers, addresses, owners, or related businesses may appear after the original onboarding review.
Comparing new information with existing records can reveal relationships that were not available when the account was first opened.
During Investigations
AML investigators and law enforcement analysts may need to understand how several entities relate to one another.
Matching people, phone numbers, addresses, or other identifiers can help determine which records deserve further investigation.
These checks add information to an investigation, but teams still need transaction data, beneficial ownership records, sanctions screening, financial records, and human review.
How Searchbug Tools Support Cross-Record Review
A cross-record review often starts with the people behind the business. From there, analysts can add identity, contact, and phone data to see whether the same information appears elsewhere.
KYC/AML
Searchbug KYC and AML tools can support identity and watchlist-related checks on people associated with a business. These results can be reviewed alongside onboarding records, beneficial ownership information, and other compliance data.
People Search
Searchbug People Search can help investigators locate available identity and contact information tied to individuals under review. That can give analysts more fields to compare when the same person appears across multiple business records.
Data Append
If records are incomplete, Data Append can add available contact fields that give investigators more information to compare across customer or business files.
Phone Validator
When a phone number appears across multiple records, Phone Validator can provide information such as number status, line type, carrier details, and other available phone data. Analysts can compare those results with other identity, onboarding, and internal risk signals.
Searchbug can add identity and contact data to the review, but the analyst still has to determine what the connections mean. These tools do not replace KYB, beneficial ownership review, transaction monitoring, device intelligence, or human investigation.
Conclusion
The July 2026 indictment shows why separate business records may need to be reviewed for connections to the same people.
One matching identifier is rarely enough to tell an AML team much. Several related matches, especially when they involve the same people or contact information, may justify a closer review.
Who is behind this business? Does that person appear in other records? Does the contact information connect to other entities? Are several identifiers overlapping? Is there a reasonable explanation for those relationships?
Better cross-record comparisons give investigators more information before they decide what needs further investigation.
Create a free Searchbug API Test Account with $10 in credits to test data validation and enrichment APIs. For larger datasets, Searchbug also offers Bulk Processing options.
TL;DR
- Prosecutors alleged that approximately 45 shell companies and 140 bank accounts were used to launder at least $43 million in investment fraud proceeds.
- The alleged companies were connected through a shared network of people managing and opening accounts.
- DOJ did not say the companies reused phone numbers, addresses, devices, or formation agents.
- Investigators can still compare those identifiers across business records to look for additional connections.
- One shared identifier does not prove fraud, but several related signals may support further review.
Editorial note: The indictment against Zhuoying Chen and Haojie Zhang contains allegations only, and both defendants are presumed innocent unless and until proven guilty. Searchbug tools can support cross-record review with identity and contact data but do not determine that connected entities are involved in fraud.
