He Had Five Passports, a $67 Million London Mansion, and 38 Shell Companies. A Fake Address Took Him Down.

Body

In 2010, Chongqing cyber police busted the "Knight Attack Group" case. Nineteen core members were arrested. Hu Xiaowei was not on the main suspect list.

He was 28 that year, a native of Suqian, Jiangsu, and a master's graduate in computer science from Chongqing University. Most of those arrested in the same case were post-80s men with only junior-high or high-school educations. Cai Wen, an unemployed man, had somehow become a multimillionaire. Yet the most educated person in the group had disappeared in advance. He later admitted that he had fled to the Philippines.

At the time, no one noticed that Chen Zhi was also absent from the arrest list. Chen Zhi was merely an ordinary member of the Knight Attack Group, not even part of its core. It was Hu Xiaowei who brought him into the online gray-market business. Fifteen years later, Chen Zhi became the public face of the Prince Group. Hu Xiaowei became the "number two figure" in a U.S. Treasury sanctions document. Chen Zhi addressed him to his face as "big brother."

The relationship between these two is easily read by outsiders as a matter of underworld seniority. The more important thread is another one. Over those fifteen years, Hu Xiaowei turned "identity" itself into something that could be mass-produced, deployed across borders, and switched at any time. Passports, companies, addresses, and names were not accessories to his life. In his hands they were components to be called up, replaced, and discarded.

The Knight Attack Group: Technology as a Form of Violence

The Knight Attack Group's business was not complicated. Around 2010, private servers for The Legend of Mir were flourishing everywhere, and private-server operators relied on ad publishing sites to draw player traffic. Hu Xiaowei's team targeted those publishing sites, using DDoS attacks to cripple their servers and forcing them to hand over advertising agency rights. At their most aggressive, they contacted server-hosting providers directly and went to the data centers to unplug the network cables. According to a report in Securities Market Weekly at the time, the organization made about RMB 100 million in ten months. The Cybersecurity Protection Bureau of the Ministry of Public Security listed the case as a supervised priority and ordered Chongqing cyber police to take the lead in investigating it.

At this stage, Hu Xiaowei already displayed an engineering mindset. He never left a real phone number or address online. He communicated with lower-level agents entirely through proxy servers logged into QQ. Bank cards were bought in batches and replaced every ten days, with separate cards for receiving and withdrawing funds. As soon as money arrived, it was split and transferred out. Withdrawal points were scattered across the country, and the cash withdrawn was loaded into cars and driven around by hired drivers. The logic was to decouple every link from the others. If any single point was compromised, investigators could not reach the level above it.

When the net closed in 2011, this design worked. Cai Wen and the others were arrested. Hu Xiaowei got away. Chen Zhi was also not on the list of nineteen. The paths the two men would take over the next fifteen years were set at that moment.

After Getting Out, He Did Not Hide

Most fugitives who flee abroad scale back their activities and conceal their names. Hu Xiaowei did the opposite. He mass-produced new "selves."

The earliest mainland Chinese ID card he used bore the name "Chen Xiao'er." It had been obtained years earlier by exploiting a loophole in the rural-to-urban household registration conversion. The surname registered on it was his mother's. In 2011, he used that identity to register a company in Hong Kong. In 2017, under his real name, he applied for a passport through Cyprus's investment-for-citizenship program. In 2018 he obtained citizenship, and the following year the name on the passport was changed to "Hu Shi." Also in 2018, under the name "Chen Xiao'er," he obtained citizenship from St. Kitts and Nevis. In 2020 he changed the name on that passport to "Hu Yanming." In January 2020, under his real name, he became a Cambodian citizen. U.S. Treasury sanctions records ultimately confirmed that "Chen Xiao'er," "Hu Shi," "Hu Yanming," and "Hu Xiaowei" were the same person.

The identity system was not just for concealment. Each name corresponded to a set of documents, a place of registration, and a group of bank accounts and corporate structures. A U.S. Treasury sanctions document from June 2026 stated that Hu Xiaowei controlled three British Virgin Islands companies: Eagle Fortitude Limited, Leisure Focus Limited, and Future King Inc. Through these offshore nodes he supervised the Prince Group's subsidiary network outside Cambodia, with interests in aviation, transnational real estate, and illegal gambling. Hong Kong media investigations found that he was associated with as many as 38 companies in Hong Kong.

Identity-switching was not the cover for his crimes. It was the organizing principle of his criminal business. Each jurisdiction saw a different Hu Xiaowei, holding different passports, registered at different addresses, and controlling different companies. No single law-enforcement agency could see the whole picture at once.

At the company's annual meeting in 2015, he personally took the stage to present the grand prize. The lottery prizes had originally been prepared at RMB 1.1 million. He was in such good spirits that day that he added another RMB 1.8 million on the spot, giving out nearly RMB 3 million. To the audience, he looked like a successful Hong Kong businessman. No one knew that he was carrying an open arrest warrant.

With Chen Zhi: Two Kinds of Capability, Interlocked

Chen Zhi's strength was building a criminal ecosystem in Cambodia that had a physical form: compounds, real estate, banks, and political-business relationships. The Prince Group's online-scam compounds in Cambodia were self-contained cities. Compound No. 8 alone could accommodate about 20,000 people and covered about 120 hectares, with offices, dormitories, restaurants, and commercial facilities. A criminal economy of that scale required someone in front maintaining the face of an entrepreneur and philanthropist. It also required someone in back handling the things that could not remain inside Cambodia: how funds left the country, how companies were nested layer upon layer, and under whose name assets could be held to achieve both control and separation.

Hu Xiaowei did the latter. His value was in cross-border structuring: knowing which jurisdiction to use, which identity to register which entity under, and how the system would keep running when a particular passport ran into trouble.

In March 2015, Hu Xiaowei became a shareholder in Zhongjing Technology Investment. In November of the same year, Chen Zhi joined as a shareholder as well. In January 2019, the two exited in sync. Synchronized moves precise to the month showed that the interface between the two systems had been designed, not the product of chance overlap.

Zhang Gangyao, a Singaporean who had been in charge of the Prince Group's Taiwan operations for seven years, told OCCRP that Hu Xiaowei was the key figure who brought Chen Zhi into the online gray market. "He is the 'big brother' in Chen Zhi's words, and Chen Zhi has always respected him greatly." Zhang Gangyao remembered Hu Xiaowei as always wearing a white shirt and suit, with a neatly combed pompadour, tall, courteous, and fluent in Chinese. He was the most presentable public face of the entire team.

The Net Closes: Every "Clean" Node Disconnected

Hu Xiaowei's arrest began with something small. In June 2026, he was taken away by Tokyo Metropolitan Police at a hotel in Osaka on suspicion of forging electronic notarial documents to obtain Japanese permanent residency. At the time he held a high-skilled professional visa. To meet the residency-period requirement for permanent residence, he had falsely changed his actual address to Chuo Ward, Tokyo. On July 5, Tokyo police issued a second arrest warrant, alleging that he had lent his Japanese residence card to someone else. On July 24, Japanese prosecutors filed a summary indictment and imposed a fine equivalent to about RMB 100,000. On July 29, he was deported to the United States, where the FBI took over.

A man who could mobilize five or six passports and place assets in more than a dozen countries was brought down by a fake house number on a residence card. It looks accidental. Placed against his fifteen years of behavior, it was almost inevitable. His entire system rested on the premise that every node, viewed in isolation, was compliant. Company registration in Hong Kong was compliant. Investment-for-citizenship in Cyprus was compliant. Passport name changes in St. Kitts were compliant. Registering the London property in his wife's name was compliant. But once each clean node was identified, linked, and disconnected one by one, the system's wholeness was exposed.

The net closed in multiple places at once. On January 7, 2026, Chen Zhi was escorted back to China from Phnom Penh. In May, Hong Kong's High Court approved a restriction order sought by the Department of Justice, freezing assets totaling HK$8.938 billion belonging to Chen Zhi, Hu Xiaowei (under the name "Hu Yanming"), two other individuals, and 38 companies. Hu Xiaowei's Hong Kong assets alone were about HK$400 million. At the end of August, British authorities froze a mansion in Belgravia, London. The property had been purchased in October 2023 for £53 million and was registered in the name of Hu Xiaowei's wife, Zhao Chen. The British government had already sanctioned Hu Xiaowei himself in March 2026. In a June 23 record update, the U.S. Treasury directly changed the old sanctions entry, listed in October 2025 under the name "Chen Xiao'er," to his real name, Hu Xiaowei. That same month, Singapore police began investigating him on money-laundering charges and seized assets in his Singapore bank and securities accounts.

No single commander ordered these actions. But they all did the same thing. They stopped chasing the man who kept changing names and started mapping every alias, every passport, and every offshore company to the same entity. The anonymity accumulated over fifteen years was compressed within a few months into a natural person who could be extradited.

Hu Xiaowei's master's background in computer science did not play the role of writing code to attack servers. That was only the starting point. More important was the habit of breaking complex systems down into modules that could be deployed independently and discarded independently. Applied to legitimate work, that habit can build fault-tolerant systems. Applied to the path he chose, it built a cross-border architecture that made criminal proceeds difficult to trace in full for more than a decade.

What undid him was an arithmetic fact. The more clean nodes a system has, the more interfaces can be seen. You can change your name, but you cannot erase the records each name leaves at every registry. You can put real estate in your wife's name, but the marriage itself is a link that can be traced. Fifteen years earlier in Chongqing, he won by decoupling. Fifteen years later, when all the decoupled nodes were recoupled one by one, the system was no longer a barrier. It was the record of everything he had done.