← back to the index
YL-006 Crypto Ponzi · China 2020

WoToken — PlusToken’s Sequel Stole Another Billion Before It Could Be Stopped

yield-savingsconvicteddefi-era
Program
WoToken
Total Losses
~$1.1B (46,000 BTC + multi-coin portfolio)
Investors
715,249
Status
Convicted

Summary

WoToken, a Chinese-operated cryptocurrency yield platform, defrauded 715,249 investors of a digital asset portfolio valued at approximately $1.1 billion before collapsing in October 2019. The platform ran from August 2018, marketing itself as a wallet application that deployed a proprietary algorithmic trading bot — internally branded "Apollo" — to generate returns of 0.25 to 0.65 percent per day on deposited cryptocurrency. No such trading engine existed. Every return paid to participants was funded by fresh deposits from incoming recruits, routed through a multi-tier referral commission structure and denominated in a proprietary token, WOR, that had no value outside the platform itself.

Six operators were arrested and tried by Chinese authorities. The intermediary court of Yancheng City, Jiangsu Province — the same tribunal that separately prosecuted PlusToken — issued convictions on October 27, 2020. Four of the principal defendants received prison sentences ranging from 2.5 to 8.8 years. Court documents established what market observers had suspected from the scheme's design: at least one of the six convicted WoToken operators had been a central participant in PlusToken, the $3 billion pyramid that collapsed three months before WoToken launched. WoToken was not merely styled after PlusToken; it was, in significant part, a continuation of it — operated by some of the same people, using the same recruitment infrastructure, targeting an overlapping victim pool that had not yet been reached by the earlier scheme.

The criminal proceeds — 425 million yuan (approximately $60 million at 2020 conversion rates) — were seized and forfeited to the state treasury under Chinese law. No restitution mechanism for the 715,249 defrauded investors exists under the applicable prosecution framework.

Timeline

July–August 2018
Platform conceived and launched
Operators Gao Yudong, Li Qibing, Wang Xiaoying, Tian Bo, and two co-defendants establish WoToken, branding it as a smart digital currency wallet using the "Apollo" algorithmic arbitrage bot to generate daily returns; the WOR token is created as the in-platform reward currency.
August 2018 — October 2019
Rapid growth via WeChat and Telegram
Recruitment campaigns in Chinese social media channels drive uptake; referral commissions paid across multiple downline levels incentivize existing members to recruit aggressively; the platform accumulates 715,249 registered users.
June 2019
PlusToken collapses
The PlusToken pyramid — with which at least one WoToken operator had direct involvement — shuts down, sending a warning signal that Chinese regulators were closing in on large crypto yield schemes; WoToken recruitment accelerates as PlusToken refugees are targeted as a new audience.
October 2019
WoToken withdrawals freeze and platform closes
Users find they cannot process withdrawals; the platform ceases operations. At the time of closure, operator-controlled wallets hold 46,000 BTC, over 2 million ETH, 292,000 LTC, 56,000 BCH, and 684,000 EOS — a combined portfolio of approximately $1 billion.
Late 2019 — early 2020
Arrests
Chinese law enforcement identifies and arrests the six WoToken operators; investigations confirm the operational link to the PlusToken network through shared personnel.
May 2020
Trial begins
Proceedings open at the People's Court of Binhai County, Yancheng City, Jiangsu Province, against all six defendants on charges of organizing and leading a pyramid scheme.
October 27, 2020
Convictions and sentences handed down
The Yancheng intermediary court convicts all principal defendants; Li Qibing and Gao Yudong receive the heaviest sentences; the full range runs from 2.5 to 8.8 years imprisonment; 425 million yuan in proceeds are ordered forfeited to the state.
November 2020
PlusToken sentencing runs parallel
The same Yancheng court sentences fourteen PlusToken defendants, with sentences of two to eleven years; the dual prosecution confirms both schemes were treated by Chinese authorities as part of the same criminal network.
2020 — present
No investor restitution
Seized assets pass to the national treasury; the 715,249 victims have no formal recovery mechanism under Chinese pyramid scheme prosecution law.

The Apollo Bot and the Language of Algorithmic Returns

WoToken entered the market seven weeks after PlusToken's collapse, and its designers had studied what made PlusToken credible. Where PlusToken used an in-app feature called the "AI Dog," WoToken introduced "Apollo" — a purported cross-exchange arbitrage engine that operators claimed scanned global cryptocurrency markets for price differentials and executed automated trades. The framing was deliberately technical. Members were not told they were earning interest; they were told they were receiving a share of computational arbitrage profits, a distinction that moved the promise from the domain of implausible yields into the domain of software-generated revenue.

The WOR token amplified the illusion. All daily returns and referral commissions were denominated in WOR, which operators listed on the platform's internal exchange at prices they controlled. A member investing $5,000 equivalent in Bitcoin would receive WOR tokens representing a stated daily return of 0.3 to 0.65 percent, which could theoretically be converted back to Bitcoin at the internal rate. In practice, the WOR exchange rate was a variable that operators could compress at will. When the platform ceased operations in October 2019, WOR tokens in participants' accounts became worthless overnight, since their only redemption path — the platform's internal market — had closed.

Recruitment was structured across multiple referral levels, with commissions cascading through the downline. A moderately successful recruiter could earn more from their network than from their own deposits, creating a large cohort of financially motivated advocates whose income depended on the platform's growth narrative. Doubt about WoToken's legitimacy circulated in specialist forums, but within the platform's WeChat and Telegram communities, sceptics were systematically excluded.

Custody Mechanics: Where the Money Actually Went

The central fraud mechanism was identical to PlusToken's: users deposited real, externally transferable cryptocurrency — Bitcoin, Ethereum, Litecoin, Bitcoin Cash, EOS — into wallet addresses under operator control. The moment those deposits landed, the assets left the user's control entirely. No smart contract governed conditions of return, no independent custodian held the assets, and no audited reserve confirmed that deposits were being retained. The wallet interface displayed balances and accruing WOR rewards; the underlying assets were held by six individuals in Jiangsu Province.

Court analysis confirmed that no cross-exchange arbitrage trading occurred. Inbound crypto flows were channelled to operator-controlled wallets and used for three purposes: paying daily WOR return claims (funded by newer deposits), paying referral commissions (also funded by newer deposits), and personal enrichment. The portfolio seized at arrest — 46,000 BTC, over 2 million ETH, and holdings in four additional assets — represented what remained after those outflows. Blockchain analytics indicated a portion of the BTC was liquidated through OTC channels in the final weeks, mirroring the exit methodology documented in the PlusToken prosecution.

The WOR token served a secondary function as a delay mechanism. Because returns were paid in an internal token rather than deposited cryptocurrencies, the platform could sustain the appearance of profitability even as its Bitcoin and Ethereum reserves were depleted. A member watching WOR accrue had no visibility into the underlying asset pool. When withdrawal requests began failing in October 2019, the disconnect between displayed WOR balances and actual recoverable assets was total.

The PlusToken Nexus: One Network, Two Prosecution Chapters

The link between WoToken and PlusToken was established not through inference but through the court record. Chinese prosecutors confirmed that at least one of the six WoToken defendants had been a significant participant in PlusToken before its June 2019 collapse — meaning that individual had access to PlusToken's operational playbook, its recruitment infrastructure, and likely its social media channels and WeChat group contacts before WoToken launched.

This connection explains the speed of WoToken's growth. Building a crypto yield scheme with 715,249 registered users in fourteen months would ordinarily require years of brand development. WoToken inherited an existing network of PlusToken recruiters and a ready-made audience of retail investors whom PlusToken had already primed to treat crypto wallet yield as a normal financial product.

Chinese authorities treated the two prosecutions as separate proceedings but heard both cases in the same Yancheng court. The parallel timing of the November 2020 PlusToken sentencing and the October 2020 WoToken sentencing was not coincidental; investigators had traced both networks simultaneously, and the dual prosecution was a coordinated enforcement action against what was functionally one criminal ecosystem.

The Five Factors

01
Yield-promise psychology compounded by technological framing
WoToken's daily returns of 0.25 to 0.65 percent — annualising to roughly 90 to 237 percent — were framed as algorithmic arbitrage dividends, not investment yields. When returns are attributed to software rather than human judgment, the question "why would anyone offer this?" is partially suppressed. The Apollo bot gave the scheme a product identity that a simple daily interest promise would not have provided, moving it into a register of infrastructural participation rather than speculative financial guarantee.
02
Proprietary token opacity as exit delay
Denominating returns in WOR rather than the deposited assets created an informational buffer between investor perception and underlying reality. Members watching WOR tokens accumulate had no mechanism to independently verify whether the claimed value corresponded to real assets held in reserve. The internal exchange rate was operator-controlled, meaning the platform's stated health could be managed entirely through pricing adjustments, and the eventual total loss only became visible at the moment of closure, not during the months of deterioration that preceded it.
03
Inherited network effects from a prior fraud
WoToken's connection to PlusToken gave it pre-existing distribution infrastructure; its growth to 715,249 users in fourteen months is explicable only by access to an established recruiter network. The collapse of one large scheme does not automatically dissipate its social infrastructure — those assets can be redeployed by connected operators before enforcement has concluded.
04
Referral commission architecture as sceptic suppression
The multi-tier commission structure gave a meaningful income stream to a large population of recruiters whose continued earnings depended on the platform's perceived legitimacy. Members who expressed concern publicly risked exclusion from communication channels and, with that, loss of commission income. The financial incentives embedded in the recruitment structure created a self-policing community that treated doubt as an economic threat rather than a due-diligence obligation.
05
Custody without verification
Deposited assets were transferred entirely to operator-controlled addresses with no independent oversight, no audited proof of reserve, and no smart contract governing conditions of return. Once an investor deposited, their only link to those assets was the platform's continued willingness to honour withdrawals. The failure mode was not technical; it was volitional. Operators could, and did, simply stop.

Aftermath

The four principal defendants — Gao Yudong, Li Qibing, Wang Xiaoying, and Tian Bo — received prison terms ranging from 2.5 to 8.8 years at the October 27, 2020 sentencing in Yancheng. Li Qibing and Gao Yudong, identified as the primary organisers, received the longest sentences. Two additional defendants received lesser terms for supporting roles. Criminal proceeds of 425 million yuan were ordered forfeited to the state treasury; no portion of this figure was distributed to the 715,249 victims.

Both cases were prosecuted under China's pyramid scheme statutes rather than securities fraud law, a characterisation that limited restitution options. Chinese law offers no civil class-action mechanism through which retail victims can pursue recovery of forfeited state assets. The victims' losses — denominated primarily in Bitcoin, Ethereum, and four other cryptocurrencies across a portfolio worth approximately $1 billion — are, as a practical matter, permanent.

The dual prosecution contributed to the regulatory record that informed China's September 2021 comprehensive ban on cryptocurrency trading and mining. Both PlusToken and WoToken are cited in Chinese regulatory literature as justification for treating crypto yield platforms as structurally equivalent to pyramid schemes.

Lessons

  1. A platform that pays returns in a proprietary internal token rather than the deposited asset removes the investor's ability to independently verify whether accruing balances correspond to real, held funds; any yield platform denominating returns in its own non-transferable token should be treated with heightened scrutiny regardless of the stated trading mechanism.
  2. The collapse of a large fraud scheme does not neutralise its social infrastructure: recruiters, WeChat groups, and audience lists built for one scheme are immediately available for redeployment by connected operators, and regulatory enforcement must account for the possibility that successor schemes will launch before the prior one is fully prosecuted.
  3. Multi-tier referral commissions tied to recruits' deposits create communities with structural incentives to suppress due diligence; the enthusiasm and size of a platform's advocate network is evidence of its compensation structure's effectiveness, not of its financial legitimacy.
  4. Daily returns exceeding 0.25 percent on deposited cryptocurrency — implying annual returns of 90 percent or more — attributed to automated arbitrage with no published trade history, no independently audited algorithm, and no regulated custodian for deposited assets are sufficient grounds to treat a platform as presumptively fraudulent.
  5. Custody of digital assets by a platform without independent, on-chain-verifiable proof of reserve, a regulated custodian, or enforceable legal rights governing the conditions of return is not custodianship in any protective sense; depositors in such arrangements have transferred their assets with no structural guarantee of return beyond the operator's continued volition.

References