The Tudou Succession: How Three Platforms Carved Up a $12 Billion Guarantee Marketplace

Chris d’Eon, Threat Intelligence Researcher

When Tudou Guarantee shut down in January 2026, it left behind a $12 billion empire with no heir. Hundreds of thousands of channel subscribers, premium Telegram usernames, vendor relationships, and a customer base accustomed to spending millions in USDT on laundering, stolen data, and fraud tooling were suddenly up for grabs. Within weeks, three platforms announced they had each acquired Tudou’s assets. Their claims overlapped, contradicted one another, and in at least one case appear to be fabricated entirely. This is the story of Ouyi, Tiancheng, and Timi: three operations that raced to feast on the carcass of one of the largest cybercrime marketplaces ever to operate, and what their competition means for defenders tracking fraud infrastructure that targets the West.

Curious about what happened before this point? Read The Prehistory of Chinese-Language Guarantee Marketplaces for an overview of the massive “guarantee” ecosystem that dominates Chinese-language cybercrime and fuels the Asian scam-compound industry.

Key Findings About the Tudou Succession Landscape

• Tudou Guarantee was a high-volume escrow marketplace that rose as a successor to Huione and then shut down. It processed roughly $12 billion in lifetime transactions, swelling after Huione’s mid-2025 takedown, before winding down its operations in January 2026 and leaving its channels, usernames, and vendor base up for grabs.
• Three rival platforms split up Tudou’s estate between them. Ouyi, Tiancheng, and Timi each announced an acquisition, yet they have distinct channels, staff, and wallet clusters with no money moving between them. Much of Tudou’s actual trading volume moved to the surviving platform Xinbi. Each of the three claimants to the Tudou estate is a separate operation with its own operators and deposit addresses, and the field has stayed fragmented across successor platforms.
• Tiancheng is the platform that verifiably inherited Tudou’s core infrastructure. It took over Tudou’s real channels and renamed them in place, retaining more than 570,000 of Tudou’s members, and it acquired the Feibo gambling brand. These acquisitions make Tiancheng the highest-value monitoring target of the three, and its published TRON deposit addresses are live laundering rails worth tracing.
• All three sell a complete supply chain for fraud that targets the West. Their directories broker USDT laundering and cash-out, bulk stolen data, SIM and real-name verification, deepfakes, remote-access malware, and bulletproof hosting. These channels are where the tooling and laundering behind pig-butchering, ghost-tapping, and investment scams against Western victims are sourced, which makes them a direct early-warning source for emerging fraud infrastructure.
• Tudou’s shutdown has not stopped the guarantee marketplace from operating at scale. Numerous players in the ecosystem have filled the vacuum created by Tudou’s winding-down, and these platforms show no sign of going away.

The Guarantee Marketplace Ecosystem

A guarantee marketplace, 担保 (dānbǎo) in Mandarin, is an escrow service for cybercrime. It exists to solve a basic problem among anonymous criminal counterparties: neither side trusts the other to pay or deliver. The marketplace operator sits in the middle as guarantor. A vendor wishing to sell stolen data, laundering services, scam software, or SIM cards deposits a bond in the cryptocurrency Tether (USDT), opens a public Telegram group under the platform’s brand, and advertises. Buyers transact through the platform’s escrow rather than paying the vendor directly, and the operator releases funds only once both sides confirm the deal. If a dispute arises, the platform arbitrates and can seize the vendor’s bond.

The model runs primarily on Telegram and almost entirely in USDT. A mature marketplace is a sprawl of channels. There is an official announcement channel, a supply-and-demand listings channel, customer-service and arbitration channels, and hundreds or thousands of numbered “public groups” (公群), each a vendor storefront with its own deposit on file. The largest platforms have processed tens of billions of dollars, and they are the financial substrate of the Southeast Asian scam-compound economy, the place where pig-butchering crews buy their tools and launder their proceeds.

The model was mainstreamed by Huione Guarantee (汇旺担保), which launched on Telegram in 2021 and grew into the largest illicit online marketplace ever to operate, facilitating more than $27 billion in transactions before it was taken down. It was one arm of the Cambodian conglomerate Huione Group, whose wider network of companies moved an estimated $98 billion in crypto.

Huione met its end in 2025. On May 1, the US Treasury’s FinCEN named Huione Group a primary money laundering concern under Section 311 of the USA PATRIOT Act, and on May 13 Telegram forced both Huione Guarantee and Xinbi Guarantee offline, two platforms that together had handled over $35 billion.

The takedown disrupted the ecosystem but did not kill it. Within weeks, more than 30 successor markets were competing for the displaced vendor base. The clearest beneficiaries were two platforms that already existed. Huione Group had previously acquired a 30% stake in another brand, Tudou Guarantee, which absorbed a large portion of Huione’s vendors and saw transaction activity rise roughly seventyfold. Xinbi Guarantee, banned the same day as Huione, rebuilt on Telegram within days and saw daily traffic surge about 90%.

Tudou’s Rise and Wind-Down

Tudou Guarantee (土豆担保) had been operating as an independent escrow platform with infrastructure closely resembling Huione’s. In January 2026, Tudou wound down its operations after processing roughly $12 billion in lifetime transactions. Much of Tudou’s displaced demand flowed to the surviving Xinbi, which had relaunched after its own May 2025 ban and went on to dominate the market that followed.

The 土豆担保 @tddb channel is still live today, but only as an unmoderated shell of vendor spam, where users advertise license-plate fraud, fake USDT sales, and money mule recruitment. There is no pinned wind-down or handover statement from Tudou itself. The brand persists as a seemingly abandoned chat room while its valuable assets were sold off to the successors.

What Tudou left behind was valuable. A dead marketplace still owns brand-name channels with hundreds of thousands of subscribers, premium Telegram usernames, vanity phone numbers, a roster of vendor relationships, and a sprawling customer base.

The Scramble for Tudou’s Estate

At least three successor platforms each publicly claimed to have acquired Tudou’s assets during February and March 2026. Within weeks of Tudou’s wind-down, Ouyi Guarantee (欧易担保), Tiancheng Guarantee (天成担保), and Timi Guarantee (提米担保) each announced that they had acquired Tudou’s assets and invited its displaced vendors to re-register. Their claims overlap and contradict one another. All three dubiously claim to have inherited Tudou’s roster of public vendor groups, but Ouyi and Tiancheng both verifiably acquired Telegram channels and accounts previously belonging to Tudou.

The post-Tudou guarantee marketplace family tree

This is not underground trivia for threat researchers alone. These directories are where attackers buy the stolen credentials, real-name identities, and SIM access that drive account takeover and fraud against your workforce and customers. Every listing below sits upstream of a breach, an ATO wave, or a fraud loss that eventually lands on your board’s risk register. Knowing where this supply chain lives is the first step to measurably reducing that exposure.

The three are competitors, yet their service catalogues are nearly interchangeable. The public-group directories of all three advertise the same categories of vendor services, typical of guarantee marketplaces. Common offerings from all three platforms include the following:

Money laundering and payment processing

• Cash acceptance and conversion (承兑), covering physical cash, gift cards, platform and streaming tokens, and event-ticket redemption
• Clean-funds exchange and payout (白资换汇 / 代付 / 收U)
• USDT cash-out through card merchants (卡商) and first- and second-tier bank cards (一道卡 / 二道卡接回U)
• Code-based cash-out (码接回U)
• App-based money muling (APP跑分)
• WeChat and Alipay third-party payment (微信 / 支付宝代付)
• Third-party collection and payment (代收代付)
• Virtual USD cards (虚拟U卡)
• Global payment corridors and overseas channels (海外直通车 / 全球支付通道)
• Aggregate payment-code gateways (聚合码通道)

Stolen data and lookups

• Bulk stolen data, bought and sold (收数据 / 出数据)
• Overseas and source-level data via SDK and DPI extraction (海外数据)
• Background and identity lookups (天眼查 / 查档)

Accounts, identity, and SIMs

• SIM-card supply and real-name verification (接码实名)
• Account sale and rental, including WeChat, Xianyu, DingTalk, Kuaishou, and QQ (各种账号 / 租号)
• Telegram accounts and memberships, and WhatsApp blue-tick (TG账号 / WS蓝标)
• Premium +888 anonymous-number NFTs and vanity numbers
• Apple ID rental (租苹果ID)
• Account and exchange unbanning (解封 / 交易所解封)

Technical and infrastructure

• Turnkey gambling-site build-out (全球包网) and API game providers (API游戏商)
• Custom platform and software development, and bots (平台搭建 / 机器人)
• Domains, servers, and defensive CDN / bulletproof hosting (域名 / 服务器 / 防御CDN)
• Remote-access tools and malware (远控 / 报毒)
• App signing and store placement (签名上架 / 苹果签名)
• Cheats and scripts (外挂开发)
• Search-ranking optimization (优化排名 / 百度排名)

Cryptocurrency services

• Coin mixing and cross-chain swaps (混币 / 跨链兑换)
• TRX and TRON energy exchange (TRX能量兑换)
• Spot, futures, and copy-trading (现货合约 / 跟单)

Marketing, traffic, and lead generation

• Lead generation and fan harvesting (引流出粉 / 收粉收量)
• Street promotion such as stickers and power banks (地推)
• Phone, SMS, and call gateways (手机口 / 短信口 / 接听口 / 医保口)
• Bulk SMS and IM mass-send (短信代发 / IM代发)
• Short-video and express-delivery mass posting (短视频代发 / 快递代发)
• Telesales (电销)
• Chat scripts and lead handlers (拉手 / 话术单)
• Forced-pull and zombie-fan services (群发强拉 / 僵尸粉)
• Gambling and entertainment rebates (菠菜返现 / 娱乐返现)

Other services

• Graphic design (美工设计)
• ID and Apple-ID loans (ID贷款 / 苹果ID贷)
• Romance, escort, and sugar-dating (恋爱 / 包养 / 裸聊 / 高端外围)
• Ticketing payment (票务代付)
• Chat-log editing and AI face-swap deepfakes (改聊天记录 / AI换脸)
• Immigration, study-abroad, visa, and passport services (移民 / 留学 / 签证)
• Crisis PR and negative-news removal (危机公关)
• Tutorials and teaching materials (教学)

Physical goods

• Cigarettes and alcohol (烟酒)
• Health supplements and luxury goods (保健品 / 奢侈品)
• Phones and electronics, including gold-clad tungsten and high-imitation handsets (金包钨 / 高仿手机)
• Phone and data SIM cards (手机卡 / 流量卡)
• Equipment and Starlink terminals (设备 / 星链)

Gambling rooms

• PC28 in standard, high-multiplier, and web-disk variants
• Dice games (骰子 / 单骰 / 快3 / 扫雷)
• Baccarat and live-dealer casino (百家乐 / 视讯)
• Slots, fishing, and electronic games (电子 / 捕鱼 / 老虎机)
• Niu-niu and red-packet games (牛牛 / 红包)
• Hash games (哈希游戏)
• Texas hold’em (德州扑克)
• Lottery, Mark Six, and credit-lottery books (彩票 / 六合彩 / 信用盘)
• Sports books and fixed-match deals (体育球盘 / 协议球)

Posts on Tiancheng, Ouyi, and Timi advertising the services they offer

Ouyi Guarantee

Ouyi Guarantee (欧易担保) officially launched on April 1, 2025, but the supply-and-demand board now titled 欧易供需频道 (Ouyi Supply and Demand) was created in May 2023, almost two years prior. It appears to have existed as a shared listings board with a rotating set of publisher signatures, among them 盈宝供需 (Yingbao Supply and Demand) and 大西洋担保 (Daxiyang/Atlantic Guarantee). The platform created its own public-group channel on March 2, 2025, and then on March 31 the supply-and-demand channel declared that Ouyi Guarantee would officially launch the next day.

“Dear Business Owners, Elites, and Partners:

Hello!

In this era full of opportunities and challenges, capital security is the cornerstone of enterprise development and a core issue that every decision-maker cannot ignore. Today, with full confidence and enthusiasm, we officially announce: Ouyi Guarantee will be officially launched on April 1st!

We are committed to protecting capital security and empowering the future of business, focusing on providing comprehensive, customized, and zero-blind-spot-defense capital security services for business owners, investors, and industry leaders, helping enterprises to move forward steadily without fear of risks!”

OKX Brand Imitation

Ouyi’s name and graphic design appear to imitate the branding of the crypto exchange OKX, which is branded “Ouyi” in Chinese markets. Ouyi Guarantee’s logo contains the same stylized “X” found in the OKX logo.

The OKX logo compared with the Ouyi Guarantee logo

There has so far been no evidence of any real relation between OKX and Ouyi Guarantee. The guarantee platform uses a bare TRON address not related to any exchange. There is no mention of OKX in any Ouyi Guarantee official communications, nor is there any attempt to direct funds through the OKX crypto exchange or otherwise integrate the guarantee platform with the real OKX.

Ouyi’s Tudou Acquisition

Nearly a year after its launch, Ouyi moved first on acquiring Tudou assets, posting its claim on February 19, 2026, a month before Tiancheng. It claimed Tudou’s premium usernames and vanity numbers.

“OYDB Guarantee Company has successfully acquired core assets of Tudou Guarantee, marking a new milestone in its guarantee capabilities!

@oydb OYDB | Always adhering to the service philosophy of “Safety, Efficiency, and Trust.” Today, we are pleased to announce that OYDB has successfully completed the acquisition of several valuable IDs and groups under Tudou Guarantee, further elevating its overall investment!

Key Achievements of this Acquisition:

🔹 Acquired all four Tudou Guarantee IDs: @xinqun, @zhuanqun, @yanqun, and @jubao.

A single ID, @xinqun, is valued at $400,000 USD.

The total value of the four IDs is $700,000 USD.

🔹 Acquired over 1,800 Tudou Guarantee public groups, with a total value of $450,000 USD.

🔹 Acquired three four-character IDs (+888), with a total value of $1,250,000 USD.

🔹 Newly acquired 12 four-character IDs, with a total value of $100,000 USD.

To date, Ouyi Guarantee holds a total of 16 four-character IDs.

The total value of these acquisitions reaches $2.5 million USD (equivalent to RMB 17.17 million), fully demonstrating Ouyi’s deep presence and strong financial strength in the guarantee field.

@oydb Ouyi Guarantee Acquires Tudou Public Groups

Ouyi Guarantee has acquired 1800+ Tudou public groups. We are currently continuing to acquire valuable groups, channels, and usernames. We firmly believe that only by continuously improving service standards can we truly build a safe and trustworthy trading environment for users.

If your original Tudou public group is acquired by Ouyi Guarantee, contact Ouyi Guarantee to deposit your original Tudou public group to receive traffic support from Ouyi Guarantee and help you reopen your public group and take your business to the next level!”

What Ouyi verifiably acquired were the four premium usernames. All four now resolve to Ouyi-controlled channels, each repurposed for one of Ouyi’s own functions.

The @xinqun channel, created on May 27, 2025, and rebranded February 19, 2026

In addition to the four assets it acquired from Tudou, Ouyi’s own supply-and-demand channel has over 165,000 members, its public group over 170,000, and its group chat over 67,000. The traffic in its 欧易担保大 group chat channel has exploded from a few thousand messages per day to over 200,000 messages per day.

Message volume over time in the Flare platform for Ouyi’s 欧易担保大群 channel (Flare link to data, sign up for the free trial to access if you aren’t already a customer)

Tiancheng Guarantee

Tiancheng Guarantee (天成担保) made the largest claim to Tudou’s estate. Tiancheng is an established operation that predates Tudou’s collapse, and its name has a history of its own. The parent, 天成集团 (Tiancheng Group), presents itself as a diversified business of around 15 years, with an overseas gambling brand called 天成包网 that it claims ranks among the larger operators of its kind.

“Tiancheng Guarantee Introduction

Tiancheng Guarantee is a subsidiary of Tiancheng Group and a key business segment within the group. Tiancheng Group operates across multiple industries, including real estate, entertainment, catering, and global gaming betting services, and has become one of the most popular betting providers in Southeast Asia due to its outstanding performance. As a crucial component of the group’s innovative development, Tiancheng Guarantee is committed to providing comprehensive and efficient guarantee services to global users, offering precise protection for the needs of different industries and sectors through diversified traffic pools.”

The Jiuding Merger and Split

Tiancheng started a guarantee arm in 2024 and, in spring 2025, merged that arm with the guarantee business of a separate operator, 玖鼎集团 (Jiuding Group), to run jointly under the combined brand 玖鼎天成担保 (Jiuding Tiancheng Guarantee).

“Hello everyone!

We are pleased to announce the official merger of Tiancheng Guarantee and Jiuding Guarantee. Effective immediately, we will serve you under the new name ‘Jiuding Tiancheng Guarantee’!

This merger represents a powerful alliance between two leading brands, combining their respective industry experience, professional teams, and extensive customer resources to bring you more comprehensive and high-quality guarantee services. We deeply understand that reputation and responsibility are the foundation of our market position, and this merger is precisely to better serve every user and enhance our industry competitiveness and customer experience.

The merged Jiuding Tiancheng Guarantee will continue to build a more efficient, transparent, and secure guarantee platform. We will fully utilize the combined resources to continuously improve the quality of our platform services and expand our business scope to meet the diverse needs of the market and our customers.

We believe that through this merger, the strengths of Tiancheng and Jiuding will complement each other, jointly driving industry progress and achieving a brighter future. Standing at this new starting point, we will pursue excellence with even greater enthusiasm and unwavering faith, bravely facing the challenges of the future.

The four characters ‘玖鼎天成’ also engrave our promise: A promise is a promise, and all things will be accomplished. ”

Jiuding Group (玖鼎集团) has a documented real-world footprint as a Manila-based casino-junket operator, known in the Philippines as 9 Dynasty Group. In May 2025, the Philippine National Police named it as a junket through which the ransom from the kidnapping and murder of Chinese-Filipino steel magnate Anson Que was laundered. The roughly 200-million-peso ransom the family claimed to have paid was moved through casino e-wallets and converted to USDT. A portion of the ransom paid was withdrawn through a Cambodia-based account that US authorities had previously flagged for money laundering. 9 Dynasty announced its withdrawal from the Philippine market on May 6, 2025.

“[Announcement]

Dear Clients and Partners:

‘Jiuding Tiancheng Guarantee’ is a key overseas cooperative business jointly conducted by Tiancheng Group and Jiuding Group, and is not affected by Jiuding Group’s recent strategic adjustments. All business operations continue as usual. Clients and partners using our guarantee services can rest assured that Jiuding Tiancheng will continue to provide safe, professional, and stable guarantee services.

Due to recent inquiries from numerous clients regarding Jiuding’s business in the Philippines, we hereby issue the following clarification:

This decision by Jiuding Group is part of its overall business layout and resource optimization, made after careful evaluation. It does not represent a weakening of the Group’s strength, so please rest assured.

Furthermore, Jiuding Group’s VIP room in the Philippines has proactively and fully refunded all clients, demonstrating Jiuding Group’s consistent commitment to integrity and its strong financial strength.

Thank you for your continued support and trust!”

After Jiuding announced it was ceasing operations and leaving Southeast Asia, Tiancheng dropped the joint name. An October 18, 2025 announcement on its official channel declared that 玖鼎天成担保 would become the standalone 天成担保 from that day.

“Dear Clients and Partners:

‘Jiuding Tiancheng Guarantee’ was originally a joint business of Tiancheng Group and Jiuding Group. Due to Jiuding Group’s announcement that it will cease operations and withdraw from the Southeast Asian market in October 2025, the ‘Jiuding Tiancheng Guarantee’ brand will be officially renamed ‘Tiancheng Guarantee’ starting October 18, 2025.“

Tiancheng’s Tudou Acquisition

Four months after the renaming, Tiancheng moved on Tudou’s estate. On March 18, 2026, it announced that it had bought the core of Tudou’s infrastructure for a stated 5 million USDT (500万). The channel is now titled “天成公群 (原土豆公群),” meaning “Tiancheng Public Group (formerly Tudou Public Group).”

“Tiancheng Guarantee · Public Group Recruitment · Now Open

Recently, Tiancheng Guarantee spent millions of USDT to acquire thousands of public groups from Tudou Guarantee, including various core channels and valuable IDs.

Guarantee investment has been comprehensively upgraded, resulting in a significant increase in strength and a commitment to achieving new heights!

We now welcome all existing merchants to return and join us! Share resources and create value together!

Joining Benefits:

Existing Tudou public group owners:

3 months free service fee + 7 days supply and demand support + long-term advertising push + 30 days dedicated traffic generation

Other public group owners:

1 month free service fee + 3 days supply and demand support + long-term advertising push + 15 days dedicated traffic generation

Referral Rewards: Successful referral —> Cash 288U–888U

Why choose Tiancheng?

• Brand Upgrade, Different Brand, Same Service
• Strong Backing: 15 years of group experience, Top 3 overseas gambling platform, thousands of betting platforms and payment channels, and various offline endorsements
• Safe and Efficient: One-stop support for traffic, advertising, and lead generation”

“Tiancheng Guarantee has completed a major acquisition of Tudou’s core channels, officially taking over resources from several top channels:

Tudou Main Public Group Channel tdgx: 1,000,000 USDT

Tudou Main Supply and Demand Channel tdgq: 740,000 USDT

Feibo Channel / OK Game Center: 1,080,000 USDT

Tudou New Group Channel: 210,000 USDT

Tudou Guarantee: 110,000 USDT

Tudou Agent Channel: 80,000 USDT

Tudou Customer Service Channel: 30,000 USDT

Over 1,800 Tudou Public Groups: 360,000 USDT Other 33 core Tudou resource channels and groups: 1,400,000 USDT

A total of up to 5 million USDT.

Tiancheng Guarantee sincerely invites former Tudou public group owners to return and join us, offering 3 months of free service fees, supply-and-demand support, and long-term advertising pushes.”

Tiancheng’s Inherited Channels

Tiancheng now operates many of Tudou’s channels and has been renaming them in place. The highest-value channels already carry the Tiancheng name with Tudou’s original audiences still attached.

A second tier of channels kept their Tudou-era titles but are nonetheless operated by Tiancheng today. Each of these channels now broadcasts Tiancheng’s official staff roster and its three TRC20 deposit addresses, the TRON-network wallets where it receives USDT.

Tiancheng-branded channel links in a Tudou-branded Telegram channel

Starting in January 2026, there was a notable decrease in message volumes in Telegram channels controlled by Tudou. By late February and early March, with Tiancheng in control of the channels, message volumes were climbing again.

Message volumes over time in the Flare platform for the supply and demand channel formerly owned by Tudou, acquired by Tiancheng (Flare link to data, sign up for the free trial to access if you aren’t already a customer)

Timi Guarantee

Timi Guarantee’s (提米担保) escrow business opened in April 2025, but it started as a gambling and wallet operation. Members of its group chat were already discussing the Timi wallet in early February 2025, two months before any escrow existed.

“Timi itself had no guarantee, and once enough people trusted us, the guarantee came into being.”

They created the supply-and-demand board in July 2023, though someone wiped its earlier content and its prior identity cannot be recovered. The escrow service came in April 2025, and the bid for Tudou’s groups followed 10 months after that.

Timi posted its own announcement on February 21, claiming over 2,000 former Tudou public groups.

“Timi Guarantee has acquired over 2,000 public groups previously owned by Tudou [Huiwang] Guarantee. This acquisition aims to serve the owners of public groups joining Timi Guarantee, integrating resources, expanding traffic, and improving overall operational efficiency.”

Timi’s claim is the thinnest of the three. The post offers a display of “groups already handed over,” but the only thing it points to is Timi’s own rental-listings channel @tmzhaozu, which has 834 members at the time of writing. No Tudou-branded channel appears to be under Timi control, and Timi never assigned a price to anything it claimed. Where Tiancheng renamed Tudou’s six-figure channels in place and Ouyi at least holds the four premium usernames, Timi shows no verifiable inheritance at all.

Timi is the smallest of the three platforms. At the time of writing, its supply-and-demand channel has just over 35,000 members, its public group navigation page has approximately 19,000 members, and its group chat channels have approximately 12,000 and 17,000 members, respectively.

Overlapping Claims

The same pool of public groups was claimed three times over. Tiancheng claimed more than 1,800, Ouyi claimed more than 1,800, and Timi claimed more than 2,000. Two platforms cannot both own the identical groups, let alone three.

Public groups are created for and run by independent group-bosses (公群老板) who rent the platform’s escrow and brand. When Tudou died, each successor invited those orphaned bosses to re-register under its own brand, offering the same incentive of roughly three months of free service fees plus traffic support. Each platform then advertised the result as having “acquired” thousands of Tudou groups. These claims should all be read with a grain of salt.

Following the Money

So far there has been no on-chain evidence to suggest that any of these three platforms are related. Ouyi, Tiancheng, and Timi each publish their own TRON deposit addresses, and a sample of recent USDT transfer histories for each address shows separate escrow wallets with no money moving between them. The three platforms do share some counterparties, but profiling those addresses suggests they largely correspond to common cash-out infrastructure and shared customers. It appears that these three platforms are competitors.

What Security Teams Can Learn from the Tudou Fallout

The breakup of Tudou was a contested liquidation, where multiple brands scrambled to inherit Tudou’s assets and customer base.

Tiancheng was the primary successor and the only one that secured the crown jewels, taking over the actual tdgx and tdgq channels, the Feibo gambling brand, and the official agent and customer-service channels. Its public-group channel now openly carries the “formerly Tudou” title. This was most likely a genuine, negotiated transfer of the core assets, consistent with a platform that had a prior relationship with Tudou.

Ouyi was an opportunistic first mover that grabbed a set of premium usernames and vanity numbers but not the core channels. It verifiably controls the @xinqun and @yanqun handles, but little else in its announcement can be confirmed.

Timi was a third bidder for the same orphaned vendor base. Its claim of “2,000+ groups” is the same customer-acquisition pitch the other two made.

The three carrion birds, Ouyi, Tiancheng, and Timi, scrambled for the residual traffic of a dead platform. They have distinct channels, distinct operators, and distinct wallet clusters, with no money seen moving between them so far. The only thing they shared was a market full of newly homeless vendors and the chance to recruit them.

Tudou’s shutdown has not reduced the guarantee marketplace ecosystem’s capacity to operate at scale. Numerous players have filled the vacuum, and these platforms show no sign of going away.

All three platforms make available a vast array of products and services that enable the international fraud ecosystem that very often target Western victims. For security teams monitoring this fraud infrastructure, the fragmentation makes the landscape harder to track but does not make it less dangerous. Tiancheng’s inherited channels and all three platforms’ published deposit addresses represent concrete, actionable starting points for ongoing collection.