← back to the index
PA-001 ICO fraud · Vietnam 2018

Pincoin — Vietnam’s $660 Million Token Exit Left 32,000 Investors Empty-Handed

Project
Pincoin / iFan
ICO Raise
$660 million
Token
PIN / IFAN (ERC-20)
Status
Convicted

Summary

Modern Tech Company, a Ho Chi Minh City-registered startup with eight named shareholders, raised approximately VND 15 trillion — widely reported as $660 million — from an estimated 32,000 investors across Vietnam through two linked token sales, Pincoin and iFan, between late 2017 and early 2018. The scheme promised monthly returns of 40–48 percent on Pincoin investments, offered an 8 percent referral commission for recruiting new participants, and falsely represented both tokens as products of offshore entities based in Singapore and Dubai. In January 2018, the company stopped paying cash interest and began distributing iFan tokens in place of promised returns, valuing those tokens internally at $5 each against a real market price that had collapsed to approximately one cent. By early March 2018, Modern Tech's operators had vacated their Ho Chi Minh City offices. On April 8, 2018, hundreds of investors gathered outside the now-empty premises; they found no staff, no assets, and no path to recovery.

The fraud combined two well-documented mechanisms: a classic multi-level marketing pyramid, in which earlier investors were paid using capital raised from later recruits, and an ICO exit, in which the token itself served as both the instrument of custody and the method of dilution. Investors did not hold assets in their own wallets during the fundraising phase; funds were remitted to Modern Tech and the company issued tokens whose value it controlled entirely. When it chose to exit, it did so by substituting a worthless second token for promised cash repayments, giving the scheme a few additional weeks of apparent operation before the principals disappeared.

Vietnamese authorities opened a criminal investigation in April 2018. Ho Chi Minh City police were formally tasked with the probe following a directive from Standing Vice Chairman Lê Thanh Liêm. The State Bank of Vietnam and the Prime Minister's office both issued public statements, with Ho Chi Minh City's police chief noting that all cryptocurrency transactions were at that time illegal under Vietnamese law. Prosecutorial proceedings followed, and Vietnamese court records — which are not systematically published in English — document the legal outcomes of the case against the identified principals.

The $660 million figure derives from investor-reported losses compiled by Vietnamese media and cited in Ho Chi Minh City government correspondence; it could not be independently verified through on-chain analysis at the time. Tech Wire Asia reported the figure as $658 million; CoinDesk noted it was unverified at publication. The investor count of 32,000 appears consistently across government communications and international press.

Timeline

Mid-2017
Modern Tech incorporated
Eight shareholders register Modern Tech Co., Ltd. in Ho Chi Minh City, collectively holding VND 100 billion in charter capital. Key figures include chairman Vu Huu Loi (15% stake), general director Ho Xuan Van (13% stake), and six co-shareholders each holding 12%.
Late 2017
Pincoin ICO launches
Modern Tech begins selling Pincoin (PIN), an ERC-20 token, promising investors returns of up to 40–48 percent monthly with full principal recovery within four months, plus 8 percent commissions for each new recruit. Roadshows are held in Hanoi, Ho Chi Minh City, and provincial cities.
Late 2017
iFan token introduced
Modern Tech launches a second ERC-20 token, iFan, marketed as a celebrity fan-engagement platform. Promotional materials use images of Vietnamese entertainers, including singer Dam Vinh Hung, without confirmed consent; celebrities publicly denied endorsement.
January 2018
Cash payments cease; token substitution begins
Modern Tech stops distributing cash interest to Pincoin holders and begins paying in iFan tokens, which it prices internally at $5 while the open-market value had fallen to approximately $0.01. Investors who attempt to sell find no liquidity.
Early March 2018
Offices vacated
Modern Tech does not renew its office lease in Ho Chi Minh City. Staff and principals depart. The company's phones go unanswered. Investor-facing communications cease.
April 8, 2018
Investor protest
Several hundred investors congregate outside Modern Tech's former headquarters in Ho Chi Minh City. Police observe but make no arrests at the scene. The protest receives wide Vietnamese and international press coverage.
April 9–11, 2018
Government response
Standing Vice Chairman Lê Thanh Liêm directs Ho Chi Minh City police to open a formal criminal investigation. The State Bank of Vietnam issues a public statement. Prime Minister Nguyen Xuan Phuc issues a directive on cryptocurrency management.
April 2018
Investigation formally opened
Ho Chi Minh City police accept the criminal referral. The eight named shareholders of Modern Tech are identified as the prime suspects. Multiple suspects are reported to have left Vietnam.
2018–2019
Prosecutorial proceedings
Vietnamese authorities continue building the fraud case. The legal framework used is property appropriation under the Vietnamese Penal Code; cryptocurrency's undefined legal status at the time complicates but does not prevent prosecution.
Post-2019
Legal resolution
Vietnamese court proceedings — conducted under domestic criminal law and not widely reported in English-language press — result in the convictions reflected in official case records. No investor recovery fund has been publicly established and no asset repatriation has been documented.

The Architecture of a Two-Token Exit

Modern Tech's fundraising structure was designed around the ERC-20 standard in a way that maximized the founders' control over perceived value while minimizing any obligation to deliver real returns. Pincoin was the primary investment instrument: purchasers transferred Ether or other accepted cryptocurrency to Modern Tech's wallets and received PIN tokens in return. The tokens had no external exchange listing of any substance, no working product behind them, and no blockchain utility beyond the whitepaper's claims. Value was entirely declared by the issuer.

The promised return — 40 to 48 percent per month, compounding — was arithmetically impossible to sustain from any legitimate underlying business. It was funded during the scheme's early months by incoming investment from new recruits, channeled through the multi-level referral network. The 8 percent recruitment bonus gave each investor a direct financial incentive to bring in additional participants, effectively deputizing the investor pool as a sales force. This structure allowed Modern Tech to grow its investor base rapidly — reportedly to 32,000 participants — without significant traditional marketing expenditure. According to Vietnam Investment Review, organizer Le Ngoc Tuan reportedly built "a 30,000-member community in a single week" during iFan promotions.

The iFan token served a dual purpose: it gave Modern Tech a second asset to sell, targeting a culturally distinct audience (celebrity fans, social media users) with a different marketing narrative, and it provided the exit mechanism. When cash reserves could no longer sustain interest payments — a predictable point of collapse in any Ponzi structure — the company did not close immediately. Instead, it substituted iFan tokens for cash, announcing a new "reward" policy. Because Modern Tech controlled the internal pricing of iFan at $5 per token, it could represent this substitution as fulfilling its obligations while distributing assets whose real liquidation value was negligible. Investors who accepted the substitute tokens and attempted to sell received approximately one cent per token. Those who refused were simply left with a non-redeemable Pincoin balance in a company-controlled system.

32,000 People Who Trusted a Whitepaper

The investor population of Pincoin and iFan was concentrated in Vietnam's urban centers but extended to investors in regional cities reached by the roadshow circuit. Investor testimonies reported in Vietnamese media described individuals who had committed retirement savings, borrowed against property, and pooled family funds into the scheme. The Vietnamese-language social networks — Zalo groups, Facebook communities — that Modern Tech cultivated around both tokens created closed information environments in which promotional claims circulated without challenge, skeptical voices were marginalized, and the community's collective belief in the tokens' value became self-reinforcing.

The protests of April 8, 2018 brought the human scale of the collapse into public view. Photographs published by Vietnamese press showed crowds of mostly middle-aged and older investors, many holding documents, gathered outside an empty building. Vietnamese media outlet Tuoi Tre reported investor accounts of losses in the hundreds of millions of Vietnamese dong — sums representing years or decades of savings. The harm was distributed: no single victim class, no geographic concentration that would allow targeted relief, and no insured institution against which a recovery claim could be filed.

Modern Tech had invested in the surface credibility of legitimacy. It produced professional whitepapers. It registered a company. It held in-person conferences with named speakers. It obtained a corporate charter, listed directors, and operated offices. These visible institutional features — the same features that regulators and compliance frameworks are designed to scrutinize — were deployed precisely to build the trust that made the theft possible at scale. Investors did not hand money to an anonymous online address; they invested in what appeared to be a registered Vietnamese company with identifiable leadership.

The Exit That Took Three Months to Complete

Modern Tech's exit unfolded over approximately three months rather than overnight. The January 2018 decision to stop cash payments, the March 2018 office departure, and the April 2018 public collapse were sequential stages, not a single event. This extended timeline allowed the principals to complete their departure from Vietnam before law enforcement could act, while the iFan token substitution delayed investor recognition of the fraud long enough to prevent early coordinated reporting.

The scheme's principals were not first-time fraudsters operating on instinct. According to Vietnam Investment Review, shareholder Bui Thi Ngoc My had previously led Trident Crypto Academy, which forged Ministry of Planning and Investment licenses in connection with OneCoin operations in Vietnam — a prior fraud connection not surfaced before Pincoin launched. Chairman Vu Huu Loi was described in Vietnamese business media as the "king of multi-level business" with leadership roles in Vision Vietnam Company Limited. The fraud at Modern Tech was the work of experienced direct-sales operators who adopted the ICO format as their next distribution channel. When Ho Chi Minh City police arrived at the offices on April 8, they were empty. The general director's phone was switched off by April 11.

The Five Factors

01
Multi-level marketing as a distribution accelerant
The 8 percent referral commission transformed each investor into a recruiter with a financial stake in the scheme's expansion. This structure is not unique to crypto fraud, but its application to an ICO context allowed Modern Tech to reach 32,000 investors in months without institutional marketing infrastructure. Referral networks also suppress skepticism: an investor who recruited friends and family faces social costs — not just financial ones — in acknowledging that the scheme is fraudulent.
02
Token-issuer control over pricing
In a legitimate securities market, an issuer cannot unilaterally declare the price of its own instrument. In the unregulated ICO environment of 2017–2018, Modern Tech set the internal "value" of iFan tokens at $5 and substituted them for cash obligations at that declared rate. No independent exchange, no auditor, and no regulator challenged this valuation. The gap between the issuer-declared price ($5) and the open-market price ($0.01) was the mechanism by which the final phase of the theft was executed.
03
Regulatory vacuum and legal ambiguity as an operational shield
Vietnam's central bank had declared in October 2017 that cryptocurrencies were not legal means of payment. This declaration, intended as a warning to investors, had the secondary effect of making the regulatory response to fraud more complicated: no licensing framework existed, no securities regulator had clear jurisdiction, and the absence of a legal definition for crypto assets delayed the categorization of Pincoin and iFan as instruments subject to fraud prosecution. Modern Tech operated in the gap between the warning and the enforcement framework.
04
Institutional surface as a trust proxy
Modern Tech filed corporate registration documents, listed real directors, rented offices, held conferences, and produced professionally designed marketing materials. None of these steps created accountability in fact — the company's assets could be removed and its offices vacated without triggering immediate legal consequences — but they created the appearance of accountability sufficient to satisfy the social and psychological due diligence that most retail investors perform. The lesson is that visible institutionalization is not equivalent to accountability.
05
Exit-timing asymmetry
The operators of Pincoin and iFan had continuous, real-time visibility into the scheme's cash position and the status of investor expectations. The investors had neither. This asymmetry meant that when the principals chose to exit, they had already prepared: offices were not renewed, funds were moved, and travel was arranged before a single investor understood that repayments had permanently stopped. The iFan token substitution bought additional weeks during which this asymmetry was exploited. Any detection mechanism that depends on investor-reported suspicion rather than issuer-side transparency will arrive too late in a scheme designed this way.

Aftermath

Ho Chi Minh City police formally accepted the fraud referral in April 2018 and opened an investigation into Modern Tech and its eight named shareholders. The case proceeded under Vietnam's Penal Code provisions on property appropriation. Vietnamese-language court reporting documents prosecutorial proceedings against the individuals identified in the corporate registry; the outcomes of those proceedings are reflected in the Convicted status recorded by Vietnamese legal authorities. English-language coverage of the legal resolution is thin, as Vietnamese court records are not routinely translated or indexed by international press.

No public restitution fund for the 32,000 affected investors has been established, and no documented asset recovery has been reported. The funds raised — the VND 15 trillion in token sale proceeds — were transferred through Modern Tech's controlled wallets and are not traceable to recoverable accounts in any public blockchain analysis. The corporate entity Modern Tech Co., Ltd. has no ongoing operations.

The case contributed to a tightening of Vietnam's posture on cryptocurrency. The government accelerated work on a digital-assets legal framework, and the State Bank reiterated prohibitions on cryptocurrency as a payment instrument. Vietnam subsequently became one of the higher-participation countries in global retail crypto adoption — making the absence of an investor-protection framework a continuing structural risk. Pincoin remains the largest ICO fraud by reported dollar value of any single token-sale exit scam on record.

Lessons

  1. Token sales that promise fixed monthly returns above single-digit percentages — and especially those structured as multi-level referral networks — are arithmetically incompatible with legitimate investment returns and should be treated as Ponzi structures until proven otherwise.
  2. An issuer that controls both the token and the internal price of that token can represent a worthless substitution as a fulfilled obligation; independent, third-party pricing on a functioning exchange is a minimum condition for any token claim to have reliable value.
  3. Corporate registration, named directors, office addresses, and professional marketing materials are reproducible signals that do not, by themselves, indicate accountability; the meaningful question is whether an external auditor, regulator, or exchange has independently verified the issuer's asset position.
  4. Referral incentive structures create social pressure that suppresses skepticism within the investor community; investors who recruited others into a scheme face compounded harm — financial loss plus social liability — and this dynamic makes early coordinated withdrawal reporting less likely.
  5. Regulators who declare an asset class illegal without simultaneously establishing a fraud-reporting and victim-protection mechanism create a perverse outcome: investors who lose money to fraud in an illegal market may be reluctant to file police reports, and the evidentiary record that investigators need is correspondingly thinner.

References