Is This the Same Person? The Quiet Discipline That Decides Investigations

Entity resolution is becoming one of the most important disciplines in financial intelligence. It is the unglamorous work of determining whether two records, two names, two companies, two passports point to the same underlying person or thing. Call it the Face/Off problem. Travolta and Cage made a whole movie out of how confusing it gets when the identity on the surface and the person underneath have been deliberately swapped. In financial crime, the swap can be done with passports and shell companies rather than surgery. Two recent cases, one involving a person and one involving a company, show what happens when that question is answered too late, and what it takes to prove two faces are one.

One Man, Two Names, Millions Untouched

In October 2025, the United States and United Kingdom announced joint sanctions against the Prince Group, a Cambodia-based network the U.S. Treasury labeled a transnational criminal organization built on cyber-scam and money laundering operations. The U.S. list ran to 146 targets. At the very top sat a name: Chen Xiao’er.

According to records obtained by the investigative outlet OCCRP, Chen Xiao’er does not exist as a current legal identity. The name belongs to a 43-year-old man who now goes by Wu An Ming. He first held a Saint Kitts and Nevis passport under the name Chen Xiao’er in 2017, then formally changed it to Wu An Ming by 2020. By the time the sanctions landed, the name on the list was an identity he had already shed.

The consequences were not just superficial. Under the Wu An Ming identity, OCCRP found he holds roughly $45 million in U.K. property and controls a global portfolio of companies, aircraft leasing firms, and listed securities, none of it frozen, because the order named a person the records no longer reflected. In March 2022 he bought a Victorian mansion in west London for around $39 million, in his own name, financed in part by a mortgage from a major U.S. bank.

The Identity Was Not Hidden. It Was Purchased.

There is a scene in nearly every spy thriller where the hero opens a safety deposit box or a hidden drawer and finds a row of passports, each a different name, all from different countries. It signals tradecraft and the resources of a state intelligence service behind the secret agent holding them. The quietly remarkable thing about the modern identity market is that you no longer need to be Jason Bourne to have that drawer. You can simply buy it, one sovereign passport at a time, no government service required.

What makes the Wu An Ming case more than a clerical failure is how the second identity came to exist. It was not forged by a secretive government intelligence agency. It was issued by a sovereign state, for a fee, through a citizenship-by-investment program, and a subsequent legal name change did the rest.

The golden passport industry traces back to St. Kitts and Nevis in 1984 and is now a global market. Dominica, Grenada, Antigua and Barbuda, and St. Lucia followed in the Caribbean. Vanuatu and Nauru opened programs in the Pacific. Egypt, Jordan, Turkey, and North Macedonia run their own, and new entrants are expected across Africa and Latin America later this year. For small, tourism-dependent economies, citizenship became a fiscal resource. In Dominica, citizenship sales have in some years approached a third or more of GDP.

A citizenship-by-investment program is, in effect, a legal identity-issuance service. It can produce a genuine passport under a new name, and that name change can sever the link between a person’s prior identity and the one now holding the assets. The vulnerability is well documented. Among the concerns regulators have raised about these programs are identity fraud through name changes, weak due diligence, and exposure to money laundering and sanctions evasion. A 2021 investigation by The Guardian into Vanuatu found that more than 2,000 buyers included disgraced businesspeople and individuals facing allegations, pending cases, or wanted by police around the world, among them a businessman under U.S. sanctions, several of whom were later stripped of citizenship after the fact.

Luckily, there is regulatory pushback. In 2025 the European Union adopted a revised mechanism that explicitly lists investor-citizenship schemes as grounds for suspending visa-free access, the EU’s top court effectively ended golden passports within the bloc, and the United States placed several Caribbean program countries on travel-restriction lists. St. Kitts and Nevis, for its part, has agreed to add a residency requirement and upgraded biometric verification. These are useful reforms. None of them retroactively resolves the identities already issued and already in circulation.

Same Problem, Corporate Edition

The identity question is not unique to people. It applies just as forcefully to companies, and the Huione Group is the clearest current example. It is the Face/Off problem in corporate form.

Huione is a Cambodia-based conglomerate whose subsidiaries ran what U.S. authorities have called one of the world’s most prolific criminal marketplaces, providing escrow and laundering services that moved billions in proceeds from Southeast Asian scam centers. In October 2025, the U.S. Treasury’s Financial Crimes Enforcement Network issued a final rule under Section 311 of the USA PATRIOT Act severing Huione from the U.S. financial system, after finding it a primary money laundering concern.

Then came the rebrand. Huione Guarantee also operated as Haowang Guarantee, and a successor, H-Pay Service PLC, stepped into the role its predecessor had played within the group. On June 23, 2026, the U.S. government answered with a coordinated three-part action: the Justice Department seized the cloud infrastructure behind the operation, OFAC sanctioned a fresh round of Prince Group individuals, and FinCEN issued a proposed rule folding H-Pay, “and any successor entity,” into the existing Huione order. FinCEN said the move was meant to guard against Huione’s effort to circumvent the measure by continuing to operate under a different name, assessing that H-Pay had effectively assumed its predecessor’s business role within the group.

The government did not just name a company; it formally resolved a new name back to the entity already under the order and wrote in a standing process to do the same for whatever the operation calls itself next. Sever Huione, and it resurfaces as Haowang, as H-Pay, as the next shell. Enforcement only keeps pace by proving, each time, that the new face is the old one. The order is only as good as the entity resolution work behind it.

Why This Matters

There is a comfortable assumption that better tools will eventually make this problem go away. They will not, at least not on their own. Transaction monitoring can flag an anomalous flow. Artificial intelligence can surface patterns across enormous datasets. None of them, by itself, can tell you that Chen Xiao’er is Wu An Ming, or that H-Pay is Huione. That determination is evidence-based and human-driven. It is built from passports, corporate filings, registry records, and the patient cross-referencing that establishes, to an evidentiary standard, that two things are one.

A sanctions list that names the wrong identity freezes nothing. An order against a company that has already rebranded protects no one. Entity resolution is what closes that gap, and it is where investigations are quietly won and lost.

It is slow and not glamorous. And when one of the two identities was issued by a government in exchange for a donation, it can be an uphill battle. That is precisely why it deserves more attention than it gets. In Face/Off it takes the better part of a film before anyone can say with certainty who is really who.  The real work has no soundtrack and no star power. It is the patient business of establishing, to an evidentiary standard, that the face on the document and the person behind it are one and the same. That is how you stop the real bad guys.

Meridian3 works at the intersection of open-source intelligence, financial intelligence, sanctions, and cryptocurrency investigation. Resolving identities, tying records to the people and entities behind them, is the work we do.