Global Law Enforcement Dismantles $390 Million AudiA6 Crypto Laundering Operation
June 13, 2026 — An extensive international law enforcement operation spanning 11 countries has successfully taken down AudiA6, a notorious cryptocurrency laundering platform. Between 2022 and 2025, AudiA6 facilitated the laundering of over €336 million (approximately $390 million) in illicit funds, primarily servicing ransomware gangs.
AudiA6 and Dark2Web Seized
Authorities seized the AudiA6 platform along with its affiliated dark web forum, known as “Dark2Web,” which served as a marketplace connecting cybercriminals and advertising illicit services. The takedown also included the seizure of 25 internet domains and more than 30 servers used by the operation. Additionally, law enforcement froze $900,000 worth of cryptocurrency and impounded 80 vehicles linked to the criminal network.
Two key administrators, Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev, were arrested during coordinated raids in Georgia on Wednesday. The operation was overseen by the European Union Agency for Criminal Justice Cooperation (Eurojust) with cooperation from agencies including Europol and law enforcement bodies in the United States, United Kingdom, Australia, France, and Japan.
Laundering Modus Operandi
AudiA6 operated as a “mixer-as-a-service,” offering customers a mechanism to obscure the origin of stolen or illicit cryptocurrency. For a fee ranging between 3% and 10%, AudiA6 guaranteed the “cleaning” of funds within an hour.
According to blockchain analytics firm Chainalysis, the platform handled roughly 10,333 Bitcoins since its inception in 2021. At the time those transactions occurred, the BTC volume translated to an estimated $389 million.
The laundering scheme heavily relied on thousands of fraudulent accounts created using stolen or purchased personal information. Investigators uncovered over 6,000 fake Know Your Customer (KYC) records tied to money mule accounts — fake identities operated by Russian-speaking intermediaries specifically recruited to move illicit funds through various crypto exchanges.
Impact on Ransomware Ecosystem
AudiA6 played a critical role in monetizing ransomware attacks by enabling criminals to launder ransom payments seamlessly. Notably, funds extorted from an Australian business in 2024 passed through AudiA6’s services.
The takedown of AudiA6 represents one of the most significant global law enforcement actions targeting crypto-fueled ransomware money laundering to date. Ransomware attacks continue to escalate worldwide, with recent data showing that the U.S. accounted for nearly 65% of global ransomware incidents in the first quarter of 2026. Experts report that the international ransomware ecosystem is coalescing around a smaller number of dominant groups responsible for the majority of attacks.
Regulatory and Industry Implications
The AudiA6 case highlights how cybercriminals are evolving with increasingly sophisticated infrastructures that exploit cryptocurrency’s pseudonymous nature to launder illicit proceeds. Law enforcement’s ability to successfully penetrate and dismantle such platforms sends a strong deterrent message to criminals.
For legitimate cryptocurrency businesses, the case underscores the critical importance of rigorous compliance programs, especially around KYC verification and Anti-Money Laundering (AML) measures. Platforms that fail to maintain these defenses risk exploitation by criminals and potential regulatory penalties.
As ransomware threats remain persistent and crypto mixers face sharper regulatory scrutiny, further coordinated enforcement actions targeting illicit crypto infrastructure are expected. Market participants and regulators alike will be closely monitoring developments in this evolving landscape.
About Blockchain.News
Blockchain.News delivers up-to-date coverage on AI, cryptocurrency, blockchain technology, and emerging financial innovations shaping the future.
Image source: Shutterstock
Keywords: crypto, money laundering, ransomware, AudiA6, blockchain, law enforcement, KYC, AML, darknet, ransomware gangs