Authorities Dismantle AudiA6 Crypto-Laundering Service Linked to Ransomware Investigations

Summary
Authorities dismantled AudiA6, a crypto service Europol says was linked to more than 15 ransomware investigations. The service allegedly laundered over $380 million; two suspected administrators were arrested in Georgia.
Key points
- Europol linked AudiA6 to more than 15 international ransomware investigations and said it operated as a laundering hub from 2022 to 2025.
- The service allegedly laundered more than $380 million, routing cybercrime proceeds through fraudulent exchange accounts and complex transactions for a 3–10% commission.
- Two suspected AudiA6 administrators were arrested in Georgia; the U.S. Department of Justice named them as Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev.
- Authorities from 11 countries participated in the operation, which seized 25 domains, blocked Telegram accounts, and seized or froze cryptocurrency and other assets.
- Authorities retrieved 6,000 KYC records tied to money-mule accounts; Europol says the accounts used stolen or purchased identities.
Article Details
- Event Type
- Law-enforcement dismantlement of the AudiA6 cryptocurrency laundering service.
- Impact
- Authorities linked AudiA6 to more than 15 international ransomware investigations. The service allegedly laundered over $380 million for cybercriminals. The operation resulted in two arrests in Georgia, the seizure of 25 domains, and the recovery of 6,000 KYC records associated with money-mule accounts. Authorities also seized vehicles and property, seized and froze cryptocurrency, and blocked Telegram accounts used by the network.
Threat Actors
Alexander Vladimirovich LedenevThe U.S. Department of Justice named him as a senior member of the AudiA6 platform. Authorities believe he and another arrested individual administered AudiA6; he is facing up to 20 years for facilitating cybercrime laundering operations. These are reported allegations, not a stated conviction.Ruslan Igorevich TkachukThe U.S. Department of Justice named him as a senior member of the AudiA6 platform. Authorities believe he and another arrested individual administered AudiA6; he is facing up to 20 years for facilitating cybercrime laundering operations. These are reported allegations, not a stated conviction.
