Authorities Dismantle AudiA6 Crypto-Laundering Service Linked to Ransomware Investigations

· Original article ↗

Summary

Authorities dismantled AudiA6, a crypto service Europol says was linked to more than 15 ransomware investigations. The service allegedly laundered over $380 million; two suspected administrators were arrested in Georgia.

Key points

  • Europol linked AudiA6 to more than 15 international ransomware investigations and said it operated as a laundering hub from 2022 to 2025.
  • The service allegedly laundered more than $380 million, routing cybercrime proceeds through fraudulent exchange accounts and complex transactions for a 3–10% commission.
  • Two suspected AudiA6 administrators were arrested in Georgia; the U.S. Department of Justice named them as Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev.
  • Authorities from 11 countries participated in the operation, which seized 25 domains, blocked Telegram accounts, and seized or froze cryptocurrency and other assets.
  • Authorities retrieved 6,000 KYC records tied to money-mule accounts; Europol says the accounts used stolen or purchased identities.

Article Details

Event Type
Law-enforcement dismantlement of the AudiA6 cryptocurrency laundering service.
Impact
Authorities linked AudiA6 to more than 15 international ransomware investigations. The service allegedly laundered over $380 million for cybercriminals. The operation resulted in two arrests in Georgia, the seizure of 25 domains, and the recovery of 6,000 KYC records associated with money-mule accounts. Authorities also seized vehicles and property, seized and froze cryptocurrency, and blocked Telegram accounts used by the network.

Threat Actors

Countries

Industries