Federal authorities have dismantled AudiA6, a major cryptocurrency laundering operation that processed approximately 10,333 Bitcoin (valued at roughly $389 million) since launching in 2021. The US Secret Service Cyber Investigative Section and IRS Criminal Investigation led the operation, resulting in the arrest of two alleged senior members in Batumi, Georgia: 37-year-old Ukrainian national Ruslan Igorevich Tkachuk and 25-year-old Russian Alexander Vladimirovich Ledenev. Both face charges of conspiring to launder monetary instruments and commit money laundering in the Eastern District of Pennsylvania, carrying potential sentences of up to 20 years in prison.
According to the criminal complaint, Tkachuk and Ledenev operated AudiA6 alongside an illegal forum called Dark2Web, where they advertised their money laundering capabilities. The service promised to conceal and disguise the origin of traceable cryptocurrency for fees reaching 5%. Investigators used blockchain analysis tools to trace the flow of funds through the network, identifying connections to criminal enterprises.
Blockchain forensics revealed that 393.39 BTC (approximately $19.2 million) originated directly from ransomware organizations, dark web marketplaces, and other cybercrime platforms. Additional illicit funds were routed indirectly through the service to blend with legitimate transactions, complicating tracing efforts. The operation advertised its services on Dark2Web, attracting clients seeking to obscure the criminal origins of their cryptocurrency holdings.
The coordinated takedown involved simultaneous actions across multiple jurisdictions. Law enforcement personnel searched three properties, seized digital devices, blocked active Telegram accounts used by the network, and froze remaining cryptocurrency assets. Federal agents seized servers and domains located in the United States, Iceland, Germany, and France, replacing both clear web and dark web sites with law enforcement seizure banners. The operation received support from Europol, Eurojust, and authorities from Australia, Canada, France, Germany, Iceland, Japan, Poland, and Switzerland.
Authorities discovered that the AudiA6 group used commercial email providers and custom domain email addresses to register money mule accounts with cryptocurrency exchanges. Law enforcement has published 19 domains associated with the operation, including smplfy.in, lett.email, trayo.app, and pheontx.eu, enabling exchanges to identify and block accounts linked to the laundering service. Both suspects remain in Georgian custody awaiting extradition proceedings to the United States.
Source: https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/