International law enforcement agencies have successfully dismantled AudiA6, a sophisticated cryptocurrency laundering network linked to major ransomware operations and darknet markets. According to blockchain analytics firm Chainalysis, the operation targeted a platform described as a "mixer-as-a-service" provider used by cybercriminals to obfuscate illicit funds.
The scale of the operation is significant. AudiA6 processed approximately 10,333 Bitcoin since its inception in 2021, representing a historical value of roughly $389 million. Investigators traced at least 393 Bitcoin directly from known ransomware actors and darknet vendors through this network. The service allegedly charged commissions between 3% and 10%, promising clients obfuscated funds within an estimated one-hour window.
The enforcement action involved the U.S. Department of Justice, the U.S. Secret Service, Europol, and other international partners. Authorities arrested two suspected senior administrators in the Republic of Georgia: a 37-year-old Ukrainian national and a 25-year-old Russian national. The United States is currently seeking their extradition.
Chainalysis revealed that AudiA6 relied on more than 6,000 KYC-verified money mule accounts to move funds through centralized cryptocurrency exchanges. By exploiting legitimate exchange infrastructure, the network routed illicit proceeds through accounts that had passed identity checks, making detection difficult. Law enforcement also seized digital infrastructure across the United States and Europe, replacing websites tied to AudiA6 and the associated Dark2Web forum with seizure banners.
The investigation highlighted connections to sanctioned Russian exchanges, including Bitzlato and Garantex, and the Exploit.in cybercrime forum. Europol identified specific domains used to register fraudulent mule accounts, such as designli.pictures and deliverly.top.
This case underscores a shift in enforcement strategy. Authorities are increasingly targeting the financial infrastructure supporting cybercrime rather than just the initial thefts. The takedown sends a clear message that services facilitating the conversion of crypto into usable funds are now firmly in the crosshairs of global law enforcement.