Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol disrupts AudiA6, a crypto laundering service used by ransomware gangs. €389M laundered since 2021.
Intelligence analysis by Qwen 2.5 (3B)
Europol dismantles AudiA6, a cryptocurrency laundering platform exploited by ransomware groups and cybercriminal networks, seizing assets worth over $798K.
Imagine AudiA6 was like a big piggy bank where bad guys could hide their money from the police. Europol found out where this piggy bank was and took it away. Now it's harder for these bad guys to keep their stolen money safe.
Analysis
AudiA6: A Cryptocurrency Laundering Platform
AudiA6 was a central hub for ransomware actors and cybercriminals. It allowed them to cash out stolen digital assets while hiding the money trail from authorities.
The Operation
On June 10, 2026, Europol carried out coordinated actions including arrests, property searches, domain takedowns, server seizures, vehicle seizures, and more. Over $798K in cryptocurrency was seized as part of this operation.
Dark2Web: A Dark Web Forum
AudiA6 also operated a dark web forum known as Dark2Web where cybercriminals advertised illicit services and connected with other threat actors across the world.
The Arrests
Two individuals, Ruslan Igorevich Tkachuk (37) and Alexander Vladimirovich Ledenev (25), were arrested in Georgia. They are accused of conspiracy to launder monetary instruments and sting money laundering.
AudiA6's Operations
The service relied on thousands of fraudulent exchange accounts opened using stolen or purchased identities, with operators charging commissions ranging from 3% to 10%. Over 6,000 Know Your Customer (KYC) records linked to mule accounts were identified during the investigation.
The Investigation
Europol's forensic examination of seized electronic devices revealed additional individuals linked to the operation. The service was marketed as a cryptocurrency mixing service guaranteeing anonymity and speed.
Industrial-Scale Laundering
AudiA6 is described as an industrial-scale cryptocurrency laundering operation, with links to over 15 investigations worldwide related to ransomware attacks and large-scale cryptocurrency theft.
The Future of Crypto Laundering
Europol highlights the rise of industrial-scale crypto laundering services that enable cybercrime economies. They warn about chain-hopping, decentralised exchanges, and 'mixer-as-a-service' platforms used by ransomware groups.
Key points
- Europol disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs
- Over €389M ($425M) laundered through AudiA6 since its launch in 2021
- Two individuals were arrested for their involvement with AudiA6 and Dark2Web
- The operation involved arrests, property seizures, domain takedowns, and more
- AudiA6 relied on thousands of fraudulent exchange accounts to launder money
This disruption of AudiA6 will make it more difficult for ransomware gangs and other cybercriminals to launder their illicit profits, potentially reducing the amount they can use in future crimes.
While this disrupts AudiA6, there may be new services that take its place. The fight against crypto laundering is ongoing and will require continued effort from law enforcement.
