Image credit: Shutterstock
International law enforcement agencies have shut down AudiA6, a crypto laundering service accused of moving more than $389 million in unlawful transactions for cybercriminals, ransomware groups and darknet users.
Two alleged operators, Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev, were arrested in Georgia on June 10. U.S. prosecutors charged them with conspiracy to launder monetary instruments and a sting-related money laundering offence, and plan to seek their extradition to the Eastern District of Pennsylvania.
AudiA6 Charged Up to 5% for Laundering
AudiA6 advertised itself as a service that could hide the origin of traceable crypto. Prosecutors said the operation offered to disguise criminal funds for a fee of up to 5% of the amount being laundered.
Eurojust said customers sent stolen crypto to wallets controlled by the group and received funds described as laundered back within about an hour. The service used chains of transactions to hide the source of funds and charged commissions of 3% to 10%.
Dark2Web Forum Was Also Taken Down
The group behind AudiA6 also allegedly ran Dark2Web, a cybercrime forum used to advertise illicit services and connect criminal actors. After the takedown, law enforcement seizure banners replaced the clear web and dark web sites tied to AudiA6 and Dark2Web.
The shutdown removed both the alleged laundering service and a forum prosecutors say helped criminal users find illicit tools and counterparties.
Georgia Raids Seized 25 Domains and 30 Servers
The June 10 action led to searches at three properties in Georgia, the takedown of 25 domains and the seizure of more than 30 servers. Authorities also seized more than 80 vehicles and several properties in Georgia.
Investigators froze €692,000 in crypto and seized more than €86,000 in other crypto assets. Telegram accounts used by the network were also blocked during the operation.
12 Countries Joined the AudiA6 Probe
The case involved the U.S. Secret Service, IRS Criminal Investigation, Europol, Eurojust and law enforcement partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland and the United Kingdom.
The cross-border operation targeted infrastructure, crypto assets, domains and accounts allegedly used to support the laundering network.
Europol Found 6,000 Mule Records
Europol said investigators identified more than 6,000 know-your-customer records linked to money mule accounts used to move illicit funds through crypto exchanges. The agency also tied AudiA6 to at least 15 international investigations.
The operation followed the arrest of another alleged co-perpetrator in Poland in September 2025. Data taken from seized devices helped investigators identify more people suspected of involvement in the laundering network.
The next step is Georgia’s extradition process and any further charges tied to records seized during the operation.
