DOJ says $389M crypto laundering network helped cybercriminals evade exchange AML systems

US authorities have charged two alleged operators of a cryptocurrency laundering service accused of processing more than $389 million in illicit digital asset transactions while helping users bypass exchange anti-money laundering checks.

The U.S. Attorney’s Office for the Eastern District of Pennsylvania announced that Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev were arrested in Georgia following an international operation targeting the “AudiA6” crypto laundering network.

According to prosecutors, the service allegedly laundered roughly 10,333 BTC tied to darknet markets, ransomware groups, cybercrime services, and other illicit sources since 2021.

Authorities from the United States, Europol, Germany, France, Iceland, the United Kingdom, Canada, Japan, and several other countries participated in the coordinated takedown.

The operation led to the seizure of servers and domains. Also, the blocking of Telegram accounts and freezing of crypto assets.

DOJ says AudiA6 marketed “clean” crypto

A newly unsealed DOJ complaint revealed additional details about how the alleged operation worked.

According to investigators, AudiA6 promoted itself on darknet forums as a crypto “mixer” and exchange service capable of obscuring the origin of funds.

The complaint alleges the operators used terms such as “dirty” and “clean” crypto while advertising services designed to “cut off your tails,” a phrase investigators said referred to removing blockchain traces connected to criminal activity.

Authorities also said the service marketed low AML risk scores to help funds avoid exchange freezes.

The affidavit claims AudiA6 promised that laundered funds would carry an AML risk score below 25%, a threshold investigators said many exchanges use when screening suspicious transactions.

Investigators argued the alleged operation effectively manipulated exchange compliance systems and turned exchanges into “unwitting partners” in laundering activity.

Undercover agents allegedly tested the service

The complaint also described several undercover operations conducted between 2022 and 2026.

In one interaction, undercover agents allegedly told AudiA6 operators they wanted to mix funds tied to ransomware activity. Prosecutors said the service agreed to process the transaction and returned cleaned cryptocurrency after taking a commission.

Another undercover exchange allegedly involved agents asking whether stolen ETH from scams could be mixed. According to the complaint, AudiA6 responded, “yes, no problem.”

The DOJ said the operation charged fees of up to 5% for laundering services.

Authorities target growing crypto laundering infrastructure

The complaint portrays AudiA6 as more than a simple crypto mixer.

Investigators alleged the operation maintained darknet forums, escrow systems, exchange services, Telegram channels, Tor websites, and cross-chain conversion infrastructure.

Authorities believe the network operated as a long-running cybercrime infrastructure business designed to help criminals move funds across the crypto ecosystem while avoiding detection.

If convicted, the defendants each face up to 20 years in prison.

Final Summary

• DOJ prosecutors say the AudiA6 network laundered more than $389m in crypto while helping users evade exchange AML systems.
• Investigators allege the service marketed “clean” crypto with low AML risk scores to reduce the chances of exchange freezes.