Global Operation Takedown of AudiA6 Crypto Laundering Service, $389M Processed
On June 11, 2026, an international coalition including the U.S. DOJ, Secret Service, Europol, and others dismantled 'AudiA6,' a major cryptocurrency laundering platform. Two alleged administrators—a 37-year-old Ukrainian and a 25-year-old Russian—were arrested in the Republic of Georgia. Authorities seized websites, servers, and domains across multiple countries, also taking down 'Dark2Web,' a darknet forum used to advertise the laundering service. Blockchain analysis by Chainalysis reveals that since 2021, AudiA6 wallets received approximately 10,333 bitcoin (historically valued at roughly $389 million). The network operated as a 'mixer-as-a-service,' charging 3–10% commission. Investigators traced at least 393 BTC (over $19 million) directly from ransomware actors and darknet markets. The laundering process used over 6,000 KYC-verified money mule accounts to layer stolen funds through legitimate exchanges, returning 'clean' crypto to clients within about an hour. Dark2Web was deeply integrated into the cybercriminal ecosystem, with financial ties to Exploit.in and sanctioned Russian exchanges like Bitzlato and Garantex. The takedown marks a significant blow to the criminal payment infrastructure, following similar actions in 2024 against Taleon and Cryptex. Compliance teams are advised to monitor for rapid inflows from unhosted wallets and screen for domains like designli.pictures, deliverly.top, and inboxly.top.
Key facts
- AudiA6 laundered ~10,333 BTC ($389M) since 2021 as a mixer service.
- Two administrators arrested in Georgia; 37-year-old Ukrainian and 25-year-old Russian.
- Over 6,000 KYC-verified money mule accounts used to layer stolen funds.
- Dark2Web forum, also managed by suspects, was seized alongside AudiA6.
- Funds traced from ransomware actors and darknet markets to sanctioned exchanges.