{"investigation":{"slug":"audia6","entity_name":"AudiA6","trust_score":0,"severity_base":null,"score_modifier":-6.4,"confidence":0.95,"status":"published","content_type":"investigation","summary":"AudiA6 was a centralized cryptocurrency mixing and exchange service used by ransomware groups, darknet markets and other cybercriminals, charging roughly 3-10% and returning funds within about an hour. Authorities allege it handled about 10,333 BTC (about $389 million) from 2021 until a coordinated international takedown on June 10, 2026, in which alleged operators Ruslan Tkachuk and Alexander Ledenev were arrested in Georgia and charged in the Eastern District of Pennsylvania. It was also tied to laundering of about $9.5 million stolen through a fake Ledger app, and the same operators are alleged to have run the Dark2Web cybercrime forum.","sections":[{"content":"AudiA6 was a centralized cryptocurrency mixing and exchange service, reachable through a clearweb site (audia6.best, in Russian and English) and a Tor mirror, that guaranteed anonymity and returned 'cleaned' funds within about an hour through chains of transactions. It supported Bitcoin, Ethereum, Litecoin, Ethereum Classic, Bitcoin Cash, Bitcoin SV, Monero and Tether (OMNI), offered cash-out to Russian payment systems (Sberbank, Alpha Bank, Tinkoff QR), set limits from 0.001 to 27 BTC, and listed contacts on Telegram (@obmen_audia6), Jabber and qTox; it claimed tens of thousands of customers and over $40 million in reserves and advertised on carding and cracking forums such as CrdPro and CardVilla. Fees are reported variously as 3% to 10% (Europol and others), up to 5% (DOJ and Secret Service) and 3% to 5.5% (the service's own listings). It advertised the ability to reduce the AML risk score of funds below 25%, a common exchange compliance threshold, and openly offered to launder criminally traceable funds. Intel 471 and BleepingComputer listed AudiA6 among four cryptomixers most used by cybercriminals, with Absolutio, Blender and Mix-btc. Reports date its operation from 2021 to its June 10, 2026 takedown; Europol characterizes the primary period as 2022 to 2025, and one summary says 2021 to 2025. Law enforcement alleges about 10,333 BTC (about $389 million, roughly EUR 336 million) was deposited, of which about 393.39 BTC (about $19.2 million) came directly from darknet markets, ransomware and other illicit sources; TRM Labs traced about $79 million of direct illicit exposure, about 80% (about $63 million) tied to ransomware, with the illicit share of volume rising from under 1% in 2022 to over 6% in 2024. The mixers' market also declined from $152 million in 2021 to $48 million in 2024 while cross-chain bridges reached $100 million in ransomware flows in 2025.","heading":"Service overview","sources":[{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6","name":"International Operation Dismantles EUR 336 Million Ransomware Laundering Pipeline AudiA6 — TRM Labs","type":"research","credibility":2},{"url":"https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html","name":"Philly feds charge two with running a cryptocurrency money laundering scheme — Philadelphia Inquirer","type":"news_article","credibility":1},{"url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","name":"DOJ EDPA: Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","credibility":1},{"url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","name":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","credibility":1},{"url":"https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","name":"Europol Press Release: Ransomware gangs cut from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","credibility":1},{"url":"https://www.bleepingcomputer.com/news/security/these-are-the-cryptomixers-hackers-use-to-clean-their-ransoms/","name":"These are the cryptomixers hackers use to clean their ransoms — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.intel471.com/blog/cryptomixers-ransomware","name":"How cryptomixers allow cybercriminals to clean their ransoms — Intel 471","type":"research","credibility":2},{"url":"https://audia6.best/en/","name":"AudiA6 official website","type":"official","credibility":3},{"url":"https://t.me/obmen_audia6","name":"AudiA6 Telegram channel","type":"social_media","credibility":3},{"url":"https://crdpro.cc/threads/audia6-exchange-service-cash-in-btc-eth-ltc-qiwi-qr-tinkoff-and-200-more-cryptocurrencies-cash-in-any-country-in-the-world.27505/","name":"AudiA6 Exchange Service listing — CrdPro carding forum","type":"community_report","credibility":3},{"url":"https://cardvilla.cc/cashout-services-and-drops-for-stuff/audia6-cryptocurrency-mixer-exchange-430063/","name":"AudiA6 Cryptocurrency Mixer listing — CardVilla carding forum","type":"community_report","credibility":3},{"url":"https://crdpro.org/threads/audia6-crypto-mixer-btc-ltc-eth-etc-bch-bsv-tetheromni-xrp.27506/","name":"AudiA6 Cryptocurrency Mixer and Exchange — CrdPro carding forum (Tier 3)","type":"community_report","credibility":3},{"url":"https://audia6.best/en/contact/","name":"AudiA6 official contacts page","type":"official","credibility":3},{"url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","name":"Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network — Chainalysis","type":"research","credibility":2},{"url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","name":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","type":"news_article","credibility":2},{"url":"https://www.scworld.com/brief/audia6-cryptocurrency-service-dismantled-for-laundering-over-380-million","name":"AudiA6 cryptocurrency service dismantled for laundering over $380 million — SC Media","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Operators allegedly relied on a network of thousands of fraudulent exchange accounts opened with stolen or purchased identities; over 6,000 KYC records tied to money-mule accounts were uncovered, many linked to Russian-speaking intermediaries. Customers contacted operators via private messaging apps, and funds passed through multiple wallets and accounts. The service ran commercial and controlled email domains to register exchange accounts (disclosed domains include designli.pictures, pheontx.eu, smplfy.in, sumato-soft.org, technobrains.dev, lett.email, trayo.app, postfast.eu, inboxly.top and quix.express), plus Tor sites, Telegram channels and cross-chain conversion. The DOJ said AudiA6 marketed itself as able to 'conceal and disguise the source' of funds. Despite promises of untraceability, investigators found all six undercover transactions between December 2022 and May 2026 directly traceable through exchange records, and TRM Labs used cluster-level demixing, timing and amount alignment and post-mix wallet intelligence; for example, about $7 million stolen in the 2022 LastPass breach was traced from Wasabi Wallet to AudiA6 (dated September 2025 in one account and December 2025 in another). In April 2026 undercover agents paid fees of $300 on $5,000 and $400 on $5,100 in Bitcoin, and when asked whether cocaine proceeds could be laundered an alleged operator replied 'don't care'.","heading":"Methods and infrastructure","sources":[{"url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","name":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","credibility":1},{"url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","name":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","type":"news_article","credibility":2},{"url":"https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6","name":"International Operation Dismantles EUR 336 Million Ransomware Laundering Pipeline AudiA6 — TRM Labs","type":"research","credibility":2},{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html","name":"Philly feds charge two with running a cryptocurrency money laundering scheme — Philadelphia Inquirer","type":"news_article","credibility":1},{"url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","name":"DOJ EDPA: Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","credibility":1},{"url":"https://ambcrypto.com/doj-says-389m-crypto-laundering-network-helped-cybercriminals-evade-exchange-aml-systems/","name":"AMBCrypto: DOJ says $389M crypto laundering network helped cybercriminals evade exchange AML systems","type":"news_article","credibility":2},{"url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","name":"Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network — Chainalysis","type":"research","credibility":2},{"url":"https://cybersecuritynews.com/authorities-dismantle-audia6-services/","name":"Authorities Dismantle Cryptocurrency Laundering Services AudiA6 Used by Ransomware Gangs — CyberSecurityNews","type":"news_article","credibility":2}],"severity":"critical"},{"content":"TRM Labs identified 20 ransomware groups that sent funds to AudiA6. The largest were ALPHV/BlackCat (about $9.1 million), Qilin (about $7.1 million) and LockBit (about $4.4 million), followed by Chaos/Blacksuit ($3.65 million), RansomHub ($975,900), Akira ($386,200) and The Gentlemen ($99,600). Darknet markets Exploit and Verified also allegedly sent proceeds. Europol and the DOJ linked the service to more than 15 investigations worldwide into ransomware and large-scale crypto theft. These are blockchain analytics attributions, not adjudicated findings.","heading":"Clientele: ransomware groups and cybercrime","sources":[{"url":"https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6","name":"International Operation Dismantles EUR 336 Million Ransomware Laundering Pipeline AudiA6 — TRM Labs","type":"research","credibility":2},{"url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","name":"Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network — Chainalysis","type":"research","credibility":2},{"url":"https://www.gncrypto.news/news/11-nation-sting-shuts-audia6-crypto-mixer-336m-ransomware/","name":"11-Nation Sting Shuts AudiA6 Crypto Mixer, 336M for Ransomware — GnCrypto News","type":"news_article","credibility":2},{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","name":"Europol Press Release: Ransomware gangs cut from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","credibility":1},{"url":"https://cybernews.com/cybercrime/audia6-crypto-washing-shut-down/","name":"Cybernews: Crypto laundering service AudiA6 shut down","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The alleged operators are also said to have administered Dark2Web, a dark web cybercrime forum that advertised AudiA6 and other illicit services (including, per one account, commissioning crimes against targets) and was the main client-acquisition channel. Attribution of the forum to the two defendants is alleged and unadjudicated. Clear web and dark web properties for both services were seized and replaced with law enforcement banners, and linked Telegram accounts were blocked.","heading":"Dark2Web forum","sources":[{"url":"https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/","name":"Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case — HackRead","type":"news_article","credibility":2},{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","name":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","type":"news_article","credibility":2},{"url":"https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","name":"Europol Press Release: Ransomware gangs cut from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"The U.S. Attorney's Office for the Eastern District of Pennsylvania charged Ruslan Igorevich Tkachuk (37, Ukrainian) and Alexander Vladimirovich Ledenev (25, Russian), described as senior members managing the operation, each with one count of conspiracy to launder monetary instruments and one count of sting money laundering, with a maximum of 20 years (stated per count in one account). Both were arrested on June 10, 2026 in Batumi, Georgia. Charges were announced on June 11, 2026; two accounts say the criminal complaint was filed on June 2, 2026, eight days before the takedown. The case is handled by Assistant U.S. Attorneys Benjamin D. Traster and Sima Kazmir with the DOJ Office of International Affairs under U.S. Attorney David Metcalf. Both remain in Georgian custody and the U.S. said it will seek extradition (reported June 12-13, 2026); no extradition or conviction had been reported. These are allegations.","heading":"Charges, arrests and extradition","sources":[{"url":"https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html","name":"Philly feds charge two with running a cryptocurrency money laundering scheme — Philadelphia Inquirer","type":"news_article","credibility":1},{"url":"https://www.cryptopolitan.com/us-extradition-audia6-duo-crypto-laundering/","name":"US to seek extradition of AudiA6 duo over $389M crypto laundering scheme — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/","name":"Authorities dismantle AudiA6 ransomware crypto-laundering service — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","name":"DOJ EDPA: Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","credibility":1},{"url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","name":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","credibility":1},{"url":"https://www.theblock.co/post/404433/doj-charges-two-389-million-audia6-crypto-laundering-case","name":"The Block: DOJ charges two in $389 million AudiA6 crypto laundering case","type":"news_article","credibility":2},{"url":"https://protos.com/audia6-crypto-laundering-suspects-face-extradition-to-us/","name":"Protos: AudiA6 crypto laundering suspects face extradition to US","type":"news_article","credibility":2},{"url":"https://www.mlex.com/mlex/articles/2488842/operators-of-audia6-crypto-laundering-service-arrested-charged-in-us","name":"Operators of AudiA6 crypto laundering service arrested, charged in US — MLex","type":"news_article","credibility":2},{"url":"https://crypto.news/audia6-operators-charged-in-u-s-over-alleged-389m-crypto-laundering-network/","name":"AudiA6 operators charged in U.S. over alleged $389m crypto laundering network — Crypto.news","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The takedown was executed on June 10, 2026 and announced June 11. It was led by the U.S. Secret Service and IRS Criminal Investigation, coordinated by Europol's EC3 and J-CAT with Eurojust, with participation from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland and the UK (at least 11 nations; the Polish Police CBZC and others named), and the investigation traced back to a September 2025 Polish Police arrest (September 15 per Europol) of a Ukrainian national whose seized devices identified further network members. Authorities took down 25 domains, seized more than 30 servers in the United States, Iceland, Germany and France, and in Georgia seized over 80 vehicles (one report says 173 across all jurisdictions) and multiple properties and devices. About EUR 692,000 in cryptocurrency was frozen and EUR 86,000 seized, Telegram accounts were blocked, and a blocklist of 19 suspicious domains was published for exchanges.","heading":"International law enforcement operation and seizures","sources":[{"url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","name":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","type":"news_article","credibility":2},{"url":"https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/","name":"Authorities dismantle AudiA6 ransomware crypto-laundering service — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.mlex.com/mlex/articles/2488842/operators-of-audia6-crypto-laundering-service-arrested-charged-in-us","name":"Operators of AudiA6 crypto laundering service arrested, charged in US — MLex","type":"news_article","credibility":2},{"url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","name":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","credibility":1},{"url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","name":"DOJ EDPA: Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","credibility":1},{"url":"https://www.fdicoig.gov/news/investigations-press-releases/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering","name":"Europol via FDIC OIG: Ransomware gangs cut off from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","credibility":1},{"url":"https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","name":"Europol Press Release: Ransomware gangs cut from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","credibility":1},{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","credibility":2},{"url":"https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/","name":"Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case — HackRead","type":"news_article","credibility":2},{"url":"https://www.cryptopolitan.com/us-extradition-audia6-duo-crypto-laundering/","name":"US to seek extradition of AudiA6 duo over $389M crypto laundering scheme — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","name":"Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network — Chainalysis","type":"research","credibility":2},{"url":"https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/","name":"Ransomware Crypto Laundering Platform Taken Out by FBI and Europol — Infosecurity Magazine","type":"news_article","credibility":2},{"url":"https://cyberpress.org/europol-dismantles-audia6-crypto-laundering/","name":"Europol Dismantles AudiA6 Crypto Laundering Network Used by Ransomware Gangs — CyberPress","type":"news_article","credibility":2}],"severity":"high"},{"content":"Between April 7 and 13, 2026 a counterfeit Ledger Live app published as 'Leva Heal' on Apple's App Store harvested seed phrases from 50 or more victims, with losses above $9.5 million (largest: $3.23 million in USDT on April 9, $2.079 million in USDC on April 11, and $1.95 million including 20.64 BTC, 211 stETH and 70 ETH on April 8). On April 14, 2026 ZachXBT identified AudiA6 as the mixer used, with proceeds routed through more than 150 KuCoin deposit addresses; Apple removed the app. On May 22, 2026 ZachXBT alleged KuCoin ignored repeated appeals from victims and police and shielded more than $13 million in stolen crypto, and reports note KuCoin's freeze of suspect accounts was set to lapse around April 20 absent an authority request. KuCoin previously paid over $300 million to settle U.S. anti-money-laundering violations in 2025. As of May 28, 2026 AudiA6 was not on the OFAC SDN list and no charges were public, unlike Tornado Cash and Blender.io (sanctioned 2022) or Sinbad.io (2023); this status preceded the June 2026 charges.","heading":"Role in the fake Ledger app theft and KuCoin","sources":[{"url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto","name":"Your life savings could be gone in one click: How a fake crypto app bypassed Apple's security — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.banklesstimes.com/articles/2026/05/22/kucoin-ignored-hack-victims-and-police-appeals-zachxbt-says/","name":"KuCoin Ignored Hack Victims and Police Appeals, ZachXBT Says — BanklessTimes","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/zachxbt-says-apple-app-store-fake-ledger-app-stole-9-5m-from-50-victims-in-one-week/","name":"ZachXBT Says Apple App Store Fake Ledger App Stole $9.5M From 50+ Victims in One Week — Bitcoin.com News","type":"news_article","credibility":2},{"url":"https://www.theblock.co/post/397388/fake-ledger-app-apple-app-store-crypto-theft-bitcoin-tron-solana-zachxbt","name":"Fake Ledger app on Apple App Store linked to $9.5M crypto theft — The Block","type":"news_article","credibility":2},{"url":"https://appleinsider.com/articles/26/04/14/bogus-crypto-wallet-on-app-store-steals-95m","name":"Bogus crypto wallet on App Store steals $9.5M — AppleInsider","type":"news_article","credibility":2},{"url":"https://www.ccn.com/education/crypto/fake-ledger-app-9-5m-stolen-50-victims-kucoin-laundering/","name":"Fake Ledger App Alert: $9.5M Stolen From 50+ Victims via Apple App Store, Funds Laundered via KuCoin — CCN","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/zachxbt-accuses-kucoin-of-shielding-13m-in-stolen-crypto-from-german-investigators/","name":"ZachXBT Accuses KuCoin of Shielding $13M in Stolen Crypto From German Investigators — Bitcoin.com News","type":"news_article","credibility":2},{"url":"https://home.treasury.gov/news/press-releases/jy0916","name":"U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash","type":"regulatory","credibility":1}],"severity":"high"}],"timeline":[{"date":"2021","event":"AudiA6 begins operating, accepting criminal deposits and advertising on forums including Dark2Web (Europol dates the primary period to 2022-2025).","source":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","source_url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html"},{"date":"2021-11","event":"Intel 471 and BleepingComputer identify AudiA6 as one of four cryptomixers popular among cybercriminals.","source":"These are the cryptomixers hackers use to clean their ransoms — BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/these-are-the-cryptomixers-hackers-use-to-clean-their-ransoms/"},{"date":"2022-12","event":"First documented U.S. undercover transaction with AudiA6; six such transactions occur through May 2026; the LastPass-linked flows (breach December 2022) are later traced by TRM Labs.","source":"Philly feds charge two with running a cryptocurrency money laundering scheme — Philadelphia Inquirer","source_url":"https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html"},{"date":"2023","event":"Per the survivor page citing TRM Labs, AudiA6 transaction volume peaked this year before declining through 2024-2025 (TRM text elsewhere reports the illicit share of volume rising from under 1% in 2022 to over 6% in 2024).","source":"International Operation Dismantles EUR 336 Million Ransomware Laundering Pipeline AudiA6 — TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6"},{"date":"2025-09","event":"Polish Police arrest a Ukrainian national (September 15 per Europol) for AudiA6-linked laundering, leading to the two operators; TRM traces about $7 million of LastPass funds through AudiA6 (dated September or December 2025 in different accounts).","source":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/"},{"date":"2026-04","event":"April 7-13: fake Ledger Live app steals over $9.5 million; April 14: ZachXBT traces proceeds via AudiA6 and 150+ KuCoin addresses; undercover agents pay $300 and $400 fees on $5,000 and $5,100 transactions.","source":"Your life savings could be gone in one click: How a fake crypto app bypassed Apple's security — CoinDesk","source_url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto"},{"date":"2026-05","event":"Final undercover transaction; May 22: ZachXBT alleges KuCoin ignored victim and police appeals and shielded over $13 million.","source":"KuCoin Ignored Hack Victims and Police Appeals, ZachXBT Says — BanklessTimes","source_url":"https://www.banklesstimes.com/articles/2026/05/22/kucoin-ignored-hack-victims-and-police-appeals-zachxbt-says/"},{"date":"2026-06","event":"June 2: DOJ criminal complaint filed in the Eastern District of Pennsylvania (per two accounts).","source":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","source_url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"date":"2026-06","event":"June 10: takedown; Tkachuk and Ledenev arrested in Batumi; 25 domains and 30+ servers seized; EUR 692,000 frozen. June 11: charges announced, Europol and Chainalysis publish details, seizure banners posted on AudiA6 and Dark2Web. June 12-13: U.S. confirms it will seek extradition.","source":"Authorities dismantle AudiA6 ransomware crypto-laundering service — BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/"}],"sources_used":[{"url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","name":"Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs — The Hacker News","type":"news_article","archive_url":"http://web.archive.org/web/20260618194538/https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html","credibility":2,"archive_timestamp":"2026-06-18T19:45:38+00:00"},{"url":"https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html","name":"Philly feds charge two with running a cryptocurrency money laundering scheme — Philadelphia Inquirer","type":"news_article","archive_url":"http://web.archive.org/web/20260628190224/https://www.inquirer.com/crime/bitcoin-crypto-money-laundering-dark-web-audia6-arrested-20260611.html","credibility":1,"archive_timestamp":"2026-06-28T19:02:24+00:00"},{"url":"https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/","name":"Authorities dismantle AudiA6 ransomware crypto-laundering service — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260717013636/https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/","credibility":2,"archive_timestamp":"2026-07-17T01:36:36+00:00"},{"url":"https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","name":"Authorities dismantle crypto laundering service that moved 336 million for cybercriminals — Help Net Security","type":"news_article","archive_url":"https://web.archive.org/web/20260726153945/https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/","credibility":2,"archive_timestamp":"2026-07-26T15:39:45+00:00"},{"url":"https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6","name":"International Operation Dismantles EUR 336 Million Ransomware Laundering Pipeline AudiA6 — TRM Labs","type":"research","archive_url":"https://web.archive.org/web/20260726112514/https://www.trmlabs.com/resources/blog/international-operation-dismantles-eur-336-million-ransomware-laundering-pipeline-audia6","credibility":2,"archive_timestamp":"2026-07-26T11:25:14+00:00"},{"url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","name":"Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network — Chainalysis","type":"research","archive_url":"http://web.archive.org/web/20260724055636/https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/","credibility":2,"archive_timestamp":"2026-07-24T05:56:36+00:00"},{"url":"https://www.cryptopolitan.com/us-extradition-audia6-duo-crypto-laundering/","name":"US to seek extradition of AudiA6 duo over $389M crypto laundering scheme — Cryptopolitan","type":"news_article","archive_url":"http://web.archive.org/web/20260623025333/https://www.cryptopolitan.com/us-extradition-audia6-duo-crypto-laundering/","credibility":2,"archive_timestamp":"2026-06-23T02:53:33+00:00"},{"url":"https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/","name":"Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case — HackRead","type":"news_article","archive_url":"http://web.archive.org/web/20260622144401/https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/","credibility":2,"archive_timestamp":"2026-06-22T14:44:01+00:00"},{"url":"https://crypto.news/audia6-operators-charged-in-u-s-over-alleged-389m-crypto-laundering-network/","name":"AudiA6 operators charged in U.S. over alleged $389m crypto laundering network — Crypto.news","type":"news_article","archive_url":"https://web.archive.org/web/20260726084025/https://crypto.news/audia6-operators-charged-in-u-s-over-alleged-389m-crypto-laundering-network/","credibility":2,"archive_timestamp":"2026-07-26T08:40:25+00:00"},{"url":"https://www.mlex.com/mlex/articles/2488842/operators-of-audia6-crypto-laundering-service-arrested-charged-in-us","name":"Operators of AudiA6 crypto laundering service arrested, charged in US — MLex","type":"news_article","archive_url":"https://web.archive.org/web/20260726105927/https://www.mlex.com/mlex/articles/2488842/operators-of-audia6-crypto-laundering-service-arrested-charged-in-us","credibility":2,"archive_timestamp":"2026-07-26T10:59:27+00:00"},{"url":"https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/","name":"Ransomware Crypto Laundering Platform Taken Out by FBI and Europol — Infosecurity Magazine","type":"news_article","archive_url":"http://web.archive.org/web/20260613121617/https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/","credibility":2,"archive_timestamp":"2026-06-13T12:16:17+00:00"},{"url":"https://cyberpress.org/europol-dismantles-audia6-crypto-laundering/","name":"Europol Dismantles AudiA6 Crypto Laundering Network Used by Ransomware Gangs — CyberPress","type":"news_article","archive_url":"https://web.archive.org/web/20260726090027/https://cyberpress.org/europol-dismantles-audia6-crypto-laundering/","credibility":2,"archive_timestamp":"2026-07-26T09:00:27+00:00"},{"url":"https://cybersecuritynews.com/authorities-dismantle-audia6-services/","name":"Authorities Dismantle Cryptocurrency Laundering Services AudiA6 Used by Ransomware Gangs — CyberSecurityNews","type":"news_article","archive_url":"https://web.archive.org/web/20260726191616/https://cybersecuritynews.com/authorities-dismantle-audia6-services/","credibility":2,"archive_timestamp":"2026-07-26T19:16:16+00:00"},{"url":"https://www.gncrypto.news/news/11-nation-sting-shuts-audia6-crypto-mixer-336m-ransomware/","name":"11-Nation Sting Shuts AudiA6 Crypto Mixer, 336M for Ransomware — GnCrypto News","type":"news_article","archive_url":"https://web.archive.org/web/20260726104217/https://www.gncrypto.news/news/11-nation-sting-shuts-audia6-crypto-mixer-336m-ransomware/","credibility":2,"archive_timestamp":"2026-07-26T10:42:17+00:00"},{"url":"https://www.scworld.com/brief/audia6-cryptocurrency-service-dismantled-for-laundering-over-380-million","name":"AudiA6 cryptocurrency service dismantled for laundering over $380 million — SC Media","type":"news_article","archive_url":"https://web.archive.org/web/20260726230754/https://www.scworld.com/brief/audia6-cryptocurrency-service-dismantled-for-laundering-over-380-million","credibility":2,"archive_timestamp":"2026-07-26T23:07:54+00:00"},{"url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","name":"DOJ EDPA: Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","archive_url":"http://web.archive.org/web/20260829013029/https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered","credibility":1,"archive_timestamp":"2026-08-29T01:30:29+00:00"},{"url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","name":"US Secret Service: Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","archive_url":"http://web.archive.org/web/20260615115438/https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly","credibility":1,"archive_timestamp":"2026-06-15T11:54:38+00:00"},{"url":"https://www.fdicoig.gov/news/investigations-press-releases/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering","name":"Europol via FDIC OIG: Ransomware gangs cut off from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","archive_url":"http://web.archive.org/web/20260723025512/https://www.fdicoig.gov/news/investigations-press-releases/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering","credibility":1,"archive_timestamp":"2026-07-23T02:55:12+00:00"},{"url":"https://www.theblock.co/post/404433/doj-charges-two-389-million-audia6-crypto-laundering-case","name":"The Block: DOJ charges two in $389 million AudiA6 crypto laundering case","type":"news_article","archive_url":"http://web.archive.org/web/20260611152710/https://www.theblock.co/post/404433/doj-charges-two-389-million-audia6-crypto-laundering-case","credibility":2,"archive_timestamp":"2026-06-11T15:27:10+00:00"},{"url":"https://protos.com/audia6-crypto-laundering-suspects-face-extradition-to-us/","name":"Protos: AudiA6 crypto laundering suspects face extradition to US","type":"news_article","archive_url":"http://web.archive.org/web/20260616175141/https://protos.com/audia6-crypto-laundering-suspects-face-extradition-to-us/","credibility":2,"archive_timestamp":"2026-06-16T17:51:41+00:00"},{"url":"https://cybernews.com/cybercrime/audia6-crypto-washing-shut-down/","name":"Cybernews: Crypto laundering service AudiA6 shut down","type":"news_article","credibility":2},{"url":"https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","name":"Europol Press Release: Ransomware gangs cut from EUR 336 million AudiA6 crypto laundering pipeline","type":"regulatory","archive_url":"http://web.archive.org/web/20260724225654/https://www.europol.europa.eu/media-press/newsroom/news/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline","credibility":1,"archive_timestamp":"2026-07-24T22:56:54+00:00"},{"url":"https://ambcrypto.com/doj-says-389m-crypto-laundering-network-helped-cybercriminals-evade-exchange-aml-systems/","name":"AMBCrypto: DOJ says $389M crypto laundering network helped cybercriminals evade exchange AML systems","type":"news_article","archive_url":"http://web.archive.org/web/20260618194904/https://ambcrypto.com/doj-says-389m-crypto-laundering-network-helped-cybercriminals-evade-exchange-aml-systems/","credibility":2,"archive_timestamp":"2026-06-18T19:49:04+00:00"},{"url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto","name":"Your life savings could be gone in one click: How a fake crypto app bypassed Apple's security — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260626213906/https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto","credibility":1,"archive_timestamp":"2026-06-26T21:39:06+00:00"},{"url":"https://www.banklesstimes.com/articles/2026/05/22/kucoin-ignored-hack-victims-and-police-appeals-zachxbt-says/","name":"KuCoin Ignored Hack Victims and Police Appeals, ZachXBT Says — BanklessTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260620113458/https://www.banklesstimes.com/articles/2026/05/22/kucoin-ignored-hack-victims-and-police-appeals-zachxbt-says/","credibility":2,"archive_timestamp":"2026-06-20T11:34:58+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/these-are-the-cryptomixers-hackers-use-to-clean-their-ransoms/","name":"These are the cryptomixers hackers use to clean their ransoms — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260611160810/https://www.bleepingcomputer.com/news/security/these-are-the-cryptomixers-hackers-use-to-clean-their-ransoms/","credibility":2,"archive_timestamp":"2026-06-11T16:08:10+00:00"},{"url":"https://www.intel471.com/blog/cryptomixers-ransomware","name":"How cryptomixers allow cybercriminals to clean their ransoms — Intel 471","type":"research","archive_url":"http://web.archive.org/web/20260722190244/https://www.intel471.com/blog/cryptomixers-ransomware","credibility":2,"archive_timestamp":"2026-07-22T19:02:44+00:00"},{"url":"https://news.bitcoin.com/zachxbt-says-apple-app-store-fake-ledger-app-stole-9-5m-from-50-victims-in-one-week/","name":"ZachXBT Says Apple App Store Fake Ledger App Stole $9.5M From 50+ Victims in One Week — Bitcoin.com News","type":"news_article","archive_url":"https://web.archive.org/web/20260724230607/https://news.bitcoin.com/zachxbt-says-apple-app-store-fake-ledger-app-stole-9-5m-from-50-victims-in-one-week/","credibility":2,"archive_timestamp":"2026-07-24T23:06:07+00:00"},{"url":"https://www.theblock.co/post/397388/fake-ledger-app-apple-app-store-crypto-theft-bitcoin-tron-solana-zachxbt","name":"Fake Ledger app on Apple App Store linked to $9.5M crypto theft — The Block","type":"news_article","credibility":2},{"url":"https://appleinsider.com/articles/26/04/14/bogus-crypto-wallet-on-app-store-steals-95m","name":"Bogus crypto wallet on App Store steals $9.5M — AppleInsider","type":"news_article","archive_url":"http://web.archive.org/web/20260417043325/https://appleinsider.com/articles/26/04/14/bogus-crypto-wallet-on-app-store-steals-95m","credibility":2,"archive_timestamp":"2026-04-17T04:33:25+00:00"},{"url":"https://www.ccn.com/education/crypto/fake-ledger-app-9-5m-stolen-50-victims-kucoin-laundering/","name":"Fake Ledger App Alert: $9.5M Stolen From 50+ Victims via Apple App Store, Funds Laundered via KuCoin — CCN","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/zachxbt-accuses-kucoin-of-shielding-13m-in-stolen-crypto-from-german-investigators/","name":"ZachXBT Accuses KuCoin of Shielding $13M in Stolen Crypto From German Investigators — Bitcoin.com News","type":"news_article","archive_url":"http://web.archive.org/web/20260528044340/https://news.bitcoin.com/zachxbt-accuses-kucoin-of-shielding-13m-in-stolen-crypto-from-german-investigators/","credibility":2,"archive_timestamp":"2026-05-28T04:43:40+00:00"},{"url":"https://home.treasury.gov/news/press-releases/jy0916","name":"U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash","type":"regulatory","archive_url":"http://web.archive.org/web/20260706154833/https://home.treasury.gov/news/press-releases/jy0916","credibility":1,"archive_timestamp":"2026-07-06T15:48:33+00:00"},{"url":"https://audia6.best/en/","name":"AudiA6 official website","type":"official","credibility":3},{"url":"https://t.me/obmen_audia6","name":"AudiA6 Telegram channel","type":"social_media","credibility":3},{"url":"https://crdpro.cc/threads/audia6-exchange-service-cash-in-btc-eth-ltc-qiwi-qr-tinkoff-and-200-more-cryptocurrencies-cash-in-any-country-in-the-world.27505/","name":"AudiA6 Exchange Service listing — CrdPro carding forum","type":"community_report","credibility":3},{"url":"https://cardvilla.cc/cashout-services-and-drops-for-stuff/audia6-cryptocurrency-mixer-exchange-430063/","name":"AudiA6 Cryptocurrency Mixer listing — CardVilla carding forum","type":"community_report","archive_url":"http://web.archive.org/web/20250904044225/https://cardvilla.cc/cashout-services-and-drops-for-stuff/audia6-cryptocurrency-mixer-exchange-430063/","credibility":3,"archive_timestamp":"2025-09-04T04:42:25+00:00"},{"url":"https://crdpro.org/threads/audia6-crypto-mixer-btc-ltc-eth-etc-bch-bsv-tetheromni-xrp.27506/","name":"AudiA6 Cryptocurrency Mixer and Exchange — CrdPro carding forum (Tier 3)","type":"community_report","credibility":3},{"url":"https://audia6.best/en/contact/","name":"AudiA6 official contacts page","type":"official","credibility":3}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-06-14T14:18:47.955248+00:00","updated_at":"2026-10-27T11:44:22.443+00:00"},"source_quality":{"total":39,"tier1":5,"tier2":5,"tier3":1,"unrated":28},"follower_count":null,"content_updated_at":"2026-10-27T11:44:23.475Z","last_fact_checked_at":"2026-10-27T11:44:23.166Z","fact_check_next_allowed_at":"2026-11-03T11:44:23.166Z","update_next_allowed_at":null}