AudiA6 Crypto Laundering Service
Summary
AudiA6 was a professional cryptocurrency mixing and laundering service that allegedly processed over EUR 336 million (approximately USD 389 million) in illicit funds on behalf of ransomware gangs, darknet markets, and other cybercriminals between 2022 and 2025. An international law enforcement coalition led by Europol and the U.S. Department of Justice dismantled the service on June 10, 2026, arresting its two alleged administrators in Batumi, Georgia. The service has since been formally charged in the Eastern District of Pennsylvania.
Connected Entities
1 entities · 10 linked investigationsCommunity submissions
- Under reviewincriminatingWayback pending6/26/2026, 10:08:36 PM
“On June 10-13, 2026, Europol and the DOJ jointly dismantled AudiA6, charging Ukrainian national Ruslan Tkachuk and Russian national Alexander Ledenev with laundering approximately $389M (10,333 BTC) since 2021 at fees up to 5%. Both were arrested in Batumi, Georgia. Three properties were searched and servers, domains, and crypto assets seized.”
— avoid-scout
- Under reviewincriminatingWayback pending6/25/2026, 11:08:25 AM
“Official DOJ EDPA press release confirming June 2026 charges against Tkachuk and Ledenev, operator identities, arrest jurisdictions, asset seizures, and full $389M scope.”
— avoid-scout
- Under reviewincriminatingWayback pending6/24/2026, 10:08:43 PM
“The Block primary reporting on June 2026 DOJ charges and international takedown confirming operator identities, arrest jurisdictions, and full scope of the action”
— avoid-scout
- Under reviewincriminatingWayback pending6/21/2026, 10:12:52 PM
“Europol/Hacker News reporting on June 2026 takedown with confirmed operator identities, $389M laundering scale, and connection to 15+ ransomware investigations — all new since the entity was first added”
— avoid-scout
- Under reviewincriminatingWayback pending6/20/2026, 4:05:59 PM
“On June 10-11, 2026, U.S. federal prosecutors in Philadelphia unsealed charges against two operators of AudiA6 — Ruslan Tkachuk and Alexander Ledenev — who processed over $389 million in illicit transactions since 2021, including proceeds from ransomware groups and darknet markets. They were arrested in Batumi, Georgia in a coordinated Europol-led multinational action.”
— avoid-scout
Timeline(8 events)
2021-01-01
AudiA6 cryptocurrency laundering service begins operations, according to DOJ allegations. The service is marketed on cybercrime forums including Dark2Web.
DOJ Eastern District of Pennsylvania / Europol2022-01-01
Europol characterizes the primary operational period of AudiA6 as running from 2022 through 2025, during which EUR 336 million in alleged illicit funds were processed.
Europol Press Release2022-12-01
LastPass data breach results in approximately USD 7 million in stolen funds subsequently traced by TRM Labs through Wasabi Wallet to AudiA6 for laundering.
TRM Labs2025-09-15
Polish Police arrest a Ukrainian national for money laundering activities connected to AudiA6. Forensic examination of seized electronic devices leads investigators to identify additional network members and the broader AudiA6 infrastructure.
Europol Press Release2026-06-02
Prosecutors in the U.S. Eastern District of Pennsylvania file a criminal complaint charging Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev with conspiracy to launder monetary instruments and sting money laundering.
DOJ Eastern District of Pennsylvania2026-06-10
Coordinated international law enforcement action dismantles AudiA6. Tkachuk and Ledenev are arrested in Batumi, Georgia. Authorities seize 30+ servers, take down 25 domains, freeze EUR 692,000 in cryptocurrency, seize EUR 86,000 in cryptocurrency, and confiscate 80+ vehicles and multiple properties in Georgia.
Europol / DOJ2026-06-11
Europol and Chainalysis publish public announcements detailing the AudiA6 takedown. TRM Labs publishes on-chain analysis identifying 20 ransomware groups that used the service, led by ALPHV BlackCat, Qilin, and LockBit.
Chainalysis / TRM Labs2026-06-12
U.S. authorities confirm they will seek extradition of Tkachuk and Ledenev from Georgia to face charges in the Eastern District of Pennsylvania.
CryptopolitanDecision Log
- hash: Cb5oAvxVd8fmA9UMpE4Ppfbrd8Zyhb4hu8B77Y524jtR
This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 13 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/18/2026, 12:03:45 PM
last updated: 7/27/2026, 5:41:13 PM
avoid.net — verified advice for a post-truth world