← Dark2Webreviewed 2026-11-01 · 16 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Dark2Web against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
6 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #3[unverifiable][awaiting moderator]in section: Operators and Criminal Charges
“The criminal complaint filed on June 2, 2026, in the U.S. District Court for the Eastern District of Pennsylvania names two alleged senior administrators of both Dark2Web and AudiA6.”
reviewerCriminal complaint was filed on June 2, 2026.The DOJ page could not be read and the Secret Service release gives no filing date. The same date appears in timeline[1]. - #6[unverifiable][awaiting moderator]in section: Relationship to AudiA6 and Ransomware Ecosystem
“Of that total, at least 393.39 BTC (approximately $19.2 million) was traced directly from known ransomware organizations and darknet markets.”
reviewerAt least 393.39 BTC (about $19.2M) traced from ransomware organizations and darknet markets.The figure is not on the cited TRM page. The fetch summary may have been incomplete, and the other cited sources were not checked for it. - #10[unverifiable][awaiting moderator]in section: Law Enforcement Action and Participating Agencies
“with investigative partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, and the United Kingdom.”
reviewerTakedown included participation from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, UK; Eurojust and Europol coordination.The DOJ page was unreadable. Only Georgia, Poland and the US were confirmed. Canada is corroborated by a CTV headline in search results. - #13[unverifiable][awaiting moderator]in the timeline
“Europol issues public statement characterizing AudiA6/Dark2Web as a 'key financial pipeline used to wash hundreds of millions in illicit profits.'”
reviewerEuropol issued a statement on June 12 calling AudiA6/Dark2Web a 'key financial pipeline used to wash hundreds of millions in illicit profits'.The quotation could not be matched to the cited article. It also appears to be attributed to Dark2Web, not just AudiA6. - #14[unverifiable][awaiting moderator]in section: Overview and Purpose
“TRM Labs characterized it as a node within the financial backbone of the underground cybercrime economy.”
reviewerTRM characterized Dark2Web as a node within the financial backbone of the underground cybercrime economy.The characterization was not found in the fetched TRM text. - #16[unverifiable][awaiting moderator]in section: Current Status
“The criminal complaint remains the operative charging document; no indictment has been publicly reported.”
reviewerExtradition is pending; no indictment, no trial date, no successor forum.A negative claim. I found no indictment or extradition news through search, but coverage after June 2026 is sparse. It was not confirmed as of November 2026.
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #8[partially supported][awaiting moderator]in section: Relationship to AudiA6 and Ransomware Ecosystem
“Europol described the total illicit proceeds processed by AudiA6 as exceeding EUR 336 million between 2022 and 2025.”
reviewerEuropol put proceeds at over EUR 336 million between 2022 and 2025.The amount is confirmed. The 2022-2025 date range is unconfirmed, and it sits oddly with wallets active since 2021. - #9[partially supported][awaiting moderator]in section: Relationship to AudiA6 and Ransomware Ecosystem
“Dark2Web served as the primary venue through which ransomware affiliates learned of and connected with AudiA6's services.”
reviewerDark2Web was the primary venue through which ransomware affiliates learned of AudiA6.Sources say AudiA6 advertised on the forum. 'Primary venue' for ransomware affiliates is an overstatement I could not confirm.
confirmed
8 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Operators and Criminal Charges
“Ruslan Igorevich Tkachuk, 37, a Ukrainian national, and Alexander Vladimirovich Ledenev, 25, a Russian national, both resided in Batumi, Republic of Georgia at the time of their arrest.”
reviewerDefendants are Tkachuk (37, Ukrainian) and Ledenev (25, Russian), residing in Batumi, Georgia.Matches the Secret Service release. - #2[confirmed][no action needed]in section: Operators and Criminal Charges
“The complaint charges each defendant with one count of conspiracy to launder monetary instruments and one count of sting money laundering. If convicted, each faces a maximum sentence of 20 years of incarceration.”
reviewerComplaint charges each defendant with conspiracy to launder monetary instruments and sting money laundering; max 20 years.Consistent with the release. - #4[confirmed][no action needed]in section: Operators and Criminal Charges
“Both were apprehended on June 10, 2026, in coordinated actions by Georgian authorities acting at the request of U.S. law enforcement.”
reviewerArrests on June 10, 2026 in Georgia; both remain in Georgian custody; U.S. will seek extradition.Date confirmed by HelpNet. The Secret Service release implies it. - #5[confirmed][no action needed]in section: Relationship to AudiA6 and Ransomware Ecosystem
“AudiA6 itself received approximately 10,333 BTC — valued at approximately $389.7 million at the time of the relevant transactions — across wallets active since 2021.”
reviewerAudiA6 received about 10,333 BTC (about $389.7M) in wallets active since 2021.Supported by the Secret Service release. The cited TRM page does not state the figure. - #7[confirmed][no action needed]in section: Relationship to AudiA6 and Ransomware Ecosystem
“TRM Labs identified 20 distinct ransomware groups that sent funds to AudiA6. The three largest sources by volume were ALPHV/BlackCat (approximately $9.1 million), Qilin (approximately $7.1 million), and LockBit (approximately $4.4 million).”
reviewerTRM identified 20 ransomware groups; ALPHV $9.1M, Qilin $7.1M, LockBit $4.4M.Matches TRM. - #11[confirmed][no action needed]in section: Infrastructure and Seizure
“authorities seized more than 30 servers and took down 25 domains.”
reviewerMore than 30 servers seized, 25 domains taken down, three properties searched.Matches HelpNet. - #12[confirmed][no action needed]in section: Infrastructure and Seizure
“On June 10-11, 2026, law enforcement replaced the websites for both Dark2Web and AudiA6 with law enforcement seizure banners.”
reviewerWebsites replaced with seizure banners on June 10-11, 2026.Seizure banners are widely reported. The exact dates fit the June 10-11 announcement. - #15[confirmed][no action needed]in section: Overview and Purpose
“for a fee of up to five percent of the amount of funds being laundered.”
reviewerComplaint ad offered to conceal source of crypto for a fee of up to five percent.Matches.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.