In a significant breakthrough, an extensive collaboration among law enforcement agencies from 11 countries has led to the shutdown of the AudiA6 money laundering operation, which facilitated over €336 million (approximately $390 million) in illicit cryptocurrency transactions from 2022 to 2025. The crackdown was announced by the European Union Agency for Criminal Justice Cooperation (Eurojust) on Thursday.
Arrests and Seizures in Georgia
Authorities apprehended two key operators, identified as nationals from Russia and Ukraine, in Georgia, during a coordinated crackdown that marks a critical step in global efforts against cybercrime. This operation resulted in the seizure of 25 domains, over 30 servers, 80 vehicles, and the freezing of approximately $900,000 in digital assets.
How AudiA6 Operated
The AudiA6 platform functioned as a “mixer-as-a-service,” enabling cybercriminals involved in ransomware activities to launder stolen cryptocurrencies. By offering services to “clean” cryptocurrencies within about an hour for a commission ranging from 3% to 10%, the platform attracted a network of illicit actors. According to research by Chainalysis, the AudiA6 wallets alone received around 10,333 BTC, valued at nearly $389 million at the time of those transactions.
Dark2Web Marketplace Connection
In addition to AudiA6, the criminal syndicate operated the Dark2Web marketplace, a forum notorious for facilitating connections among cybercriminals and advertising illicit services globally. This nexus of illegal activity has now been disrupted, thanks to collaborative international law enforcement efforts.
Fraudulent KYC Accounts at the Heart of the Scheme
Investigators uncovered more than 6,000 fraudulent Know Your Customer (KYC) accounts, all linked to “money mules.” Many of these accounts were established using stolen or purchased identities, with recruitment heavily focused on Russian-speaking individuals to aid in executing these criminal activities.
Impact on Ransomware Trends
This operation comes at a time when ransomware attacks are on the rise. In 2026 alone, ransomware incidents were reported in 97 countries, with the United States representing a staggering 64.7% of victims, according to Emsisoft. As highlighted by Check Point Research, the ransomware landscape is becoming increasingly dominated by a handful of aggressive operators, with the top 10 groups accountable for a substantial 71% of all ransomware victims reported in the first quarter.
Conclusion
The dismantling of the AudiA6 operation signifies a decisive victory in the battle against cybercrime and money laundering in the cryptocurrency space. Moving forward, these developments underscore the need for continuous international cooperation to combat evolving cyber threats.
For more information on this international sting operation, visit the .
