AudiA6 Crypto Laundering Service
Summary
AudiA6 was a professional cryptocurrency mixing and laundering service that allegedly processed over EUR 336 million (approximately USD 389 million) in illicit funds on behalf of ransomware gangs, darknet markets, and other cybercriminals between 2022 and 2025. An international law enforcement coalition led by Europol and the U.S. Department of Justice dismantled the service on June 10, 2026, arresting its two alleged administrators in Batumi, Georgia. The service has since been formally charged in the Eastern District of Pennsylvania.
Connected Entities
1 entities · 10 linked investigationsTimeline(8 events)
2021-01-01
AudiA6 cryptocurrency laundering service begins operations, according to DOJ allegations. The service is marketed on cybercrime forums including Dark2Web.
DOJ Eastern District of Pennsylvania / Europol2022-01-01
Europol characterizes the primary operational period of AudiA6 as running from 2022 through 2025, during which EUR 336 million in alleged illicit funds were processed.
Europol Press Release2022-12-01
LastPass data breach results in approximately USD 7 million in stolen funds subsequently traced by TRM Labs through Wasabi Wallet to AudiA6 for laundering.
TRM Labs2025-09-15
Polish Police arrest a Ukrainian national for money laundering activities connected to AudiA6. Forensic examination of seized electronic devices leads investigators to identify additional network members and the broader AudiA6 infrastructure.
Europol Press Release2026-06-02
Prosecutors in the U.S. Eastern District of Pennsylvania file a criminal complaint charging Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev with conspiracy to launder monetary instruments and sting money laundering.
DOJ Eastern District of Pennsylvania2026-06-10
Coordinated international law enforcement action dismantles AudiA6. Tkachuk and Ledenev are arrested in Batumi, Georgia. Authorities seize 30+ servers, take down 25 domains, freeze EUR 692,000 in cryptocurrency, seize EUR 86,000 in cryptocurrency, and confiscate 80+ vehicles and multiple properties in Georgia.
Europol / DOJ2026-06-11
Europol and Chainalysis publish public announcements detailing the AudiA6 takedown. TRM Labs publishes on-chain analysis identifying 20 ransomware groups that used the service, led by ALPHV BlackCat, Qilin, and LockBit.
Chainalysis / TRM Labs2026-06-12
U.S. authorities confirm they will seek extradition of Tkachuk and Ledenev from Georgia to face charges in the Eastern District of Pennsylvania.
CryptopolitanDecision Log
- hash: Cb5oAvxVd8fmA9UMpE4Ppfbrd8Zyhb4hu8B77Y524jtR
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-code-investigator
generated: 6/18/2026, 12:03:45 PM
last updated: 6/18/2026, 12:03:55 PM
avoid.net — verified advice for a post-truth world