TL; DR
- Chainalysis says law enforcement has busted AudiA6, a crypto-money laundering scheme linked to ransomware and darknet operations.
- The company said the network has processed about 10,333 BTC since 2021, worth about $389 million.
- Authorities have arrested two suspected high-ranking officials in Georgia, where the US is seeking extradition.
- This case shows how decentralized cryptocurrency networks can rely on legitimate exchanges, mule accounts, and darknet tools.
A global security agency has shut down a cryptocurrency network known as AudiA6, according to a blockchain analytics firm. Chainalysisin a case that shows how money linked to ransomware can pass through a mix of darknet operations, mule accounts, and centralized infrastructure.
In a report on June 11, Chainalysis said that the target was AudiA6, which was described as a cryptocurrency laundering platform and a “combination-as-a-service” provider of services and theaters of ransomware, darknet markets, and other cybercrime activities. The company said the network has processed about 10,333 bitcoins since its launch in 2021, worth about $389 million.
Law enforcement goes against the AudiA6
According to Chainalysis, the joint operation involved several agencies, including the US Department of Justice, the US Secret Service, Europol, and other international agencies. Authorities have arrested two suspected senior officials in the Republic of Georgia: a 37-year-old Ukrainian national and a 25-year-old Russian national. The United States is seeking their extradition.
Law enforcement has also seized digital devices in the United States and Europe. Chainalysis said websites linked to AudiA6 and an associated cybercrime group called Dark2Web were replaced with hijacking banners, blocking access to tools that allegedly helped criminals advertise, coordinate, and extract illicit funds.
This case is important because the AudiA6 was not presented as a stand-alone mixer. Chainalysis described the network as an ecosystem where cybercriminals can communicate through Dark2Web, organize money laundering operations, and move money through the money laundering process that affected the legal and legitimate aspects of the crypto economy.
How Chainalysis Says Networks Are Managed
Chainalysis said that AudiA6 uses more than 6,000 KYC-verified money donkey accounts to help move money through the middle of killing cryptocurrency. In fact, this means that the network spent money allowing unauthorized transactions through verified accounts, making the operation difficult to distinguish from that of ordinary users.
The company said that investigators traced at least 393 BTC, previously worth more than $19 million, directly from known ransomware players, black markets, and other online services. Chainalysis reported that more than $16 million tied mainly to ransomware and stolen funds were laundered through the Internet.
The stock brokers reportedly paid between 3% and 10%. Chainalysis said the system can return lost funds to customers within a one-hour window, giving criminal users a quick way to transfer or move their assets after a hack.
The report also linked the AudiA6 monetization scheme to legitimate Russian exchanges, including Bitzlato and Garantex, and said the network had met with Exploit.in, a Russian cybercrime court that specializes in extortion. Chainalysis reported that Europol identified domains allegedly used by administrators to register fake donkey accounts, including designli.pictures, deliverly.top, and inboxly.top.
Why This Matters in Crypto Management
In the big crypto market, the AudiA6 case is a reminder that enforcement is focused on cybercrime security, not the original theft or ransom payment. Researchers are looking at where money flows, what services help generate income, and how illegal actors try to integrate into legitimate platforms.
That difference is important. Centralized exchanges and payment rails aren’t exactly the beginnings of a criminal enterprise, but they can become attractive networks if mule accounts and weak monitoring systems create enough space for bad actors to operate. The Chainalysis report shows that the AudiA6 relied heavily on this difference.
This case further emphasizes why blockchain analytics has become a central area of crypto-related law. Public blockchains can provide researchers with a way to change, but turning that into a binding process often requires connecting wallets, service infrastructure, domains, issuing accounts, and real users.
For legitimate crypto users and companies, the takeaway is that crypto is not uniquely criminal. It’s that the same transparency that allows money to flow around the world can also give investigators a map of where laundering networks are large enough to stop operations.
With the removal of AudiA6, law enforcement seems to be sending a clear message: the services that help ransomware groups and darknet vendors turn crypto into usable currency are now firmly on the edge.
