Do Son 
Image: Europol
Recently, international law enforcement agencies dismantled a massive crypto laundering service trusted by global cybercriminals. This coordinated operation effectively cut off a key financial pipeline. Specifically, the platform helped illicit networks wash hundreds of millions in stolen profits. Investigators revealed that the platform, known as ‘AudiA6’, laundered more than EUR 336 million between 2022 and 2025. This platform allowed criminals to hide their tracks easily.
A Central Hub for Ransomware Gangs
According to official statements, “the platform became a central hub for ransomware actors and cybercriminals seeking to cash out stolen digital assets while hiding the money trail from authorities.” Consequently, these ransomware gangs safely processed their dirty funds. In addition to running the mixer, the suspects administered a dark web cybercrime forum called ‘Dark2Web’. This marketplace allowed threat actors to advertise illicit services worldwide.
Global Police Execute Coordinated Raids
To stop this global threat, the United States Secret Service, IRS Criminal Investigation, and Polish Police launched parallel investigations. Europol and Eurojust also provided critical operational support. On June 10, coordinated actions took place across multiple countries. As a result, authorities arrested two alleged administrators of Ukrainian and Russian nationality in Georgia. Furthermore, officers seized over 30 servers and froze EUR 692,000 in cryptocurrency.
Operating at an Industrial Scale
This action built on an earlier enforcement action by the Polish Police in September 2025. That initial arrest allowed forensic experts to identify additional suspects. Ultimately, investigators uncovered what they describe as “an industrial-scale cryptocurrency laundering operation built around thousands of fraudulent exchange accounts opened using stolen or purchased identities.” Cybercriminals used private messaging platforms to initiate contact. After that, customers transferred funds and received clean money within an hour.
Exposing the Money Mule Infrastructure
Marketed on underground forums as a professional mixing service, ‘AudiA6’ promised absolute anonymity. However, international cooperation shattered that illusion. During the investigation, teams identified more than 6,000 Know Your Customer (KYC) records linked to money mule accounts. Therefore, authorities are releasing the fraudulent domains to help exchanges block malicious activity. By permanently disrupting this crypto laundering service, global police have heavily destabilized the financial backbone of modern cybercrime.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
