U.S. authorities have charged two Eastern European nationals for allegedly operating AudiA6, a cryptocurrency laundering service that processed more than $389 million in illicit Bitcoin transactions since 2021. The arrests, which were part of a coordinated international law enforcement operation, mark another major effort to disrupt cybercrime-related financial networks and cryptocurrency-enabled money laundering activities.
Ruslan Igorevich Tkachuk, 37, a Ukrainian national, and Alexander Vladimirovich Ledenev, 25, a Russian national, both residing in Batumi, Republic of Georgia, were arrested on Wednesday. They face one count of conspiracy to launder monetary instruments and one count of sting money laundering. If convicted, each could face up to 20 years in prison. U.S. authorities are seeking their extradition to the Eastern District of Pennsylvania.
How AudiA6 Operated
According to the U.S. Department of Justice (DOJ), AudiA6 operated as a professional “mixer-as-a-service” and was heavily marketed on underground forums, including the Dark2Web cybercrime forum, which the defendants also allegedly managed.
The service promised clients, primarily cybercriminals, the ability to obscure the origins of tainted cryptocurrency in exchange for a fee of up to 5%.
Blockchain analysis conducted by investigators showed that AudiA6 wallets received approximately 10,333 BTC, valued at around $389 million. Of this amount, about 393 BTC, worth roughly $19 million, came directly from known darknet markets, ransomware groups, and other illicit sources.
The service allegedly relied on thousands of money mule accounts on centralized exchanges, many created using stolen or purchased identities, to layer and clean the funds. It then returned “clean” cryptocurrency to clients, often within an hour.
This rapid and reliable process made AudiA6 particularly attractive to ransomware operators and darknet vendors seeking to cash out proceeds while evading KYC and AML controls.
Coordinated Global Takedown
The operation was led by the U.S. Secret Service, with support from IRS Criminal Investigation (IRS-CI), Europol, Eurojust, and law enforcement partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, and the United Kingdom.
Actions taken during the operation included:
- Searches of three properties
- Seizure of servers, domains, and electronic devices
- Blocking of associated Telegram accounts
- Freezing and seizure of cryptocurrency assets
- Takedown of AudiA6’s clearweb and darkweb sites, which now display law enforcement seizure banners
The operation also disrupted Dark2Web, where AudiA6 actively promoted its services.
Similar Cases in the Fight Against Crypto Laundering
AudiA6 is the latest in a series of high-profile actions targeting cryptocurrency mixing and laundering services. One notable precedent is the Bitcoin Fog case, in which operator Roman Sterlingov was convicted in 2024 for running a darknet mixer that laundered more than $400 million between 2011 and 2021. A significant portion of those funds originated from darknet markets and ransomware operations. Like AudiA6, Bitcoin Fog relied on blockchain obfuscation techniques and was ultimately exposed through advanced chain analysis tools.
Recent enforcement actions show that authorities are increasingly targeting laundering operations across multiple jurisdictions. For example, a French national was recently sentenced to eight years in prison for his role in a large-scale cryptocurrency laundering network, underscoring the growing international crackdown on illicit crypto finance.
Other major enforcement actions, including the takedown of ChipMixer, which allegedly laundered more than $3 billion, along with operations against Helix and Blender.io, demonstrate a consistent trend. Authorities are increasingly combining blockchain tracing, international cooperation, and undercover operations to dismantle these networks.
Law enforcement agencies have also expanded their focus beyond mixers, targeting broader criminal ecosystems that involve fraud, theft, and money laundering. This was evident in the recent GothFerrari case, where investigators dismantled a $250 million crypto crime ring linked to hardware wallet thefts and other cyber-enabled offenses.
Context in the Broader Crypto Crime Landscape
While privacy-focused technologies have legitimate uses, services such as AudiA6 that openly facilitate the laundering of criminal proceeds continue to attract intense regulatory and law enforcement scrutiny. At the same time, authorities are not only disrupting laundering infrastructure but also recovering illicit assets, as demonstrated by a recent operation that resulted in the seizure of approximately $580 million in cryptocurrency tied to global scam networks.
The case also highlights vulnerabilities within centralized exchanges, where stolen identities can be used to bypass compliance procedures. As enforcement pressure increases, some criminal actors are shifting toward more decentralized protocols, even as blockchain analytics tools and international cooperation continue to improve.
Next Phase of the Investigation
Tkachuk and Ledenev remain in Georgian custody pending extradition proceedings. The case is being prosecuted by the U.S. Attorney’s Office for the Eastern District of Pennsylvania under U.S. Attorney David Metcalf, with Assistant U.S. Attorneys Benjamin D. Traster and Sima Kazmir leading the prosecution.
The operation demonstrates that law enforcement agencies, supported by advanced blockchain tracing capabilities, can effectively dismantle sophisticated and long-running laundering networks. As the cryptocurrency industry continues to mature, compliance, transparency, and robust anti-money laundering measures are becoming increasingly important to its long-term legitimacy.
