International Operation Shuts Down Major Crypto Laundering Network Used by Ransomware Gangs
Jun 19, 2026
Authorities Shut Down €336 Million Crypto Laundering Service Used by Cybercriminals
An international law enforcement operation has dismantled AudiA6, a cryptocurrency laundering service investigators say helped ransomware groups and other cybercriminals hide stolen digital assets.
Authorities allege the platform laundered more than €336 million in cryptocurrency between 2022 and 2025. Customers would allegedly send stolen crypto to wallets controlled by the operators and receive "clean" funds back through a complex series of transactions designed to disguise the money trail.
The operation involved agencies from multiple countries. Investigators seized more than 30 servers, shut down 25 domains, and arrested two suspected administrators in Georgia. Officials also say the group operated a cybercrime forum called Dark2Web, where criminal services were advertised to users around the world.
Investigators describe the takedown as a significant disruption to the financial infrastructure used by ransomware operators, darknet vendors and other cybercrime groups.
An international law enforcement operation has dismantled AudiA6, a cryptocurrency laundering service investigators say helped ransomware groups and other cybercriminals hide stolen digital assets.
Authorities allege the platform laundered more than €336 million in cryptocurrency between 2022 and 2025. Customers would allegedly send stolen crypto to wallets controlled by the operators and receive "clean" funds back through a complex series of transactions designed to disguise the money trail.
The operation involved agencies from multiple countries. Investigators seized more than 30 servers, shut down 25 domains, and arrested two suspected administrators in Georgia. Officials also say the group operated a cybercrime forum called Dark2Web, where criminal services were advertised to users around the world.
Investigators describe the takedown as a significant disruption to the financial infrastructure used by ransomware operators, darknet vendors and other cybercrime groups.