Cybercrime:Crypto mixer “AudiA6” shut down, two responsible individuals arrested

[zasad@]

Law enforcement agencies from Germany, Switzerland, and numerous other countries have crippled “AudiA6,” a service allegedly used frequently for money laundering of cryptocurrencies. This was announced by the European police agency Europol, stating that between 2022 and 2025, more than 336 million euros are said to have flowed through the service to obscure their origin. The money reportedly came from ransomware extortion, among other sources. Two allegedly responsible individuals with Ukrainian and Russian citizenship were arrested in Georgia. Furthermore, the US Attorney's Office has filed charges and requested the extradition of the suspects to the USA.

https://www.heise.de/en/news/Cybercrime-Crypto-mixer-AudiA6-shut-down-two-responsible-individuals-arrested-11329693.html

"So-called crypto mixers like “AudiA6” mix cryptocurrencies to obscure connections between senders and receivers. For this, the operators charge a commission. “AudiA6” was advertised in cybercrime forums as a professional service that was said to be characterized by anonymity and speed, according to Europol. The investigations against the service were driven by, among others, the Polish police. In September 2025, they arrested a Ukrainian who was connected to it. A search of his electronic devices then revealed clues to other individuals. Furthermore, connections to 15 investigations worldwide were found.

In the operation on Wednesday, not only the two alleged administrators of the service were arrested. According to Europol, three properties were searched and more than 80 vehicles were confiscated. Crypto assets worth almost 700,000 euros were frozen, and another over 86,000 were seized. Additionally, Telegram accounts of the network were blocked, and its pages on the darknet and the internet, as well as the cybercrime forum “Dark2Web,” were shut down."

___
Look how it works. One person gets caught and turns everyone else in to the police.
These people can hardly be called smart; they love the high life and expensive cars, and they're unlikely to spend decades in prison.
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

[Z-tight]

“AudiA6” was advertised in cybercrime forums as a professional service that was said to be characterized by anonymity and speed, according to Europol.

This is a red line for the authorities, services that advertise in cybercrime forums are targeted and taken down. It is easy to understand the rationale, if you are directly advertising to criminals, then that is your target audience and it makes you culpable. Certain vpn platforms have also been shut down because they advertised their service in cybercrime forums.

To be honest, i never heard about this mixer before. Could it be that their only focus was to offer their service to criminals they could find in cybercrime forums and other criminal networks.

[noorman0]

-snip-
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

Which exchange is that referring to? I only see OKX in the image alongside a list of cyber intelligence agencies(?), and I don't know if that means they're facilitating the money laundering or if they're actually cooperating in uncovering this operation on their side.

[zasad@]

-snip-
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

Which exchange is that referring to? I only see OKX in the image alongside a list of cyber intelligence agencies(?), and I don't know if that means they're facilitating the money laundering or if they're actually cooperating in uncovering this operation on their side.

Users' bitcoins were deposited into mixer deposit addresses on the KuCoin exchange. The attackers then withdrew the laundered funds in USDT stablecoins through accounts on the HitBTC exchange. (1)

Law enforcement also obtained approximately 6,000 client records linked to accounts operated by financial intermediaries. Europol claims that such accounts were created using stolen or purchased documents. Many intermediaries worked through recruiters who specifically recruited people to register accounts on cryptocurrency exchanges.(2)

___
1.
2.