Cybercrime:Crypto mixer “AudiA6” shut down, two responsible individuals arrested

[zasad@]

Law enforcement agencies from Germany, Switzerland, and numerous other countries have crippled “AudiA6,” a service allegedly used frequently for money laundering of cryptocurrencies. This was announced by the European police agency Europol, stating that between 2022 and 2025, more than 336 million euros are said to have flowed through the service to obscure their origin. The money reportedly came from ransomware extortion, among other sources. Two allegedly responsible individuals with Ukrainian and Russian citizenship were arrested in Georgia. Furthermore, the US Attorney's Office has filed charges and requested the extradition of the suspects to the USA.

https://www.heise.de/en/news/Cybercrime-Crypto-mixer-AudiA6-shut-down-two-responsible-individuals-arrested-11329693.html

"So-called crypto mixers like “AudiA6” mix cryptocurrencies to obscure connections between senders and receivers. For this, the operators charge a commission. “AudiA6” was advertised in cybercrime forums as a professional service that was said to be characterized by anonymity and speed, according to Europol. The investigations against the service were driven by, among others, the Polish police. In September 2025, they arrested a Ukrainian who was connected to it. A search of his electronic devices then revealed clues to other individuals. Furthermore, connections to 15 investigations worldwide were found.

In the operation on Wednesday, not only the two alleged administrators of the service were arrested. According to Europol, three properties were searched and more than 80 vehicles were confiscated. Crypto assets worth almost 700,000 euros were frozen, and another over 86,000 were seized. Additionally, Telegram accounts of the network were blocked, and its pages on the darknet and the internet, as well as the cybercrime forum “Dark2Web,” were shut down."

___
Look how it works. One person gets caught and turns everyone else in to the police.
These people can hardly be called smart; they love the high life and expensive cars, and they're unlikely to spend decades in prison.
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

[Z-tight]

“AudiA6” was advertised in cybercrime forums as a professional service that was said to be characterized by anonymity and speed, according to Europol.

This is a red line for the authorities, services that advertise in cybercrime forums are targeted and taken down. It is easy to understand the rationale, if you are directly advertising to criminals, then that is your target audience and it makes you culpable. Certain vpn platforms have also been shut down because they advertised their service in cybercrime forums.

To be honest, i never heard about this mixer before. Could it be that their only focus was to offer their service to criminals they could find in cybercrime forums and other criminal networks.

[noorman0]

-snip-
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

Which exchange is that referring to? I only see OKX in the image alongside a list of cyber intelligence agencies(?), and I don't know if that means they're facilitating the money laundering or if they're actually cooperating in uncovering this operation on their side.

[zasad@]

-snip-
This will be a very interesting case, since two major crypto exchanges were also involved in the money laundering.

Which exchange is that referring to? I only see OKX in the image alongside a list of cyber intelligence agencies(?), and I don't know if that means they're facilitating the money laundering or if they're actually cooperating in uncovering this operation on their side.

Users' bitcoins were deposited into mixer deposit addresses on the KuCoin exchange. The attackers then withdrew the laundered funds in USDT stablecoins through accounts on the HitBTC exchange. (1)

Law enforcement also obtained approximately 6,000 client records linked to accounts operated by financial intermediaries. Europol claims that such accounts were created using stolen or purchased documents. Many intermediaries worked through recruiters who specifically recruited people to register accounts on cryptocurrency exchanges.(2)

___
1.
2.

[yhiaali3]

Law enforcement also obtained approximately 6,000 client records linked to accounts operated by financial intermediaries. Europol claims that such accounts were created using stolen or purchased documents. Many intermediaries worked through recruiters who specifically recruited people to register accounts on cryptocurrency exchanges.(2)

This is an interesting point: there are "6,000 customer records linked to accounts managed by financial intermediaries. Europol alleges that these accounts were created using stolen or purchased documents." What is the legal position of the owners of the stolen documents? Will they face any liability or criminal charges?

This is an important question because anyone is at risk of having their KYC-related data stolen from any central platform.

[zasad@]

Law enforcement also obtained approximately 6,000 client records linked to accounts operated by financial intermediaries. Europol claims that such accounts were created using stolen or purchased documents. Many intermediaries worked through recruiters who specifically recruited people to register accounts on cryptocurrency exchanges.(2)

This is an interesting point: there are "6,000 customer records linked to accounts managed by financial intermediaries. Europol alleges that these accounts were created using stolen or purchased documents." What is the legal position of the owners of the stolen documents? Will they face any liability or criminal charges?

This is an important question because anyone is at risk of having their KYC-related data stolen from any central platform.

Typically, victims whose personal data has been stolen are not held criminally liable for the actions of the perpetrators, unless the victims intentionally assisted the perpetrators.

Most likely, the owners of the stolen data will be recognized as victims, or Europol will have to prove the intent of each victim. Do you think Europol needs that?

[yhiaali3]

Most likely, the owners of the stolen data will be recognized as victims, or Europol will have to prove the intent of each victim. Do you think Europol needs that?

Of course they don't need that.
Most likely they will not do so because this will greatly complicate the case, as how can the victim’s intent be proven? Did he sell his data intentionally, or was his data hacked? In addition, I believe the data was stolen from many countries around the world, and therefore the case will become so complex that it will be difficult to control.

[zasad@]

Most likely, the owners of the stolen data will be recognized as victims, or Europol will have to prove the intent of each victim. Do you think Europol needs that?

Of course they don't need that.
Most likely they will not do so because this will greatly complicate the case, as how can the victim’s intent be proven? Did he sell his data intentionally, or was his data hacked? In addition, I believe the data was stolen from many countries around the world, and therefore the case will become so complex that it will be difficult to control.

I see the risk of victims being flagged in Europe. If a victim ever comes to Europe, they will be questioned by the police, and after that, they may be banned from entering European countries. But if people live in other countries and have no plans to come to Europe, they are safe.