AudiA6 Laundering Service Processed $389M While Openly Advertising on Dark Web

Published by James Harris on June 11, 2026June 11, 2026

Federal prosecutors in Philadelphia have charged two men with operating AudiA6, a cryptocurrency laundering service that processed over $389 million in illicit transactions since 2021, advertising its services openly on a cybercrime forum and charging up to 5% per transaction. Ruslan Tkachuk and Alexander Ledenev were arrested in Batumi, Georgia on June 10 following a multinational operation involving Europol, the U.S. Secret Service, IRS Criminal Investigation, and law enforcement from more than a dozen countries.

The scale of the seizure tells you something about where enforcement attention has shifted. Authorities recovered 173 vehicles, real estate, frozen bank accounts, and electronic devices, while simultaneously taking down servers across four countries and blocking associated Telegram accounts. That coordinated infrastructure targeting mirrors the 2022 Hydra market takedown, which also involved German and U.S. agencies dismantling not just the platform but the financial rails around it. What’s different here is the explicit advertising model: AudiA6 operated a public-facing forum, Dark2Web, where it solicited criminal clients, which either reflects unusual operational confidence or a miscalculation about how much visibility enforcement agencies had developed into these services.

Of the 10,333 Bitcoin that flowed through AudiA6 wallets, only 393 BTC were directly traceable to known criminal sources. The rest arrived through indirect channels, which is precisely the architecture these services are designed to exploit and exactly what makes blockchain analytics firms indispensable to these prosecutions.

The broader implication is about the infrastructure layer, not the individuals. AudiA6 was a service provider to other criminals, the kind of intermediary that connects ransomware operators and darknet vendors to usable funds. TRM Labs reported illicit crypto flows hit $158 billion in 2025, up roughly 145% year-over-year, driven partly by nation-state actors and expanded sanctions evasion. Prosecutions like this one signal that U.S. and European agencies are deliberately targeting that connective tissue rather than chasing individual transactions, a strategy that creates more durable disruption to criminal networks than wallet freezes alone.

Tkachuk and Ledenev remain in Georgian custody and extradition to Pennsylvania has not yet begun, meaning the legal process is still in early stages. Given the number of countries involved and the Europol linkage to over 15 active cybercrime investigations, additional charges or co-defendants connected to the same network are a reasonable expectation before any trial date is set.