Authorities dismantle 'AudiA6' ransomware crypto-laundering service
Law enforcement agencies have successfully dismantled the ‘AudiA6’ cryptocurrency service, which was used to launder over $380 million generated from ransomware attacks and other cybercriminal activities. The operation, spanning from 2022 to 2025, involved a network of fraudulent exchange accounts and complex transaction routes. This action, supported by international collaboration, has resulted in arrests, asset seizures, and the disruption of a significant criminal network.
Europol, in collaboration with authorities from 11 countries across Europe, America, and Asia, took down the ‘AudiA6’ cryptocurrency service, a platform facilitating the laundering of funds derived from ransomware attacks and other cybercrime activities. The service operated as a central hub, accepting illicit proceeds and routing them through complex transactions to obscure their origin before returning them to the criminals. Investigations revealed the use of thousands of fraudulent exchange accounts created using stolen or purchased identities, highlighting an industrial-scale operation. The operation was significantly impacted by the arrest of a Ukrainian national in Poland in September 2025, triggering a chain of investigations leading to arrests in Georgia and the seizure of substantial assets.