Back to Feed
RansomwareJun 11, 2026

Authorities dismantle 'AudiA6' ransomware crypto-laundering service

Authorities dismantle 'AudiA6' crypto-laundering service used by ransomware actors.

Law enforcement agencies have dismantled the 'AudiA6' cryptocurrency service, which allegedly facilitated the laundering of over $380 million for ransomware actors and other cybercriminals. The platform, active between 2022 and 2025, acted as a money laundering hub, processing illicit funds through complex transaction routes. The operation involved authorities from 11 countries and led to the arrest of two alleged administrators.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Europol?

Get an email when a new story names Europol, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

The AudiA6 cryptocurrency laundering service operated for three years, processing over $380 million in ransomware proceeds and other illicit funds through complex transaction routing schemes. This case demonstrates how cybercriminals exploit cryptocurrency platforms to obscure the financial trail of their crimes, making it harder for victims to recover funds and for law enforcement to track perpetrators. The successful takedown required international cooperation across 11 countries, highlighting the global nature of cryptocurrency-based money laundering operations. Organizations must implement robust transaction monitoring and comply with anti-money laundering regulations to prevent their platforms from being exploited for illicit financial activities.

Entities

AudiA6 (threat_actor)Europol (vendor)Eurojust (vendor)U.S. Department of Justice (vendor)Telegram (product)