Law enforcement agencies from 11 countries have shut down the crypto service AudiA6, based in Georgia. From 2022 to 2025, it is estimated that over €336 million could have been laundered through this platform.
Placeholder on the AudiA6 website. Source: Europol.The investigation involved agencies from the USA, Australia, France, Poland, Georgia, Iceland, Canada, Germany, Japan, Switzerland, and the UK, coordinated through Eurojust and Europol.
As part of the operation, two suspected administrators of the platform were arrested. Authorities conducted searches at three locations, shut down 25 domains, seized over 30 servers, confiscated more than 80 vehicles, and several properties.
Authorities also froze €692,000 in cryptocurrency and seized an additional €86,000.
According to Eurojust, the service was used by ransomware operators who transferred stolen cryptocurrency to the group's wallets and received "cleaned" funds back within about an hour. The origin of these funds was obscured by a chain of transactions, with fees ranging from 3% to 10%.
European authorities also linked AudiA6 to the darknet forum Dark2Web, where illegal services were advertised and cybercriminals communicated.
Investigators uncovered over 6,000 KYC records associated with "money mule" accounts. Suspects registered these accounts using stolen or purchased identities and employed Russian-speaking intermediaries to withdraw criminal proceeds through cryptocurrency exchanges.
According to Chainalysis, approximately 10,333 BTC, valued at around $389 million, was deposited into AudiA6 wallets since 2021.
It is worth noting that in March 2026, Europol, in collaboration with Coinbase, Microsoft, and other tech companies, shut down the Tycoon 2FA resource, which provided phishing software services.