A coordinated international law enforcement operation has dismantled a cryptocurrency laundering platform allegedly used to process more than €336 million in illicit digital assets between 2022 and 2025.
The service, known as “AudiA6,” operated as a laundering mechanism that allowed cybercriminal clients to transfer stolen cryptocurrency into wallets controlled by its operators. Funds were then rapidly moved through complex transaction chains before being returned to users as “cleaned” assets, typically within an hour, according to investigators.
Authorities said the platform charged commissions ranging between 3% and 10% and was frequently used by ransomware actors seeking to cash out stolen funds while obscuring the origin of the money. The investigation also identified links between the laundering service and a separate cybercrime forum known as “Dark2Web,” which was used as a marketplace for illicit services and coordination among cybercriminal groups.
Eurojust said it played a central coordination role between judicial authorities in the United States, France, Poland, Georgia, and Iceland, supporting mutual legal assistance requests and cross-border investigative planning.
Europol’s European Cybercrime Centre (EC3) supported the investigation by tracing cryptocurrency flows, mapping laundering infrastructure, and assisting in identifying wallet clusters used to move criminal proceeds across jurisdictions.
The operational phase carried out on June 10 led to arrests and seizures in Georgia, where two alleged administrators were detained. Authorities also searched three properties, seized more than 30 servers, and took down 25 associated domains linked to the laundering infrastructure.
Investigators additionally confiscated more than 80 vehicles and multiple properties, while freezing approximately $790,000 in cryptocurrency and seizing more than $98,000 in digital assets tied to the operation, according to enforcement agencies involved in the case.
The United States Secret Service (USSS) and IRS Criminal Investigation (IRS-CI) supported the investigation alongside European partners, contributing expertise in financial tracing and cyber-enabled financial crime.
The IRS Criminal Investigation division, which handles complex financial crime cases including crypto-related laundering, also participated in identifying transaction flows linked to illicit proceeds.
French authorities, including the Paris Public Prosecutor’s Office cybercrime unit and the Gendarmerie Nationale cybercrime division, contributed investigative support in identifying infrastructure and coordinating enforcement actions across jurisdictions.
Poland’s Central Cybercrime Bureau and Regional Prosecutor’s Office in Łódź played a key role in earlier stages of the investigation, including actions linked to a co-perpetrator arrested in 2025. Icelandic prosecutors and police also supported coordination efforts during the multinational case development phase.
Authorities said the laundering system relied heavily on fake accounts created using stolen or purchased identities. Investigators identified more than 6,000 Know Your Customer (KYC) records tied to money mule activity used to facilitate the movement of funds through cryptocurrency exchanges.
The group reportedly used both commercial email services and domains under its control to register accounts and maintain operational anonymity across exchanges. Domains associated with the scheme have been shared with cryptocurrency platforms to assist in identifying and blocking related accounts.
Click Here For The Original Source.
