Global sting shuts $390M crypto ring
An international law enforcement operation involving 11 countries has dismantled the AudiA6 crypto laundering network, which allegedly processed more than 336 million euros ($390 million) in illicit funds between 2022 and 2025.
Authorities arrested two alleged administrators in Georgia on June 10 and seized 25 domains, more than 30 servers, 80 vehicles and approximately 778,000 euros ($900,000) in cryptocurrency.
“The ransomware ecosystem is once again consolidating around fewer, more dominant operators,”
Said Check Point Research in a report published in May.
According to Eurojust, AudiA6 operated a “mixer-as-a-service” that enabled cybercriminals to obscure the origin of stolen cryptocurrency within about an hour in exchange for commissions ranging from 3% to 10%.
Blockchain analytics firm Chainalysis estimated that AudiA6-linked wallets received approximately 10,333 Bitcoin, worth around $389 million at the time of the transactions, while investigators also connected the group to the Dark2Web cybercrime marketplace.
Eurojust said investigators uncovered more than 6,000 Know Your Customer records tied to fraudulent accounts used by money mules and intermediaries to move illicit proceeds through cryptocurrency exchanges.
The crackdown comes as ransomware activity becomes increasingly concentrated among a smaller number of operators, with the top 10 groups accounting for 71% of all recorded victims in the first quarter of 2026.
At the time of reporting, Bitcoin price was $62,910.39.
