An international law enforcement coalition dismantled a cryptocurrency laundering platform known as AudiA6 that allegedly processed more than €336 million in illicit digital assets between 2022 and 2025. The operational phase carried out on June 10 led to arrests in Georgia and seizures of infrastructure including more than 30 servers and 25 domains. The platform operated as a laundering mechanism for cybercriminal clients, including ransomware actors, charging commissions between 3% and 10% to return stolen cryptocurrency as cleaned assets typically within an hour. Eurojust coordinated judicial authorities from the United States, France, Poland, Georgia, and Iceland, while Europol's European Cybercrime Centre traced cryptocurrency flows and mapped laundering infrastructure across jurisdictions.
AudiA6 Platform Processed Stolen Crypto With Rapid Turnaround
The service allowed cybercriminal clients to transfer stolen cryptocurrency into wallets controlled by its operators, according to investigators. Funds were then rapidly moved through complex transaction chains before being returned to users as cleaned assets, typically within an hour. Authorities said the platform charged commissions ranging between 3% and 10% and was frequently used by ransomware actors seeking to cash out stolen funds while obscuring the origin of the money. The investigation also identified links between the laundering service and a separate cybercrime forum known as Dark2Web, which was used as a marketplace for illicit services and coordination among cybercriminal groups.
June 10 Enforcement Action Results in Georgia Arrests and Infrastructure Seizures
The operational phase carried out on June 10 led to arrests and seizures in Georgia, where two alleged administrators were detained. Authorities also searched three properties, seized more than 30 servers, and took down 25 associated domains linked to the laundering infrastructure. Investigators additionally confiscated more than 80 vehicles and multiple properties, while freezing approximately $790,000 in cryptocurrency and seizing more than $98,000 in digital assets tied to the operation, according to enforcement agencies involved in the case.
Eurojust and Europol Coordinate Multi-Nation Investigation
Eurojust said it played a central coordination role between judicial authorities in the United States, France, Poland, Georgia, and Iceland, supporting mutual legal assistance requests and cross-border investigative planning. Europol's European Cybercrime Centre (EC3) supported the investigation by tracing cryptocurrency flows, mapping laundering infrastructure, and assisting in identifying wallet clusters used to move criminal proceeds across jurisdictions.
The United States Secret Service (USSS) and IRS Criminal Investigation (IRS-CI) supported the investigation alongside European partners, contributing expertise in financial tracing and cyber-enabled financial crime. The IRS Criminal Investigation division, which handles complex financial crime cases including crypto-related laundering, also participated in identifying transaction flows linked to illicit proceeds.
French authorities, including the Paris Public Prosecutor's Office cybercrime unit and the Gendarmerie Nationale cybercrime division, contributed investigative support in identifying infrastructure and coordinating enforcement actions across jurisdictions. Poland's Central Cybercrime Bureau and Regional Prosecutor's Office in Łódź played a key role in earlier stages of the investigation, including actions linked to a co-perpetrator arrested in 2025. Icelandic prosecutors and police also supported coordination efforts during the multinational case development phase.
Investigators Identify 6,000+ Fake KYC Records Tied to Money Mule Activity
Authorities said the laundering system relied heavily on fake accounts created using stolen or purchased identities. Investigators identified more than 6,000 Know Your Customer (KYC) records tied to money mule activity used to facilitate the movement of funds through cryptocurrency exchanges. The group reportedly used both commercial email services and domains under its control to register accounts and maintain operational anonymity across exchanges. Domains associated with the scheme have been shared with cryptocurrency platforms to assist in identifying and blocking related accounts.
FAQ
What did law enforcement dismantle on June 10?
Law enforcement dismantled the AudiA6 cryptocurrency laundering platform on June 10, arresting two alleged administrators in Georgia and seizing more than 30 servers, 25 domains, 80 vehicles, and freezing approximately $790,000 in cryptocurrency.
How much illicit cryptocurrency did AudiA6 process between 2022 and 2025?
AudiA6 allegedly processed more than €336 million in illicit digital assets between 2022 and 2025, charging commissions between 3% and 10% to return stolen cryptocurrency as cleaned assets typically within an hour.
Which agencies coordinated the international investigation into AudiA6?
Eurojust coordinated judicial authorities from the United States, France, Poland, Georgia, and Iceland, while Europol's European Cybercrime Centre traced cryptocurrency flows and the United States Secret Service and IRS Criminal Investigation contributed financial tracing expertise.
