Authorities Dismantle Cryptocurrency Laundering Services ‘AudiA6’ U...

“Out of the approximately 10,333 bitcoin deposited, approximately 393.39 BTC (valued at around $19,234,331 at the time of the transactions) were received directly from known darknet markets, ransomware organizations, cybercrime services, and other illicit sources, while additional funds were deposited indirectly from illicit sources into AudiA6 wallets,” the DoJ said. “Out of the approximately 10,333 bitcoin deposited, approximately 393.39 BTC (valued at around $19,234,331 at the time of the transactions) were received directly from known darknet markets, ransomware organizations, cybercrime services, and other illicit sources, while additional funds were deposited indirectly from illicit sources into AudiA6 wallets,” the DoJ states.

Overview

As part of the operation that took place on June 10, 2026, a number of coordinated actions were carried out, including - - The arrest of two alleged administrators of Ukrainian and Russian nationality in Georgia - Three property searches - Takedown of 25 domains and seizure of more than 30 servers - Seizure of more than 80 vehicles and multiple properties in Georgia - Freezing cryptocurrency assets worth €692,000 ($798,000) and seizure of €86,000 ($99,400) in cryptocurrency - Blocking Telegram accounts used by the network - Replacing the clear web and dark web websites of AudiA6 and Dark2Web with a law enforcement seizure banner In tandem, the U.S.

Further details indicate that the names of the domains are listed below - - designli.pictures - pheontx.eu - smplfy.in - sumato-soft.org - technobrains.dev - lett.email - trayo.app - deliverly.top - inboxly.top - postfast.eu - postino.click - inboxally.agency - mailora.eu - postify.email - quix.express - flowcomm.click - qube.black - deliverlett.com - lettermail.eu In a report published in November 2021, Intel 471 disclosed that AudiA6 required a minimum balance of 27 bitcoins and that it charged a flat service fee between 3 percent and 5.5 percent.

“Analysis conducted by Europol linked the criminal service to more than 15 investigations worldwide involving ransomware attacks and large-scale cryptocurrency theft.” The service was marketed as a “professional cryptocurrency mixing service,” but all it did was accept cybercrime proceeds, move the money around through complex transaction routes that obscured its origin, and return it “cleaned” to the holders in about an hour, minus a 3-10% service commission.

Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off a “key financial pipeline used to wash hundreds of millions in illicit profits.” The service is estimated to have been used to launder more than €336 million (~$389 million) since the service was launched in 2021.

“key financial pipeline used to wash hundreds of millions in illicit profits.”, Spokesperson

Fallout

This is not the first time global law enforcement has jointly targeted the payment apparatus supporting large cybercrime enterprises. Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein. The international operation targeted what investigators described as an industrial-scale laundering platform that processed more than EUR 336 million between 2022 and 2025.

The service blatantly catered to cybercriminals, with the criminal complaint noting that AudiA6 advertised its ability “to take your dirty crypto and give you my clean one.” According to the DOJ, blockchain analysis shows that AudiA6-controlled wallets received approximately 10,333 bitcoin since its launch in 2021, representing roughly $389 million in historical value.

Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million.

“More than 6,000 Know Your Customer (KYC) records linked to money mule accounts were identified during the investigation,” Europol said.

Timeline

| Date | Event | |, , |, , -| | 2021 | The names of the domains are listed below - - designli.pictures - pheontx.eu - smplfy.in - sumato-soft.org - technobr… | | June 11, 2026 | On June 11, 2026, global law enforcement agencies, including the United States Department of Justice (DOJ), Secret Se… |

Recommended Actions

1. Past reports from Intel471 and blockchain investigator ZachXBT exposed AudiA6 for facilitating illegal activity.

2. This massive network of money mules used multiple domains to register accounts on cryptocurrency exchanges, a fact Europol published to raise awareness and help platforms block them.

3. • Blockchain analysis indicates that since 2021, the AudiA6 network processed approximately 10,333 bitcoin (historically valued at roughly $389 million), acting as a trusted “mixer-as-a-service” for the broader cybercriminal ecosystem.

4. Exchanges should actively screen their user databases against these indicators to identify, review, and block any lingering infrastructure connected to this syndicate.

5. Blockchain analysis cited by U.S.

6. The operators utilized an industrial-scale money mule network to break the blockchain money trail.

Context

The incident highlights the continued pressure ransomware operators are placing on organizations worldwide.

Sources

1. https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered
2. https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/
3. https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html
4. https://www.scworld.com/brief/audia6-cryptocurrency-service-dismantled-for-laundering-over-380-million
5. https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/
6. https://www.helpnetsecurity.com/2026/06/12/europol-audia6-crypto-laundering-service-ransomware-groups/
7. https://cybersecuritynews.com/authorities-dismantle-audia6-services/
8. https://gbhackers.com/authorities-seize-audia6-crypto-laundering-service/