Dark Web Heist Uncovered: Feds Charge Duo in $389M Crypto Laundering Bust!

Federal prosecutors in Philadelphia have brought charges against two individuals, Ruslan Igorevich Tkachuk, a 37-year-old Ukrainian national, and Alexander Vladimirovich Ledenev, a 25-year-old Russian national, for their alleged involvement in an extensive international bitcoin and cryptocurrency money laundering operation. This sophisticated scheme reportedly processed nearly $400 million in illicit funds over a five-year period. Their arrests in Batumi, Republic of Georgia, where both men reside, were a key part of a sweeping multinational law enforcement operation that successfully dismantled the group's criminal infrastructure across multiple continents.

Both Tkachuk and Ledenev face serious charges, including one count of conspiracy to launder monetary instruments and one count of sting money laundering. These offenses each carry a maximum sentence of 20 years in federal prison. The U.S. Attorney’s Office for the Eastern District of Pennsylvania has indicated its intention to seek the extradition of both men to face justice in the United States.

Prosecutors allege that Tkachuk and Ledenev held senior positions within an organization that identified itself as “AudiA6.” This group operated a sophisticated cryptocurrency mixing service, a primary tool used to obscure the origins of illegally obtained digital assets. In addition to the mixing service, AudiA6 also managed a notorious cybercrime forum known as Dark2Web, which served as a platform for users to negotiate and commission various cybercrimes for financial gain.

Since its inception in 2021, the AudiA6 operation is reported to have accepted approximately 10,333 Bitcoin into its wallets, equivalent to roughly $389.7 million at the time of the transactions. The organization generated substantial profits, earning at least $10 million in commission fees by charging its clients up to 5% per transaction. A significant portion of these funds, specifically about 393 Bitcoin (valued at approximately $19.2 million), was directly traced by investigators to known darknet markets, various ransomware groups, and other illicit sources, with additional funds flowing indirectly from a broad spectrum of criminal actors.

Despite AudiA6’s promises to its clients that the mixed funds would be untraceable, investigators utilized advanced blockchain analysis techniques which revealed that the transactions could, in fact, be followed directly through exchange records. The comprehensive case against the organization was partly built upon six elaborate undercover operations conducted between December 2022 and May 2026. During these operations, agents from the FBI and Secret Service posed as criminals seeking to launder proceeds derived from scams and narcotics sales. Revealing exchanges took place, such as when an AudiA6 operator, confronted by an agent asking if stolen Bitcoin was acceptable, simply replied, “don’t care.” In another instance, when questioned about the risks associated with drug sale proceeds, the operator stated, “Everything like that needs to go through a mixer.”

The arrests and dismantling of AudiA6 were the culmination of a highly coordinated international takedown effort. This multi-agency operation involved the collaborative efforts of the U.S. Secret Service, IRS Criminal Investigation, Europol, Eurojust, and a wide array of international law enforcement partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, and the United Kingdom. As part of this extensive action, authorities conducted searches of three properties, seized digital devices, froze substantial cryptocurrency assets, blocked associated Telegram accounts used by the group, and replaced both the AudiA6 and Dark2Web websites with official law enforcement seizure banners, signifying the complete cessation of their illicit activities.