Global Sweep Hits ‘AudiA6’ Bitcoin Laundering Network: 10,333 BTC Traced, Two Arrested in Georgia

Authorities moved against a well-known crypto laundering-as-a-service operation, taking aim at the business model rather than a single wallet. Investigators say the group known as “AudiA6” funneled 10,333 BTC—valued at over $389 million at the time of the transactions—through its pipelines. Two alleged senior operators were arrested in the Republic of Georgia, a sign that safe havens for crypto-financial crime may be narrowing.

The case centers on a straightforward commercial pitch: for a 5% fee, AudiA6 allegedly offered to conceal and disguise the origin of customers’ digital assets, marketing to users whose funds could be tied to criminal activity. Prosecutors allege the service was run alongside the Dark2Web cybercrime forum, giving AudiA6 both distribution and demand in one ecosystem.

Who was charged and what changed - Ruslan Igorevich Tkachuk, 37, and Alexander Vladimirovich Ledenev, 25, were detained in Georgia and charged with one count of conspiracy to launder monetary instruments and one count of sting money laundering. - The U.S. Attorney’s Office for the Eastern District of Pennsylvania is seeking their extradition to face charges in the United States. If convicted, they could face up to 20 years in prison. - A coordinated investigation by the U.S. Secret Service, IRS, and law enforcement partners in Australia, Germany, Japan, and other nations led to three property searches, frozen and seized crypto, blocked Telegram accounts, and a seizure banner placed on the group’s dark web site.

On-chain attribution and the 5% promise The headline number—10,333 BTC traced to AudiA6-linked accounts—matters less for its size than for what it reveals about the risk calculus for laundering providers. Blockchain analysis identified that flow, with roughly $19 million arriving directly from known illicit sources. That gap implies the service often received funds after one or two layers of distancing, a pattern that has become common as operators try to avoid heuristics that flag obvious taint. When investigators can still stitch together deposit paths across intermediaries, the marketing value of a “clean exit” erodes, and with it the pricing power of a 5% fee.

Disrupting the communications stack is arguably more damaging than the seizures. Blocking Telegram accounts, hitting a dark web front-end with a seizure notice, and searching physical locations destabilize trust in the service’s uptime and opsec. Laundering operations rely on perceived reliability; once clients believe their supplier could be talking to law enforcement—or simply offline—the willingness to park meaningful balances drops fast.

A broader pattern is visible here. Earlier this year, funds siphoned via a fake Ledger app in Apple’s Mac App Store were allegedly washed through AudiA6, according to independent on-chain analysis. That linkage shows how retail-focused malware campaigns may feed into professionalized laundering rails. When those rails are mapped and monetized, they become the choke point worth targeting.

What this means for the market - For exchanges and OTC desks, this reinforces the need to scrutinize nested flows rather than just block obvious bad sources. The $19 million figure suggests many funds arrive “pre-rinsed.” - For would-be operators, extradition out of jurisdictions like Georgia signals that jurisdictional arbitrage may be less dependable than it once seemed. - For Bitcoin’s reputation, high-visibility takedowns reduce the perceived impunity around laundering services, even if the cat-and-mouse continues.

None of this ends laundering. It does, however, raise costs, compress margins, and inject doubt into the communications and cash-out infrastructure that laundering enterprises depend on. In this game, doubt is often the most effective deterrent.