Who is AudiA6?
Published 6/12/2026, 12:17:13 AM
AudiA6 was a cryptocurrency mixing ("mixer-as-a-service") platform operated by two individuals—Ruslan Igorevich Tkachuk (37, Ukrainian) and Alexander Vladimirovich Ledenev (25, Russian)—that facilitated the laundering of criminal proceeds for ransomware gangs and cybercriminal networks worldwide. The service was dismantled in a coordinated international law enforcement action, with both operators arrested in Batumi, Republic of Georgia.
Note on evidence status: The claims about AudiA6 are sourced from U.S. DOJ and Europol press releases, but the specific case details (including the $389M figure, arrest dates, and operational methodology) lack direct URL citations in the research output. The evidence is categorized as UNRESOLVED with confidence scores ranging from 0.7–0.95. Key gaps include: no specific transaction hashes or wallet addresses provided, no independent verification of seized vehicles (173), and no chain-of-custody documentation for seized crypto.
How They Allegedly Laundered $389M
| Metric | Value |
|---|---|
| Total Amount Laundered | $389,747,417 (~10,333 BTC) |
| Directly Traced Illicit Funds | 393.39 BTC (~$19.2M) from darknet markets, ransomware orgs, cybercrime services |
| Commission Earned | At least $10 million |
| Fee Structure | 3–10% per transaction |
Operational Methodology
- Client Onboarding: Criminals contacted AudiA6 through private messaging or the associated cybercrime forum Dark2Web
- Deposit: Stolen cryptocurrency was transferred to AudiA6-controlled wallets
- Layering: Funds were rapidly shuffled through over 6,000 KYC-verified fraudulent exchange accounts across multiple platforms
- Return: Clean funds were returned to clients within approximately one hour
- Advertising: The service explicitly marketed: "take your dirty crypto and give you my clean one"
Law Enforcement Takedown
| Action | Details |
|---|---|
| Arrests | Tkachuk and Ledenev arrested in Batumi, Georgia |
| Domains Taken Down | 25 |
| Servers Seized | 30+ (US, Iceland, Germany, France) |
| Vehicles Seized | 173 (in Georgia) [Note: not independently confirmed] |
| Crypto Seized/Frozen | ~€778,000 total |
| Websites | Replaced with law enforcement seizure banners |
Coordinating Agencies: U.S. Secret Service, IRS-CI, FBI, Europol, Eurojust, and 10+ countries including Australia, Canada, France, Germany, Japan, UK, and Poland.
Undercover Operations: Six undercover operations where FBI/Secret Service agents posed as criminals. Recorded exchanges included an AudiA6 operator stating they "don't care" about stolen Bitcoin sources and advising that drug sale proceeds should "go through a mixer." [Note: not independently confirmed]
Legal Charges & Current Status
| Count | Description |
|---|---|
| Count 1 | Conspiracy to Launder Monetary Instruments |
| Count 2 | Sting Money Laundering |
Maximum Penalty: 20 years imprisonment per count if convicted
Connected Criminal Activity
- Fake Ledger App Incident: ~$9.5 million stolen from ~50 victims via a malicious Ledger Live clone on the Apple App Store; funds flowed through 150+ KuCoin deposit addresses before entering AudiA6
- Sanctioned Exchanges: Linked to Russian exchanges Bitzlato and Garantex
Summary
AudiA6 was a professional crypto mixing service operated by two individuals (Ukrainian and Russian nationals) that allegedly laundered approximately $389 million in cryptocurrency for cybercriminals. The operation used thousands of fraudulent exchange accounts to layer funds and returned "clean" crypto within an hour for a 3–10% fee. The platform was taken down through an international law enforcement operation, with both operators facing charges in the U.S. Eastern District of Pennsylvania.
What remains open: Independent verification of the $389M figure, confirmation of the 173 seized vehicles, and detailed transaction-level evidence linking specific wallet addresses to the laundering scheme.
Sources: