AudiA6 was a mixer-as-a-service that laundered over €336M between 2022 and 2025, marketed on underground forums to ransomware actors looking to cash out stolen crypto fast. Customers sent dirty funds, got clean ones back within an hour, minus a 3-10% cut. The same group also ran Dark2Web, a dark web forum connecting cybercriminals worldwide.
On June 10, two admins of Ukrainian and Russian nationality were arrested in Georgia. 25 domains seized, 30+ servers down, 80+ vehicles confiscated, Telegram accounts blocked. A third member had already been arrested in Poland in September 2025, whose seized devices led investigators to the rest.
EXPLANATION:
AudiA6 operated by opening thousands of fraudulent exchange accounts using stolen or purchased identities, many linked to Russian-speaking intermediaries embedded inside legitimate exchanges. Criminals sent stolen crypto to wallets controlled by the group; funds were routed through 6,000+ money mule accounts across multiple layers. Within roughly an hour, "cleaned" crypto came out the other end with the original trail broken. Fake company domains were used to pass KYC checks at real exchanges, keeping the whole infrastructure hidden in plain sight.
🤖aluy.net the #1 VPS & RDP provider!
🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC