A global parallel investigation supported by Eurojust and Europol has dismantled AudiA6, a cryptocurrency‑laundering website suspected of processing more than €336 million in illicit digital assets between 2022 and 2025.
Authorities say the service functioned as a high‑speed cash‑out mechanism for cybercriminals involved in ransomware attacks, darknet activity and large‑scale cryptocurrency theft. Criminal clients transferred stolen funds into wallets controlled by the operators and received “cleaned” cryptocurrency back within around an hour, routed through complex transaction chains designed to obscure the origin of the money. The platform charged commissions of 3% to 10%.
Investigators also linked the group behind AudiA6 to a separate cybercrime forum known as Dark2Web, described as a marketplace for illicit services and a networking hub for criminal actors worldwide.
Coordinated Action in Georgia
On 10 June 2026, coordinated actions in Georgia resulted in:
– Two alleged administrators arrested
– Three properties searched
– 25 domains taken down
– More than 30 servers seized
– Over 80 vehicles and multiple properties confiscated
– €692,000 in cryptocurrency frozen and over €86,000 seized
The arrests were executed on the basis of a red diffusion notice issued by the Regional Prosecutor’s Office in Łódź, Poland, following earlier investigative steps including the arrest of a co‑perpetrator in Poland in September 2025.
International Judicial Coordination
Eurojust coordinated judicial cooperation between authorities in the United States, France, Poland, Georgia and Iceland, facilitating mutual legal assistance requests, cross‑border evidence handling and operational planning. Europol’s European Cybercrime Centre (EC3) supported the investigation by tracing cryptocurrency flows and mapping the laundering infrastructure.
Eurojust’s US Liaison Desk worked closely with the United States Secret Service (USSS) and IRS Criminal Investigation (IRS‑CI), while the Georgian Liaison Desk coordinated with the Office of the Prosecutor General of Georgia to prepare the action day. Multiple coordination meetings were held to synchronise judicial measures across all participating jurisdictions.
Scale of the Criminal Operation
According to investigators, AudiA6 was widely used by ransomware groups and cybercriminal networks due to its speed and reliability. The laundering service handled hundreds of millions in stolen cryptocurrency, forming a key financial hub for international cybercrime.
Authorities say the takedown represents a significant blow to cyber‑enabled money laundering, disrupting a major infrastructure used to conceal criminal proceeds across borders.
Original article
Comments