Federal prosecutors in Philadelphia say they have yanked the plug on a massive crypto “mixing” service that allegedly operated like a digital laundromat for dirty money tied to darknet markets and ransomware crews.
On Thursday, the U.S. Attorney's Office for the Eastern District of Pennsylvania unsealed charges against two men accused of running AudiA6, a cryptocurrency mixer that investigators say handled roughly 10,333 bitcoin for customers since 2021. At the time of the government's calculations, that stash was worth about $389 million. A portion of those funds, prosecutors say, can be traced straight back to known criminal sources.
The suspects, identified as 37-year-old Ukrainian national Ruslan Igorevich Tkachuk and 25-year-old Russian national Alexander Vladimirovich Ledenev, were arrested in Batumi, Georgia after what officials describe as a coordinated international takedown. Authorities say the pair lived in Batumi, where local authorities took them into custody while the United States moves forward with an extradition request. As part of the operation, law enforcement says it seized servers and domains linked to AudiA6 and froze related cryptocurrency assets.
According to the U.S. Attorney's Office for the Eastern District of Pennsylvania, each defendant is charged with one count of conspiracy to launder monetary instruments and one count of sting money laundering. If convicted on those counts, both men face a statutory maximum of 20 years in prison.
How Investigators Say The Crypto Mixer Operated
Prosecutors say AudiA6 openly pitched its services on a cybercrime forum known as Dark2Web, promising customers it could "mix" their cryptocurrency so that the origin of the funds would be far harder to trace.
Federal agents decided to test that claim. As reported by The Philadelphia Inquirer, investigators carried out six undercover transactions between December 2022 and May 2026. In each, they sent bitcoin to AudiA6, watched it move through intermediary wallets and services, and then received the "cleaned" cryptocurrency back, minus a commission the service kept as its fee.
In one of those stings, an undercover agent bluntly asked whether the coins were stolen. According to the complaint, the AudiA6 operator shrugged off the concern in a chat message: "dont care." The service then allegedly mixed about $5,000 worth of bitcoin and kept roughly $300 as payment.
International Sweep Takes Down Sites And Servers
The arrests did not happen in a vacuum. Officials say U.S. agencies worked with European and other international partners on a coordinated action across multiple countries from June 10 to 11. That sweep targeted AudiA6's technical backbone, including servers and domains associated with both the mixer itself and the Dark2Web forum.
Authorities say those sites did not just vanish. Instead, visitors were greeted with law enforcement seizure banners, sending a clear message to would-be users that the party was over.
Eurojust and Europol say the platform is suspected of laundering more than €336 million between 2022 and 2025, while the Australian Federal Police offered a related estimate of about $542 million and detailed how investigators followed cryptocurrency flows tied to ransomware operations.
In total, officials say more than 30 servers and roughly 25 domains were taken offline as part of the crackdown, and Telegram accounts used by the network were blocked.
What Happens Next
The U.S. Attorney's Office says it will seek to have Tkachuk and Ledenev extradited to the Eastern District of Pennsylvania to stand trial. The case is being handled by Assistant U.S. Attorneys Benjamin D. Traster and Sima Kazmir, along with Special Assistant U.S. Attorney Richard Lorenz.
The Justice Department credits the U.S. Secret Service's Cyber Investigative Section and IRS Criminal Investigation with key investigative work that fed into the takedown. Prosecutors also stress that the charges are only allegations at this stage and that the defendants are presumed innocent unless and until they are proven guilty in court.
If they are convicted, each man faces up to 20 years in prison on the charges listed in the complaint, according to federal authorities.
Why Philly Should Care
Blockchain analytics specialists say services like AudiA6 have quietly become part of the core plumbing of the cybercrime world, making it easier for criminals to bounce funds across chains and accounts in a way that frustrates investigators and slows prosecutions.
Analysts at Elliptic and other firms have been flagging AudiA6-style operations on underground forums since 2021, noting the reliance on thousands of fraudulent exchange accounts and mule wallets to hide the money trail.
For Philadelphia readers, this case is a reminder that the city's federal prosecutors are not just handling local gun and drug cases. They are also plugged into sprawling, cross-border cyber investigations and are willing to chase alleged wrongdoers overseas when suspicious funds touch U.S. soil.
