U.S. prosecutors charged Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev on June 11 with operating AudiA6, a cryptocurrency laundering service that allegedly processed more than $389 million in transactions since 2021. Authorities arrested both defendants Wednesday in Georgia following a multinational cybercrime operation. The charges stem from blockchain evidence showing 10,333 BTC deposited to AudiA6 wallets, with 393.39 BTC traced directly to darknet markets, ransomware groups, and other illicit sources. Prosecutors identified Tkachuk, 37, as a Ukrainian national and Ledenev, 25, as a Russian national, both residing in Batumi, Republic of Georgia. The coordinated enforcement action involved the Secret Service, IRS Criminal Investigation, Europol, and law enforcement from 11 countries targeting cryptocurrency laundering infrastructure on dark web platforms.
AudiA6 Service Processed 10,333 BTC Since 2021 Launch
The U.S. Attorney's Office for the Eastern District of Pennsylvania charged both defendants with conspiracy to launder monetary instruments and sting money laundering. The criminal complaint alleged Tkachuk and Ledenev served as senior members of the AudiA6 organization, managing the cryptocurrency laundering service and Dark2Web, a cybercrime forum where AudiA6 advertised its services. One advertisement allegedly offered to hide the source of cryptocurrency traceable to crime for fees reaching 5%.
Investigators reviewed blockchain data and financial records tied to AudiA6 wallets. Law enforcement stated that approximately 10,333 BTC, valued at approximately $389,747,417 at the time of the transactions, was deposited to AudiA6 cryptocurrency wallets since the service launched in 2021. The complaint alleged that funds entered the service from darknet markets, ransomware groups, cybercrime services, and other illicit sources.
Authorities described both direct and indirect deposits from unlawful sources. Law enforcement stated that out of the approximately 10,333 bitcoin deposited, approximately 393.39 BTC (valued at around $19,234,331 at the time of the transactions) were received directly from known darknet markets, ransomware organizations, cybercrime services, and other illicit sources. Additional funds were deposited indirectly from illicit sources into AudiA6 wallets, according to the announcement.
Multinational Operation Seizes Domains and Cryptocurrency Assets
A coordinated operation targeted AudiA6 infrastructure alongside the arrests. The takedown involved the Secret Service, IRS Criminal Investigation, Europol, Eurojust, and law enforcement partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, and the United Kingdom.
Authorities searched three properties and targeted servers and domains in the United States, Iceland, Germany, and France. Telegram accounts linked to the network were blocked, cryptocurrency assets were frozen, and digital devices were seized. The seizure banner replaced clear web and dark web sites for AudiA6 and Dark2Web.
![Seizure banner displayed on AudiA6 website]()
Defendants Face Extradition to Pennsylvania
Tkachuk and Ledenev remain in Georgian custody, according to the announcement. The U.S. Attorney's Office plans to seek their extradition to the Eastern District of Pennsylvania. If convicted, each defendant faces a maximum possible sentence of 20 years in prison.
FAQ
What did U.S. prosecutors charge Tkachuk and Ledenev with on June 11?
Prosecutors charged both defendants with conspiracy to launder monetary instruments and sting money laundering for their alleged operation of AudiA6, a cryptocurrency laundering service that processed more than $389 million in transactions since 2021.
How much bitcoin was deposited to AudiA6 wallets since 2021?
Law enforcement determined that approximately 10,333 BTC, valued at approximately $389,747,417 at the time of the transactions, was deposited to AudiA6 cryptocurrency wallets since the service launched in 2021. Of this total, approximately 393.39 BTC were received directly from known darknet markets, ransomware organizations, and other illicit sources.
What enforcement actions did authorities take against AudiA6 infrastructure?
Authorities searched three properties, targeted servers and domains in the United States, Iceland, Germany, and France, blocked Telegram accounts linked to the network, froze cryptocurrency assets, and seized digital devices. The seizure banner replaced clear web and dark web sites for AudiA6 and Dark2Web.
