Europol and DOJ dismantle AudiA6 crypto-laundering service tied to ransomware payments

Authorities say they shut down AudiA6, a cryptocurrency laundering service allegedly used by ransomware groups and other cybercriminals to wash more than $380 million. Europol said the operation was linked to more than 15 ransomware and large-scale crypto-theft investigations, while arrests in Georgia and earlier evidence from a 2025 arrest in Poland helped identify administrators, seize 25 domains, freeze cryptocurrency, and recover about 6,000 know-your-customer identity records tied to mule accounts.
Why it matters: This matters because ransomware profits only scale when criminals can cash out, and AudiA6 allegedly served as a central laundering hub for that process. Crypto platforms, investigators, and organizations tracking extortion activity should watch for related wallet exposure and mule-account abuse, while victims may gain new leads tying attacks to payment flows.

Sources

In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine
SecurityWeek News 2026.06.12 87% relevant
This roundup briefly notes the AudiA6 takedown as one of the week's notable items, serving as a secondary report on the same law-enforcement action against the crypto-laundering service.
Authorities dismantle 'AudiA6' ransomware crypto-laundering service
Bill Toulas 2026.06.11 100% relevant
This article establishes a distinct story about the takedown of AudiA6 as a ransomware-linked crypto-laundering network, not a follow-up to any tracked story listed.
← Back to all stories