Cybercrime:Crypto mixer “AudiA6” shut down, two responsible individuals arrested
Law enforcement agencies in Georgia have arrested two alleged operators of the crypto mixer “AudiA6” and shut down several services.
The new welcome message on the "AudiA6" page
(Image: Europol)
Law enforcement agencies from Germany, Switzerland, and numerous other countries have crippled “AudiA6,” a service allegedly used frequently for money laundering of cryptocurrencies. This was announced by the European police agency Europol, stating that between 2022 and 2025, more than 336 million euros are said to have flowed through the service to obscure their origin. The money reportedly came from ransomware extortion, among other sources. Two allegedly responsible individuals with Ukrainian and Russian citizenship were arrested in Georgia. Furthermore, the US Attorney's Office has filed charges and requested the extradition of the suspects to the USA.
Connections to numerous investigations
So-called crypto mixers like “AudiA6” mix cryptocurrencies to obscure connections between senders and receivers. For this, the operators charge a commission. “AudiA6” was advertised in cybercrime forums as a professional service that was said to be characterized by anonymity and speed, according to Europol. The investigations against the service were driven by, among others, the Polish police. In September 2025, they arrested a Ukrainian who was connected to it. A search of his electronic devices then revealed clues to other individuals. Furthermore, connections to 15 investigations worldwide were found.
Videos by heise
In the operation on Wednesday, not only the two alleged administrators of the service were arrested. According to Europol, three properties were searched and more than 80 vehicles were confiscated. Crypto assets worth almost 700,000 euros were frozen, and another over 86,000 were seized. Additionally, Telegram accounts of the network were blocked, and its pages on the darknet and the internet, as well as the cybercrime forum “Dark2Web,” were shut down. Furthermore, numerous internet domains were blocked, and dozens of servers were seized. The authorities have now made a number of these public so that cryptocurrency exchanges can identify and block associated accounts.
(mho)
