U.S. DOJ Seizes Several Domains of Russian-Linked Crypto Exchanges in Major Crackdown against Money Laundering

In a significant move against international cybercrime, the U.S. Department of Justice (DOJ) has seized the domains of three crypto exchanges, UAPS, PM2BTC, and Cryptex, which allegedly facilitated illicit transactions worth more than $800 million in connection with Russian money laundering operations.

Obtaining court authorization, the U.S. authorities have seized the domains of these exchanges. Now, anyone attempting to access these sites will be greeted by a government notice indicating their confiscation due to illegal activities.

Major Charges Announced

On September 26, the DOJ made a statement charging two Russian citizens for their alleged roles in setting up a massive money laundering scheme involving a network of global cybercriminals. According to unsealed court documents, Sergey Ivanov, also known as “Taleon,” is accused of managing various money laundering services for several others cybercriminals. These services allegedly catered to ransomware groups and darknet drug traffickers.

Ivanov is said to have operated Russian-based payment and exchange services, including UAPS, PinPays, and PM2BTC, facilitating approximately $1.15 billion in digital asset transactions for money laundering activities between July 2013 and August 2024.

Cryptex, another crypto exchange involved in money laundering, was discovered to have processed transactions totaling $1.4 billion, and around 31% of that is directly linked to criminal activities. U.S. authorities seized the domains “Cryptex.net” and “Cryptex.one,” which reportedly offered users anonymity, bypassing know-your-customer (KYC) compliance requirements. This platform, like UAPS and PM2BTC, was advertised directly on forums frequented by cybercriminals.

“Working with our Dutch partners, we shut down Cryptex, an illicit crypto exchange, and recovered millions of dollars in cryptocurrency,”

stated Deputy Attorney General Lisa Monaco.

Additionally, Russian national Timur Shakhmametov has been indicted for operating Joker’s Stash, one of the largest carding websites ever, known for selling stolen credit and debit card information. Shakhmametov allegedly promoted Joker’s Stash and its stolen card details across various cybercrime forums, much like Ivanov.

A cryptocurrency blockchain analysis revealed that approximately 32% of all traced Bitcoin handled by these exchanges were associated with criminal activities. Among the illicit transactions, more than $158 million in Bitcoin were linked to fraud, over $8.8 million were traced to ransomware payments, and around $4.7 million originated from darknet drug markets.

Government Sanctions and Rewards

In conjunction with the DOJ, the U.S. Treasury has also sanctioned Ivanov and Cryptex. Simultaneously, the State Department has placed an $11 million reward for information leading to the arrest of those involved in the Ivanov or Joker’s Stash operations.

This operation marks a critical step in the ongoing battle against cybercrime and illicit financial networks, underscoring the determination of U.S. authorities to disrupt and dismantle these extensive criminal enterprises.