KYC Records Turn Laundering Hub Into Evidence

The takedown matters because it did more than cut off a cash-out service. Seizing the KYC records and linked account history turns a laundering hub into an attribution source for finding money mules and the ransomware crews that used them. Europol says AudiA6 moved more than €336 million for ransomware gangs and cybercrime networks since 2021, and investigators recovered more than 6,000 KYC records tied to mule accounts. The June 10 operation also hit Dark2Web, seized more than 30 servers and 25 domains, blocked Telegram accounts, and led to arrests in Georgia. That changes the follow-on risk. Blocking a mixer stops the payment path, but the preserved identity records can now support backtracking through exchanges and mule networks, and that evidence can outlast the laundering service itself.

Part of the PlainSec briefing for 2026-06-13

Sources