The U.S. Justice Department (DOJ) announced on Thursday that it has charged two Russian nationals with operating money laundering services linked to illicit cryptocurrency transactions amounting to billions of dollars. The operation involved seizing multiple crypto exchange domains and unsealing an indictment against the two individuals for their involvement in laundering funds tied to cybercriminals worldwide. These actions were carried out in coordination with international law enforcement and U.S. agencies, including the Department of State and the Treasury.

Sergey Ivanov and Timur Shakhmametov, the Russian nationals charged, are accused of running extensive cybercriminal operations using cryptocurrency exchanges. Ivanov allegedly managed platforms that processed more than $1.15 billion in cryptocurrency, handling funds from fraud, ransomware payments, and darknet drug sales. The DOJ stated:

There have been more than 37,500 transactions involving bitcoin addresses associated with Cryptex, amounting to a total value of approximately 62,586 bitcoin, or $1.4 billion at the time the transactions were made.

Of that total, $441 million came from cryptocurrency addresses linked to criminal activities. This included $297 million from fraud and $115 million from ransomware payments. Cryptex, one of Ivanov’s exchanges, allowed users to bypass know-your-customer requirements, providing anonymity to criminals.

Further, Ivanov’s services allegedly facilitated carding websites like Rescator and Joker’s Stash. The latter, run by Shakhmametov, offered stolen payment card data, with estimates placing its profits between $280 million and $1 billion. The Justice Department’s actions, in collaboration with Dutch authorities, included seizing servers and cryptocurrency tied to these operations. The Justice Department noted:

As part of the coordinated actions taken today, our Dutch partners seized the servers hosting PM2BTC and Cryptex. Those servers have been taken offline at various locations around the world, and the Dutch have seized cryptocurrency from those servers worth over $7 million.

Additionally, 28% of the bitcoin sent from Cryptex went to U.S.-sanctioned darknet markets and criminal enterprises.