In a coordinated international operation, the U.S. Department of Justice, alongside authorities from Germany and Finland, has dismantled the Russian cryptocurrency exchange Garantex. This exchange was known for its deep involvement in the cybercrime economy, according to Chainalysis.

The operation, which took place on March 7, 2025, resulted in the seizure of Garantex’s domains and servers in Germany and Finland, as well as the freezing of over $26 million in illicit funds. Criminal charges have been filed against the exchange’s administrators, Aleksej Besciokov and Aleksandr Mira Serda, who are accused of laundering hundreds of millions of dollars worth of cryptocurrency.

Garantex’s Role in Illicit Activities

Garantex was not just an unregulated crypto exchange but a cornerstone of Russia’s illicit crypto economy. Despite being sanctioned by the U.S. Treasury’s Office of Foreign Asset Control (OFAC) in April 2022, it continued to facilitate money laundering for ransomware groups, darknet markets, and other sanctioned entities. The exchange reportedly processed at least $96 billion in transactions since 2019.

The exchange played a pivotal role in laundering funds for notorious ransomware groups like Conti, Black Basta, and Play, impacting numerous U.S.-based victims. It also moved millions linked to darknet markets, drug trafficking, and child sex abuse materials.

Impact and Examination of Garantex’s On-Chain Activities

Garantex was among the most prolific platforms for money laundering in the crypto ecosystem, with illicit activities accounting for at least 1.35% of its total transactions. This figure translates to over $1.3 billion in illicit funds, significantly higher than the 0.14% typically seen in compliant centralized exchanges.

The exchange’s on-chain connections included a wide array of illicit entities, from scams and stolen funds to ransomware operations and illegal goods vendors. Garantex administrators allegedly took steps to conceal these activities, including providing false information to Russian authorities and frequently changing wallet addresses to bypass compliance measures.

Future Implications and International Efforts

With its core infrastructure dismantled, Garantex’s illicit client base is likely to seek new channels for laundering funds. This could lead to the emergence of successor exchanges or a network of smaller, less detectable platforms, reminiscent of the aftermath of Hydra Market’s shutdown.

The successful dismantling of Garantex underscores the power of international collaboration and advanced blockchain intelligence in combating cybercrime. As global law enforcement agencies and blockchain analytics firms like Chainalysis continue to strengthen their partnerships, the ability for illicit actors to exploit cryptocurrencies is becoming increasingly limited.

Image source: Shutterstock