Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistPubblicato 2026-03-25Pubblicato ultima volta 2026-03-25

Introduzione

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Domande pertinenti

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Letture associate

IOSG Founder: The Most Dangerous Prisoner's Dilemma in DeFi History

IOSG Founder: DeFi's Most Dangerous Prisoner's Dilemma A $230M bad debt remains unresolved, with Aave Collector holding over $200M in liquid assets and LayerZero recently raising $120M—both fully capable of covering the losses. Aave has lost $8.45B in TVL in under two days, while the entire DeFi ecosystem has bled $13.2B. The silence from all parties involved is exacerbating the crisis. The author recalls the DeFi spirit of 2020, when MakerDAO faced collapse during the March 12 crash but took responsibility by auctioning MKR to cover bad debt. Today, in contrast, there is only silence. Users are withdrawing funds not just from Aave but from Spark and other DeFi protocols, voting with their feet. This loss of trust threatens the entire ecosystem. This is not just Aave’s problem. Spark, MakerDAO, and all Ethereum DeFi protocols must coordinate. Trust, once broken, affects everyone. Time is critical—every hour of silence leads to more capital leaving permanently. The author urges Aave’s Stani Kulechov, Vitalik Buterin, AaveDAO, KelpDAO, LayerZero, and RuneKek to communicate publicly and reassure the market. Silence is the worst option.

marsbit15 min fa

IOSG Founder: The Most Dangerous Prisoner's Dilemma in DeFi History

marsbit15 min fa

XRP Ledger Transactions Are Surging Again, Here Are The Numbers

XRP Ledger is experiencing a significant surge in activity, particularly in AccountSet transactions, which are used to configure account settings and indicate backend or institutional activity rather than simple transfers. These transactions recently hit an all-time high of over 120,000, reflecting infrastructure development. This is part of a broader increase in network usage, with daily transactions reaching nearly 3 million in 2026, up from around 1 million in mid-2025. The number of non-empty wallets has also surpassed 7.7 million. Despite this growth, the price of XRP remains below its 2025 peak, with analysts suggesting regulatory clarity, such as the CLARITY Act, may be needed for a price repricing.

bitcoinist20 min fa

XRP Ledger Transactions Are Surging Again, Here Are The Numbers

bitcoinist20 min fa

VCs on 2025 Crypto Investments: 84% of 118 Tokens Break Issue Price, Only One Type of Company is Quietly Making Money

Crypto investor Ching Tseng categorizes the market into four quadrants based on two axes: crypto-native vs. traditional finance (TradFi)-oriented, and having traction vs. no traction. In 2025, 84.7% of 118 tracked token launches fell below their issuance price, with a median fully diluted valuation drop of 71%. Crypto-native projects without traction are experiencing massive capital destruction, often relying on speculative narratives without sustainable revenue or user retention. Crypto-native teams with traction, often built in prior cycles, generate real revenue but face structural challenges with their tokens lacking direct value capture mechanisms. While some have implemented successful buyback programs, the core issue remains finding growth beyond crypto volatility. TradFi-oriented startups without traction face long, costly enterprise sales cycles but benefit from a robust M&A environment, with crypto acquisitions reaching a record $8.6 billion in 2025. The current winners are TradFi-oriented companies with traction, particularly in the Real World Asset (RWA) tokenization space, which grew from $5.5B to $18.6B in 2025. They are winning through enterprise sales, building alliances, and improving unit economics on established compliance stacks. Their main risk is being bypassed by large incumbent institutions building their own infrastructure. The overarching theme is market maturation, where narrative alone is insufficient for long-term success.

marsbit39 min fa

VCs on 2025 Crypto Investments: 84% of 118 Tokens Break Issue Price, Only One Type of Company is Quietly Making Money

marsbit39 min fa

Crypto Trader's Account: Friends Are Leaving, What's Left to Do in This Industry?

Crypto trader Donn reflects on the declining state of the cryptocurrency industry, noting that many peers are leaving due to three core challenges: lack of innovation in the past 2-3 years, the threat of quantum computing to Bitcoin by 2029, and increased DeFi attacks exacerbated by AI models like Claude Mythos. VC activity has stagnated, with few quality token projects generating over $50M in annual income. Liquidity and investor interest have dwindled, shifting focus to traditional markets. For traders, event-based strategies remain viable but are increasingly competitive and low-yield due to reduced open interest and retail participation. Systematic and basis traders are exploring alternative strategies as traditional methods become less profitable. DeFi yield farming is increasingly unattractive due to rising hack risks and insufficient returns, pushing farmers toward off-chain options. On-chain gem hunters still chase high-risk, high-reward opportunities, but success rates are low, and most tokens crash shortly after peaking. Personally, the author is scaling down crypto trading, maintaining a small arbitrage strategy on Polymarket, and exploring AI automation for analytical tasks. He is also researching AI model fine-tuning and broader AI applications beyond crypto, seeking new focus areas as the industry wanes.

marsbit1 h fa

Crypto Trader's Account: Friends Are Leaving, What's Left to Do in This Industry?

marsbit1 h fa

To Counter Chinese Models, Silicon Valley's Big Three Even Formed an 'Avengers Alliance'?

In a rare move, Silicon Valley's AI giants—OpenAI, Anthropic, and Google—have formed a coalition called the "Frontier Model Forum" to combat what they term "adversarial distillation." This practice involves companies, particularly Chinese firms like DeepSeek, Moon Dark Side, and MiniMax, allegedly using massive API interactions to extract and replicate the capabilities of advanced models. Anthropic's report claims these firms engaged in over 16 million interactions, copying logic, reasoning chains, and model behaviors to train their own systems at lower costs. While distillation is a known technique, the alliance argues it threatens both commercial interests and safety, as distilled models may bypass critical risk assessments. However, the accusations are met with skepticism, citing hypocrisy, as these giants themselves face lawsuits over unauthorized data scraping. The debate highlights the unresolved ethical and legal gray areas in AI development.

marsbit1 h fa

To Counter Chinese Models, Silicon Valley's Big Three Even Formed an 'Avengers Alliance'?

marsbit1 h fa

Trading

Spot
Futures
活动图片