Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistPublished on 2026-03-25Last updated on 2026-03-25

Abstract

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Related Questions

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Related Reads

In the Age of Artificial Intelligence, We Need 'Magicians,' Not 'Managers'

In the AI era, leadership must shift from management to magic. As knowledge rapidly expires, value shifts from what leaders know to what they can facilitate. Traditional "inside-out" management, driven by internal experience, is giving way to "outside-in" thinking focused on external opportunities, customer needs, and disruptive change. The core challenge is fostering new ideas that may invalidate existing knowledge. While technologies like steam, electricity, and AI provide the "skeleton" for innovation, it is human vision—connecting technology to customer dreams—that creates magic. Historical figures like Richard Arkwright and Eldridge R. Johnson succeeded not by inventing core technologies, but by reimagining work and business models from the outside in. Leaders must transition from controllers to "architects of flourishing." Their role is to design environments where empowerment, creativity, and adaptive learning thrive. This involves granting autonomy, fostering partnerships, and building resilient systems that scale innovation. Critical leadership qualities now include judgment, creativity, and the ability to learn continuously rather than relying on static expertise. Therefore, cultivating future leaders requires a focus on timeless fundamentals, humanities for broader perspective, and social acuity, rather than over-specialization in quickly outdated technical skills. The future rewards those who respond to the unseen and create conditions for better answers to emerge. Leadership in the AI age is less about having all the answers and more about enabling others to discover them—creating organizations where people explore, imagine, and thrive.

marsbit22m ago

In the Age of Artificial Intelligence, We Need 'Magicians,' Not 'Managers'

marsbit22m ago

The End of This Bull Market's 'Greatest Myth': 'AI Stock God' Leopold Crushed in Weeks, Citadel Takes Over $16 Billion in Stock Assets

The once-celebrated "AI stock god," 24-year-old Leopold Aschenbrenner, has seen his hedge fund's spectacular rise end in a dramatic collapse. His fund, Situational Awareness (SA), built a narrative around explosive AI infrastructure demand, raising $45 billion and achieving a 439% return in H1 2026 by heavily leveraging (4x) concentrated long positions in stocks like SK Hynix and CoreWeave, while shorting legacy software firms. In July 2026, a sharp reversal hit AI stocks, triggering massive losses in both long and short positions. Facing margin calls from banks, SA was forced to sell its entire $16 billion public market portfolio in a 36-hour fire sale. Citadel acquired the assets at a significant discount, one of Wall Street's largest emergency stock trades. SA's assets under management plummeted from a $45 billion peak to roughly $10 billion, retained entirely in private holdings like a stake in Anthropic. The episode underscores that being right on a macro trend does not guarantee survival, highlighting the critical risks of extreme concentration and high leverage without a sufficient buffer against market shifts.

marsbit37m ago

The End of This Bull Market's 'Greatest Myth': 'AI Stock God' Leopold Crushed in Weeks, Citadel Takes Over $16 Billion in Stock Assets

marsbit37m ago

Platform Token Surges 15-Fold in Half a Month, Pons Tops Both Token Issuance and Trading on Robinhood Chain

The article details the rapid rise of Pons as the leading token launch and trading platform on Robinhood Chain. Following NOXA's halt of new token issuance, several platforms vied for the resulting traffic. By mid-July, Pons surged ahead, achieving the highest daily token creation volume (over 15,000 tokens on July 15th) and soon after capturing the largest daily trading volume ($40.7M on July 18th), consistently maintaining both top positions. Pons's key advantage is its streamlined, single-transaction process that deploys a token's contract and its Uniswap V3 liquidity pool simultaneously, eliminating the need for bonding curves or subsequent DEX migrations. This simplicity caters to the demand for fast, low-cost launches on Robinhood Chain. The platform's native token, PONS, played a pivotal role in its growth, experiencing a price surge of over 15x from mid-July. A tokenomics model that uses 80% of protocol fees to buy back and burn PONS has contributed to its value and heightened platform visibility. Looking ahead, Pons V2 aims to expand beyond meme tokens by integrating support for paying transaction fees with assets like USDG or RWA tokens, aligning with Robinhood Chain's focus on on-chain finance and real-world assets.

marsbit1h ago

Platform Token Surges 15-Fold in Half a Month, Pons Tops Both Token Issuance and Trading on Robinhood Chain

marsbit1h ago

Apple's Q3 Results Largely Meet Expectations, Supply and Memory Pressure Drive After-Hours Drop of 6%

Apple's Q3 (FY2026) earnings largely met expectations, but weak guidance and rising costs drove the stock down 6.3% after hours. Revenue of $109.42B slightly beat estimates, and EPS of $2.02 was boosted by a $0.11 tariff refund. Core EPS was $1.91, aligning with forecasts. iPhone and Mac sales were strong, but iPad and Services revenue fell short. Greater China growth slowed. The outlook for the next quarter is concerning. Apple guided for 9-11% revenue growth, below the ~12% consensus, citing significant supply constraints for iPhones, Macs, and iPads due to advanced chip shortages. Gross margin guidance of 47-48% includes a 1-point tariff benefit, implying a core margin of 46-47%, down from 48.1% this quarter. Management highlighted rising memory costs as a major pressure point. While Apple's AI initiatives like Siri are progressing, monetization remains early. With the stock near all-time highs, the combination of in-line results, segment weaknesses, and a cautious outlook triggered significant profit-taking. The focus has shifted from resilient demand to supply chain execution and cost management.

marsbit1h ago

Apple's Q3 Results Largely Meet Expectations, Supply and Memory Pressure Drive After-Hours Drop of 6%

marsbit1h ago

Platform Token Soars 15x in Half a Month, Pons Tops Robinhood Chain Charts for Both Token Launches and Trading

In just half a month, the Pons platform token (PONS) surged over 15x in value as Pons solidified its position as the leading token launch and trading platform on Robinhood Chain, capturing both the highest daily token creation volume and transaction volume. Following the exit of previous leader NOXA, competition initially favored Flap before Pons emerged dominant around mid-July. By July 26th, Pons accounted for 77.1% of total trading volume across all Robinhood Chain launchpads. Pons's success is attributed to its streamlined, one-transaction process for deploying a token contract and its corresponding Uniswap V3 liquidity pool simultaneously, eliminating the need for bonding curves or complex migrations. This simplicity, combined with low creation costs and immediate tradability, attracted significant creation activity and speculative trading. The meteoric rise of its native token, PONS, further fueled platform growth. A tokenomics model directing 80% of protocol fees to buy back and burn PONS created a reinforcing cycle: platform usage boosted PONS value, which in turn attracted more users. Looking ahead, Pons V2 aims to expand beyond meme tokens by integrating support for paying fees in stablecoins (USDG) and RWA assets, aligning with Robinhood Chain's broader focus on on-chain finance and stock tokens.

Odaily星球日报1h ago

Platform Token Soars 15x in Half a Month, Pons Tops Robinhood Chain Charts for Both Token Launches and Trading

Odaily星球日报1h ago

Trading

Spot
活动图片

Hot Categoriesright-arrow

Hot Tagsright-arrow