Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistPublicado em 2026-03-25Última atualização em 2026-03-25

Resumo

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Perguntas relacionadas

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Leituras Relacionadas

Goldman Sachs: July Smashes Through Crowded Trades, U.S. Stock Bull Market Not Broken but Harder to Navigate

Goldman Sachs: July Sees Crowded Trades Unwound, U.S. Bull Market Intact but Getting Tougher. The U.S. stock market in July did not see an index-level crash, but rather a significant unwinding of speculative positions. While the S&P 500 remained stable—trading within a narrow 3.5% range and staying within 2% of its high—underlying market dynamics were volatile. Heavily crowded trades, particularly in high-momentum tech, AI-linked stocks, and Asian strategies, faced severe pressure and forced deleveraging. Data indicates this was a meaningful cleanse, not a minor adjustment. Global tech exposure saw its largest sell-off in over five years, leverage in Korean equity ETFs plummeted, and Goldman's prime brokerage recorded the largest gross exposure reduction since late 2022. Leverage on momentum factors among fundamental long/short clients fell to the 28th percentile of its one-year range. The AI trade narrative shifted from pure potential to a focus on tangible returns. While Meta failed to show clear AI monetization, Microsoft and Amazon provided evidence that massive capital expenditure is translating into scalable revenue and product growth, preventing a blanket sell-off of the AI sector. The Federal Reserve's more opaque communication style and volatility in long-end Treasury yields have introduced new friction, particularly for rate-sensitive growth and tech stocks. The broader outlook for U.S. equities remains favorable, supported by a strong economy, robust earnings, and substantial AI capital expenditure. However, risk/reward is no longer cheap, and the market's upward elasticity has weakened. The Nasdaq 100's trajectory—up 12% year-to-date despite significant pullbacks—illustrates that the bull trend persists but the path is becoming more difficult. The key lesson from July is that the market no longer rewards crowded, highly leveraged trades, requiring more disciplined and liquid portfolio approaches.

marsbitHá 2h

Goldman Sachs: July Smashes Through Crowded Trades, U.S. Stock Bull Market Not Broken but Harder to Navigate

marsbitHá 2h

Interview with Robinhood Executive: Meme + Tokenized US Stocks as "Barbell" Customer Acquisition Strategy, All Business Lines Achieve Hundreds of Millions in Revenue

Interview with Robinhood executive Johann Kerbrat reveals the company's "barbell" customer acquisition strategy for its new Robinhood Chain, combining meme tokens with tokenized stocks. Three weeks after mainnet launch, the chain has seen over $3B in weekly DEX volume and 105M transactions. Kerbrat explains the logic behind the permissionless chain: meme tokens attract DeFi users, while tokenized real-world assets (RWA), currently over 90 US stocks and ETFs accessible in 120+ countries, serve global users. The goal is to bring Robinhood's 27 million funded accounts on-chain by simplifying DeFi with a user-friendly interface, exemplified by features like Robinhood Earn which offers yield without requiring wallet management. Built on Arbitrum's technology stack for its speed, low cost, and Ethereum's security, the chain focuses on financial products like Earn, spot trading, and perpetuals. Kerbrat downplays direct competition with platforms like Base, emphasizing the goal of expanding the overall market for on-chain assets. He details selective partnerships (e.g., Morpho, Lighter) based on compliance, unique UX, and differentiation. While regulatory clarity is pending for US perpetuals, the expansion continues via Bitstamp in Europe. Finally, Kerbrat positions Robinhood as a "super app" integrating stocks, options, crypto, banking, and AI trading, with all major business lines generating hundreds of millions in revenue. For the chain, current priority is driving adoption over maximizing gas fee revenue.

marsbitHá 4h

Interview with Robinhood Executive: Meme + Tokenized US Stocks as "Barbell" Customer Acquisition Strategy, All Business Lines Achieve Hundreds of Millions in Revenue

marsbitHá 4h

Trading

Spot
活动图片