Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistPublicado em 2026-03-25Última atualização em 2026-03-25

Resumo

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Perguntas relacionadas

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Leituras Relacionadas

BitMine adds 7,430 ETH, spends $86M on share buybacks – Why?

BitMine significantly slowed its Ethereum accumulation last week, purchasing only 7,430 ETH—its smallest weekly buy since May. The company instead prioritized shareholder returns, spending approximately $86 million to repurchase 5.5 million common shares. BitMine's ETH treasury remains substantial at 5.78 million ETH (4.8% of circulating supply), nearing its long-term goal of 5%. The company has already staked 85% of its holdings and projects up to $290 million in annual staking revenue. Meanwhile, Michael Saylor's MicroStrategy continues its Bitcoin-focused treasury strategy despite recent sales.

ambcryptoHá 35m

BitMine adds 7,430 ETH, spends $86M on share buybacks – Why?

ambcryptoHá 35m

9.42 Million Retail Investors Compete for Changxin Technology, Who Got Allotted?

Evergreen Technology's IPO subscription results are now available. On July 20, the domestic memory chip giant announced the offline preliminary allotment results and online lottery results for its IPO. A total of approximately 9.43 million retail investors participated in the online subscription, generating 770,000 winning lots with a final winning rate of about 0.4714%, setting a record for new shares on the STAR Market. After triggering a clawback mechanism from institutional to retail investors, the online retail allocation was significantly increased to 3.851 billion shares. Simultaneously, 285 institutional investors participated in the offline subscription, ultimately receiving 2.173 billion shares at an allotment rate of approximately 0.1756%. Leading insurers and public funds were among the major recipients. Notably, Liang Wenfeng, founder of the major AI model company DeepSeek, through his quantitative investment firms Ningbo Huanfang Quantitative and Zhejiang Jiuzhang Asset, secured the largest share among private funds, with a total allotment worth approximately 175 million yuan. Estimates suggest potential profits could reach 730 million yuan if Evergreen Technology's market capitalization reaches 3 trillion yuan post-listing. The company is expected to list on July 27 and could become the highest-valued tech stock on the A-share market, with various brokerages providing valuations ranging from 1 trillion to over 4 trillion yuan. However, recent significant corrections in global tech stocks may impact its post-listing performance. (Character count: 1,196)

marsbitHá 1h

9.42 Million Retail Investors Compete for Changxin Technology, Who Got Allotted?

marsbitHá 1h

USCR crypto stabilizes at $0.0022: Can the memecoin reverse Q2 losses?

The memecoin USCR, which tracks sentiment around a potential U.S. Bitcoin reserve, has stabilized at $0.0022 after a 37% drop in June erased its May gains. A recovery above key moving averages could target $0.0028 and potentially $0.0036, representing a 30-60% upside. However, its price is heavily tied to the progress of a bill to establish a formal U.S. BTC reserve. That bill has stalled in Congress, and prediction markets now price only an 18% chance of a reserve being established before 2027. Despite this uncertainty, holder numbers remain relatively strong at 48K. The coin's recovery is contingent on positive developments regarding the reserve legislation.

ambcryptoHá 1h

USCR crypto stabilizes at $0.0022: Can the memecoin reverse Q2 losses?

ambcryptoHá 1h

3 Million-Follower Goddess Fully AI-Synthesized, Fake Orphanage, Cross-Border ‘Fake Charity’ Collapses Overnight

An Australian influencer named Lily Jay, with nearly 3 million Instagram followers, is at the centre of a major AI-fueled charity scam. Her 'Lily Jay Foundation' claimed to build orphanages, mosques, and deliver aid in places like Uganda and Gaza, using emotionally powerful videos of herself with children. However, an investigation by ABC NEWS Verify revealed these scenes—including a key video announcing an orphanage's opening—were entirely AI-generated, complete with telltale flaws like garbled text on clothing. The foundation's 'humanitarian award' was also faked using AI images. The foundation admitted in small print on its website that it is not a registered charity, avoiding financial transparency laws. While based in Kosovo, its operations and the influencer's lavish personal lifestyle raised further red flags. Following media inquiries, the foundation selectively hid donation buttons and removed fraudulent content for Australian visitors, but kept them active internationally. Experts warn this case is a textbook example of how AI can be weaponized to exploit public trust and generosity, creating believable but entirely fabricated narratives of aid. The incident highlights the growing danger of deepfakes in eroding trust within the charitable sector, urging donors to critically verify causes before giving.

marsbitHá 1h

3 Million-Follower Goddess Fully AI-Synthesized, Fake Orphanage, Cross-Border ‘Fake Charity’ Collapses Overnight

marsbitHá 1h

L2 'Recalibration': When L1 Becomes Its Own Rollup, What Is Ethereum's Endgame?

The article discusses the evolving relationship between Ethereum's Layer 1 (L1) and Layer 2 (L2) solutions, moving beyond the initial "L2 for scaling" model. As Ethereum L1 itself scales (increasing Gas Limit, statelessness, zkEVM), the unique value proposition of L2s shifts from merely providing cheap execution to offering differentiated features like application-specific optimization, privacy, and flexible governance. The piece explores three key themes: 1. **L2's New Role:** L2s are transitioning from a pure scaling technology to a spectrum of execution environments with varying degrees of security inheritance from Ethereum L1. 2. **Interoperability as State Trust:** Solving L2 fragmentation is less about cross-chain bridges and more about enabling faster, trust-minimized state verification between environments. This involves initiatives like faster L1 finality, intent-based architectures (Open Intents Framework), and native account abstraction. 3. **Blurring Layers:** With the potential integration of zk-proofs into L1 validation (making L1 akin to its own "Rollup") and the concept of "Native Rollups," the rigid boundary between L1 and L2 may fade. The future could be a unified system with multiple execution domains (for DeFi, gaming, privacy, etc.) sharing a common security, settlement, and state framework. In conclusion, Ethereum's goal is not to abandon L2s or re-centralize everything on L1, but to re-integrate the fragmented user experience—liquidity, accounts, applications—while preserving the scaling benefits of a multi-environment ecosystem. The endgame is a cohesive "one chain" feeling for users, powered by diverse but securely interconnected execution layers.

marsbitHá 1h

L2 'Recalibration': When L1 Becomes Its Own Rollup, What Is Ethereum's Endgame?

marsbitHá 1h

Trading

Spot
活动图片

Categorias popularesright-arrow

Etiquetas Popularesright-arrow