A coalition of worldwide regulation enforcement businesses has seized the web site related to the cryptocurrency trade Garantex (“garantex[.]org”), practically three years after the service was sanctioned by the U.S. Treasury Division in April 2022.
“The area for Garantex has been seized by america Secret Service pursuant to a seizure warrant obtained by america Lawyer’s Workplace for the Japanese District of Virginia underneath the authority of 18 U.S.C. §§ 981 and 982,” reads a seizure banner on the web site.
The operation was carried out in coordination with the U.S. Division of Justice’s Felony Division, the Federal Bureau of Investigation, Europol, the Dutch Nationwide Police, the German Federal Felony Police Workplace (Bundeskriminalamt aka BKA), the Frankfurt Common Prosecutor’s Workplace, the Finnish Nationwide Bureau of Investigation, and the Estonian Nationwide Felony Police.
Based in 2019, Garantex was beforehand topic to U.S. sanctions for facilitating transactions from darknet markets and illicit actors resembling Hydra and Conti. In late 2023, sanctions have been additionally imposed towards a Russian nationwide named Ekaterina Zhdanova for her function in laundering the proceeds of ransomware teams like Ryuk by way of Garantex.
The event comes weeks after the European Union introduced comparable sanctions towards the crypto trade late final month for its shut affiliation with already sanctioned Russian banks resembling Sberbank, T-Financial institution, and Alfa-Financial institution, prompting Tether to dam its crypto wallets.
In a message posted on its Telegram channel, Garantex stated: “Pricey customers! Now we have dangerous information. Tether has entered the struggle towards the Russian crypto market and blocked our wallets price greater than 2.5 billion rubles.”
“We’re quickly suspending all companies, together with cryptocurrency withdrawals, whereas our total group solves this downside. We’re preventing and won’t quit!”
The Moscow-headquartered trade has since overtly printed the record of cryptocurrency wallets which have been blocked by Tether.
Replace
The U.S. Division of Justice (DoJ) on Friday formally introduced the disruption of Garantex for allegedly facilitating cash laundering by transnational felony organizations. In all, the trade is estimated to have processed a minimum of $96 billion in cryptocurrency transactions.
The next web sites have been seized as a part of the hassle –
- Garantex[.]org
- Garantex[.]io, and
- Garantex[.]academy
Along with the takedown, the DoJ additionally introduced the unsealing of an indictment towards a 46-year-old Lithuanian nationwide and Russian resident, Aleksej Besciokov, and a 40-year-old Russian nationwide and United Arab Emirates resident, Aleksandr Mira Serda, for his or her involvement in working the enterprise.
“Besciokov was Garantex’s major technical administrator and accountable for acquiring and sustaining vital Garantex infrastructure, in addition to reviewing and approving transactions,” the DoJ stated. “Mira Serda was Garantex’s co-founder and chief industrial officer.”
Garantex is claimed to have acquired lots of of thousands and thousands in felony proceeds, enabling varied types of cybercrime resembling hacking, ransomware, terrorism, and drug trafficking. The DoJ additional accused the 2 defendants of working the platform regardless of information that the ill-gotten funds have been being routed by way of it.
On high of that, Besciokov and his co-conspirators are alleged to have transacted with U.S.-based entities in violation of the 2022 sanctions, whereas additionally failing to register with the Monetary Crimes Enforcement Community (FinCEN) as required by U.S. legal guidelines.
Besciokov and Mira Serda are every charged with one depend of conspiracy to commit cash laundering. Besciokov can also be charged with one depend of conspiracy to violate the Worldwide Emergency Financial Powers Act, and with conspiracy to function an unlicensed cash transmitting enterprise.
Alongside the costs, over $26 million in funds used to facilitate Garantex’s cash laundering actions have been frozen by U.S. regulation enforcement authorities.

Blockchain intelligence agency Elliptic stated it developed proprietary methods to flag cryptocurrency wallets managed by Garantex, and that the trade engaged in crypto transactions price greater than $60 billion because it was sanctioned in 2022. The very best quantity of transactions occurred within the USDT stablecoin, on the TRON blockchain.
“Garantex has been utilized in sanctions evasion by Russian elites, in addition to to launder proceeds of crime together with ransomware, darknet market commerce, and thefts attributed to North Korea’s Lazarus Group,” Dr. Tom Robinson, Elliptic co-founder and chief scientist, informed The Hacker Information in an announcement.
Cryptocurrency property from ransomware gangs like Conti, Lockbit, and Black Basta have been discovered to be despatched to Garantex after sanctions have been imposed, in addition to these associated to darkish net markets resembling Blacksprut, Solaris, Mega and OMG!OMG!.
“Cryptoassets stolen by North Korea’s Lazarus Group have been laundered by way of Garantex,” Elliptic stated. “Transactions totaling over $30 million from the $100 million hack of the Horizon Bridge have been despatched to Garantex in February 2023.”
In a brand new message posted on Telegram, Garantex stated it intends to make an “necessary announcement,” and that it is engaged on addressing some unspecified technical points. It has additionally warned its prospects to stay vigilant towards scammers who it stated are claiming to assist withdraw funds utilizing bogus websites.
“Their aim is to realize entry to customers’ private knowledge, pockets addresses, and different delicate data,” it cautioned. “Don’t enter your credentials on unverified web sites and don’t comply with doubtful hyperlinks.”
(The story was up to date after publication to incorporate further details about the takedown.)