Connect with us

Crypto

German Law Enforcement Seizes Russian No KYC Exchanges – Chainalysis

Published

on

German Law Enforcement Seizes Russian No KYC Exchanges – Chainalysis

On September 19, 2024, the German Federal Criminal Police (BKA) seized the infrastructure of 47 Russian-language no-KYC (Know Your Customer) cryptocurrency exchanges. Dubbed “Operation Final Exchange,” the takedown stands out not only for its breadth, but also for the light it has shined on the central role instant-swap style no-KYC exchanges play in facilitating on-chain cybercrime.

As their name suggests, no-KYC exchanges have no known process for collecting customer information before allowing any level of deposit or withdrawal. They do not require a name, phone number, or email address, and make no attempt to verify this information prior to permitting transactions. As such, these services allow a range of cybercriminals to abuse their services without KYC controls to identify or disrupt illicit activity. The BKA’s Operation Final Exchange landing page calls out ransomware affiliates, botnet operators, and darknet vendors as users of the 47 targeted exchanges. Beyond that, these services offered fiat on- and off-ramping for sanctioned Russian banks, creating an avenue for sanctions evasion.

Below, we’ll dive into these exchanges’ on-chain activity, explore their nexus to sanctioned Russian banks, and discuss the disruption’s implications.

Who are these 47 No KYC Exchanges?  

Our data reveals interesting patterns about the services targeted by the BKA, with robust direct and indirect exposure to various illicit services. At least seventeen of the exchanges saw a month of more than 50% of direct inflows from illicit sources. At least twelve saw a month where more than 30% of direct inflows were from darknet marketplaces (DNMs). At least six saw at least one month where stolen funds comprised more than 30% of total direct inflows. At least five had at least one month where more than 30% of indirect inflows were from sanctioned entities. 

This exposure demonstrates that for many of these services, laundering illicit funds was a substantial part of their businesses. Indeed, as depicted in the below Chainalysis Crypto Investigations graph, the top ten services targeted by the BKA transacted with a broad array of illicit services, including, but not limited to, sanctioned entities, ransomware actors, DNMs, and darkweb escrow and breached data brokers. 

Advertisement

The chart below shows the quarterly inflows to the top ten exchanges taken down by the BKA. These services received value from a variety of sources, including periods of significant inflows from drug-related DNMs, online pharmacies, malicious cybercriminals such as ransomware gangs, and funds stolen in heists and scams.

There is also a notable increase over time in the proportion of inflows from legitimate sources, notably centralized exchanges. While this change to the composition of inflows might in other circumstances suggest that the services were in the process of cleaning up their platforms, the reality is likely more complicated. In this case, the increased inflows from otherwise legitimate sources most likely represent the growing use of these services for sanctions evasion on the part of Russian nationals, who are likely trying to leverage these no KYC exchanges to evade sanctions on Russian banks. 

How do these services work?

These services operate as instant-swap style services, in which users, without providing any personal information or going through any verification process, can swap from one currency to another. The offerings include crypto-to-crypto and fiat-to-crypto swaps, allowing users to instantly exchange popular cryptocurrencies and stablecoins, or to connect their bank account to on-/off-ramp fiat to crypto instantly.

As with other categories of the illicit crypto ecosystem, we have observed that no KYC exchanges, particularly those targeted by the BKA, often have overlapping or similar on-chain infrastructure, and in some instances even share off-chain networks, such as website shells, employees and administrators, physical locations, and ownership structures, to name a few. More often than not, these websites have no affiliated company incorporation, registration, phone numbers, physical addresses, or any indicator of jurisdictional operation. Unlike other high-risk and illicit services, most of these services do not have a social media presence, instead offering users the ability to interface with a bot on their homepages. Despite using servers based in Germany, these services cater primarily to a Russian clientele, as suggested by their default language settings in Russian and information on banking services for fiat transactions provided by sanctioned Russian banks, such as Sberbank. 

Advertisement

Connectivity to sanctioned Russian banks

Many of the 47 no KYC exchanges were Russian-language platforms offering fiat-to-crypto and crypto-to-crypto instant exchange services. As we covered in our recent analysis of Russia’s new cryptocurrency legislation, Russian-language instant exchangers can be exploited to quickly move fiat currency from sanctioned Russian banks to specified crypto wallets, enabling entities to evade sanctions. Given the dramatically increased sanctions pressure on Russian banks following the full-scale invasion of Ukraine in February 2022, instant exchangers have emerged as a convenient way to on- or off-ramp funds for sanctioned banks. Of the 47 no KYC exchanges targeted in Operation Final Exchange, all that we have identified on-chain accepted on- and off-ramping with sanctioned Russian banks.

Breadth of disruption likely to generate actionable inroads 

Most of the exchanges targeted by BKA have been active since 2021 or before, and the top three in terms of transactions processed – Xchange.cash, 60cek.org, and Bankcomat.com – have been active since 2016 or before, according to the Operation Final Exchange landing page. The longevity of these services suggests a substantial portion of customers affected will need to establish alternative financial facilitation and laundering pathways.

The disruption’s impact is likely to extend far beyond the no KYC exchanges targeted. As the BKA stated, it is now in possession of these exchanges’ development, production, and backup servers, as well as transactional details, registration data, and IP addresses. This data will likely be instrumental in generating follow-on leads for the BKA and key international law enforcement partners in the months to come. We continue to track this phenomenon closely and will flag new no KYC exchanges that emerge as key players in this space. 

This website contains links to third-party sites that are not under the control of Chainalysis, Inc. or its affiliates (collectively “Chainalysis”). Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein. 

This material is for informational purposes only, and is not intended to provide legal, tax, financial, or investment advice. Recipients should consult their own advisors before making these types of decisions. Chainalysis has no responsibility or liability for any decision made or any other acts or omissions in connection with Recipient’s use of this material.

Advertisement

Chainalysis does not guarantee or warrant the accuracy, completeness, timeliness, suitability or validity of the information in this report and will not be responsible for any claim attributable to errors, omissions, or other inaccuracies of any part of such material.

Crypto

1 Cryptocurrency to Buy While It’s Under $80,000

Published

on

1 Cryptocurrency to Buy While It’s Under ,000

Key Points

  • Investor pessimism toward the digital asset market has driven this top cryptocurrency 40% off its record high from last October.

  • History reveals that fiat currencies often end in collapse, paving the way for this innovative monetary asset to find greater adoption across the global economy.

  • Besides being electronic, scarcity and neutrality support this cryptocurrency’s value proposition.

It hasn’t been an enjoyable time if you have money tied up in cryptocurrencies. After the market’s valuation peaked at $4.4 trillion in October, we’ve witnessed a downward spiral that has resulted in that figure plummeting to $2.6 trillion today (as of April 17).

On the other hand, the S&P 500 index climbed 5% during the same time. It’s completely understandable if people want to forget about digital assets. They aren’t the easiest to hold; it’s hard to handle the volatility.

Will AI create the world’s first trillionaire? Our team just released a report on the one little-known company, called an “Indispensable Monopoly” providing the critical technology Nvidia and Intel both need. Continue »

However, a monster opportunity is staring investors in the face. Here’s the cryptocurrency to buy right now, especially since it trades under $80,000.

Image source: Getty Images.

Advertisement

It usually doesn’t end well for fiat currencies

It’s time to shine the spotlight on Bitcoin(CRYPTO: BTC), the world’s first and most valuable cryptocurrency, with a market cap of $1.5 trillion. Bitcoin is a decentralized monetary network that was built to allow anyone in the world to transfer value to anyone else anywhere in the world without the use of an intermediary. It was a technological breakthrough at the time. And it still is today.

To understand the enormous importance of a completely novel monetary network to emerge, one that’s digital, immutable, and not controlled by anyone, it requires looking at the past. Fiat currencies, like the U.S. dollar, have a troubled history.

Since President Richard Nixon ended the convertibility of U.S. dollars to gold in 1971, the world economy has operated on government-backed, or fiat, currencies. The U.S. dollar has been the global reserve currency.

But the track record is impossible to ignore. Fiat currencies often end in collapse. Before the U.S. dollar’s current reign, it was the British Pound sterling. Over time, inflation decreases purchasing power, sometimes rapidly.

Is the writing on the wall for the U.S. dollar? Persistent fiscal deficits in the U.S., an ever-expanding debt burden that’s nearing $40 trillion, loss of public confidence and trust, and political instability are all clear signs that cracks in the system are forming.

Advertisement

While unsustainable things can go on for much longer than people anticipate, perhaps it’s only a matter of time before the U.S. dollar’s dominance comes to an end. And Bitcoin appears well-positioned to be a winner from this development.

The history lesson naturally leads to Bitcoin

After gaining more knowledge about the history of fiat currencies, investors will figure out the best ways to allocate capital to maintain and grow their purchasing power over the next decade. High-quality stocks, particularly in businesses that possess pricing power, present one idea. Real estate and commodities are also interesting if you have expertise in these areas.

Gold also comes to mind. It might not be a coincidence that the precious metal’s price doubled in the past two years. Those in charge of large pools of capital might be considering some of the variables that I just discussed, leading them to direct money toward an asset that has been viewed as a top store of value for millennia.

I believe, however, that Bitcoin is the best bet if you think there’s even a tiny chance that the U.S. dollar will collapse as its predecessors did.

Advertisement

Bitcoin is superior to gold, in my opinion. It’s purely digital, while also being divisible, allowing people to transact with it. It’s borderless and portable. And it’s finite, with a hard supply cap of 21 million units. It makes sense that a neutral monetary asset would succeed, or at least rise alongside, the U.S. dollar’s run. Individuals, corporations, financial institutions, and governments should gravitate toward the supreme cryptocurrency.

And that supports a much higher price a decade from now, with the upside even bigger on a longer time horizon. With Bitcoin trading 40% off its peak, at a price that’s under $80,000 right now, investors have the opportunity to buy what could end up being the dominant financial instrument in the economy one day.

Should you buy stock in Bitcoin right now?

Before you buy stock in Bitcoin, consider this:

The Motley Fool Stock Advisor analyst team just identified what they believe are the 10 best stocks for investors to buy now… and Bitcoin wasn’t one of them. The 10 stocks that made the cut could produce monster returns in the coming years.

Consider when Netflix made this list on December 17, 2004… if you invested $1,000 at the time of our recommendation, you’d have $524,786!* Or when Nvidia made this list on April 15, 2005… if you invested $1,000 at the time of our recommendation, you’d have $1,236,406!*

Advertisement

Now, it’s worth noting Stock Advisor’s total average return is 994% — a market-crushing outperformance compared to 199% for the S&P 500. Don’t miss the latest top 10 list, available with Stock Advisor, and join an investing community built by individual investors for individual investors.

See the 10 stocks »

*Stock Advisor returns as of April 19, 2026.

Neil Patel has no position in any of the stocks mentioned. The Motley Fool has positions in and recommends Bitcoin. The Motley Fool has a disclosure policy.

Continue Reading

Crypto

Arthur Hayes Warns Bitcoin May Stall Until Liquidity Returns

Published

on

Arthur Hayes Warns Bitcoin May Stall Until Liquidity Returns

Key Takeaways:

  • Arthur Hayes ties bitcoin’s outlook to global liquidity, with upside dependent on policy-driven liquidity.
  • Geopolitics create a bearish setup as war risk, deleveraging, and AI-driven stress weigh on markets.
  • Liquidity injections could lift bitcoin once credit stress forces intervention.

Bitcoin Outlook Hinges on Liquidity

Arthur Hayes’ latest market note, titled “No Trade Zone,” signals that bitcoin’s outlook is increasingly tied to global liquidity conditions rather than traditional macro indicators. On April 15, the Bitmex co-founder and Maelstrom CIO outlined a cautious stance, citing geopolitical tensions and artificial intelligence-driven economic risks as key constraints. The essay presents BTC as vulnerable in the short term but positioned to respond to future monetary expansion.

Hayes centered his outlook on monetary conditions rather than conventional valuation models. He asked, “Do you believe the quantity or the price of money is more important when valuing bitcoin?” He then answered with a direct thesis:

“I believe the quantity of money determines the price of bitcoin, not its price.”

That view underpins his broader market framework, which expects bitcoin to struggle during periods of forced deleveraging, then strengthen when policymakers expand credit. He tied that dynamic to several geopolitical outcomes involving the Strait of Hormuz, as well as to a domestic economic slowdown driven by job losses among white-collar workers. In Hayes’ view, those pressures could hit credit quality, weigh on banks, and delay any durable crypto rally until authorities supply fresh liquidity to stabilize the system.

War Risk and Credit Stress Threaten Rally

That caution appears clearly in one of the essay’s most specific forecasts. “ Bitcoin might bounce a bit after the situation reverts to the pre-war status quo,” Hayes wrote. “However, the AI agentic deflation bomb still ticks below the surface. Until the Fed provides the liquidity needed to plug the black hole in banks’ balance sheets caused by consumer credit defaults, bitcoin will not meaningfully rise.” He further shared:

“That’s not to say it couldn’t spike to $80,000 to $90,000, but for me putting new units of fiat at risk requires an all-clear from the Fed.”

The statement shows that he still sees upside potential, but not before broader financial stress is addressed.

Advertisement

Hayes also warned that market stress could produce another sharp bitcoin selloff before any recovery takes hold. “As investors de-risk their portfolios because of higher volatility and lower prices, investors sell bitcoin to meet margin calls,” he described, adding: “Only when things get bad enough will bitcoin rise, as expectations of a bailout become the consensus.” In the most extreme scenario, even a liquidity-fueled rally may not last. As Hayes put it: “The rally in bitcoin, inspired by money printing, might be short-lived because the destruction of the Iranian state materially raises the prospect of WW3.” Taken together, the essay presents a conditional forecast: near-term volatility remains high, while any lasting upside still depends on crisis-era money creation.

Continue Reading

Crypto

Chainalysis Details ‘Shadow Crypto Economy’ Exposure as Grinex Suspends Operations

Published

on

Chainalysis Details ‘Shadow Crypto Economy’ Exposure as Grinex Suspends Operations

Key Takeaways:

  • Chainalysis flags Grinex swaps as inconsistent with typical law enforcement seizures.
  • Tron-based conversions show illicit actors avoiding stablecoin issuer intervention.
  • Grinex activity does not clearly align with patterns of a conventional external hack.

Grinex Shutdown Raises Questions About Crypto Laundering Tactics

Sanctions pressure continues to test the resilience of crypto networks tied to restricted financial activity. Blockchain intelligence firm Chainalysis on April 17 examined Grinex after the sanctioned exchange suspended operations. The review described the shutdown as a new stress point for infrastructure tied to sanctions evasion.

Grinex claimed a cyberattack cost about 1 billion rubles, or $13.7 million, and published the source and destination addresses involved. Chainalysis then assessed the transfers using on-chain data rather than relying on the exchange’s narrative. The analysis found that the stolen assets were mainly a fiat-backed stablecoin before being moved through a Tron-based decentralized exchange into TRX.

“In the case of the alleged Grinex hack, the stablecoin funds were quickly swapped for a non-freezable token, thereby avoiding the risk of having the stablecoins frozen by the issuer,” the blockchain analytics firm stated, adding:

“This frantic swapping from stablecoins to more decentralized tokens is a hallmark tactic of cybercriminals and illicit actors attempting to launder funds before a centralized freeze can be executed.”

Chainalysis argued that this behavior does not fit a typical Western law enforcement seizure because authorities can request freezes from centralized stablecoin issuers. The firm instead said the rapid conversion raises questions about whether the activity aligns with a conventional external hack.

Shadow Crypto Economy Shows Deep Interconnected Structure

Those conclusions rest on more than the attack claim alone. Chainalysis noted that the decentralized exchange used in the swap had previously served Garantex, the sanctioned predecessor to Grinex, as a liquidity source for hot wallets. That detail is notable because Chainalysis has already described Grinex as the direct successor to Garantex after international enforcement disrupted the earlier platform. The company also tied Grinex to A7A5, a ruble-backed token issued by sanctioned Kyrgyzstani company Old Vector.

Advertisement

According to the analysis, A7A5 was built for a narrow Russia-linked payments ecosystem aligned with cross-border settlement needs under sanctions pressure. Chainalysis added that the exfiltrated funds were still sitting in a single address at publication time, leaving a live trail for future forensic review.

The broader takeaway was less about one theft than about the financial system surrounding it. Chainalysis observed that the episode is the latest disruption inside a “shadow crypto economy.” That phrase captured the firm’s larger conclusion that Grinex, Garantex, A7A5, and related services formed an interlinked network designed to keep value moving despite sanctions. Chainalysis further disclosed that it labeled the relevant addresses in its products to help customers identify exposure as the funds move downstream. Even without final attribution, the firm made clear that Grinex’s suspension damages a key channel within that sanctioned ecosystem.

Continue Reading
Advertisement

Trending