FinCEN shuts down Bitzlato, a €700 million cryptocurrency "dirty money safe haven," in France.

Bitzlato's co-founder and majority shareholder was detained for allegedly handling €700 million in illicit funds. Bitzlato is a cryptocurrency exchange established in Hong Kong.

Russian citizen Anatoly Legkodymov, who now resides in China, was detained on Tuesday in Miami on suspicion of running the exchange as a “high-tech financial hub that, in his own words catered to ‘known crooks'” according to a senior Justice Department official.

It was a part of a global operation when FinCEN declared that Bitzlato Ltd., a virtual currency exchange, was a "money laundering concern" associated with Russian criminal funding.

In parallel, Bitzlato's digital infrastructure was destroyed by French authorities working with Europol and allies in Spain, Portugal, and Cyprus, according to the Treasury.

Investigators claim that Hydra Market, the world's biggest and longest-running darknet market for drugs, stolen financial data, falsified identification documents, and money laundering services, was Bitzlato's biggest counterparty in cryptocurrency transactions.

Until Hydra Market was shut down by U.S. and German law authorities in April 2022, "“Hydra Market users exchanged more than $700 million in cryptocurrency with Bitzlato, either directly or through intermediaries, until Hydra Market was shuttered by U.S. and German law enforcement in April 2022," claim the prosecution.

They claim that Bitzlato also got over $15 million in ransomware earnings.

The National Cryptocurrency Enforcement Network of the Justice Department took this action as its first significant step.

Following its designation of Bitzlato Ltd as a "money laundering concern" associated with Russian criminal finance, FinCEN declared that it has forbidden certain transmittals of funds involving Bitzlato by any covered financial institution.

Since May 3, 2018, Bitzlato has handled bitcoin transactions totaling $4.58 billion, according to the prosecution.

Deputy Attorney General Monaco said, "Today the Department of Justice dealt a significant blow to the cryptocrime ecosystem."

"Overnight, the Department worked with key partners here and abroad to disrupt Bitzlato, the China-based money laundering engine that fueled a high-tech axis of cryptocrime, and to arrest its founder, Russian national Anatoly Legkodymov."

The Deputy Attorney General stated that "Today’s actions send the clear message: whether you break our laws from China or Europe—or abuse our financial system from a tropical island—you can expect to answer for your crimes inside a United States courtroom."

Some of the evidence presented by the Treasury against Legkodymove is as follows: "For instance, on May 29, 2019, Legkodymov used Bitzlato’s internal chat system to write to a colleague that Bitzlato’s users were “known to be crooks,” using others’ identity documents to register their accounts."

"Legkodymov was repeatedly warned by colleagues that Bitzlato’s customer base consisted of “addicts who buy drugs at [] Hydra” and “drug traffickers,” with one senior executive even stressing that Bitzlato should combat drug dealers only “nominally,” to avoid hurting the company’s bottom line. "

"An internal spreadsheet saved in Bitzlato’s shared management folder encapsulated the company’s view of itself: “Positives: No KYC. . . . Negatives: Dirty money... ;" it stated.

Full statement from the Treasury Department:

“A complaint was unsealed this morning in federal court in Brooklyn charging Anatoly Legkodymov, a Russian national and senior executive of Bitzlato Ltd. (Bitzlato), a Hong Kong-registered cryptocurrency exchange, with conducting a money transmitting business that transported and transmitted illicit funds and that failed to meet U.S. regulatory safeguards, including anti-money laundering requirements.

Legkodymov was arrested last night in Miami and is scheduled to be arraigned this afternoon in the U.S. District Court for the Southern District of Florida. French authorities and the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) are taking concurrent enforcement actions.

Breon Peace, United States Attorney for the Eastern District of New York; Lisa O. Monaco, Deputy Attorney General for the Department of Justice; Kenneth A. Polite, Assistant Attorney General for the Department of Justice’s Criminal Division; Brian C. Turner, Associate Deputy Director, Federal Bureau of Investigation (FBI); and Michael J. Driscoll, Assistant Director-in-Charge, FBI, New York Field Office, announced the arrest and charge.

“Institutions that trade in cryptocurrency are not above the law and their owners are not beyond our reach,” stated U.S. Attorney Breon Peace. “As alleged, Bitzlato sold itself to criminals as a no-questions-asked cryptocurrency exchange, and reaped hundreds of millions of dollars’ worth of deposits as a result. The defendant is now paying the price for the malign role that his company played in the cryptocurrency ecosystem.”

“As alleged, the defendant helped operate a cryptocurrency exchange that failed to implement anti-money laundering safeguards and enabled criminals to profit from their wrongdoing, including ransomware and drug trafficking,” stated Assistant Attorney General Polite.

“The National Cryptocurrency Enforcement Team’s tremendous efforts to disrupt Bitzlato and arrest the defendant demonstrate that we will continue to work with our partners – both foreign and domestic – to combat cryptocurrency-fueled crimes, even if they transcend international borders.”

“The FBI will continue to pursue actors who attempt to mask their criminal activity behind keyboards and use means such as cryptocurrency to evade law enforcement,” stated FBI Assistant Deputy Director Turner.

“We, along with our federal and international partners, will work relentlessly to disrupt and dismantle these types of criminal enterprises. Today’s arrest should serve as a reminder the FBI will impose risk and consequences upon those who engage in these activities.”

“As alleged today, Legkodymov knowingly allowed Bitzlato to become a perceived safe haven for funds used for and resulting from a variety of criminal activities. The FBI and our partners remain steadfast in our commitment to keeping cryptocurrency markets – as with any financial market – free from illicit activity. Today’s action should serve as an example of this commitment as Legkodymov will now face the consequences of his actions in our criminal justice system,” stated FBI Assistant Director-in-Charge Driscoll.

According to court documents, Legkodymov is a senior executive and the majority shareholder of Bitzlato Ltd. (Bitzlato), a Hong Kong-registered cryptocurrency exchange that operates globally.

Bitzlato has marketed itself as requiring minimal identification from its users, specifying that “neither selfies nor passports [are] required.” On occasions when Bitzlato did direct users to submit identifying information, it repeatedly allowed them to provide information belonging to “straw man” registrants.

As a result of these deficient know-your-customer (KYC) procedures, Bitzlato allegedly became a haven for criminal proceeds and funds intended for use in criminal activity.

Bitzlato’s largest counterparty in cryptocurrency transactions was Hydra Market, an anonymous, illicit online marketplace for narcotics, stolen financial information, fraudulent identification documents, and money laundering services that was the largest and longest running darknet market in the world. Hydra Market users exchanged more than $700 million in cryptocurrency with Bitzlato, either directly or through intermediaries, until Hydra Market was shuttered by U.S. and German law enforcement in April 2022. Bitzlato also received more than $15 million in ransomware proceeds.

As alleged in the complaint, Bitzlato’s customers routinely used the company’s customer service portal to request support for transactions with Hydra, which Bitzlato often provided, and admitted in chats with Bitzlato personnel that they were trading under assumed identities.

Moreover, Legkodymov and Bitzlato’s other managers were aware that Bitzlato’s accounts were rife with illicit activity and that many of its users were registered under others’ identities.

For instance, on May 29, 2019, Legkodymov used Bitzlato’s internal chat system to write to a colleague that Bitzlato’s users were “known to be crooks,” using others’ identity documents to register their accounts. Legkodymov was repeatedly warned by colleagues that Bitzlato’s customer base consisted of “addicts who buy drugs at [] Hydra” and “drug traffickers,” with one senior executive even stressing that Bitzlato should combat drug dealers only “nominally,” to avoid hurting the company’s bottom line. An internal spreadsheet saved in Bitzlato’s shared management folder encapsulated the company’s view of itself: “Positives: No KYC. . . . Negatives: Dirty money. . . .”

As alleged in the complaint, although Bitzlato claimed not to accept users from the United States, it did substantial business with U.S.-based customers, and its customer service representatives repeatedly advised users that they could transfer funds from U.S. financial institutions. Moreover, Legkodymov – who himself administered Bitzlato from Miami in 2022 and 2023 – received reports reflecting substantial traffic to Bitzlato’s website from U.S.-based Internet Protocol addresses, including over 250 million such visits in July 2022.

The charge in the complaint is an allegation and the defendant is presumed innocent unless and until proven guilty. If convicted of operating an illegal money transmitting business, he faces a maximum penalty of five years in prison.

The Justice Department investigated this case in close coordination with French law enforcement authorities and the Treasury Department’s FinCEN, both of which took separate actions today under their respective authorities. The Justice Department’s Office of International Affairs and the FBI’s Legal Attaché in France provided critical assistance in this case, with significant support from the department’s Cyber Operations International Liaison. The NCET and U.S. Attorney’s Office for the Eastern District of New York also extend their appreciation to the Cyber Division of the Paris Prosecution Office and to France’s Gendarmerie Nationale. Assistance was also provided by the New York City Police Department.

The NCET was created in October 2021 to combat the growing illicit use of cryptocurrencies and digital assets. Under the supervision of the Criminal Division, the NCET conducts and supports investigations into individuals and entities that enable the use of digital assets to commit and facilitate a variety of crimes, with a particular focus on virtual currency exchanges, mixing and tumbling services, and infrastructure providers. The NCET also sets strategic priorities regarding digital asset technologies, identifies areas for increased investigative and prosecutorial focus, and leads the department’s efforts to collaborate with domestic and foreign government agencies as well as the private sector to aggressively investigate and prosecute crimes involving cryptocurrency and digital assets.

The Defendant:

ANATOLY LEGKODYMOV (also known as “Anatolii Legkodymov”, “Gandalf”, and “Tolik”) Age: 40 Residence: Shenzen, People’s Republic of China; Russia

By fLEXI tEAM