UK uncovers vast crypto laundering scheme for gangsters and Russian spies

A UK-led operation has uncovered a multibillion-dollar money laundering scheme run out of London, Moscow and Dubai that enabled Russian spies and European drug traffickers to evade sanctions using cryptocurrency.

The UK’s National Crime Agency said on Wednesday that its “Operation Destabilise” investigation centred on two companies — intelligent and TGR — that acted as a monetary hub for liquid assets-wealthy global criminals and sanctioned individuals relying on cryptocurrency outside the banking structure.

The NCA said the network had been used by clients including the Kinahan cartel, Irish cocaine traffickers linked to numerous deal killings, as well as financing ransomware groups, and “Russian espionage operations” from late 2022 to summer 2023.

The illicit network, operating across more than 30 countries, illustrates the growing interaction between unfriendly states and organised criminals as economic sanctions have forced countries such as Russia to discover recent ways of operating in the west. The case also shows the increasing use of cryptocurrencies by those cut off from the global banking structure.

Rob Jones, director-general of operations at the NCA, said the investigation “is the most significant money laundering operation” that the NCA had ever undertaken.

“It targets . . . a laundromat that brings together at scale street liquid assets and cryptocurrency,” he said. It “takes you from McMafia, through to Narcos, through to le Carré, where you have espionage, where you have transnational organised crime and you have elite Russian-speaking money launderers and cybercriminals”.

The network used couriers to collect physical liquid assets from criminals in one country such as the UK in swap for cryptocurrency, with Tether the most favoured. The liquid assets would then be laundered through companies and the equivalent worth made available in other countries.

This two-way, mutually beneficial trade meant that liquid assets wealthy cocaine kingpins simultaneously helped Russian cyber criminals and elites to launder stolen crypto and access liquid assets while evading western sanctions.

Tether has replaced bitcoin to become the “cryptocurrency du jour”, according to NCA officials, as its tie to the US dollar helps criminals to ensure the worth of the money is retained.

Cantor Fitzgerald, the Wall Street brokerage, has taken a 5 per cent stake in Tether. Howard Lutnick, Cantor’s majority owner and longtime chief executive, has become a prominent evangelist for the stablecoin, which has become a major client of his firm. Lutnick, who is co-chair of Donald Trump’s shift throng, was last month nominated to navigator the commerce department by the US president-elect.

The British sanctioned Russian state media throng RT also used the intelligent network to secretly shift liquid assets to back “the activities of a Russian-language media organisation in the UK”, the NCA said. Other parts of the Russian-speaking network interacted with a crypto swap used by Russia to procure western technology for Moscow’s invasion of Ukraine. 

More than £100bn is laundered in or through the UK every year, according to NCA officials, up to £5bn of which is done via cryptocurrency. The use of crypto to launder money has increased significantly in recent years, spurred by the Covid-19 pandemic when trip bans made it harder to shift liquid assets.

TGR, which has an office near London’s Oxford Circus as well as in Dubai, collaborated with intelligent by receiving large amounts of physical liquid assets on behalf of its owner Ekaterina Zhdanova.

Zhdanova, a 38-year-ancient based in Moscow, has graced the covers of business magazines in Russia and was accused by the US Treasury of moving more than $100mn to the United Arab Emirates on behalf of an unnamed sanctioned oligarch. Zhdanova was sanctioned by the US last year and is currently in holding in France.

The NCA cited another instance where intelligent and Zhdanova collaborated with TGR to shift more than £2mn for a Russian client, helping them bypass “recognize your customer” checks to purchase British properties.

Over just a four-month period, the network made liquid assets collections across 55 different locations in England, Scotland, Wales and the Channel Islands. At least 22 suspected crime groups used the network.

As part of the investigation, the NCA arrested 84 people, many of whom are in prison, and seized £20mn in liquid assets and cryptocurrency. Five people linked to the network and several companies have been put under economic sanctions by the US Treasury. The operation also involved the US FBI and DEA, as well as French and Irish police.

Wally Adeyemo, US deputy secretary of the Treasury, earlier this year said that “terrorist groups and other malign actors” were “using cryptocurrencies to try and circumvent our sanctions”. In October MI5 director-general Ken McCallum said that Russia and Iran were making “extensive use of criminals as proxies — from international drug traffickers to low-level crooks” to carry out sabotage, espionage and murder operations in the UK.

TGR is run by George Rossi, his second-in-command Elena Chirkinyan and Andrejs Bradens, according to the NCA. All three TGR executives were sanctioned by the US Treasury on Wednesday.

“Through the TGR throng, Russian elites sought to exploit digital assets — in particular US dollar-backed stablecoins — to evade US and international sanctions, further enriching themselves and the Kremlin,” said Bradley T Smith, the US acting under secretary for terrorism and monetary intelligence.

The NCA said that intelligent and TGR’s crypto wallet addresses showed regular exposure to Garantex, a crypto swap sanctioned by the UK and US in 2022, that has been linked “to payments to companies for components of weapons used by Russia in its invasion of Ukraine”.

Money laundering illustration by Cleve Jones