{"id":92773,"date":"2026-03-24T23:12:40","date_gmt":"2026-03-24T23:12:40","guid":{"rendered":"https:\/\/freakcryptos.com\/index.php\/2026\/03\/24\/zachxbt-reports-russian-otc-broker-allegedly-laundered-4-7m-in-crypto\/"},"modified":"2026-03-24T23:12:40","modified_gmt":"2026-03-24T23:12:40","slug":"zachxbt-reports-russian-otc-broker-allegedly-laundered-4-7m-in-crypto","status":"publish","type":"post","link":"https:\/\/freakcryptos.com\/index.php\/2026\/03\/24\/zachxbt-reports-russian-otc-broker-allegedly-laundered-4-7m-in-crypto\/","title":{"rendered":"ZachXBT Reports Russian OTC Broker Allegedly Laundered $4.7M+ in Crypto"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div xmlns:default=\"http:\/\/www.w3.org\/2000\/svg\">\n<p><span style=\"font-weight: 400;\">Blockchain investigator ZachXBT reported at this time that Russian OTC dealer Aleksandr Khinkis allegedly laundered over $4.7 million in crypto. The exercise reportedly occurred between July 2025 and March 2026 throughout a single trade account. According to the findings, three suspected ransomware funds totaling 796 BTC drove the transactions by way of Bitcoin, Avalanche, and Tron networks.<\/span><\/p>\n<h2><b>Crypto Flows Linked to Bitcoin, Avalanche, and Tron<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">According to ZachXBT in an <a href=\"https:\/\/x.com\/zachxbt\/status\/2036430847986003992?s=20\" target=\"_blank\" rel=\"nofollow noopener\">X thread<\/a>, investigators first engaged Khinkis by way of Telegram whereas posing as a consumer. Khinkis allegedly supplied an trade deposit tackle, which was key to tracing the crypto flows. That tackle, starting with 0xa756, linked a number of transfers tied to suspected ransomware proceeds.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The investigator acknowledged that the crypto funds moved from Bitcoin into Avalanche utilizing cross-chain bridges. From there, roughly 75 transfers directed over $4.7 million into the identical trade deposit tackle. Meanwhile, a further $16.6 million stays deposited in associated addresses or platforms, with some funds actively off-ramped.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-286535\" alt=\"\" width=\"1404\" height=\"444\" srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy.jpeg 1404w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-300x95.jpeg 300w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-1224x387.jpeg 1224w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-768x243.jpeg 768w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-150x47.jpeg 150w\" data-lazy-sizes=\"(max-width: 1404px) 100vw, 1404px\" src=\"https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy.jpeg\"\/><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-286535\" src=\"https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy.jpeg\" alt=\"\" width=\"1404\" height=\"444\" srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy.jpeg 1404w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-300x95.jpeg 300w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-1224x387.jpeg 1224w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-768x243.jpeg 768w, https:\/\/coingape.com\/wp-content\/uploads\/2026\/03\/HELbFMGagAAdlsy-150x47.jpeg 150w\" sizes=\"auto, (max-width: 1404px) 100vw, 1404px\"\/><em>Source: ZachXBT<\/em><\/p>\n<p><span style=\"font-weight: 400;\">However, ZachXBT emphasised that the laundering routes prolonged additional. Funds handed by way of <a href=\"https:\/\/coingape.com\/crypto-exchanges\/\">crypto exchanges<\/a> and bridges earlier than reaching the Tron community. Timing evaluation reportedly helped match Bitcoin outflows to particular Tron pockets outputs tied to the identical exercise.<\/span><\/p>\n<h2><b>Three Ransom Payments\u00a0<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The largest latest crypto case dates to October 10, 2025. ZachXBT traced six Bitcoin bridge deposit addresses linked to a 164 BTC ransom cost. Around $3.8 million in Bitcoin moved by way of instantaneous exchanges earlier than reaching Tron-linked outputs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Seven Tron addresses tied to this stream had been blacklisted by Tether in November 2025. ZachXBT added that the frozen <a href=\"https:\/\/coingape.com\/price\/tether\/\">Tether\u2019s USDT<\/a> was burned three weeks in the past, confirming enforcement motion tied to the case. <\/span><span style=\"font-weight: 400;\">A second case from September 2, 2025, concerned a 72 BTC ransom cost. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">ZachXBT mentioned 4 Bitcoin bridge addresses linked to that transaction confirmed publicity to recognized ransomware wallets. One initiating tackle had greater than 15% overlap with flagged entities throughout compliance instruments.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">During that interval, roughly $1.36 million in Bitcoin moved by way of instantaneous exchanges. The crypto funds later consolidated right into a Tron pockets linked to addresses beforehand frozen by Tether. <\/span><span style=\"font-weight: 400;\">The earliest case dates again to September 19, 2023. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">ZachXBT\u00a0linked 5 Bitcoin bridge deposit addresses to a 560 BTC ransom cost. Those funds moved throughout middleman companies earlier than bridging into Avalanche throughout 2024.<\/span><\/p>\n<h2><b>OSINT Data Outlook<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Beyond crypto transaction flows, ZachXBT included open-source intelligence findings tied to Khinkis. According to the report, Khinkis steadily travels outdoors Russia, together with journeys to Southeast Asia and Australia.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Additionally, his private knowledge reportedly seems in a number of breach data. He additionally paperwork journey exercise brazenly on social media platforms, offering identifiable public traces.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">ZachXBT acknowledged that 73 BTC linked to the broader crypto cluster stays dormant at a separate Bitcoin tackle. He additionally confirmed that compliance groups and regulation enforcement businesses obtained particulars associated to the traced addresses and fund actions.<\/span><\/p>\n<\/p><\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/coingape.com\/zachxbt-reports-russian-otc-broker-allegedly-laundered-4-7m-in-crypto\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Blockchain investigator ZachXBT reported at this time that Russian OTC dealer Aleksandr Khinkis allegedly laundered over $4.7 million in crypto. The exercise reportedly occurred between July 2025 and March 2026 throughout a single trade account. According to the findings, three suspected ransomware funds totaling 796 BTC drove the transactions by way of Bitcoin, Avalanche, and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":92775,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[14993,1929,8068,24,3543,460,2742,196,7216],"class_list":{"0":"post-92773","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bitcoin","8":"tag-4-7m","9":"tag-allegedly","10":"tag-broker","11":"tag-crypto","12":"tag-laundered","13":"tag-otc","14":"tag-reports","15":"tag-russian","16":"tag-zachxbt"},"_links":{"self":[{"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/posts\/92773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/comments?post=92773"}],"version-history":[{"count":1,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/posts\/92773\/revisions"}],"predecessor-version":[{"id":92774,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/posts\/92773\/revisions\/92774"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/media\/92775"}],"wp:attachment":[{"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/media?parent=92773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/categories?post=92773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/freakcryptos.com\/index.php\/wp-json\/wp\/v2\/tags?post=92773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}