Russian authorities have arrested nearly 100 individuals with suspected ties to the anonymous payment system UAPS and the cryptocurrency exchange Cryptex in what is being called the largest crackdown on the country’s crypto industry. The arrests follow an international effort involving U.S. and Dutch law enforcement, which resulted in the seizure of web domains and disruption of the infrastructure associated with Cryptex. The U.S. also imposed sanctions on Cryptex and a Russian national linked to the exchange, Sergey Ivanov.
The Russian Investigative Committee (ICRF) conducted 148 searches across various regions of the country and transported 96 suspects to Moscow for questioning. A video shared by state media showed suspects being escorted by law enforcement for interrogation. Authorities reported seizing 1.5 billion rubles (approximately $16 million) during the raids, along with luxury items such as helicopters, high-end vehicles like Bentleys and Rolls Royces, and various other expensive possessions.
These arrests mark a rare move by Russian authorities against cybercriminals operating within the country. The suspects are accused of operating an illicit network of cryptocurrency exchanges and money transfers, primarily catering to cybercriminals and hackers who used services like Cryptex and UAPS to launder funds from illegal activities, including ransomware attacks and fraud.
The suspects face charges related to criminal organization involvement, unauthorized access to computer systems, illegal banking operations, and trafficking in payment instruments, with some offenses carrying potential sentences of up to 20 years in prison. Russian investigators revealed that in 2023, Cryptex processed over 112 billion rubles ($1.2 billion), with 3.7 billion rubles ($38 million) flowing directly into the hands of these criminals.
The U.S. Treasury Department has accused Cryptex of facilitating ransomware payments and laundering more than $51.2 million from such activities since 2013. Cryptex was linked to over $720 million in transactions associated with ransomware groups and cybercriminals using other illicit services, such as the previously sanctioned exchange Garantex.
Sergey Ivanov, a key figure involved in these operations and known by his online moniker “Taleon,” has allegedly laundered hundreds of millions of dollars in virtual currency for ransomware actors, darknet vendors, and other cybercriminals over the past two decades. Ivanov and fellow Russian Timur Shakhmametov, known as “JokerStash,” who allegedly ran the now-defunct Joker’s Stash marketplace for stolen credit card data, have both been charged by the U.S. with bank fraud and money laundering.
In connection with the investigation, the U.S. Department of State announced a reward of up to $10 million for information leading to the arrest or conviction of Ivanov and Shakhmametov. While Russian authorities have detained suspects and initiated criminal investigations, it remains unclear whether they will collaborate with U.S. officials in this case. Ivanov’s current location has not been disclosed, though Russian media confirmed that he will be transported to Moscow for further investigative actions.
The crackdown on Cryptex and UAPS demonstrates a notable shift in Russian enforcement toward addressing cybercriminal activities within its borders, especially as the global community continues to pressure the country on its cyber operations.

