Department of Justice
Office of Public Affairs
FOR IMMEDIATE RELEASE
Wednesday, January 18, 2023
Founder and Majority Owner of Cryptocurrency Exchange Charged with Processing Over $700 Million of Illicit Funds
The founder and majority owner of a cryptocurrency exchange, Bitzlato Ltd. (Bitzlato), was arrested last night in Miami for his alleged operation of a money transmitting business that transported and transmitted illicit funds and that failed to meet U.S. regulatory safeguards, including anti-money laundering requirements.
Anatoly Legkodymov, 40, a Russian national who resides in Shenzhen, People’s Republic of China, is scheduled to be arraigned this afternoon in the U.S. District Court for the Southern District of Florida. French authorities and the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) are taking concurrent enforcement actions.
“Today the Department of Justice dealt a significant blow to the cryptocrime ecosystem,” said Deputy Attorney General Lisa O. Monaco. “Overnight, the Department worked with key partners here and abroad to disrupt Bitzlato, the China-based money laundering engine that fueled a high-tech axis of cryptocrime, and to arrest its founder, Russian national Anatoly Legkodymov. Today’s actions send the clear message: whether you break our laws from China or Europe – or abuse our financial system from a tropical island – you can expect to answer for your crimes inside a United States courtroom.”
“As alleged, the defendant helped operate a cryptocurrency exchange that failed to implement required anti-money laundering safeguards and enabled criminals to profit from their wrongdoing, including ransomware and drug trafficking,” said Assistant Attorney General Kenneth A. Polite, Jr. of the Justice Department’s Criminal Division. “The National Cryptocurrency Enforcement Team’s tremendous efforts to disrupt Bitzlato and arrest the defendant demonstrate that we will continue to work with our partners – both foreign and domestic – to combat cryptocurrency-fueled crimes, even if they transcend international borders.”
According to court documents, Legkodymov is a senior executive and the majority shareholder of Bitzlato, a Hong Kong-registered cryptocurrency exchange that operates globally. Bitzlato has marketed itself as requiring minimal identification from its users, specifying that “neither selfies nor passports [are] required.” On occasions when Bitzlato did direct users to submit identifying information, it repeatedly allowed them to provide information belonging to “straw man” registrants.
“Institutions that trade in cryptocurrency are not above the law and their owners are not beyond our reach,” said U.S. Attorney Breon Peace for the Eastern District of New York. “As alleged, Bitzlato sold itself to criminals as a no-questions-asked cryptocurrency exchange, and reaped hundreds of millions of dollars’ worth of deposits as a result. The defendant is now paying the price for the malign role that his company played in the cryptocurrency ecosystem.”
As a result of these deficient know-your-customer (KYC) procedures, Bitzlato allegedly became a haven for criminal proceeds and funds intended for use in criminal activity. Bitzlato’s largest counterparty in cryptocurrency transactions was Hydra Market (Hydra), an anonymous, illicit online marketplace for narcotics, stolen financial information, fraudulent identification documents, and money laundering services that was the largest and longest running darknet market in the world. Hydra users exchanged more than $700 million in cryptocurrency with Bitzlato, either directly or through intermediaries, until Hydra was shuttered by U.S. and German law enforcement in April 2022. Bitzlato also received more than $15 million in ransomware proceeds.
“The FBI will continue to pursue actors who attempt to mask their criminal activity behind keyboards and use means such as cryptocurrency to evade law enforcement,” said Assistant Deputy Director Brian Turner of the FBI. “We, along with our federal and international partners, will work relentlessly to disrupt and dismantle these types of criminal enterprises. Today’s arrest should serve as a reminder the FBI will impose risk and consequences upon those who engage in these activities.”
“As alleged today, Legkodymov knowingly allowed Bitzlato to become a perceived safe haven for funds used for and resulting from a variety of criminal activities,” said Assistant Director in Charge Michael J. Driscoll of the FBI New York Field Office. “The FBI and our partners remain steadfast in our commitment to keeping cryptocurrency markets – as with any financial market – free from illicit activity. Today’s action should serve as an example of this commitment as Legkodymov will now face the consequences of his actions in our criminal justice system.”
As alleged in the complaint, Bitzlato’s customers routinely used the company’s customer service portal to request support for transactions with Hydra, which Bitzlato often provided, and admitted in chats with Bitzlato personnel that they were trading under assumed identities. Moreover, Legkodymov and Bitzlato’s other managers were aware that Bitzlato’s accounts were rife with illicit activity and that many of its users were registered under others’ identities. For instance, on May 29, 2019, Legkodymov used Bitzlato’s internal chat system to write to a colleague that Bitzlato’s users were “known to be crooks,” using others’ identity documents to register their accounts. Legkodymov was repeatedly warned by colleagues that Bitzlato’s customer base consisted of “addicts who buy drugs at  Hydra” and “drug traffickers,” with one senior executive even stressing that Bitzlato should combat drug dealers only “nominally,” to avoid hurting the company’s bottom line. An internal spreadsheet saved in Bitzlato’s shared management folder encapsulated the company’s view of itself: “Positives: No KYC. . . . Negatives: Dirty money. . . .”
As alleged in the complaint, although Bitzlato claimed not to accept users from the United States, it did substantial business with U.S.-based customers, and its customer service representatives repeatedly advised users that they could transfer funds from U.S. financial institutions. Moreover, Legkodymov – who himself administered Bitzlato from Miami in 2022 and 2023 – received reports reflecting substantial traffic to Bitzlato’s website from U.S.-based Internet Protocol addresses, including over 250 million such visits in July 2022.
Legkodymov is charged with conducting an unlicensed money transmitting business. If convicted, he faces a maximum penalty of five years in prison.
Concurrent with the arrest announced today, French authorities, working with Europol and partners in Spain, Portugal, and Cyprus, dismantled Bitzlato’s digital infrastructure, seized Bitzlato’s cryptocurrency, and took other enforcement actions.
In addition, the Treasury Department’s FinCEN announced an Order pursuant to section 9714(a) of the Combating Russian Money Laundering Act, as amended, identifying Bitzlato as a “primary money laundering concern” in connection to Russian illicit finance. The order imposes a special measure prohibiting certain transmittals of funds involving Bitzlato by any covered financial institution.
National Cryptocurrency Enforcement Team (NCET) Trial Attorneys Alexander Mindlin, Scott Meisler, and Matthew Blackwood of the Justice Department’s Criminal Division and Assistant U.S. Attorney Artie McConnell for the Eastern District of New York are prosecuting the case, with assistance from Paralegal Specialist Mary Clare McMahon.
The Justice Department investigated this case in close coordination with French law enforcement authorities and the Treasury Department’s FinCEN, both of which took separate enforcement actions today under their respective authorities. The Justice Department’s Office of International Affairs and the FBI’s Legal Attaché in France provided critical assistance in this case, with significant support from the department’s Cyber Operations International Liaison. The NCET and U.S. Attorney’s Office for the Eastern District of New York also extend their appreciation to the Cyber Division of the Paris Prosecution Office and to France’s Gendarmerie Nationale Cyberspace Command (Cyber Crime Investigation Unit / C3N). Assistance was also provided by the New York City Police Department. EUROPOL and Dutch and Belgian authorities have contributed to the overall investigation with respect to operational expertise, coordination, and information-sharing.
The NCET was established to combat the growing illicit use of cryptocurrencies and digital assets. Under the Criminal Division, the NCET conducts and supports investigations into individuals and entities that enable the use of digital assets to commit and facilitate a variety of crimes, with a particular focus on virtual currency exchanges, mixing and tumbling services, and infrastructure providers. The NCET also sets strategic priorities regarding digital asset technologies, identifies areas for increased investigative and prosecutorial focus, and leads the department’s efforts to collaborate with domestic and foreign government agencies as well as the private sector to aggressively investigate and prosecute crimes involving cryptocurrency and digital assets.
A criminal complaint is merely an allegation. All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.U.S. Department of Justice Press Release
The remarks from Deputy Attorney General Monaco:
Deputy Attorney General Lisa O. Monaco Delivers Remarks on Founder and Majority Owner of Cryptocurrency Exchange Charged with Processing Illicit Funds
Washington, DC ~ Wednesday, January 18, 2023
Remarks as Prepared for Delivery
Good afternoon. Thank you all for being here.
Today, the Department of Justice dealt a significant blow to the cryptocrime ecosystem.
Justice Department agents and prosecutors, working in partnership with the Treasury Department and French law enforcement authorities, have disrupted Bitzlato, a China-based cryptocurrency exchange notorious for laundering criminal proceeds from the darknet. And last night, agents of the FBI arrested Bitzlato’s founder, Anatoly Legkodymov.
I am joined today by the Assistant Attorney General for the Criminal Division, Kenneth Polite, the United States Attorney for the Eastern District of New York, Breon Peace, FBI Associate Deputy Director Brian Turner, and the Deputy Secretary of the Treasury, Wally Adeyemo.
Today’s law enforcement actions serve notice to all those who seek to exploit the cryptocurrency ecosystem.
First, the Department of Justice and our partners will use all tools at our disposal to attack the use of the darknet and cryptocurrencies to promote criminal activity.
And second, we are taking steps to address a crisis of confidence in the cryptocurrency markets, where criminals and fraudsters seek to operate outside the laws and rules that protect our financial system.
Malicious actors working from perceived sanctuaries abroad are exploiting crypto markets and flouting the laws and regulations that guard the integrity of our financial system and, along with it, the earnings and investments of hard-working Americans.
It’s no secret that cybercriminals rely on those bad actors to launder their criminal proceeds from cryptocurrency into fiat currency.
Today, thanks to a coordinated international effort, Justice Department prosecutors and agents have disrupted a busy corner of this criminal ecosystem.
Last night in Miami, FBI agents arrested Legkodymov, a Russian national and founder and majority owner of Bitzlato, a Hong Kong-registered cryptocurrency exchange.
The charges allege that Legkodymov operated Bitzlato as a high-tech financial hub that, in his own words, catered to “known crooks.”
Bitzlato failed to implement safeguards required by U.S. law – safeguards that enable authorities to detect and investigate financial crimes.
Instead, Bitzlato facilitated the transmission of hundreds of millions of dollars in illicit funds fueling darknet marketplaces and laundering the proceeds of ransomware attacks.
For example, as alleged, Bitzlato was a crucial financial resource for the notorious Hydra darknet market, the disruption of which I announced from this podium last April – that time with our German partners.
Hydra was the world’s longest running and largest darknet marketplace responsible for 80% of the world’s darknet transactions.
Hydra and Bitzlato formed a high-tech axis of cryptocrime: Hydra buyers funded illicit purchases — of illegal drugs, stolen financial information, and hacking services — from crypto accounts hosted at Bitzlato, and sellers of these illegal goods and services at Hydra sent criminal proceeds to accounts at Bitzlato – all to the tune of over $700 million in direct and indirect transfers between 2018 and 2022.
I have said before that we would go after the entire ecosystem that allows cyber criminals and illicit actors to flourish.
Today’s action against Bitzlato – as with the disruption of Hydra – reflects another critical step in executing that strategy.
At the time of Legkodymov’s arrest and continuing into today, the Department’s international and domestic partners engaged in a coordinated campaign of disruption, which include enforcement actions in multiple European countries, the seizure of Bitzlato’s servers and cryptocurrency, and regulatory enforcement actions here in the United States.
Today’s actions show not only the broad international scope of the defendant’s alleged crimes—but also the international net that law enforcement used to stop him and his business partners.
Today marks the elimination of the Hydra-Bitzlato cryptocrime axis.
We have also busted the business model of the cybercriminals that Bitzlato supported.
Coordinated operations like this against Bitzlato—using all tools and designed for maximum impact—are the linchpins of international success against cybercrime.
Our actions in this case also mark the most significant enforcement effort by the National Cryptocurrency Enforcement Team against a cryptocurrency platform.
To all those exploiting the cryptocurrency ecosystem to enable cryptocrime, we have a clear message: we will not only target hackers, fraudsters, and criminals that mask their profits in cryptocurrency; we are also unleashing the full force of the Department of Justice on the illicit actors and entities that support cybercriminals – like Legkodymov and Bitzlato.
Operating offshore or moving your servers out of the continental U.S. will not shield you.
Whether you break our laws from China or Europe or abuse our financial system from a tropical island—you can expect to answer for your crimes inside a United States courtroom.
I want to thank the agents, analysts, and prosecutors who worked diligently to investigate this case.
And finally, a tremendous thanks to our foreign partners and the Department of the Treasury for their collaboration in this and many other cryptocurrency and cybercrime cases.
I’ll now turn the podium over to Assistant Attorney General Polite of the Criminal Division.Deputy Attorney General Remarks
Categories: Anti-Money Laundering Department of Justice (DOJ) Updates Enforcement Actions Indictments and Arrests Public Statements, Comments and Reactions Virtual Currencies Virtual Currency Exchange