ZachXBT Alleges Russian OTC Desk Laundered $4.7M in Ransomware Funds

Edgen Crypto

·Mar 24 2026, 17:28

Share to

Share to

Copy link

Key Takeaways

On-chain investigator ZachXBT has uncovered evidence suggesting a Russian Over-the-Counter (OTC) broker assisted a ransomware gang in laundering $4.7 million. This revelation shines a spotlight on the role of less-regulated financial intermediaries in facilitating illicit crypto flows and is likely to attract heightened scrutiny from global regulators.

Primary Allegation: An investigation by ZachXBT claims a Russian OTC desk laundered $4.7 million for an unidentified ransomware group.
Broader Context: The report adds to a body of work from the investigator exposing sophisticated crypto crimes, including social media networks using fake news for pump-and-dump schemes.
Potential Impact: The findings could trigger stricter Anti-Money Laundering (AML) enforcement for OTC markets, potentially reducing liquidity and increasing compliance burdens for traders.

Russian OTC Desk Allegedly Laundered $4.7M for Ransomware Gang

On-chain investigator ZachXBT reported that a Russia-based Over-the-Counter (OTC) desk played a role in laundering approximately $4.7 million for a ransomware organization. The allegation stems from ZachXBT's analysis of blockchain transactions, which traced illicitly obtained funds from the ransomware gang directly through the OTC broker. This type of investigation highlights the vulnerabilities within the crypto ecosystem, particularly among intermediaries operating in jurisdictions with less stringent regulatory oversight. Such activities directly challenge the legitimacy of the digital asset market and provide ammunition for regulators seeking to impose stricter controls.

Findings Highlight Sophisticated Illicit Finance Tactics

This specific case is part of a wider pattern of complex financial crimes in the crypto space frequently exposed by ZachXBT. The investigator recently detailed a separate, coordinated network of social media accounts that manufactured panic around fake geopolitical events to lure users into crypto scams. These operations demonstrate a high level of sophistication, using AI-generated personas and viral content to build credibility before promoting fraudulent tokens and airdrops. In one instance involving a token named ORAMAMA, the network successfully executed a pump-and-dump scheme that generated six-figure profits. These consistent revelations underscore the persistent threat of organized financial crime within crypto and build a strong case for increased regulatory intervention across all types of trading venues, including OTC desks and social media platforms.