The US Secret Service, Europol, and others take down and seize Garantex, a Russian cryptocurrency exchange accused of being associated with ransomware hackers
But declined to provide more details. — techcrunch.com/2025/03/06/r... Mastodon: Zack Whittaker / @zackwhittaker@mastodon.social : NEW: Russian crypto exchange Garantex has been seized by the U.S. Secret Service during an international law enforcement operation. — FBI declined to comment; Secret Service didn't respond, but Garantex's domain is now pointing to nameservers run by the Secret Service. … Kevin Beaumont / @GossiTheDog@cyberplace.social : Russian cryptocurrency cashout service Garantex has been shut down. — They were sanctioned by the EU two days ago, after an investigation by the International Consortium of Investigative Journalists https://www.icij.org/... [image] Forums: r/ethtrader : Russian Crypto Trading Platform Garantex Seized by Secret Service - Decrypt
Context & Ripple Effects
Garantex had already been identified in related coverage as a significant alleged laundering channel for cybercriminal and terrorist-linked funds, making the coordinated action a move against an established cash-out venue rather than an isolated domain disruption. The EU's sanction two days earlier adds a regulatory step immediately preceding the enforcement action.
The case fits a longer enforcement record aimed at crypto services alleged to handle illicit proceeds, including the earlier scrutiny of Moscow-linked exchange Suex. It also follows cross-border action against ransomware infrastructure, such as the RagnarLocker dark-web seizure.
First-order effects
- Garantex's public web presence is immediately disrupted: its domain points to U.S. Secret Service-controlled nameservers, while users and counterparties face uncertainty over access to the exchange and any ongoing transactions.
- The U.S. Secret Service, Europol, and partner agencies have converted sanctions and allegations into a visible operational action against a platform previously described as a major laundering channel for cybercriminals.
Second-order effects
- Other exchanges and crypto cash-out services exposed to ransomware-linked flows face stronger pressure to screen counterparties and demonstrate compliance, particularly where sanctions action can be followed by infrastructure seizure.
- Ransomware operators and other illicit users lose a known conversion route, likely increasing the operational friction of moving funds through centralized services rather than eliminating that demand.
Third-order effects
- If coordinated sanctions, domain control, and arrests continue to be used together, enforcement against crypto-enabled crime may increasingly target the service layer—exchanges, mixers, and cash-out providers—rather than only individual wallets or gangs.
- The episode underscores the crypto legitimacy gap: access to mainstream financial infrastructure will depend more heavily on whether platforms can separate legitimate activity from illicit finance, though the durability of that shift depends on enforcement reach across jurisdictions.
The trend: Cross-border authorities are pairing financial sanctions with technical takedowns to constrain the crypto services that allegedly bridge illicit digital funds and usable cash-out channels.