{"id":77750,"date":"2026-03-25T21:01:33","date_gmt":"2026-03-25T21:01:33","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=77750"},"modified":"2026-03-25T21:01:33","modified_gmt":"2026-03-25T21:01:33","slug":"crypto-sleuth-links-russian-otc-desk-to-4-7m-laundering","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=77750","title":{"rendered":"Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering"},"content":{"rendered":"
\n

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.<\/p>\n

That dormant pile of digital cash, flagged<\/a> by blockchain investigator ZachXBT, sits at the edge of a much larger money trail \u2014 one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.<\/p>\n

Sting Operation Cracked The Case Open<\/h2>\n

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis<\/a> as the central figure in the alleged scheme.<\/p>\n

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address \u2014 a move that gave investigators the thread they needed to pull.<\/p>\n

\n

1\/ Meet Aleksandr (Aleks) Khinkis, a Russian OTC broker who has allegedly helped a ransomware group launder $4.7M+ via a single crypto exchange account since July 2025, across three suspected ransom payments totaling 796 BTC. pic.twitter.com\/GpOjAvtaAd<\/a><\/p>\n

\u2014 ZachXBT (@zachxbt) March 24, 2026<\/a><\/p>\n<\/blockquote>\n

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.<\/p>\n

Three Ransoms. Three Trails. One Broker<\/h2>\n

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.<\/p>\n

The oldest case dates back to September 2023, when five Bitcoin<\/a> bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.<\/p>\n

\n

2\/ Last month we reached out to Aleks via a Telegram account posing as a potential client looking to convert crypto assets on Avalanche to fiat.<\/p>\n

He promptly provided his exchange deposit address:
\n0xa75666786a4e120110418ed3b4865a114d70706e<\/p>\n

The conversation was conducted in\u2026 pic.twitter.com\/zt827Du3Ow<\/a><\/p>\n

\u2014 ZachXBT (@zachxbt) March 24, 2026<\/a><\/p>\n<\/blockquote>\n

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.<\/p>\n

The most recent and largest payment \u2014 164 BTC \u2014 was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.<\/p>\n

<\/p>\n

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.<\/p>\n

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.<\/p>\n

Law Enforcement Now Has the Data<\/p>\n

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.<\/p>\n

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly \u2014 including trips to Southeast Asia and Australia \u2014 and documents those trips openly on social media.<\/p>\n

The 73 BTC still sitting dormant at a separate address hasn\u2019t moved. If and when it does, investigators will almost certainly be watching.<\/p>\n

Featured image from Pexels, chart from TradingView<\/em><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice. That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail \u2014 one that reportedly spans three ransomware payments, multiple networks, and at least […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-77750","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/77750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=77750"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/77750\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=77750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=77750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=77750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}