A federal grand jury returned an indictment charging three Russian nationals for their involvement in operating the cryptocurrency websites.  Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik are in custody and were charged by a federal grand jury. The third defendant, Anton Vyachlavovich Tarasov was also charged but remains at large.

“According to the indictment, the defendants operated cryptocurrency websites that served as safe havens for laundering criminally derived funds, including the proceeds of ransomware and wire fraud,” said Principal Deputy Assistant Attorney General Brent S. Wible, head of the Justice Department’s Criminal Division.  The defendants made it easier for state-sponsored hacking groups and other cybercriminals to profit from offenses that jeopardized both public safety and national security. The indictment and arrests follow an earlier takedown of the defendants’ criminal infrastructure and demonstrate the value of our international partnerships in countering the global threat from cybercrime.”

“Blender.io and Sinbad.io were allegedly used by criminals across the world to launder funds stolen from victims of ransomware, virtual currency thefts, and other crimes,” said U.S. Attorney Ryan K. Buchanan. “Last year, with the assistance of our international partners, we successfully dismantled Sinbad.io,” said Acting Special Agent in Charge Sean Burke of the FBI Atlanta Field Office.According to court documents and publicly available information, Blender.io and Sinbad.io were cryptocurrency mixers that allowed their users, for a fee, to send cryptocurrency to designated recipients in a manner designed to hide the source of the cryptocurrency. Blender.io and Sinbad.io were available for use by the public via the internet and used by criminals looking to distance themselves from the fact that their funds came from cryptocurrency thefts, ransomware attacks, and other crimes.

Blender.io operated from approximately 2018 to 2022. The service was advertised on a popular internet forum as having a “No Logs Policy” and deleting any traces of user transactions. Additionally, in the advertisement, Blender was described as not requiring users to sign up, register, or “provide any kind of detail except the receiving address!” The advertisement asserted that, “[a]s there are no personal details asked for, there’s no way your identity is compromised, or can be linked back to, because as far as blender.io goes they don’t know who you are.” After Blender.io shut down, Sinbad.io began operating a few months later. Like Blender.io, Sinbad.io provided users with Bitcoin concealment services. And, on November 27, 2023, Sinbad.io was taken down through law enforcement action.

Both Blender.io and Sinbad.io have been sanctioned by the Department of Treasury’s Office of Foreign Assets Control (OFAC). On May 6, 2022, OFAC sanctioned Blender.io, citing its use by the Democratic People’s Republic of Korea (DPRK) to launder stolen virtual currency. OFAC’s public sanctions announcement also explained that Blender.io laundered funds for multiple ransomware groups. On Nov. 29, 2023, OFAC sanctioned Sinbad.io, publicly citing its use by a DPRK state-sponsored hacking group and cybercriminals to obfuscate transactions linked to other criminal offenses.

Trial Attorney Ethan Cantor of the Criminal Division’s Computer Crime and Intellectual Property Section, who is a member of the National Cryptocurrency Enforcement Team, and Assistant U.S. Attorney Samir Kaushal for the Northern District of Georgia are prosecuting the case. The Justice Department’s Office of International Affairs and Assistant U.S. Attorney Maxwell Coll for the Central District of California provided significant assistance.