Waves

🔴 High Risk

Waves (WAVES) cryptocurrency has been critically implicated in large-scale money laundering operations centered in Russia, where criminal networks exploited weaknesses in the regulatory and compliance frameworks of crypto exchanges and OTC brokers. Notoriously, the TGR Group and related Russian entities used Waves and associated platforms to launder illicit proceeds, including those from ransomware attacks and sanctioned Russian financial institutions. These networks combined bulk cash transactions with crypto transfers, leveraging unregistered services, stability coins like USDT, and sophisticated layering techniques to obscure funds’ origins and facilitate cross-border illicit flows. The involvement of politically exposed persons (PEPs) and sanctioned entities further entwines Waves in deep-rooted Russian financial crime and sanctions evasion schemes. Despite global enforcement efforts, including OFAC sanctions and the UK National Crime Agency’s Operation Destabilise, Waves remains a key tool in Russia’s crypto-enabled money laundering matrix, reflecting the persistent challenge cryptocurrencies pose to international financial security and crime prevention.​

Waves (WAVES) cryptocurrency has been heavily implicated in large-scale money laundering schemes originating in Russia, facilitated by a constellation of exchanges and OTC brokers connected to organized criminal groups such as the TGR Group. These actors exploited deficiencies in AML frameworks and regulatory oversight of cryptocurrency platforms to launder hundreds of millions of dollars, including proceeds from ransomware and sanctioned Russian banks. Law enforcement efforts from the U.K., U.S., and global partners have resulted in indictments, sanctions, and disruption of laundering networks that used Waves technology and the broader crypto ecosystem to obfuscate the origins of illicit funds and integrate them into the global financial system. These cases highlight the risks posed by Russia-linked cybercriminal operations leveraging cryptocurrency technology for sanction evasion and money laundering on a massive scale.​

Countries Involved

Russia, United States, United Kingdom, Middle East, South America

Initially reported 2023-2025, with significant law enforcement actions and media revelations emerging from late 2024 through 2025

WAVES, USDT (Tether), other cryptocurrencies

Money laundering through cryptocurrency exchanges and OTC brokers, illicit fund layering, sanction evasion

Waves blockchain network, Russian darknet groups including TGR Group, sanctioned crypto exchange Garantex, associated OTC brokers, individuals such as Khadzi Murat Dalgatovich Magomedov and networks tied to Egor Petukhovsky

Yes, notable connections to politically exposed persons (PEPs) and sanctioned Russian financial entities like Sberbank, VTB, Sovcom, and state-owned nuclear company Rosatom

  • Use of unregistered OTC brokers and cryptocurrency exchanges to convert large volumes of illicit cash into cryptocurrency

  • Transfer of funds through shell accounts and fabricated compliance documents to obscure origins

  • Market manipulation schemes and decentralized finance protocols to hide asset movement

  • Use of stablecoins like USDT to layer illicit funds and integrate them into the financial system

  • Exploiting weak anti-money laundering (AML) controls in Russian and international crypto platforms to facilitate cross-border transactions

Hundreds of millions to over $500 million (notably through schemes involving Waves Lending Protocol and OTC brokers)

The laundering network primarily operated by funneling illicit proceeds from ransomware gangs, darknet drug traffickers, and sanctioned Russian financial institutions through Waves and related cryptocurrency platforms. The illicit funds were converted to stablecoins or other cryptocurrencies through OTC brokers connected to Russian criminal groups. These assets were then integrated into the global financial system, often routed via U.S.-based financial institutions using deceptive business declarations. Chainalysis and Elliptic forensic analysis uncovered complex layering transactions that exploited Waves’ blockchain ecosystem vulnerabilities and associated unregulated intermediaries.

  • The U.K. National Crime Agency’s Operation Destabilise exposed and disrupted TGR Group’s laundering activities

  • U.S. Department of Justice indicted individuals involved in laundering over $500 million involving Waves and other cryptos

  • U.S. Treasury sanctioned key exchanges and OTC brokers, including those linked to Egor Petukhovsky and Garantex

  • Sanctions and enforcement actions targeted Russian crypto actors and entities for breaching AML and sanctions laws

  • Continued monitoring and sanctions enforcement against cryptocurrency networks implicated in Russian illicit finance

Waves
Case Title / Operation Name:
Waves Cryptocurrency Laundering Network Linked to Russian Exchange and OTC Brokers
Country(s) Involved:
Russia, United Kingdom, United States
Platform / Exchange Used:
Waves blockchain, Garantex exchange, various unregistered OTC brokers
Cryptocurrency Involved:

WAVES, USDT (Tether), other cryptocurrencies

Volume Laundered (USD est.):
Estimated hundreds of millions to over $500 million USD
Wallet Addresses / TxIDs :
Known wallet addresses and transaction hashes linked to TGR Group and other Russian networks
Method of Laundering:

Use of unregistered OTC brokers, conversion to stablecoins, layering techniques, market manipulation, shell accounts, fictitious compliance documentation

Source of Funds:

Illicit cash from ransomware, darknet drug trafficking, sanctioned Russian financial institutions, corruption

Associated Shell Companies:

Shell companies linked to OTC brokers and laundering networks (specific company names undisclosed publicly)

PEPs or Individuals Involved:

Russian PEPs and sanctioned individuals linked to Sberbank, VTB, Rosatom, and figures like Khadzi Magomedov and Egor Petukhovsky

Law Enforcement / Regulatory Action:
UK NCA’s Operation Destabilise disrupted TGR Group activities; US DOJ indictments; OFAC sanctions on exchanges and brokers; seizures and asset freezes
Year of Occurrence:
2023-2025
Ongoing Case:
Ongoing
🔴 High Risk