• About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    BAE Systems cyberattack

    BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court

    fake driving licence

    No Lessons, No Test, No Travel: Dubai Police Bust AED 10,000 Licence Scheme

    generative AI in research

    AI Can’t Judge Your Paper: EU Updates Guidelines on Peer Review and AI Agents

    ASD Essentials

    The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

    weekly cybersecurity roundup

    The Cyber Express Weekly Roundup: Hackers Turn Supermarket Freezers Into Ovens, UPI PIN Theft and More

    Infostealer Intelligence

    The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know

    GhostBat RAT

    Fake Traffic Challan Texts Are Stealing UPI PINs From Android Users in India

    Microsoft cybercrime crackdown

    Inside the Phishing Marketplace Microsoft Just Took Down: 2,300 Fake Templates Exposed

    Fake X Accounts

    X Removes 13,000 Fake Accounts Ahead of US Midterm Elections

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    ASD Essentials

    The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

    SICW 2026

    AI Is Now Fighting on Both Sides of the Cyber War, Singapore Warns

    Morocco cybersecurity strategy

    Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense

    European Police Chiefs Convention 2026

    Europe’s Police Chiefs Face Growing Threat of AI-Driven Crime

    AI service security

    Hackers Are Stealing AI Keys. The Cost Can Reach $600,000

    AI security risks

    Sam Altman at UN Security Council: 6 AI Security Risks the World Cannot Ignore

    AI-enabled cyber attacks

    AI Gives Hackers an Edge Defenders Still Can’t Match, NCSC Warns

    Fraudulent SIM cards

    India’s DoT Warns Citizens Over SIM Fraud and IMEI Tampering

    EU cybersecurity incidents

    EU Cybersecurity Response Hampered by Critical Information Gaps

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Infostealer Intelligence

    The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know

    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    Kerala Police Signs MoU With Cyble

    Kerala Police Signs MoU With Cyble to Use Threat Intelligence in Cybercrime Probes

    Gemini 4 Argon

    Gemini 4 Argon Restricted Over Cybersecurity Misuse Risks

    weekly roundup September 18 2026

    The Cyber Express Weekly Roundup: Hiscox’s SMB Warning, a Nintendo Switch Flaw, and a Record Deepfake Takedown

    threat intelligence

    Cyble, UAE Cyber Security Council Unite Against Rising Cyber Threats

    Ukraine cybersecurity

    Zelensky Appoints Ihor Klymenko to Lead Ukraine’s Cybersecurity Center

    UK cyberattack rate

    UK Small Firms Bear Brunt of Rising Cyberattacks, Hiscox Finds

    Cyber Yodha Campaign

    Cyble and DRONA Launch New Push to Close India’s Cybersecurity Gap

    UK Ukraine AI partnership

    Britain Gains Access to Ukraine’s ‘Goldmine’ of Battlefield AI Data

    Hims & Hers lawsuit

    FTC Sues Hims & Hers Over Health Data Privacy, Billing Practices

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    BAE Systems cyberattack

    BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court

    fake driving licence

    No Lessons, No Test, No Travel: Dubai Police Bust AED 10,000 Licence Scheme

    generative AI in research

    AI Can’t Judge Your Paper: EU Updates Guidelines on Peer Review and AI Agents

    ASD Essentials

    The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

    weekly cybersecurity roundup

    The Cyber Express Weekly Roundup: Hackers Turn Supermarket Freezers Into Ovens, UPI PIN Theft and More

    Infostealer Intelligence

    The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know

    GhostBat RAT

    Fake Traffic Challan Texts Are Stealing UPI PINs From Android Users in India

    Microsoft cybercrime crackdown

    Inside the Phishing Marketplace Microsoft Just Took Down: 2,300 Fake Templates Exposed

    Fake X Accounts

    X Removes 13,000 Fake Accounts Ahead of US Midterm Elections

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    ASD Essentials

    The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

    SICW 2026

    AI Is Now Fighting on Both Sides of the Cyber War, Singapore Warns

    Morocco cybersecurity strategy

    Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense

    European Police Chiefs Convention 2026

    Europe’s Police Chiefs Face Growing Threat of AI-Driven Crime

    AI service security

    Hackers Are Stealing AI Keys. The Cost Can Reach $600,000

    AI security risks

    Sam Altman at UN Security Council: 6 AI Security Risks the World Cannot Ignore

    AI-enabled cyber attacks

    AI Gives Hackers an Edge Defenders Still Can’t Match, NCSC Warns

    Fraudulent SIM cards

    India’s DoT Warns Citizens Over SIM Fraud and IMEI Tampering

    EU cybersecurity incidents

    EU Cybersecurity Response Hampered by Critical Information Gaps

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Infostealer Intelligence

    The 2026 Infostealer Intelligence Shortlist: Top 10 Vendors Security Teams Should Know

    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    Kerala Police Signs MoU With Cyble

    Kerala Police Signs MoU With Cyble to Use Threat Intelligence in Cybercrime Probes

    Gemini 4 Argon

    Gemini 4 Argon Restricted Over Cybersecurity Misuse Risks

    weekly roundup September 18 2026

    The Cyber Express Weekly Roundup: Hiscox’s SMB Warning, a Nintendo Switch Flaw, and a Record Deepfake Takedown

    threat intelligence

    Cyble, UAE Cyber Security Council Unite Against Rising Cyber Threats

    Ukraine cybersecurity

    Zelensky Appoints Ihor Klymenko to Lead Ukraine’s Cybersecurity Center

    UK cyberattack rate

    UK Small Firms Bear Brunt of Rising Cyberattacks, Hiscox Finds

    Cyber Yodha Campaign

    Cyble and DRONA Launch New Push to Close India’s Cybersecurity Gap

    UK Ukraine AI partnership

    Britain Gains Access to Ukraine’s ‘Goldmine’ of Battlefield AI Data

    Hims & Hers lawsuit

    FTC Sues Hims & Hers Over Health Data Privacy, Billing Practices

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Cyber News

How the NCA Cracked Billion-Dollar Money Laundering Rings Linked to Ransomware Gangs

Samiksha Jain by Samiksha Jain
December 5, 2024
in Cyber News
0
money laundering
696
SHARES
3.9k
VIEWS
Share on LinkedInShare on Twitter

The UK’s National Crime Agency (NCA) has disrupted two extensive Russian money laundering networks that operated across continents, aiding criminals worldwide, including notorious ransomware gangs.

Dubbed Operation Destabilise, this multi-agency investigation exposed the workings of the “Smart” and “TGR” networks—criminal enterprises that laundered billions of pounds while facilitating a range of illicit activities, including cybercrime, drug trafficking, and sanctions evasion.

A Coordinated Global Crackdown

The operation, unveiled today, is the culmination of a years-long international investigation led by the NCA and supported by partners such as the US Department of the Treasury’s Office of Foreign Assets Control (OFAC), the FBI, and authorities in the UAE, France, and Ireland. To date, it has resulted in 84 arrests, the seizure of over £20 million in cash and cryptocurrency, and the dismantling of a highly advanced criminal infrastructure spanning more than 30 countries.

“Operation Destabilise has exposed billion-dollar money laundering networks operating in ways previously unknown to law enforcement,” said an NCA spokesperson. “For the first time, we’ve been able to link Russian elites, crypto-rich cybercriminals, and UK drug gangs under one sprawling criminal web.”

Meet the Criminal Networks: Smart and TGR

The investigation centered on two key networks, Smart and TGR, which worked in tandem to provide a seamless money laundering service.

  • Smart, led by Ukrainian George Rossi, specialized in routing illicit funds through complex channels, often converting cash to cryptocurrency to obscure the origin of the money.
  • TGR, controlled by Russian Ekaterina Zhdanova, focused on managing courier networks and facilitating large-scale cash handovers. Zhdanova worked closely with her deputies Khadzi-Murat Magomedov and Nikita Krasnov, who coordinated couriers in the UK and beyond.

These networks offered a mutually beneficial service: they helped UK-based drug gangs launder cash, reinvesting it in illegal activities like drug and firearm trafficking, while simultaneously enabling Russian elites and cybercriminals to bypass international sanctions and invest in Western economies.

How the Scheme Worked

At the heart of Smart and TGR’s operations was a complex yet effective scheme:

  1. Cash Collection: Criminal gangs in one country would hand over large sums of illicit cash to couriers.
  2. Crypto Conversion: The equivalent value in cryptocurrency was transferred to the gangs, enabling them to reinvest in their illegal businesses without moving physical money across borders.
  3. Global Laundering: The cryptocurrency was then routed through exchanges, including some linked to sanctioned entities, making it virtually untraceable.

Investigators uncovered over 55 cash handover locations across the UK alone. One London-based courier, Fawad Saiedi, laundered £15 million before being sentenced to four years and four months in prison. Other couriers, such as Semen Kuksov and Andrii Dzektsa, facilitated transactions totaling over £12 million in just two months, operating not only in the UK but also across Europe.

Impacts on Cybercrime and Sanctions Evasion

The reach of Smart and TGR extended beyond physical crime. The networks laundered millions for ransomware gangs, including the Ryuk group, which extorted over £27 million from UK victims such as schools, hospitals, and businesses. Additionally, they helped Russian oligarchs bypass financial restrictions, threatening the integrity of Western economies.

In one case, TGR moved £2 million into the UK to purchase property for a Russian client, bypassing anti-money laundering checks. Another operation linked the networks to funds transferred out of Russia to support a sanctioned Russian media organization in the UK.

Cracking Down on Dirty Money

The combined efforts of the NCA and international partners have not gone unnoticed. The sanctions announced by OFAC today target six key figures in the networks, including George Rossi, Ekaterina Zhdanova, and Elena Chirkinyan, as well as four businesses associated with TGR. These measures aim to dismantle the networks’ financial infrastructure and disrupt their global operations.

The operation has also dealt a significant financial blow to the networks, which typically charged low commissions of around 3% for laundering services. With £20 million seized, they would need to process over £700 million in funds just to recover their losses.

A Message to Criminals

The success of Operation Destabilise sends a strong message: the UK is not a safe haven for money laundering. Increased law enforcement activity has already made it more difficult for Russian-speaking laundering networks to operate in London, with many now charging higher commission rates due to heightened risks.

Security Minister Dan Jarvis applauded the operation, stating: “Illicit finance inflicts immense harm around the world, and this major global operation marks a significant step against economic crime. The UK and its allies will continue to work together to crack down on illicit finance and the criminality it enables.”

A Call for Community Vigilance

The NCA emphasized the role of community intelligence and neighborhood policing in identifying and tackling criminal activities. “Money laundering deprives society of funds that pay for schools, hospitals, and social services,” an official noted. “Together, we can ensure crime doesn’t pay.”

By disrupting these networks, the NCA and its partners have struck a blow against not just money laundering but the broader ecosystem of violence, cybercrime, and corruption that it fuels.

Share this:

  • Share on LinkedIn (Opens in new window) LinkedIn
  • Share on Reddit (Opens in new window) Reddit
  • Share on X (Opens in new window) X
  • Share on Facebook (Opens in new window) Facebook
  • More
  • Email a link to a friend (Opens in new window) Email
  • Share on WhatsApp (Opens in new window) WhatsApp

Related

Tags: cryptocurrencyDubbed Operation DestabiliseNational Crime AgencyNCAransomware gangsRussian money launderingThe Cyber ExpressThe Cyber Express News
Previous Post

Voice Cloning, Fake Videos & More: AI Is Making Scams Unstoppable

Next Post

CISA Adds Three Critical Vulnerabilities to KEV Catalog: Immediate Action Urged

Next Post
Known Exploited Vulnerabilities

CISA Adds Three Critical Vulnerabilities to KEV Catalog: Immediate Action Urged

Q1 2026 Threat Reports

❮ ❯
Cyble-Vision


Follow Us On Google News

Latest Cyber News

BAE Systems cyberattack
Cyber News

BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court

October 19, 2026
fake driving licence
Cyber News

No Lessons, No Test, No Travel: Dubai Police Bust AED 10,000 Licence Scheme

October 19, 2026
generative AI in research
Cyber News

AI Can’t Judge Your Paper: EU Updates Guidelines on Peer Review and AI Agents

October 19, 2026
ASD Essentials
Cyber Essentials

The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

October 16, 2026

Categories

Web Stories

Do This on Telegram, Your Bank Account Will Become Zero
Do This on Telegram, Your Bank Account Will Become Zero
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
Cricket World Cup Ticketing Systems Under Cybersecurity
Cricket World Cup Ticketing Systems Under Cybersecurity
Cyber Threats and Online Ticket Scams During the NBA Finals
Cyber Threats and Online Ticket Scams During the NBA Finals
Biometric Data Security: Protecting Sensitive Information
Biometric Data Security: Protecting Sensitive Information

About

The Cyber Express

#1 Trending Cybersecurity News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

 

Contact

For editorial queries: [email protected]

For marketing and Sales: [email protected]

 

Quick Links

  • About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
10080 North Wolfe Road, Suite SW3-200, Cupertino, CA, US 95014

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

  • Privacy Statement
  • Terms of Use
  • Write For Us

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

No Result
View All Result
  • Magazine
  • Firewall Daily
  • Essentials
    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?
-
00:00
00:00

Queue

Update Required Flash plugin
-
00:00
00:00
Do This on Telegram, Your Bank Account Will Become Zero If You Install the iOS 18 Beta, Your iPhone Could Be Hacked Cricket World Cup Ticketing Systems Under Cybersecurity Cyber Threats and Online Ticket Scams During the NBA Finals Biometric Data Security: Protecting Sensitive Information