BTC-e: The Exchange That Laundered $4 Billion

On 25 July 2017, Greek police walked up to a Russian tourist on holiday with his family near Thessaloniki and arrested him. The man was Alexander Vinnik. The same day, American agents seized a rack of servers in a New Jersey hosting facility. Those servers ran BTC-e, one of the oldest and busiest Bitcoin exchanges in the world, and within a day the site was offline.

An exchange is the crypto version of a broker: customers deposit money, buy and sell coins, and withdraw. BTC-e did all of that from 2011 to 2017, and according to the US Justice Department it processed more than $9 billion worth of transactions for over one million users. What made it different was what it did not do. Opening an account needed only a username, a password and an email address. There were no "know your customer" checks, the identity documents a bank asks for before it opens an account. For anyone with money they could not explain, that was the whole attraction.

The Money

When the US unsealed its 21-count indictment the day after the arrest, prosecutors alleged that BTC-e had laundered more than $4 billion in criminal proceeds. In the government's account the exchange took in money from computer hacks, ransomware (malware that locks a victim's files until a ransom is paid in crypto), identity theft, corrupt officials and darknet drug markets, which are online shops for illegal goods.

The government's later civil complaint put numbers on some of it. BTC-e received at least $68.3 million from darknet markets, $14 million from fraud shops, $10.3 million from ransomware gangs and $20 million from mixers, services that blend many people's coins together so the trail goes cold, like a launderette for money rather than clothes. The ransomware gang behind CryptoWall, one of the most notorious early strains, laundered hundreds of thousands of dollars of ransom payments there.

Outside researchers found the same pattern. In a study presented at the Black Hat security conference in Las Vegas on 26 July 2017, the day after the arrest, researchers from Google, Chainalysis, UC San Diego and New York University tracked about $25 million in ransomware payments and found that more than 95% of the bitcoin they followed had been cashed out through BTC-e.

The Mt. Gox Connection

The most famous money to pass through BTC-e came from Mt. Gox, the Tokyo exchange that collapsed in 2014 after losing hundreds of thousands of bitcoin to thieves. US prosecutors say about 300,000 of the stolen bitcoin were sent to three accounts at BTC-e, where they could be swapped and withdrawn.

In June 2023 the Justice Department unsealed charges against two more Russian nationals, Alexey Bilyuchenko and Aleksandr Verner. Prosecutors allege the pair took control of a Mt. Gox server in Japan, drained about 647,000 bitcoin between 2011 and 2014, and laundered the bulk through exchanges they controlled. Bilyuchenko was also charged with helping Vinnik run BTC-e. Both men are presumed innocent and neither has faced trial in the United States.

The seizure itself was messier than it looked. BTC-e's security set-up slowed agents down in finding the private keys, the secret passwords that control crypto wallets. According to the government, operators still at large used backup copies of the wallets to move out most of the funds. On 29 July 2017, four days after the raid, about 485,705 ether, worth just under $91 million at the time, left a BTC-e wallet. Agents managed to seize roughly 926 bitcoin plus smaller amounts of six other coins.

Three Countries, One Prisoner

Vinnik became the subject of a tug of war. The United States, Russia and France all asked Greece to extradite him. Greece sent him to France first. On 7 December 2020 a Paris court convicted him of money laundering, sentenced him to five years in prison and fined him 100,000 euros. It acquitted him of extortion linked to the Locky ransomware, which French prosecutors had accused him of helping to run. His lawyer argued that crypto was not legally "money" at all.

On 4 August 2022 he was flown from Greece to the United States. On 3 May 2024, in federal court in San Francisco, Vinnik pleaded guilty to conspiracy to commit money laundering. In the plea he admitted that BTC-e was one of the primary ways cybercriminals around the world transferred, laundered and stored their proceeds, and he accepted responsibility for enabling the laundering of at least $121 million. He faced up to 20 years in prison. Separately, the Treasury's anti-money laundering unit, FinCEN, had in 2017 hit BTC-e with a civil penalty of about $110 million and Vinnik personally with $12 million.

He was never sentenced. Marc Fogel, a history teacher from Pennsylvania, had been held in Russia since 2021 after airport officials found a small amount of medical cannabis in his luggage, and was serving 14 years. Russia released Fogel on 11 February 2025. The same day the US criminal case against Vinnik was dismissed, and the White House confirmed he was the Russian going home in return. Press secretary Karoline Leavitt called him "a nonviolent crypto criminal" and said he had forfeited more than $100 million as part of the exchange. Vinnik landed in Moscow on 13 February and told the RIA Novosti news agency he was already home with his family.

The Customers Left Behind

For ordinary BTC-e users, honest or not, the money simply stopped in July 2017. On 30 June 2025 the Justice Department filed a civil forfeiture case in federal court in Washington, a lawsuit against the property itself rather than a person. It claims all the crypto in BTC-e's wallets on the day of the seizure, plus about $89.7 million and other currency held for Canton Business Corporation, the shell company prosecutors say managed the exchange, at the broker FXOpen. The government told the court that the dismissal of Vinnik's case "was not a result of any evidentiary infirmity".

Former users began filing claims, and the docket has run to hundreds of entries. On 13 August 2026 Judge Carl Nichols allowed a second round of notice, by email to about 300,000 addresses linked to accounts that still had a balance when the servers were seized, and accepted a batch of late claims. Nine years after the raid, nobody who left money on BTC-e has been paid back.