Back
Automatically translated version. May contain inaccuracies compared to the original.
🔐🧡🧡🧡🧡🧡🧡
How millions of USDT from the sanctioned 1xBet are “laundered”
The Cyber Police and investigators from Kyiv are investigating a case concerning illegal schemes of the online casino 1xBet (owners from the Russian Federation – Roman Semiohin, Serhiy Karshkov, and Dmytro Kazorin).
Money from illegal and sanctioned online casinos goes to accounts on crypto exchanges verified with Ukrainian documents, then almost immediately moves on — to other exchanges or to external wallets. The turnover is millions of dollars.
At least two people are mentioned in the materials. The investigators identify both as the owners of the exchange accounts through which the flow from gambling platforms without a KRAIL license — and from 1xBet, which the NSDC sanctioned back in March 2023 — passed.
The first circuit — Byshiv, Kyiv region. Two large accounts.
On Binance from the end of May 2022 to the end of July 2026 — 4 671 top-up and withdrawal operations. Turnover 5,55 million USDT: in 2,94 million, out 2,61 million.
On Bybit from April 2024 to the beginning of August 2026 — another 1 633 operations, turnover 3,62 million dollars. Altogether across the two exchanges investigators count about 9,17 million dollars.
The balance on Bybit on 6 August 2026 — about 48 thousand dollars with turnover over 3,6 million. The money doesn’t sit still. They move it further.
Chainalysis, according to investigators, linked almost 702 thousand USDT to the deposit addresses of this circuit from clusters of illegal casinos: BC.Game — 427 thousand, CloudBet — 146,5 thousand, Shuffle — almost 72 thousand. Plus a separate piece already from Bybit. In total 144 transactions. Not a one-off “player mistake” — a regular channel.
Between Binance and Bybit the money hopped back and forth to deposit addresses of the same user. The investigators call this exchange hopping: breaking the analytical chain by moving an asset from one exchange to another.
The third exchange in the same circuit — BingX, since December 2024. Over 20 months 690 operations, turnover 2,21 million USDT. 82% of funds were withdrawn within a day after receipt. Of 849 thousand USDT that went to one of the deposit addresses, 514 thousand — 60,6% — Chainalysis attributed to the 1xBet cluster. 251 transactions. The main exit then was an external wallet on the Tron network: 705 thousand USDT, over 63% of all withdrawals from the account. The gas fee from that address, according to investigators, was paid by the same user.
The second circuit — Vesely Kut, Odesa region. Bitget
Over three months, from 15 May to 12 August 2026, 815 operations, turnover 2,6 million USDT. In 1,31 million, out 1,29 million. The difference — 1%. Crypto buy-sell, card operations, P2P between exchange clients — zero.
On 12 deposit addresses of this account from January 2025 to February 2026 Chainalysis counted 1,22 million dollars from the 1xBet cluster. 579 transactions. The same addresses continued operating in the summer of 2026: in the period the exchange provided, they received another 981 thousand USDT — almost 75% of all inflows to the account.
Of 110 recipient addresses three withdrew 956 thousand USDT — 74,3% of all outflows. The main external wallet on the Ethereum network received 370 thousand. Its total turnover — 804 thousand USDT, almost all of which came from Bitget. A reverse test transfer of 10 USDT, in four minutes — 50 thousand. The other way: 100 USDT, in eight minutes — 100 thousand. Investigators read this as the behavior of a person checking their own address before a large transfer.
This is about “laundering” funds: hiding the source, mixing the flow, getting out from under financial monitoring. Illegal casinos in Ukraine are prohibited by the law on gambling. 1xBet is separately under NSDC sanctions. Transactions with a sanctioned entity under the anti-money-laundering law should be blocked, not routed through four exchanges.
💬 ABleaks_bot
💕 Join
Telegram publication
