Texan Authorities Seize $2.8M in Crypto from Alleged Ransomware Operator

Texas authorities have charged an alleged ransomware operator and seized more than $2.8 million in cryptocurrency from his digital wallets.

The seizure was part of six federal warrants unsealed Wednesday across courts in Virginia, California and Texas. Authorities also confiscated $70,000 in cash and a luxury vehicle.

The controller of the wallet, Ianis Aleksandrovich Antropenko, faces charges of conspiring to commit computer fraud and abuse, computer fraud and abuse, and conspiracy to commit money laundering.

Prosecutors say that Antropenko deployed Zeppelin ransomware to attack individuals, businesses and organizations worldwide, encrypting and stealing their data before demanding payment to decrypt, withhold or delete it.

Cybercrime and crypto

The case highlights law enforcement’s increasing focus on dismantling ransomware operations and clawing back illicit profits, which has also seen raids to seize domains and infrastructure related to cybercrime group Royal and vendors of LummaC2.

Cybercrime losses in the U.S. hit $16.6 billion in 2024, according to the FBI’s Internet Crime Complaint Center. The FBI reported that nearly 150,000 complaints in 2024 involved digital assets, with $9.3 billion in related losses, a 66% jump from the previous year.

Prosecutors allege the funds from the latest seizure were proceeds from ransomware activity laundered through services like ChipMixer, a crypto mixing platform shut down in a 2023 international operation, and by structured cash deposits.

The Justice Department’s Computer Crime and Intellectual Property Section (CCIPS) said it had secured over 180 cybercrime convictions and recovered $350 million for victims to date.

Officials say their work has disrupted ransomware groups and prevented more than $200 million in potential ransom payments.