iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
U.S. prosecutors alleged that QQAAZZ operated a cross-border money-laundering service for high-level cybercriminals, including criminals who needed recipient accounts for electronic transfers stolen from victims’ bank accounts. The October 2020 announcement concerned a newly unsealed indictment against 14 people; earlier charges and an arrest brought the reported total to 20 individuals. An indictment is an accusation, not a finding of guilt.
What prosecutors alleged QQAAZZ did
The U.S. Department of Justice (DOJ) said QQAAZZ provided “money laundering services” to cybercriminals. According to the indictment, criminals with unauthorized access to victims’ bank accounts sought accounts that could receive electronic transfers. QQAAZZ allegedly supplied and managed those receiving channels, then moved the proceeds to make their origin harder to trace.
The assigned description refers to banking-trojan operators, but the DOJ passages summarized in the official releases describe QQAAZZ’s customers more broadly as cybercriminals. Those releases do not, by themselves, establish a link to a particular malware family or named banking-trojan operation.
Recommended Free Tools
How the alleged laundering process worked
Recruiting and controlling accounts
Prosecutors alleged that QQAAZZ members used Polish and Bulgarian identity documents, including fraudulent documents, to register shell companies and open corporate bank accounts. The network also allegedly maintained personal accounts. These accounts could receive transfers made with money stolen from victims.
#1 Best Overall
Moving and cashing out funds
The indictment says money was transferred among accounts controlled by QQAAZZ, withdrawn, or sometimes converted into cryptocurrency through tumbling services. The alleged purpose was to add layers between the original victim and the people ultimately controlling the proceeds.
Charging a percentage of the proceeds
The indictment described the usual alleged QQAAZZ fee as 40 to 50 percent of the stolen amount handled. That percentage is an allegation in charging material, not an independently audited fee schedule.
Reinvesting money
Europol’s operation infographic presents a layered model involving money mules, shell companies, and accounts in several countries. It says laundered money was reinvested in legitimate businesses in multiple European countries. The infographic is a visual summary of the operation; the specific account and fee allegations come from the U.S. indictment and DOJ releases.
What the 2020 international operation involved
On October 15, 2020, DOJ announced the unsealing of an indictment in the Western District of Pennsylvania charging 14 QQAAZZ members. DOJ also described a related indictment charging five members in October 2019 and the March 2020 arrest of one additional alleged conspirator. Together, the releases reported 20 individuals charged at that point.
Rank #3
| Reported item | What the official record says | Qualification |
|---|---|---|
| Amount allegedly laundered or attempted | Tens of millions of dollars since 2016 | DOJ allegation, not a judicial finding or independent audit |
| Newly unsealed October 2020 indictment | 14 people | Not a statement that all 20 people were charged in that indictment |
| Historical total reported by DOJ | 20 individuals | Combines earlier charges and the earlier arrest described in DOJ releases |
| Typical alleged fee | 40 to 50 percent | Description in the indictment |
| House searches | More than 40 | Reported across Latvia, Bulgaria, the United Kingdom, Spain and Italy |
Countries and agencies involved
DOJ reported more than 40 house searches in Latvia, Bulgaria, the United Kingdom, Spain and Italy. Prosecutions were initiated in the United States, Portugal, Spain and the United Kingdom. Authorities also seized an extensive bitcoin-mining operation associated with the group in Bulgaria.
The operation illustrates why investigators treated the alleged scheme as an international network rather than a single-country banking case. Accounts, shell companies, people moving funds and physical evidence could all be located in different jurisdictions.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.“Our message to money laundering organizations like QQAAZZ is simple: international borders will not stop the dedicated efforts of law enforcement across the globe to bring you to justice.”
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.Brian C. Rabbitt, Acting Assistant Attorney General, DOJ Criminal Division, October 15, 2020
Best Value
What later DOJ updates establish
In an update dated August 6, 2021, DOJ said Arturs Zaharevics and Aleksejs Trofimovics had pleaded guilty to money-laundering conspiracy. The same update repeated that 20 individuals had been charged as part of the scheme.
That update does not provide a complete disposition list for every defendant. On the official record summarized here, the supported later outcome is the two guilty pleas; it is not a basis for saying that every person charged was convicted, sentenced or otherwise resolved.
How to read the legal claims accurately
- “Charged” is not “convicted.” The October 2020 indictment stated prosecutors’ allegations, and DOJ emphasized that defendants are presumed innocent unless and until proven guilty.
- The 14 and 20 figures refer to different scopes. Fourteen people were named in the newly unsealed October 2020 indictment; the 20-person figure included earlier charges and an earlier arrest reported by DOJ.
- The money flow, amount and fee remain allegations unless established in a judgment. Attribute those details to prosecutors or the indictment.
- The two pleas are dated information. DOJ’s August 6, 2021 update supports those pleas but does not establish the final status of every defendant.
What remains unresolved in the reviewed record
The official materials summarized for this article do not provide a consolidated, current docket showing the final disposition of all 20 people. A present-day status for each defendant would require checking the relevant court records directly. Until that is done, the defensible account is limited to the charges announced by DOJ and the two guilty pleas reported in 2021.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
