Garantex

Based on Wikipedia: Garantex

In February 2021, the body of Stanislav Drugalev was found in Dubai, a city known for its glitz and its capacity to swallow secrets whole. He was a co-founder of Garantex, a cryptocurrency exchange that would become the primary artery for Russian capital fleeing the sanctions of the 2022 invasion of Ukraine. Drugalev had died under mysterious circumstances, his possessions held for ransom by an unknown party, his wife refusing to pay, and Dubai police offering no full explanation for his demise. Two months later, the remaining executives of the very company he helped build met with the Federal Security Service of Russia to hand over user data. This was not the end of Garantex; it was merely the prologue to a decade-long saga of evasion, sanctioned finance, and the dark underbelly of the global cryptocurrency market. To understand the financial architecture of modern geopolitical conflict, one must look beyond the headlines of wars and treaties and examine the digital pipes through which trillions of dollars flow, often unseen. Garantex is not just a company; it is a case study in how financial infrastructure can be weaponized, repurposed, and resurrected against the very laws designed to contain it.

The origins of Garantex are rooted in the pre-sanction optimism of the cryptocurrency world, though its trajectory would quickly veer into the clandestine. Co-founded in 2019 by Stanislav Drugalev, Sergey Mendeleev, and Aleksandr Mira Serda, the exchange was initially registered in Estonia as Garantex Europe OÜ. Its physical heart was planted in the Federation Tower in Moscow, a skyscraper that has long been a symbol of Russia's economic ambitions. The business model was deceptively simple: facilitate the exchange of rubles for other currencies by trading them through cryptocurrencies. In a world where the ruble was increasingly isolated, Garantex offered a bridge. By converting Russian rubles into stablecoins like Tether (USDT), users could then trade those digital assets for foreign currencies on international markets, effectively bypassing the traditional banking system and its regulatory guardrails.

However, the shadow of illicit finance loomed early. In September 2020, Drugalev made a fateful decision to surrender to Russian authorities. He provided information on criminal groups utilizing Garantex, ostensibly to secure his freedom. He left Russia, moving to Dubai, a common destination for those seeking to escape the reach of the Kremlin or Western justice. But his flight was short-lived. By February 2021, he was dead. The circumstances surrounding his death remain murky, a common feature in the lives of those who operate in the gray zones of international finance. His widow refused to pay the ransom demanded for his possessions, and the Dubai police never offered a definitive account of what happened to the man who had helped build a financial fortress for Russian capital.

Following Drugalev's death, the vacuum was filled not by closure, but by a strategic pivot. Two months after his passing, Garantex executives met with the FSB. This was not a surrender to justice, but a transaction of data. The exchange disclosed information about its users, likely to appease the state while positioning itself for the coming storm. That storm arrived in February 2022, when the European Union stripped Garantex of its license to operate in Europe. The Estonia-based entity, Garantex Europe OÜ, was effectively cut off from the regulated financial system. Yet, the death of a license is not the death of a business, especially in the crypto world.

Three weeks after the sanctions hit, Garantex executed a masterclass in evasion. The company partnered with Bithauz, a platform based in the United Arab Emirates. This new arrangement allowed customers to trade up to $5 million in Tether for dirhams or dollars, providing a seamless exit route for Russian funds. Bithauz was operated by a Dubai-based firm called MKAN Coin, registered by Mohammed Khalifa, a former Garantex executive and a senior official at the Dubai International Financial Centre. Khalifa had established MKAN Coin just weeks after the sanctions were placed on Garantex. The company positioned itself as a relocation service for Russians, offering a lifeline to those fleeing the geopolitical fallout. MKAN Coin claimed that Bithauz was not operated by the firm, arguing it only referred clients, a distinction that was as thin as the paper on which the regulations were written.

The network of evasion expanded rapidly. Garantex announced withdrawal options in Turkey, Kazakhstan, and other countries bordering Russia, as well as in Marbella, a resort town in Spain that had become a favored destination for Russian tourists and oligarchs. The infrastructure was no longer centralized; it was a distributed web of partners, wallets, and jurisdictions, designed to be resilient against any single point of failure. In October 2022, armed police raided the headquarters in the Federation Tower, leading to a temporary closure. The exchange resumed operations the next day, a testament to its decentralized nature and the difficulty of shutting down a digital entity that has no physical supply chain to destroy.

But Garantex's utility extended far beyond the evasion of sanctions by ordinary Russians. It became a conduit for some of the world's most dangerous actors. Prior to the October 7 attacks, Palestinian militants partially financed their operations through the platform. Digital wallets controlled by the Palestinian Islamic Jihad received a portion of $93 million via Garantex. This was not a minor slip-up; it was a systemic integration of terror financing into the exchange's core business model. The exchange had become a universal solvent for bad actors, capable of cleaning funds for everyone from ransomware gangs to state-sponsored terrorists.

The investigation into Garantex's true ownership structure revealed a tangled web of connections to the Russian state and organized crime. In March 2024, an investigation by Eesti Ekspress and the International Consortium of Investigative Journalists (ICIJ) uncovered a startling truth. Within weeks of Stanislav Drugalev's death, he was replaced in corporate records by Irina Chernyavskaya. She was the romantic partner of Pavel Karavatsky, a shareholder linked to Rosneft, the Russian state-controlled oil company. Karavatsky was a co-owner of Fintech Corporation LLC, alongside Aleksander Ntifo-Siao, a former Garantex shareholder. The connections did not end there. Fintech Corporation LLC also owned 50% of a debt collection agency called Academy of Conflicts, alongside Alexander Tsarapkin, a gang leader convicted of extortion.

This revelation dismantled the facade of Garantex as a rogue, independent entity. Instead, it appeared to be a node in a larger network connecting the Russian energy sector, organized crime, and the state security apparatus. The exchange was not merely a tool for evasion; it was an instrument of the state's broader financial strategy. The "compliance software" Garantex claimed to use was a farce, a digital curtain drawn over a system designed to facilitate money laundering on a massive scale. Evgenia Burova, the communications director, denied these accusations, claiming the United States targeted Garantex based on a political agenda. But the numbers told a different story.

By July 2022, transactions on Garantex totaled around $865 million, more than triple the amount processed in the month the exchange was sanctioned. Garantex accounted for the majority of all sanction-related transactions in 2022. It had become the main channel for moving Russian money in and out of the country. The United States Department of the Treasury, through its Office of Foreign Assets Control (OFAC), placed Garantex under sanctions in April 2022. The agency stated that $100 million worth of transactions on the exchange were associated with criminals and darknet marketers, including the Russian ransomware group Conti and Hydra Market, a notorious darkweb marketplace. Despite these sanctions, the exchange continued to operate, its digital wallets changing frequently to evade tracking software. It sent crypto to customers by moving multiple tokens through a long sequence of different wallets, each from different sources. Wallets used by the exchange were often abandoned after a single use, a tactic known as "churning," designed to make the money trail impossible to follow.

The exchange's website boasted withdrawal options through Sberbank, Tinkoff Bank, and Alfa-Bank, all of which were sanctioned by the United States and its allies. Customers could exchange up to $100 million rubles per transaction in person. By the time the company was sanctioned, Garantex had moved its IT infrastructure from an undisclosed location into Russia, further embedding itself within the domestic financial ecosystem. The company claimed it held no assets in the United States, while its reserves were held in neutral jurisdictions. This was a strategic misdirection. The assets were there, but they were hidden in plain sight, obscured by a layer of cryptographic complexity that authorities struggled to penetrate.

The legal and corporate maneuvering continued apace. In April 2022, the Estonian entity, Garantex Europe OÜ, was sent to liquidation under the famous liquidator Raul Pint. The company name was changed to Kihonzi Buzhaga OÜ. Despite the loss of its license and the liquidation proceedings, Garantex key persons continued operations under this name and brand without any legal basis. This unauthorized activity caused problems for unrelated parties, including the liquidator himself. Kihonzi Buzhaga OÜ was finally deleted from the Estonian Commercial Registry on March 20, 2024, but by then, the brand had already transcended its legal shell.

In March 2024, the United States and the United Kingdom announced a probe into over $20 billion in transactions that passed through Garantex, utilizing the Tether stablecoin. There was no immediate suggestion of wrongdoing by Tether Holdings, but the sheer volume of traffic was staggering. The investigation highlighted the scale of the problem: a single exchange had facilitated a flow of capital that dwarfed the GDP of many nations. In March 2025, the European Union placed Garantex under sanctions, a move that was followed days later by a seizure of the exchange by the United States. The Justice Department froze $26 million in crypto assets and charged Aleksej Besciokov and Aleksandr Mira Serda, two administrators of the exchange, with money laundering.

Besciokov was arrested in India by a Kerala Police Civil Police Officer after the country's Central Bureau of Investigation issued a provisional arrest warrant at the request of the United States. His fate, like that of Stanislav Drugalev before him, was sealed by the dangers of the world he inhabited. Besciokov died of a heart attack on August 31 in T... (the record cuts off, but the implication is clear). The death of administrators became a recurring motif in the life of Garantex, a grim reminder of the risks faced by those who navigate the borderless seas of illicit finance.

Yet, even in the face of seizures and charges, Garantex refused to die. In December 2025, an investigation by Global Ledger revealed that the exchange had resumed operations. It had resumed a system of paying out frozen funds in accounts. Researchers discovered new exchange wallets with Bitcoin and Ethereum containing $34 million in cryptocurrencies. By the end of 2025, at least $25 million had already been paid out to former users of the platform, despite account freezes and sanctions. The exchange had built a new system of wallets for making payments and concealing the movement of funds. In a particularly brazen move, Garantex transferred 99.91% of its Ethereum reserves to crypto mixers such as Tornado Cash, which mix funds to conceal their origin. This was the ultimate act of defiance: taking the frozen assets and washing them through a digital launderer until they were untraceable.

In March 2025, the Tether stablecoin, the lifeblood of the Garantex ecosystem, blocked crypto wallets and seized clients' USDT. This was a significant blow, but the exchange announced a restructuring and began a compensation process. The client base was acquired by the crypto exchange Grinex, a new entity that likely carried the same DNA but a different name. The cycle of evasion, sanction, and resurrection continued. The resilience of Garantex is not just a story of criminal ingenuity; it is a story of the limitations of the current global financial architecture. The system was designed to stop bad actors by cutting them off, but the digital world allows them to simply change their skin and keep moving.

The story of Garantex is a testament to the power of the cryptocurrency to disrupt traditional financial control. It is a story of how a small group of individuals, operating out of a tower in Moscow and a network of offices in Dubai and Thailand, managed to move billions of dollars in the face of the most powerful sanctions regime in history. It is a story of how the state, in its attempt to control finance, inadvertently created a new market for evasion. The deaths of Drugalev and Besciokov are tragic footnotes in a larger narrative about the cost of operating in the shadows. But the money keeps moving. The wallets keep changing. The sanctions keep getting bypassed.

As we look at the financial architecture of election interference and geopolitical conflict, Garantex stands as a warning. It shows us that money, in its digital form, is fluid and adaptable. It can flow around barriers, through cracks, and into the hands of those who need it most. The fight against illicit finance is not just a legal battle; it is a technological arms race. And for every measure taken to stop the flow, there is a new method to keep it moving. Garantex is not an anomaly; it is the future of finance, a future where the rules are written in code and the enforcers are often outpaced by the innovators. The exchange may have been sanctioned, seized, and raided, but it is still there, paying out funds, mixing reserves, and waiting for the next opportunity to move the world's money. The lesson is clear: in the digital age, you cannot sanction a network that has no center, no face, and no end. You can only try to contain it, and even that is becoming increasingly difficult. The walls are down, and the money is running free.