Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
E-Note
OrganisationRU

E-Note

Cryptocurrency exchange seized by FBI and BKA for laundering $70m+ in ransomware proceeds since 2017.

Last refreshed: 29 May 2026 · Appears in 1 active topic

Key Question

How did a ransomware money-laundering exchange run for nine years before the FBI seized it?

Timeline for E-Note

#521 May
#228 Apr
#223 Apr
#11 Mar

FBI seizes E-Note, $70m ransomware rail

Cybersecurity: Threats and Defences
View full timeline →
Common Questions
What is E-Note cryptocurrency exchange?
E-Note was a Cryptocurrency exchange that laundered over $70 million in ransomware proceeds from 2017. The FBI, Michigan State Police, German BKA and Finnish NBI seized it in 2026; Russian national Mykhailo Petrovich Chudnovets was charged with running it.Source: FBI / DOJ
What was E-Note and why was it seized?
E-Note was a Cryptocurrency exchange that operated since 2017 as a laundering service for ransomware and account-takeover proceeds. It was seized in 2026 by the FBI, German BKA, Michigan State Police, and Finnish NBI after laundering over $70 million.Source: cyber-threats-and-defences
Who was charged in connection with E-Note?
Russian national Mykhalio Petrovich Chudnovets was charged with conspiracy to launder ransomware and account-takeover proceeds through E-Note since 2017.Source: cyber-threats-and-defences
How did E-Note help ransomware gangs launder money?
E-Note operated with minimal KYC checks, allowing ransomware operators to convert Cryptocurrency proceeds into fiat or other digital assets while obscuring the transaction trail.Source: cyber-threats-and-defences
How did law enforcement agencies from different countries coordinate the E-Note seizure?
The FBI led the operation with the German BKA, Michigan State Police, and Finnish NBI executing simultaneous domestic warrants — the same multi-jurisdiction model used against BTC-e and Hydra.Source: cyber-threats-and-defences
What happens to ransomware groups after their laundering exchange is seized?
Criminal groups typically migrate to alternative exchanges, but the operational disruption and intelligence exposure from a seizure have a lasting impact on their money-movement infrastructure.Source: cyber-threats-and-defences

Background

E-Note was a Cryptocurrency exchange and payment processor seized by the FBI, Michigan State Police, German Federal Criminal Police (BKA) and Finnish National Bureau of Investigation as a laundering infrastructure for more than $70 million in ransomware and account-takeover proceeds. Russian national Mykhalio Petrovich Chudnovets was charged with conspiracy to launder proceeds through the exchange since 2017.

E-Note operated as a conversion service for ransomware groups, enabling proceeds to move from Cryptocurrency into fiat or other digital assets while obscuring the trail. Its operational model — minimal KYC requirements and ready accessibility — made it an attractive laundering rail for ransomware operators seeking to monetise quickly. The nine-year operational window before seizure illustrates both the patience required for multi-jurisdiction investigations and the difficulty of seizing infrastructure with international hosting. The exchange's removal closes a durable exit route that criminal groups had relied on across multiple ransomware campaigns.

For the ransomware ecosystem, E-Note's seizure removes a major laundering rail and produces intelligence exposure that outlasts the infrastructure itself. For law enforcement, the multi-jurisdiction model (FBI-led, EU partners executing domestic warrants simultaneously) is the same operational template applied to BTC-e, Hydra, and subsequent enforcement actions. The Chudnovets indictment follows the pattern of naming the exchange operator as the choke point rather than pursuing individual ransomware affiliates.

Source Material