If Part 1 of Coin Laundry was about the exchanges, Part 2 is about the bit they’d rather not talk about: the places where crypto turns back into envelopes of cash, diamonds, gold bars and yacht rentals, often without anyone asking who you are.
From Kyiv basements to Dubai marinas, a parallel banking layer has sprung up around crypto. It is technically “off-ramp infrastructure.” In practice, it’s a money-moving system that treats anti-money-laundering rules as a polite suggestion.
At the centre of this part of the story is one man who has made it his personal crusade to map that system: Richard Sanders.
The man with a hidden camera and 11,000 wallet labels
Sanders is not your typical compliance officer. He’s a former US Army intelligence specialist who ended up volunteering with Ukraine’s national police, helping them trace crypto used to pay Russian operatives.
He travels with:
- a hidden camera disguised as a car key;
- kit to sweep his hotel room for bugs;
- tourniquets in case the air-raid sirens mean what they sound like;
- and, crucially, phones loaded with crypto – usually stablecoins like USDT.
His method is brutally simple:
- Find crypto-to-cash desks in cities like Kyiv, Lviv, Dubai, Hong Kong, Toronto, Istanbul.
- Do live trades – send them crypto, receive physical cash, gold or other valuables.
- Capture the wallet addresses they use for those trades.
- Label those addresses in blockchain analytics tools so law enforcement can see who (or what) is sitting on the other side of an “unknown” wallet.
By his own (and others’) account, Sanders has already tagged thousands of such addresses, feeding data back into the same analytics systems he spends half his time loudly criticising. It’s a strangely modern job description: part on-chain Sherlock, part walking whistleblower.
His view, boiled down: if you can move unlimited value through anonymous wallets and unregulated cash desks, you have effectively built an unlimited crime rail.
How a crypto-to-cash desk actually works
If you’re picturing a mahogany-panelled Swiss private bank, adjust your expectations sharply downwards.
In Ukraine, many of these “desks” look like:
- a back room off a deli;
- a corner of a small casino;
- or a blunt little office with a counting machine, rubber bands and an old calculator.
The pattern repeats:
- You contact a Telegram handle.
- You’re given a rate and a time.
- You arrive, sometimes via buzzer doors and unmarked corridors.
- You scan a QR code, send Tether or another liquid token.
- A machine whirrs; a stack of notes appears. No ID, no selfies, no paperwork.
At one Kyiv cash desk, the only thing Sanders’ colleague was asked to write down was a Telegram username, explicitly not a legal identity. The rest of the process could have passed for changing £50 at a bureau de change, except the ticket size was closer to $1,200 and there was no recorded fee.
When Sanders later pulled the desk’s address into an analytics tool, he found:
- flows in the millions over just a few months;
- average transaction sizes around $15,000 – roughly double the average annual salary in Ukraine;
- and links to at least one Russian-linked service already on Western sanctions lists.
On paper you have an innocuous shopfront; on-chain you have a large, hyper-opaque value pipe moving money far in excess of anything its surroundings would suggest. This is the gap Sanders is trying (and increasingly failing) to close.
When the bank comes to you: courier cash drops
If the Kyiv model is “come to us”, the next evolution is “we’ll come to you”.
ICIJ’s reporting (and those of its partners) highlights Telegram-based courier services operating in cities like:
- New York, Miami, Washington DC
- Montreal, Toronto
- London and other European hubs
The sell is brazenly simple:
Send us USDT. A courier drives to you. You get in the car, count the cash, walk away.
In some cases, the customer is even paid extra for taking physical notes instead of leaving value in crypto – a classic tell that the organisation behind the service is sitting on more hard cash than the formal banking system will comfortably absorb.
One operation, 001k.exchange, has allegedly:
- moved tens of billions in crypto since 2022;
- offered courier cash-outs in countries where it has no money-transmission licence;
- and routed very large flows back into the big exchanges, including Binance, OKX, Kraken and regional platforms.
The identity check? In one undercover test, the “KYC” consisted of photographing the serial number of a low-denomination banknote, then presenting that same note at the hand-off. No name, no passport, no customer file, just a serial number and a Telegram chat.
Dubai: crypto to cash, gold, yachts
If Ukraine is the rough-and-ready end of the trade, Dubai is the manicured version.
Sanders’ Dubai run (as relayed in the Coin Laundry reporting) reads like a guided tour of off-ramp maximalism:
- Gold souks where you can buy 100g bars with Tether.
- Jewellery shops selling loose diamonds, happy to accept USDT as “the safest way to pay… it’s like hidden money.”
- OTC cash desks tucked away in high-rise offices, art galleries and co-working spaces.
- Yacht charters, helicopter companies and luxury car rentals that all take stablecoin payments with a straight face.
One desk in a tower block, sitting behind a drawer stuffed with tidy stacks of bills, reportedly told Sanders they change their wallet every 10–15 days.
Official reason: they’ve seen too many “fishy coins” and don’t want customers’ exchange accounts frozen because funds previously passed through a dirty address.
Unofficial consequence: anyone trying to build a long-term picture of those flows has their work rendered obsolete in a fortnight. The desk simply spawns a fresh wallet, and whatever taint the previous one had acquired evaporates from view.
A Russia-linked chain of cash desks in the city was allegedly rotating wallets so aggressively that, in Sanders’ words, it would require daily in-person transactions just to keep its attribution up to date. One can hear the collective groan of compliance teams from here.
When the map is drawn by vendors – or not at all
None of this would matter quite as much if governments and regulators had robust, independent ways to map crypto flows. Largely, they don’t.
- Law-enforcement agencies typically license tools from private analytics firms rather than building their own.
- Those tools are only as good as the labelling behind them, the metadata tying a wallet address to a real-world entity.
- Where addresses belong to big centralised exchanges, the coverage is decent.
- Where they belong to unbranded OTC desks and Telegram couriers, coverage is often paper-thin.
That’s the hole Sanders has tried to fill. According to people familiar with the data, he has contributed attribution for more than 11,000 wallet addresses into at least one major analytics platform. Without his and a handful of others’ input, many cash-desk clusters would register as “unknown counterparty”, a euphemism for “we have no idea who this is, but we’re going to treat it as clean until proven otherwise.”
This is what he means when he calls parts of the industry “smoke and mirrors”: exchanges can point to their vendor dashboards and say “look, our flows are mostly low-risk”, while failing to ask why several hundred million dollars keep flowing to unlabeled wallets which just happen, physically, to be attached to cash-only basements.
Exchanges, knowingly blind?
The Coin Laundry collaboration points to multiple examples where:
- Customer accounts at major exchanges send large transfers directly into OTC cash desks;
- or receive hundreds of millions in inflows from entities like 001k that openly market courier cash drops.
Publicly, the exchanges stress:
- rigorous onboarding;
- sophisticated transaction monitoring;
- and a willingness to work with law enforcement.
Less clear is whether anyone is systematically asking very basic questions, such as:
- “Why is this address sending millions into a desk that never asks for ID?”
- “Should we treat all flows to wallets that continually cash out into unlicensed cash desks as higher risk, even if our vendor hasn’t labelled them yet?”
- “At what point does failing to know become choosing not to know?”
It’s not that the exchanges are uniquely villainous; they are simply plugged into incentives that reward volume and fee income, not moral courage. When money in motion is your product, saying “no” can feel like self-harm.
The people left holding the bill
For victims of ‘coin laundry’, this parallel system is not an abstract policy failure. It is the point where their money disappears for good.
Prosecutors in places like New York describe a now-familiar pattern:
- Elderly or retail victims are drawn into long-con “investment” schemes.
- They are steered into buying crypto on mainstream exchanges.
- The scammers walk them through sending those funds to wallet addresses controlled by criminal networks.
- Investigators later trace those funds through a handful of hops…
- …until they hit an OTC cash-out service or courier cluster and the trail simply dies.
Without a regulated financial institution at the end of the chain, there is nobody obvious to sue, subpoena or force to compensate. The best an investigator can often do is to ring the victim and explain that the life savings are gone.
In Ukraine, officials are blunt that crypto-to-cash desks are a convenient rail not just for scam proceeds and drug money, but for hostile intelligence activity too: a way to pay operatives inside the country while avoiding the banking perimeter entirely.
Meanwhile, in Dubai and other hubs, the same machinery can turn scam proceeds into gold, property, yachts or Lamborghinis with barely a raised eyebrow.
Why this matters for ordinary crypto users
Most YFarmX readers aren’t sitting in a car with a stranger counting bundles of cash in exchange for Tether. But the existence of this shadow infrastructure still lands on your desk, in a few ways:
- Every headline tying “crypto” to money laundering, sanctions busting or intelligence operations makes it easier for regulators to justify heavy-handed rules.
- If major exchanges repeatedly sit on the other end of OTC cash-out flows, your legitimate orders are sharing books with toxic flow. When the music stops, it tends to be the compliant users who find withdrawal limits tightened.
- If states eventually decide they’ve had enough of trying to chase shadows, the pressure will be to squeeze the visible choke points (exchanges, stablecoins, fiat on- and off-ramps) even harder.
Understanding how this parallel system works isn’t voyeurism. It’s basic self-defence.
Beyond lone heroes
By the end of his Dubai run, Sanders (a man quite comfortable boarding rescue boats under Russian shelling) was reportedly close to burnout, watching cash desks spin up new wallets faster than he could catalogue the old ones.
That, in a sense, is the point.
If your anti-laundering strategy relies on a handful of obsessive individuals racing round the world doing test trades with hidden cameras, you do not have a strategy. You have a holding pattern.
Fixing the problem means:
- treating high-volume OTC cash desks and courier services as regulated financial institutions, not colourful local quirks;
- forcing exchanges to take responsibility for their counterparties, not just their marketing copy;
- and closing the data gap so that “unknown address” is no longer an acceptable label for entities moving hundreds of millions.
Until then, the Coin Laundry will keep running in the background: a second, largely invisible banking system, built on the same blockchains that were once sold as the end of financial secrecy.
Disclaimer
This article is for information only and reflects publicly reported allegations and open-source reporting. It is not investment, legal or tax advice.
