The U.S. Department of Justice announced Thursday, Sept. 14, 2023 the unsealing of an Indictment charging Roman Storm, 34, of Auburn, WA, and Roman Semenov, 35, a Russian national, with conspiracy to commit money laundering, conspiracy to commit sanctions violations, and conspiracy to operate an unlicensed money transmitting business.

The charges in the Indictment arise from the defendants’ alleged creation, operation, and promotion of Tornado Cash, a cryptocurrency mixer that facilitated more than $1 billion in money laundering transactions and laundered hundreds of millions of dollars for the Lazarus Group, the sanctioned North Korean cybercrime organization.

Storm was arrested in the state of Washington and will be presented in the U.S. District Court for the Western District of Washington.

The case has been assigned to U.S. District Judge Katherine Polk Failla.

Semenov remains at large.

The DOJ said that Storm and Semenov were two of the three founders of the Tornado Cash service, a cryptocurrency mixer that allowed its customers to engage in untraceable transfers of cryptocurrency. The defendants and their co-conspirators created the core features of the Tornado Cash service, paid for critical infrastructure to operate the Tornado Cash service, promoted the Tornado Cash service, and made millions of dollars in profits from operating the Tornado Cash service. The Tornado Cash service advertised to customers that it provided untraceable and anonymous financial transactions, and Storm and Semenov chose not to implement know your customer or anti-money laundering programs as required by law. As a result, the Tornado Cash service was used to launder more than $1 billion in criminal proceeds. Storm and Semenov knew about these money laundering transactions and received complaints and requests for help from victims of hacking and other cybercrimes. However, they refused to implement any controls and continued to operate the Tornado Cash service and facilitate these money laundering transactions.

In April and May 2022, the Tornado Cash service was allegedly used by the Lazarus Group, a sanctioned North Korean cybercrime organization, to launder hundreds of millions of dollars in hacking proceeds. STORM and SEMENOV knew that the Tornado Cash service they were operating was engaging in these sanctions-violating transactions. They implemented a change in the service so that they could make a public announcement that they were compliant with sanctions, but in their private chats, they agreed that this change would be ineffective. They then continued to operate the Tornado Cash service and facilitate hundreds of millions of dollars in further sanctions-violating transactions, helping the Lazarus Group to transfer criminal proceeds from a cryptocurrency wallet that had been designated by the Office of Foreign Assets Control as blocked property.

The suspects are each charged with one count of conspiracy to commit money laundering and one count of conspiracy to violate the International Economic Emergency Powers Act, which each carry a maximum sentence of 20 years in prison. They are also each charged with conspiracy to operate an unlicensed money transmitting business, which carries a maximum sentence of five years in prison.

“As alleged, Tornado Cash was an infamous cryptocurrency mixer that laundered more than $1 billion in criminal proceeds and violated U.S. sanctions,” U.S. Attorney Damian Williams said. “Roman Storm and Roman Semenov allegedly operated Tornado Cash and knowingly facilitated this money laundering. While publicly claiming to offer a technically sophisticated privacy service, Storm and Semenov in fact knew that they were helping hackers and fraudsters conceal the fruits of their crimes. Today’s indictment is a reminder that money laundering through cryptocurrency transactions violates the law, and those who engage in such laundering will face prosecution.”

The statutory maximum sentences are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendants will be determined by a judge.

This case is being handled by the Office’s Money Laundering and Transnational Criminal Enterprises Unit and the Criminal Division’s National Cryptocurrency Enforcement Team (“NCET”). Assistant U.S. Attorneys Thane Rehn and Benjamin Gianforti are in charge of the prosecution.

The NCET was established to combat the growing illicit use of cryptocurrencies and digital assets. Within the Criminal Division’s Computer Crime and Intellectual Property Section, the NCET conducts and supports investigations into individuals and entities that enable the use of digital assets to commit and facilitate a variety of crimes, with a particular focus on virtual currency exchanges, mixing and tumbling services, and infrastructure providers. The NCET also sets strategic priorities regarding digital asset technologies, identifies areas for increased investigative and prosecutorial focus, and leads the Department’s efforts to collaborate with domestic and foreign government agencies as well as the private sector to aggressively investigate and prosecute crimes involving cryptocurrency and digital assets.

“As alleged in the indictment, the defendants operated a $1 billion scheme designed to help other criminals launder and conceal funds using cryptocurrency, including by laundering hundreds of millions of dollars on behalf of a state-sponsored North Korean cybercrime group sanctioned by the U.S. government,” Attorney General Merrick B. Garland said. “These charges should serve as yet another warning to those who think they can turn to cryptocurrency to conceal their crimes and hide their identities, including cryptocurrency mixers: it does not matter how sophisticated your scheme is or how many attempts you have made to anonymize yourself, the Justice Department will find you and hold you accountable for your crimes.”

“Today’s announcement should remind criminal organizations everywhere in the world that they are neither untraceable nor anonymous,” FBI Director Christopher A. Wray said. “You can’t hide from us behind a keyboard — whether you’re a hacker or facilitator. Those charged today engaged in a conspiracy to launder money for cybercriminals, including for a North Korean cybercrime organization seeking to evade sanctions. As we have with this operation, the FBI is going to keep dismantling the infrastructure used by cyber criminals to commit and profit from their crimes, and holding anyone who assists those criminals accountable.”

The allegations in the Indictment are merely accusations, and the defendants are presumed innocent unless and until proven guilty.