# Money Launderer Accused of Stealing Seized Cryptocurrency While Imprisoned for Earlier Fraud


A Bulgarian national serving a 121-month federal sentence for laundering millions of dollars in fraud proceeds has been charged with yet another crime: stealing $290,000 in government-seized cryptocurrency from his prison cell. The charges highlight the persistent challenge law enforcement faces in securing digital assets and the criminal ecosystem's determination to recover seized funds even from behind bars.


## The Defendant and His History


Rossen G. Iossifov, a 53-year-old Bulgarian national, appeared in federal court in the Eastern District of Kentucky on Wednesday to face charges of removal of property to prevent seizure and conspiracy to commit money laundering. These charges stem from alleged criminal activity that occurred in January 2024—while Iossifov was already imprisoned for his role in a massive international fraud scheme.


Iossifov's criminal history demonstrates the depth and sophistication of his involvement in criminal finance. He was previously convicted for owning and operating RG Coins, a cryptocurrency exchange based in Sofia, Bulgaria, that became a hub for criminal money laundering operations spanning the Atlantic.


## The Alexandria Auction Fraud Network


Iossifov's initial criminal enterprise was rooted in his work with the Alexandria Online Auction Fraud Network, a Romanian-led criminal operation that victimized at least 900 Americans through a coordinated scheme that combined social engineering with digital financial crime.


### How the Scheme Worked


| Stage | Method | Outcome |

|-------|--------|---------|

| Recruitment | Network members posted fabricated advertisements on Craigslist and eBay | Targeted high-value goods, primarily vehicles |

| Victimization | Scammers convinced buyers to pay for non-existent goods | Victims wired funds to accounts controlled by network members |

| Cryptocurrency Conversion | Fraudsters converted stolen USD into digital assets | Crypto provided anonymity for fund movement |

| Laundering | Iossifov transferred cryptocurrency to foreign money launderers | Funds disappeared into the international financial system |


### Iossifov's Role as a Facilitator


Rather than simply providing a standard cryptocurrency exchange service, Iossifov actively tailored RG Coins to serve criminal clients. According to court documents, his accommodations included:


  • Offering favorable exchange rates to network members
  • Allowing traders to exchange cash for cryptocurrency without providing identification
  • Accepting funds without documentation of source
  • Processing transactions for members of the criminal network with apparent impunity

    • Over a three-year period, Iossifov collected more than $184,000 in processing fees while facilitating the laundering of nearly $5 million for just four network members. This demonstrates the profitability of criminal financial services and the vulnerability of early cryptocurrency exchanges to exploitation by organized crime networks.


    ## The New Charges: Stealing Seized Assets from Prison


    The initial conviction should have ended Iossifov's criminal career. Instead, federal prosecutors allege he orchestrated another scheme while incarcerated—one that underscores a critical vulnerability in how governments secure seized cryptocurrency.


    In January 2024, while serving his 121-month sentence, Iossifov allegedly conspired with unnamed accomplices to:


    1. Access $290,000 in government-seized cryptocurrency held in federal custody

    2. Move the funds from a seized account controlled by authorities

    3. Route the cryptocurrency through multiple crypto exchanges and mixing services

    4. Obscure the funds' origin and prevent government seizure


    The sophistication of this operation—executed from inside a federal prison—suggests either a significant security failure in how the government manages seized digital assets, or accomplices on the outside with direct access to compromised systems.


    ### Routing Through Mixing Services


    The use of cryptocurrency mixing services (also called "tumblers" or "mixers") is a critical technical detail. These services accept cryptocurrency deposits, combine them with other users' funds, and disperse new cryptocurrency to specified addresses. The goal is to break the blockchain's transaction history and make it difficult or impossible to trace the origin of funds.


    Major mixing services include Tornado Cash (now sanctioned by OFAC), CoinJoin, and others that operate in jurisdictions with minimal regulatory oversight. By routing stolen assets through these services, criminals attempt to create plausible deniability and make asset recovery nearly impossible.


    ## Legal Response and Implications


    The U.S. Secret Service, which investigated the case, emphasized the severity of Iossifov's alleged actions. Special Agent Robert Holman stated: "Iossifov's deliberate attempt to remove and launder lawfully seized funds is a direct challenge to our justice system and a blatant disregard to his victims' rights."


    ### Sentencing Exposure


    If convicted on the new charges, Iossifov faces a maximum sentence of 25 additional years in prison. Additionally, the court has ordered:


  • Restitution of more than $2.6 million to victims of the earlier fraud scheme
  • Forfeiture of the $290,000 in cryptocurrency involved in the current charges

    • ---


    ## HackWire Analysis


    This case reveals three critical gaps in the intersection of cryptocurrency crime and law enforcement infrastructure.


    First, the timing is alarming. Iossifov allegedly stole seized crypto in January 2024—which means government systems either allowed an incarcerated criminal to remotely access custody accounts, or the security protocols protecting seized digital assets were sufficiently weak that outside accomplices could breach them with assistance from someone in prison. Either scenario points to inadequate security for what should be some of the most carefully guarded financial assets in federal custody.


    Second, this fits a disturbing pattern. Cryptocurrency's early promise as a financial democracy has morphed into a haven for serial offenders. Iossifov wasn't deterred by a 121-month sentence; he simply pivoted from operating an exchange to orchestrating theft from inside prison walls. This persistence suggests that until sentencing for crypto-related financial crimes reaches levels that truly deter (15+ years minimum), offenders will continue plotting from cell blocks.


    Third, the mixing service angle exposes a regulatory blind spot. Law enforcement and financial regulators have made progress on exchanges, but mixers remain largely unregulated. The fact that Iossifov could route $290,000 through multiple mixers suggests that even when government agencies successfully seize criminal assets, moving those funds through obscuring layers remains trivially easy. Congress and FinCEN should require mixing services to maintain transaction logs and freeze funds flagged by law enforcement within 72 hours—anything less is a free pass for criminals to launder seized assets.


    — HackWire Editorial


    ## Implications for Financial Institutions and Exchanges


    This case presents several lessons for cryptocurrency exchanges and financial institutions attempting to operate legitimately:


  • Know Your Customer (KYC) Requirements: Iossifov's exchange explicitly operated without identity verification. Modern exchanges are subject to strict KYC and Anti-Money Laundering (AML) regulations that have significantly raised barriers for criminals—but gaps remain in jurisdictions with light regulatory oversight.

  • Transaction Monitoring: Red flags should include high-volume cash-to-crypto conversions, rapid movement of funds through multiple accounts, and exchanges with high-risk jurisdictions or mixing services.

  • Regulatory Cooperation: Exchanges that refuse to cooperate with law enforcement risk being blacklisted from the mainstream financial system.

    • ## Recommendations


    For Law Enforcement:

  • Audit the security protocols protecting seized cryptocurrency in federal custody
  • Investigate how Iossifov accessed funds or communicated with outside accomplices while incarcerated
  • Target mixing services that continue to facilitate laundering of government-seized assets

    • For Cryptocurrency Exchanges:

  • Implement velocity checks that flag rapid movements of large sums
  • Monitor for transaction patterns consistent with mixing service use
  • Maintain detailed logs of all transactions involving seized or government-flagged addresses

    • For Policymakers:

  • Establish minimum sentencing guidelines for cryptocurrency-enabled fraud that account for the international scope and victim impact
  • Require mixing services to maintain transaction records and comply with law enforcement freezes

    • ---


    ## Related Coverage


  • Read more in our [Breaches](https://www.hackwire.news/category/breaches) coverage
  • Cross-reference with [Vulnerabilities](https://www.hackwire.news/category/vulnerabilities) and [Malware](https://www.hackwire.news/category/malware)
  • Stay current via the [HackWire homepage](https://www.hackwire.news/)