A significant data leak involving the operations of Ilan Shor, a Moldovan fugitive with ties to Russia, has unveiled key details about the use of cryptocurrency in facilitating sanctions evasion and political interference, particularly in the context of Moldova’s upcoming parliamentary elections. The analysis, conducted by Elliptic, has highlighted the activities of A7, a company founded by Shor that reportedly facilitated staggering financial transactions, amounting to $8 billion in stablecoins over the past year and a half.
The leaked documents indicate that cryptocurrency has been a critical tool in funding various political initiatives in Moldova. Shor’s network has employed these digital assets to pay for infrastructure related to a political app that orchestrates financial support for a network of political operatives in the region. This leakage has unveiled fresh cryptocurrency addresses and transaction histories tied to Shor and his businesses, thereby enhancing the escalation of sanctions against him and his affiliations.
Shor, having previously evaded law enforcement after being convicted in connection with a $1 billion bank fraud in Moldova, became a focal point for U.S. sanctions in 2022 due to his alleged role in undermining democratic processes in Moldova, including vote-buying on behalf of pro-Russian candidates. The Russian government has reportedly backed Shor’s efforts to stymie Moldova’s European Union integration, emphasizing a broader strategy to maintain its influence in the region.
His enterprise, A7, founded in 2024, specializes in assisting Russian businesses to navigate sanctions, a venture partly financed by a state-owned Russian bank, Promsvyazbank, which has connections to the country’s defense sector. This banking institution is itself under sanctions for its role in supporting the military and has been implicated in facilitating electoral interference in Moldova.
The data leak has provided new insights into the operational mechanisms of A7, marking a potentially pivotal moment in understanding the intersection of cryptocurrency and global politics. It highlights A7’s reported facilitation of approximately $89 billion in cross-border transactions for Russian businesses in just ten months, primarily routed through nations with close ties to Russia, like Kyrgyzstan.
Conversation logs from the leak reveal a heavy reliance on cryptocurrency transactions—especially utilizing Tether’s USDT stablecoin for treasury management and operational payments. One instance captured in the chat logs involves a former Moldovan politician, Maria Albot, linked to Shor, requesting substantial transfers indicative of extensive financial operations.
Moreover, the leak suggests a change in A7’s cryptocurrency infrastructure in anticipation of the data breach, hinting at attempts to obfuscate operations and maintain access to liquid assets in increasingly hostile regulatory climates.
In terms of political machinations, the documents delineate Shor’s funding of election interference campaigns in Moldova. The evidence points to the use of applications such as “Taito,” created for managing payments to political activists, and “Callcenter,” an alleged tool for political polling. These initiatives raise alarm about the illegal financing of electoral activities.
The discovery also mentions the development of a Telegram bot for payments, capable of conducting know-your-customer (KYC) checks and facilitating crypto transactions seamlessly among users, reflecting a sophisticated approach to maintaining influence and operations despite sanctions.
As authorities and institutions work to comprehend and counteract these tactics, the case serves as a reminder of how blockchain technologies, while being utilized for illicit purposes, may inadvertently expose the operations to scrutiny through transparency mechanisms inherent in cryptocurrency systems. The revelations from the A7 leaks are now being harnessed to bolster investigations and enforcement against sanction evasion, ultimately seeking to uphold democratic integrity in Moldova.
