
Operation Destabilise: Inside a global crypto-laundering network

In the latest episode of Joining the Dots, Thomas speaks with Will Lyne, former Deputy Director and Head of Cyber Intelligence at the UK’s National Crime Agency (NCA), to unpack Operation Destabilise – a landmark investigation that revealed a sprawling crypto-based money laundering network used by drug gangs, cybercriminals, hostile states, and cartels around the world.
From blockchain traces to billions in illicit flows
It all began with blockchain analysis of ransomware payments. But what Will’s team uncovered was far bigger: a massive underground finance system connecting criminal and sanctioned actors across continents. At the centre was Smart, a Moscow-based crypto exchange led by Ekaterina Zhdanova (pictured) that enabled anonymous cash-for-crypto swaps – and helped bypass the global financial system entirely.
Disrupting a network that spanned every major Western jurisdiction
Over two years, the NCA built a detailed picture of how the network worked – from UK-based couriers to international controllers and high-level facilitators in Russia. They seized tens of millions in cash and crypto and coordinated with global partners to dismantle the network node by node.
But it wasn’t just about arrests; Will Lyne, on why disruption is becoming as important as prosecution:
“We need to recognise the changing nature of the threat… Arrests aren’t always possible or practical. That doesn’t mean we give up – it means we find new ways to counter it.”
The new face of organised crime
Crypto, stablecoins, decentralised money movement – the criminal world has adapted fast. Operation Destabilise shows how law enforcement is evolving too: using intelligence, technology, and international collaboration to outpace a borderless threat.
Listen now to the latest episode of Joining the Dots for an unprecedented look into how modern crime works and how it’s being confronted.
Related Resources

Clue launches National Security Threat Assessment for 2025 and beyond
The UK’s security threats are converging faster than ever, and our new assessment outlines the top risks for 2025 plus practical steps every organisation can...
Learn more
What romance fraud can really look like – and why tech must catch up
Anna Rowe shared how emotional manipulation, fake online identities, and tech failures shaped her story - and why urgent change is needed to protect others.
Learn more
ECCTA and the new ‘failure to prevent fraud' offence: What you need to know
From September 1, 2025, the Economic Crime and Corporate Transparency Act (ECCTA) will introduce a major shift in how fraud is policed in large organisations...
Learn more

What's behind the rising insider risk and why does traditional security no longer suffice? Our latest Threat Assessment outlines an intelligence-led approach to detection and prevention, from national security breaches to ransomware.