Rubrik: International
Format: INVESTIGATIONS
Autor: Sinisa Brkic (sb)
Binance said it had fully exited Russia in 2023. Two years later, Russian investigators received detailed personal and transaction data from the cryptocurrency exchange about a customer accused of sending crypto to Ukrainian fundraising campaigns, and those records became part of a terrorism financing case. The issue is not the roughly $700 involved. It is what the case reveals about personal data, corporate exits and the reach of state authorities across digital borders.
Binance Said It Was Leaving Russia
In September 2023, Binance announced that it was selling its entire Russian business to CommEX. The company described the transaction as a full exit and said remaining in Russia was incompatible with its compliance strategy. It also said there would be no continuing revenue share and no option to buy the business back.
The message was unusually clear for a global company withdrawing from a politically and legally complicated market. Binance was not presenting the move as a reduction of exposure or a temporary retreat. It was telling customers, regulators and the public that its Russian business was ending. Less than two years later, however, Russian investigators obtained detailed information from Binance about one of its customers. The records were then incorporated into a criminal case alleging terrorism financing.
That does not mean Binance secretly continued operating a Russian exchange business after announcing its departure. It does mean that leaving a market commercially did not end every relationship between the company, its historical customer data and Russian law enforcement. That distinction is the real story.
The Man Behind the Data
At the center of the case is Yuri Belenkiy, a Russian IT specialist who also holds a Bulgarian residence permit. Russian authorities detained him in September 2025 and subsequently accused him of financing terrorism.
Investigators allege that between January 2023 and March 2024 Belenkiy sent more than $700 in cryptocurrency to fundraising efforts associated with Ukraine. The payments were linked to appeals by Arkady Babchenko, an exiled Kremlin critic who publicly solicited cryptocurrency for Ukrainian causes, including medical equipment for Ukrainian soldiers.
One of the organizations cited by Russian authorities was connected to the Azov formation, which Moscow designates as a terrorist organization. Russian law therefore transformed what Belenkiy is accused of treating as support for Ukraine into an allegation carrying the weight of terrorism financing. Belenkiy remains in Russian custody awaiting trial. The accusations against him have not been resolved by a final judicial judgment. The amount involved is striking precisely because it is not large. Roughly $700 is not the scandal. What happened to the data behind those transactions is.
Moscow Asked. Binance Responded.
Russian law enforcement documents show that investigators requested Belenkiy’s transaction history from Binance. The company responded with records linking him to cryptocurrency transfers associated with the Ukrainian fundraising activity.
The material went far beyond a wallet address or confirmation that a transaction had occurred. According to the documents, the response included Belenkiy’s date of birth, residential address, telephone number and passport number. It also included copies of his Russian passport and Bulgarian residence permit.
Those details matter because cryptocurrency transactions can appear abstract when viewed on a blockchain. A wallet address is a string of characters. An exchange that has completed identity verification can connect that string to a real person, a home address, a passport and a telephone number. That connection is enormously valuable to law enforcement. In Belenkiy’s case, it became part of the evidence used by Russian investigators to support terrorism financing charges. A transaction had become an identity. An identity had become a prosecution file.
The $700 Detail Changes the Scale, Not the Substance
There is a temptation to make the amount itself the headline. That would miss the point. The case is not remarkable because Russian authorities pursued a payment worth roughly $700. States routinely prosecute offenses involving modest sums when the alleged purpose of the transaction triggers serious criminal law. The significance lies in how a global financial platform’s customer records helped investigators establish who was behind the transfers.
The relatively small amount instead demonstrates how little money may be required for an ordinary financial record to become politically consequential. A transaction that would be financially insignificant to a multinational exchange can become decisive evidence when a government classifies the recipient as a terrorist organization. The contrast is uncomfortable. A customer may think in hundreds of dollars. A government may think in years of imprisonment. Between them sits the data.
The Law Enforcement Channel Was Still There
The documents reveal another important detail. After Russian investigators sought Binance’s cooperation, they received replies from an email address using the binanceholdings.ru domain. Binance had previously published information directing Russian and Belarusian law enforcement agencies to a dedicated contact address for official requests. In other words, although the company had announced its commercial departure from Russia, a mechanism for handling law enforcement inquiries connected to the country remained available.
There is nothing inherently unusual about a global financial institution maintaining the ability to respond to authorities in countries where it once operated. Financial companies retain records for regulatory, anti money laundering and legal reasons, often for years after an account relationship or local business operation ends. That is precisely why the terminology of a “full exit” deserves scrutiny. A business can leave offices, customers and revenue behind. Data does not disappear when the corporate announcement is published. And law enforcement access to that data can outlive the business that originally collected it.
What Does a Full Exit Actually Mean?
Corporate language and customer expectations do not always describe the same reality. For a company, leaving a market may mean selling a subsidiary, ending local services, transferring customers and eliminating revenue exposure. From a customer’s perspective, a full exit can sound more absolute. It can reasonably suggest that the institutional relationship with that country has ended.
The Belenkiy case exposes the space between those interpretations. Binance was no longer operating the Russian business it had sold. Yet Russian investigators could still approach the company for information concerning transactions connected to a former Russian customer, and they received detailed personal records.
That is not proof that Binance’s 2023 announcement was false. It is evidence that a commercial exit and a data exit are fundamentally different things. The difference was barely visible until someone’s passport, residence information and transaction history entered a criminal investigation.
Binance Rejects the Suggestion of Improper Conduct
Binance disputes the view that its cooperation in the case establishes wrongdoing. The company says it responds to lawful requests from law enforcement agencies around the world and does so subject to applicable legal, privacy and regulatory requirements.
That position reflects the reality of modern financial compliance. Large cryptocurrency exchanges conduct identity checks, retain records and cooperate with authorities because governments require serious financial platforms to assist investigations into money laundering, sanctions evasion, fraud, terrorism financing and other crimes. The question is therefore not whether Binance should ever provide information to police. The question is more difficult.
Which authority is asking? What law applies to the customer? Where is the relevant data controlled? What legal basis permits disclosure? What protections apply when the requesting state defines terrorism, extremism or political opposition differently from the jurisdiction in which the customer resides? Those questions cannot be answered by the word “compliance” alone. Compliance itself requires judgment.
Bulgaria Brings Europe Into the Case
Belenkiy’s Bulgarian residence permit creates a second layer of legal uncertainty. If his Binance relationship was registered through an entity or account structure covered by European Union data protection law, the transfer of his personal information to Russian authorities could fall within the scope of the General Data Protection Regulation. Transfers of personal information from the European Economic Area to authorities in third countries are subject to specific safeguards and legal requirements.
That does not establish that Binance violated the GDPR.
It is not publicly known whether Belenkiy was registered with Binance as an EU resident, which Binance entity controlled the relevant data or which precise legal basis governed the disclosure. Reuters was unable to establish his account status, his lawyer did not clarify it and the Bulgarian data protection authority has not issued a public determination finding a breach. The European Data Protection Board has also not ruled on the individual case. Any claim that Binance has already been proven to have violated European privacy law would therefore go beyond the available evidence. But the legal question is real.
Europe Has Tightened the Rules Around Foreign Requests
European data protection authorities have given increasing attention to precisely this problem. The issue is what an organization subject to European rules should do when an authority outside Europe demands personal information.
The principle is significant. A request from a foreign government does not automatically become a sufficient legal basis for transferring personal data simply because that government has issued it. Organizations covered by European law must examine whether the transfer is permitted under the GDPR and whether the relevant international transfer requirements are satisfied. That assessment can become particularly sensitive when the information is destined for a jurisdiction that does not benefit from an EU adequacy decision.
Belenkiy’s Bulgarian residence therefore matters for more than biographical context. If European rules applied to his Binance account, the legal architecture behind the disclosure becomes one of the most important unresolved elements of the case. Until that status is established, however, it remains an open question rather than a proven violation.
Russian Investigators Wanted More Names
The documents also suggest that investigators were interested in more than Belenkiy. Russian authorities asked Binance to identify other people who had transferred cryptocurrency to a wallet promoted by Babchenko. The available records do not show what happened to that request. That distinction is crucial.
There is currently no evidence establishing that Binance provided Russian authorities with the identities of a wider group of Ukraine donors. Nor is there evidence from the disclosed records that the company conducted a systematic operation to identify such customers. The known case concerns Belenkiy. Any broader claim would move beyond what the evidence presently supports. But the existence of the request demonstrates the potential scale of the issue. Once a state knows which wallet it is interested in, a centralized exchange can become the point at which anonymous looking blockchain transactions acquire names. That is a capability with consequences far beyond cryptocurrency.
The Shadow of an Earlier Russian Controversy
The case also lands against an older controversy involving Binance and Russian authorities. In 2022, reporting revealed that Binance’s regional leadership had previously met representatives of Russia’s financial intelligence agency, Rosfinmonitoring. Russian officials were interested in obtaining information that could help identify people who had donated Bitcoin to opposition leader Alexei Navalny.
Binance disputed suggestions that it had provided Navalny related customer information to Russian authorities. The company said it had not been contacted by Russian authorities regarding Navalny and rejected claims that it had handed over such data.
That historical episode should not be treated as proof of what occurred in Belenkiy’s case. Nor does the Belenkiy case retroactively prove disputed allegations from 2022. It does, however, place today’s disclosure inside a longer debate about how global cryptocurrency platforms respond when Russian authorities seek to connect politically sensitive transactions to identifiable people. The issue has returned with documentary evidence from an actual prosecution.
Crypto Promised Anonymity. Centralized Exchanges Built Identity Files.
Cryptocurrency was once marketed as an escape from the architecture of traditional finance. Wallets were pseudonymous, transactions moved without conventional banks and users could transfer value without asking a central institution for permission. Large centralized exchanges changed that equation.
To operate at global scale, platforms such as Binance increasingly adopted many of the compliance mechanisms familiar from traditional banking. Customers submit identification documents. Addresses are verified. Accounts are monitored. Transactions are stored and linked to specific individuals. The blockchain may show a wallet. The exchange knows the person. That difference is one of the most consequential facts in modern cryptocurrency. It also means that the privacy risk does not necessarily lie in the blockchain itself. It can lie in the database that connects the blockchain to a passport.
A Passport Collected for Compliance Can Become Evidence
Customers provide identity documents because financial platforms require them. The purpose is usually presented in the language of account security, regulatory compliance and prevention of financial crime. Yet once the information exists, other legal interests can arise. A passport proves identity. A residence permit establishes a connection to another jurisdiction. An address locates a person. Transaction records connect that person to money and recipients. Combined, those records can tell authorities far more than any blockchain explorer could reveal on its own.
Belenkiy’s case illustrates the consequence with unusual clarity. Information originally collected so that an exchange would know its customer later helped Russian investigators establish the identity behind politically sensitive cryptocurrency transfers. The technology may be new. The power of the dossier is not.
Lawful in One Country, Politically Explosive in Another
The most difficult cases for international technology and financial companies begin where legal systems disagree. Russia treats financial assistance to certain Ukrainian organizations as terrorism financing. Other countries may regard support for Ukraine through a completely different political and legal framework. A global platform cannot make those conflicting systems disappear. It also cannot assume that every request from every government carries identical legal and human consequences.
This is where corporate responsibility becomes more complicated than obeying a request. Companies operating across jurisdictions must determine what law governs the data they control and what obligations remain toward the person behind that data. The requesting government has power. The company holding the information has another kind of power. The customer sits between them.
One Case Does Not Prove a System
There is a boundary this investigation should not cross. The available records do not demonstrate a systematic Binance program for supplying Russia with the identities of people supporting Ukraine. They do not prove that every Russian law enforcement request was honored, nor do they establish what happened to requests concerning other donors. They also do not establish a GDPR violation. The documentary case is narrower, and strong enough without speculation.
Russian investigators requested information concerning Yuri Belenkiy. Binance supplied transaction and identity data. Those records became part of a terrorism financing case. Binance had previously announced that it had fully exited Russia. That sequence is established. Its implications are substantial precisely because nothing more needs to be invented.
The Corporate Exit Did Not End the Data Story
Binance’s 2023 announcement was about business. The Belenkiy case is about what survives business. Companies can sell subsidiaries. They can close offices, migrate customers, terminate local products and stop earning revenue in a country. None of those steps necessarily destroys records collected during the years in which the relationship existed. Digital information has a longer life than physical operations.
That reality is increasingly important as multinational companies withdraw from authoritarian states, sanctioned jurisdictions and conflict zones. A corporation may no longer have employees or customers in a country while still holding information that authorities in that country consider valuable. The legal question then becomes inseparable from the political one. Who can still ask for the data?
The Real Border Is Not Russia
The most important boundary in the Belenkiy case may not be the Russian border at all. It is the boundary between a transaction and the identity behind it. Between commercial withdrawal and continuing legal cooperation. Between one jurisdiction’s demand for information and another jurisdiction’s rules governing whether that information may be disclosed.
Digital finance has made those boundaries harder to see. Governments have not lost interest in them. Neither have companies.
For Belenkiy, a few cryptocurrency transfers worth a little more than $700 eventually became part of a terrorism financing prosecution. The amount is almost incidental. What mattered was that investigators could connect the transfers to a name, an address, a passport and a person.
That is why this case reaches beyond Binance and beyond Russia.
The Data Trail Outlived the Exit
Binance says it left Russia. There is no evidence in the available material that the company continued the Russian commercial operation it sold in 2023, and there is no established finding that it violated European privacy law when it responded to investigators. But the records show something that should matter to every customer of a global financial platform. Leaving a market does not necessarily mean leaving its authorities without access to the information already collected there. The modern corporate exit has a physical dimension, a financial dimension and a digital one. Offices can close. Revenue can stop. Ownership can change. The data remains. And as the Belenkiy case demonstrates, the most important question may begin only after the company says it has gone:
Who can still reach it?
Kommentar hinzufügen
Kommentare