Author: Claude, Deep Tide TechFlow

Deep Tide Guide: On July 9, the U.S. Department of Justice announced that 53-year-old Bulgarian Rossen Iossifov has been charged again. While serving a sentence of 111 months for an online auction fraud case, he allegedly transferred approximately $290,000 worth of cryptocurrency in January 2024. This money had already been ordered forfeited by the Federal Court for the Eastern District of Kentucky and was owned by the U.S. government, yet it remained in a Kraken account under his name and had not been transferred to a government-controlled wallet. The prosecution claims the funds circulated through multiple exchanges and mixing services before being converted into fiat currency at an offshore bank. The new charges could result in an additional 25 years in prison.

The court ordered the forfeiture, but the money was not taken away; the inmate withdrew it from prison.

According to the announcement from the U.S. Department of Justice on July 9, Iossifov appeared in federal court in the Eastern District of Kentucky on Wednesday, facing three charges: transferring property to evade seizure, aiding and abetting, and conspiracy to commit money laundering. The charges relate to a series of operations in January 2024, when he was serving time for a 2021 conviction.

A. Tysen Duva, Assistant Attorney General of the Department of Justice's Criminal Division, stated in the announcement that Iossifov had previously been convicted for large-scale online auction fraud and is now accused of transferring proceeds from that crime, violating the court's forfeiture order.

The absurdity of the case is not in the fact that he laundered money, but that he laundered money that no longer belonged to him.

The judgment states "owned by the United States," yet the cryptocurrency remains in his own Kraken account

The key detail is in the Department of Justice's announcement: when the court issued the judgment in 2021, it specifically ordered the forfeiture of approximately $290,000 worth of cryptocurrency in the Kraken account owned by Iossifov.

This account had previously been restricted. But as of January 2024, the cryptocurrency was still there.

The government gained ownership on paper but did not obtain actual control over the asset. The prosecution claims that Iossifov conspired with others to withdraw the forfeited cryptocurrency, transferring it through multiple cryptocurrency exchanges and illegal mixing services before ultimately converting it into fiat currency at an offshore bank account, preventing the U.S. government from actually obtaining these funds.

The role of mixing services is to aggregate funds from different users and then redistribute them to new addresses, making on-chain tracking more difficult. However, on-chain records still exist, and the prosecution's ability to bring money laundering conspiracy charges indicates that investigators at least reconstructed part of the pathway.

With a criminal record, he laundered nearly $5 million for a fake car source gang

Iossifov once operated a cryptocurrency exchange called RG Coins in Sofia, Bulgaria, at the end of a transnational fraud chain.

The front end of that chain is in Romania. According to previously disclosed details by the Department of Justice, gang members posted fake advertisements for high-priced items, mostly nonexistent cars, on auction and trading websites like Craigslist and eBay. After victims made payments, accomplices within the U.S. would collect the funds, convert them into cryptocurrency, and then send them to overseas money launderers including Iossifov, who would exchange the cryptocurrency for cash at the end of the chain. At least 900 Americans were defrauded.

Evidence submitted during the trial and sentencing phase showed that Iossifov laundered nearly $5 million worth of cryptocurrency in less than three years. He was convicted of conspiracy under RICO (Racketeer Influenced and Corrupt Organizations Act) and conspiracy to commit money laundering, sentenced to 111 months in prison, and ordered to pay $2,642,297.43 in restitution to victims while also forfeiting the cryptocurrency.

The case was investigated by the U.S. Secret Service, with support from the Department of Justice's Office of International Affairs. If the new charges stand, he could face an additional 25 years in prison.

It should be noted that these are currently allegations, not convictions.

Cryptocurrency must be transferred immediately after the seizure by the Department of Justice

This is not an unsolvable technical problem. The Department of Justice's Asset Forfeiture Policy Manual has clear provisions for the disposal process of cryptocurrency assets.

Once seizing authorities obtain the authority, they must immediately transfer the assets to a self-custody wallet controlled by the agency, with the straightforward reasoning: other individuals may hold copies of the private keys. Afterward, the assets should be stored in a cold wallet, then handed over to the U.S. Marshals Service (USMS) or its designated custodian. In 2024, the Marshals Service selected Coinbase Prime as its digital asset custodian.

The logic of the process is simple. A freeze order and forfeiture order can legally lock an account, but the true transfer of control only occurs at the moment the last usable key or account credential becomes invalid. Before that, anyone who can still verify their identity can withdraw the funds.

Which link this broke at has not been disclosed by officials.

Three things the officials did not mention

The announcement and indictment from the Department of Justice left some blanks.

First, how he, being in federal prison, managed to direct these transactions. Did he memorize the mnemonic, or did account credentials remain with accomplices outside? The announcement did not explain.

Second, which exchanges and mixing services the money passed through. None of these names were mentioned.

Third, whether the $290,000 was eventually recovered. The announcement merely stated that his actions made it "impossible for the U.S. government to obtain possession of these funds," without mentioning the outcome of the recovery.

These three blanks are important because they determine whether this incident was an isolated operational error or a window that can be exploited repeatedly in the seizure process. Until officials fill in these gaps, it can only be said: from the 2021 judgment to January 2024, the cryptocurrency lay in that account for nearly three years.

It's easy to catch someone, but hard to get the money

In the same week, there was another piece of law enforcement news that can be viewed in conjunction with this.

On July 9, Interpol reported the results of Operation "First Light 2026": the operation ran from January 15 to April 30, covering 97 countries and regions, resulting in 5,811 arrests and intercepting $293 million in illegal assets, with over 142,000 victims confirmed. In one case in Thailand, a wallet associated with a 20-year-old suspect processed $122.5 million within 10 months (this is the cumulative flow, not the account balance). Interpol said that the proceeds from these emotional scams were laundered through cross-chain exchanges, significantly increasing the difficulty of tracing, but did not disclose wallet addresses, which chains and cryptocurrencies were involved, nor did they mention how much had been recovered by Thai authorities.

On one side, 5,811 people were arrested globally, while on the other, a person already in prison transferred money ordered to be forfeited by the court to the government. Both incidents point to the same conclusion: on-chain, "judgment" and "control" are two different things, separated by a transfer that was not executed in time.

For ordinary holders, the practical implication of this matter is clear. The phrase "Not your keys, not your coins" holds true in both directions: the assets in an exchange account depend on who can verify their identity, not who legally owns them. The U.S. government is equal to retail investors in this regard.