Bitcoin Fog: what the Sterlingov trial settled about chain analysis in court
On 8 November 2024, Roman Sterlingov, a dual Russian-Swedish national, was sentenced to twelve years and six months in prison in Washington, D.C. for operating Bitcoin Fog, the mixing service the Justice Department describes as the longest-running bitcoin money laundering service on the darknet. The sentencing closed an arc that began with the service's launch in 2011 and ended with an April 2021 arrest at Los Angeles International Airport. It also confirmed something larger: blockchain analysis has become accepted courtroom evidence, and mixer operators cannot assume that physical distance from the United States keeps them out of its courts.
A decade of mixing
Bitcoin Fog's offer was mechanically simple. Users deposited bitcoin; the service pooled the coins and paid withdrawals from the same pool, breaking the visible link between a deposit and any later withdrawal on the blockchain. According to the Justice Department's 2021 arrest announcement, the service moved more than 1.2 million bitcoin over roughly ten years of operation, valued at about $335 million at the time of the transactions; later releases describe the laundered volume as roughly $400 million. Prosecutors said the bulk came from darknet marketplaces and was tied to narcotics, computer crimes and identity theft. Sterlingov was arrested on 28 April 2021 while passing through LAX and charged by complaint with money laundering, operating an unlicensed money transmitting business, and unlicensed money transmission in the District of Columbia. Bitcoin Fog stopped operating two days later. Because the defendant had no obvious presence in the United States, early reporting framed the case as a test of the government's methods as much as of one man's guilt; Wired asked whether the Bitcoin Fog case could put cryptocurrency tracing itself on trial.What the jury saw
The trial opened in Washington in March 2024 and lasted about a month. As the appellate ruling later recounting the evidence describes, the government built its case on three pillars: tying Sterlingov to the platform, tying illicit funds to the platform, and proving knowledge. Chainalysis Reactor clustering attributed more than 900,000 bitcoin addresses to Bitcoin Fog and traced transfers to and from markets including Silk Road, AlphaBay and Agora. The service had launched in 2011 under the alias "Akemashite Omedetou", which prosecutors said belonged to Sterlingov, alongside his 2011 interest in rival mixers and 2012 posts recommending Silk Road. A former FBI task force officer compared login records and identified shared IP addresses between accounts tied to Sterlingov and the service's administration. And a 2019 undercover transaction, a $250 deposit funded from a darknet market account and withdrawn after a message claiming the money came from ecstasy sales, anchored venue in Washington. The defense attacked the methodology. Lawyers argued the clustering was a "black box"; the government's own experts conceded that Reactor had never been peer reviewed and that its error rate was unknown. When an expert searched the Bitcoin Fog cluster for the five addresses used in the undercover transactions and found only four attributed, the defense called it a twenty percent error rate. Sterlingov's demand for Reactor's source code was refused; the court instead ordered the underlying heuristics disclosed to his lawyers under a protective order. It did not change the outcome. In a Daubert ruling during the trial, Judge Randolph Moss found the blockchain analysis reliable and admissible, a moment Chainalysis presents as proof its analytics are transparent and auditable."Roman Sterlingov thought he could use the shadows of the internet to launder hundreds of millions of dollars in bitcoin without getting caught. But he was wrong," Deputy Attorney General Lisa Monaco said after the verdict.On 12 March 2024 the jury convicted Sterlingov on all four counts: money laundering conspiracy, money laundering, operating an unlicensed money transmitting business, and money transmission without a license. Sentencing followed on 8 November 2024. Alongside the 150-month prison term, the court imposed a forfeiture money judgment of $395,563,025.39, ordered forfeiture of seized cryptocurrency and monetary assets worth about $1.76 million, and stripped Sterlingov of his interest in the Bitcoin Fog wallet, roughly 1,345 bitcoin valued at more than $103 million at the time, per the Justice Department's sentencing announcement.