Cryptocurrency exchange Binance provided personal customer data to Russian investigators after 49-year-old IT specialist Yury Bielenkyi was arrested at a Moscow airport. Russian law enforcement detained Bielenkyi, a Russian citizen who holds a Bulgarian residence permit, in September 2025 on charges of financing terrorism through cryptocurrency transfers made in support of Ukraine.
Russian prosecutors alleged that the transferred funds were directed specifically to meet the needs of the Ukrainian military. Reuters confirmed on August 17, 2026, citing criminal case records, that Binance responded to requests from the Investigative Committee of the Russian Federation in 2025, enabling state investigators to link specific cryptocurrency transactions directly to Bielenkyi.
The information handed over by Binance included Bielenkyi's date of birth, physical home address, phone number, passport details, a scanned copy of his Russian passport, his Bulgarian residence permit, and complete transaction histories. Binance, founded in 2017, is the world's largest cryptocurrency exchange by daily trading volume.
Broader Data Transfer Claims
Human rights project First Department, which obtained case files directly from Bielenkyi's relatives, reported that the volume of data shared by Binance was even more extensive than initial records indicated. According to the advocacy group, the exchange handed over Know Your Customer identity verification files, account balances, records of crypto deposits and withdrawals, peer-to-peer transaction histories, login timestamps, device identification data, geolocation details, and other technical metadata.
First Department stated that after receiving the technical information from Binance, Russian investigators identified additional cryptocurrency transfers. Authorities subsequently expanded the formal criminal charges against Bielenkyi. First Department is an independent association of human rights lawyers and advocates specializing in defending individuals accused of treason, espionage, and state security offenses in Russia.
Exit From Russia and Special Channels
The data disclosure occurred despite Binance publicly announcing a complete withdrawal from the Russian market in 2023 following international sanctions scrutiny. Internal documents examined by Reuters revealed that Russian law enforcement agencies nevertheless retained a separate portal and communication channel to submit formal information requests to Binance throughout 2025.
Case materials showed that the Investigative Committee of the Russian Federation also asked Binance to identify all other platform users who had transferred funds to the same cryptocurrency wallet. It remains unknown whether Russian authorities received identifying data on those additional account holders. Binance stated that, like other global financial institutions, it responds to lawful law enforcement requests in accordance with applicable legislation, privacy mandates, and regulatory standards, while declining to comment on Bielenkyi's specific case.
European Union Data Privacy Rules
Because Bielenkyi held a residence permit in Bulgaria, an EU member state, the data disclosure has raised European legal questions regarding international data protection. On August 20, 2026, the European Commission stated, without commenting on the specific case, that all transfers of personal and transactional data from the European Union to third countries are strictly regulated by the General Data Protection Regulation.
The European Commission emphasized that Russia does not possess an EU adequacy decision certifying that the country maintains an adequate level of personal data protection. As a result, no framework exists for the unconditional or free transfer of personal data between the European Union and Russia. Official bodies noted that as of today, it has not been legally established whether a violation of the General Data Protection Regulation occurred in Bielenkyi's case.
Security and Anonymity Risks
The implications of the case were detailed in an analysis by Victor Yagun, a Major General in the Security Service of Ukraine and former deputy head of the agency. The Security Service of Ukraine, known as the SBU, is the country's chief internal security and counterintelligence authority. Yagun emphasized that the case dismantles long-held myths regarding cryptocurrency privacy and transaction anonymity.
Yagun explained that while public blockchains permanently record financial movements, centralized cryptocurrency exchanges operating under mandatory Know Your Customer rules easily connect ledger transactions to passport numbers, telephone contacts, digital devices, and specific individuals. He warned that during wartime, such data collections represent valuable intelligence and counterintelligence information concerning donors, volunteers, military personnel, aid recipients, and operational networks.
Sensitive financial transfers conducted through centralized crypto platforms must be evaluated with the same caution as conventional banking transactions, Yagun added. He stressed that users must operate under the assumption that customer data held by intermediaries can reach third parties under certain circumstances, adding that the Binance incident demonstrates that blockchain technology does not automatically guarantee personal anonymity or safety.
