James Watt
The detention of IT specialist Yuri Belenkiy by Russian investigators in September 2025 has brought into sharp focus the enduring nature of digital footprints within the global cryptocurrency ecosystem. Although Binance, the world’s largest cryptocurrency exchange, had formally announced its departure from the Russian market nearly two years prior, the case reveals that its legacy customer records remained accessible to local law enforcement. Documents reviewed by investigative journalists indicate that Binance provided personal and transaction data that became a cornerstone of a Russian terrorism-financing case against Belenkiy.
The 49-year-old Belenkiy, a Russian citizen who also holds a Bulgarian residence permit, stands accused of transferring approximately $700 in cryptocurrency to Ukrainian recipients between January 2023 and March 2024. According to Russian authorities, these funds were intended to support a group associated with the Azov military unit, an organization that Moscow officially designates as a terrorist entity. Belenkiy is currently held in a Russian detention facility awaiting trial. The allegations against him have not yet been adjudicated in court, but the procedural history of the case highlights a critical vulnerability for cryptocurrency users: the distinction between a company’s commercial exit from a country and the legal persistence of the data it collected while operating there.
The Persistence of the Digital Archive
When a major financial institution or cryptocurrency exchange exits a jurisdiction, it typically follows a series of operational steps. It may sell its local business unit, cease onboarding new users, offboard existing ones, and withdraw its physical staff. However, the regulatory framework governing global finance—specifically Anti-Money Laundering (AML) and Know Your Customer (KYC) statutes—requires these entities to retain records for several years. These records include high-resolution scans of passports, residential addresses, phone numbers, and exhaustive transaction histories.
The Belenkiy case demonstrates that while a user may cease to be a "customer" in a commercial sense, they remain a "data subject" in a legal sense. Withdrawing assets from an exchange ends the custodial relationship, but the identity and transaction data submitted during the account’s lifetime remain in an archive. This archive is often subject to subpoenas and law enforcement requests long after the exchange has ceased active trading in the region.
In September 2023, Binance announced it had reached an agreement to sell the entirety of its Russian business to a newly formed exchange called CommEX. At the time, Binance leadership framed the move as a strategic decision to maintain compliance with its global strategy, asserting that continuing to operate in Russia was no longer compatible with its regulatory goals. The company explicitly denied any ongoing revenue-sharing agreements or options to buy back the business, positioning the sale as a "clean break."
However, investigative findings suggest that the data infrastructure associated with the former Russian operations remained responsive to local legal inquiries. Documents show that a request for Belenkiy’s transaction records was met with a response from an email address using the domain binanceholdings.ru. This response allegedly contained a comprehensive dossier on Belenkiy, including his date of birth, residential address, phone number, and copies of both his Russian passport and Bulgarian residence permit.
Chronology of the Belenkiy Case and Binance’s Exit
To understand the intersection of Binance’s market withdrawal and the criminal proceedings against Belenkiy, it is necessary to examine the timeline of events that led to his detention.
- January 2023: The period of alleged transactions begins. At this time, Binance is still operating in Russia, though under increasing pressure due to international sanctions.
- September 27, 2023: Binance officially announces the sale of its Russian business to CommEX, stating it will take up to one year to transition existing users.
- March 2024: The period of alleged transactions ends. By this time, Binance’s direct presence in Russia has significantly diminished, and CommEX has begun its own operations.
- September 2025: Russian authorities detain Yuri Belenkiy.
- October 2025: The Investigative Committee of the Russian Federation presents formal allegations of terrorism financing.
- 2025 Investigative Period: Transaction records and KYC data, originally collected by Binance, are formally incorporated into the evidence file against Belenkiy.
The documents do not suggest that Binance continued to facilitate active trading for Russian users in secret. Instead, they illustrate that data cooperation is a separate function from customer service. A "corporate exit" removes the brand and the staff, but a "data exit" is much more complex, often hindered by the very laws designed to prevent financial crime.
The Paradox of KYC and Pseudonymity
The core appeal of blockchain technology has historically been its pseudonymity. Transactions are recorded on a public ledger under alphanumeric addresses rather than personal names. However, the integration of cryptocurrency into the global financial system has led to the mandatory implementation of KYC protocols at centralized exchanges. This creates what privacy advocates call the "crypto privacy paradox."
Governments require exchanges to collect identifying data to deter money laundering and sanctions evasion. However, this same system produces a permanent, searchable archive that connects a person’s real-world identity to their blockchain activity. Once an investigator links a specific wallet to a KYC profile, they can use blockchain analysis tools to reconstruct the user’s entire history, potentially reaching back years.
In the case of Belenkiy, the $700 in transfers were likely traceable on the public blockchain. Without the KYC data provided by the exchange, however, proving that Belenkiy was the specific individual behind those transfers would have been significantly more difficult. The exchange’s identity file provided the "missing key" that allowed investigators to attach a name and a face to the digital transactions.
Official Responses and Regulatory Obligations
In response to inquiries regarding the Belenkiy case, Binance has maintained that it adheres to a strict protocol for law enforcement requests. The exchange stated that it cooperates with lawful requests from authorities provided they meet applicable legal, privacy, and regulatory requirements. Binance emphasized that it does not have a role in deciding what charges are filed or how the information it provides is ultimately used by the prosecution.
According to Binance’s public government law enforcement guidelines, officials must provide a valid court order, police order, or warrant from a competent jurisdiction. The exchange also specifies that requests must have a clear legal basis. While Binance reserves the right to notify users of data requests, this is often barred by "gag orders" or specific legal provisions in national security cases. Furthermore, "preservation requests" allow authorities to ask an exchange to hold onto data for 90 days while they secure the necessary legal paperwork for a full disclosure.
This procedural framework explains how the data transfer occurred but leaves several questions unanswered. It remains unclear which specific legal entity within the Binance corporate structure controlled Belenkiy’s account at the time of the data production, or which specific law compelled the disclosure of his Bulgarian residence permit.
The GDPR and International Data Transfers
The inclusion of Belenkiy’s Bulgarian residence permit in the investigative file introduces a complex layer of European data protection law. Under the General Data Protection Regulation (GDPR), European citizens and residents are granted significant rights regarding how their personal data is handled and transferred to third countries.
If Belenkiy’s account had been managed by a Binance entity based in the European Union, the transfer of his data to Russian authorities would have been subject to stringent safeguards. The European Commission requires that such transfers only occur if there is an "adequacy decision" regarding the recipient country’s data protection laws, or if specific safeguards—such as standard contractual clauses—are in place.
However, GDPR does not grant an absolute "right to be forgotten" in the context of financial services. Article 17 of the GDPR allows companies to refuse a request for data erasure if the processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims. Financial institutions are typically required to keep records for five to ten years to comply with AML laws. This means that even if a user closes their account and invokes their GDPR rights, the exchange is often legally barred from deleting the very data that law enforcement might later request.
Broader Implications for Global Crypto Users
The prosecution of Yuri Belenkiy serves as a case study for the risks inherent in the "compliance-first" era of cryptocurrency. For users in politically volatile regions, a transaction that is considered a lawful donation in one jurisdiction may be reclassified as a criminal act in another. As governments increasingly use blockchain analytics and KYC data to enforce national security laws, the permanence of the ledger becomes a double-edged sword.
This reality is driving a push toward more advanced privacy technologies within the industry. Proposals for the use of zero-knowledge proofs (ZKPs) in financial compliance are gaining traction. Such systems would theoretically allow a user to prove they are not on a sanctions list or that they meet age requirements without handing over a reusable copy of their passport or residential address to a centralized database. By reducing the number of complete identity files held by intermediaries, the industry could mitigate the risk of data being used in ways the user never intended.
As it stands, the Belenkiy case underscores a sobering truth: when a company leaves a market, it takes its services with it, but it often leaves the data behind. For the former customers of Binance in Russia, the "operating exit" of 2023 did not signal the end of their relationship with the company’s archives. Instead, those archives remain a dormant but accessible resource for a legal system that operates on a much longer timeline than the commercial world. The case continues to develop as Belenkiy awaits trial, but the precedent regarding data persistence has already been clearly established.
