Moscow’s Federation Tower is the tallest building in Europe — a 95-story glass-and-steel structure on the Moscow River that houses corporate offices, luxury apartments, and restaurants. It is also, according to Britain’s National Crime Agency (NCA), the operational headquarters of two money laundering networks that moved billions of dollars annually for an extraordinary range of clients: Kremlin elites evading sanctions, South American drug cartels, ransomware gangs, Irish organized crime syndicates, and Russian intelligence operations.
Operation Destabilise, an international law enforcement investigation announced in late 2024, exposed the networks known as Smart and TGR Group. The operation resulted in 84 arrests across multiple countries, the seizure of over £20 million in cash and cryptocurrency, and sanctions designations by both U.S. and U.K. authorities. But beyond the headline numbers, the investigation reveals something more significant: the infrastructure through which Russian state corruption intersects with global organized crime.
The Two Networks: Smart and TGR Group
At the apex of the laundering operation sit two distinct but interconnected organizations, both operating from Federation Tower.
Smart was led by Ekaterina Zhdanova, described by investigators as a “business celebrity” in Russian financial circles. Her network specialized in high-value, bespoke laundering services for wealthy Russian clients — including sanctioned elites seeking to move capital out of the reach of Western enforcement. Zhdanova’s operation reportedly handled funds for Russian espionage activities from late 2022 through the summer of 2023, providing financial logistics for intelligence operations at a time when Russia’s conventional banking channels were under unprecedented scrutiny.
TGR Group, led by George Rossi and assisted by Elena Chirkinyan and Andrejs Bradens, operated a complementary but broader service. While Smart focused on elite clients, TGR provided what investigators describe as “critical liquidity and logistics services” — the ability to collect funds in one country and make equivalent value available in another, bypassing the formal banking system entirely.
The Mechanism: How Billions Moved Without Banks
The laundering networks operated on a principle that investigators sometimes call “mirror banking” or “value transfer.” Rather than moving physical currency across borders — a process vulnerable to detection and seizure — Smart and TGR maintained pools of liquidity in multiple jurisdictions simultaneously.
A client in Russia wanting to move $5 million to the United Kingdom, for example, would deposit rubles with the network in Moscow. The network would then release an equivalent amount in pounds sterling from its UK cash reserves — drawn from the proceeds of drug trafficking, cybercrime, or other criminal revenue streams. No international wire transfer occurs; no correspondent banking relationship is triggered; no SWIFT message is generated.
TGR Group facilitated this by washing cash through legitimate businesses and a series of shell companies, routing value through the United Arab Emirates — a consistent feature of Russian capital flight infrastructure. The NCA estimated that over £100 million was moved within the UK each year by these networks alone, with global volumes reaching into the billions.
The Client List: Where Corruption Meets Crime
What distinguishes Operation Destabilise from conventional money laundering cases is the breadth of the client base. The same infrastructure that served Kremlin insiders evading post-2022 sanctions also processed funds for the Kinahan Organised Crime Group (an Irish crime syndicate), South American cocaine trafficking networks, and ransomware operators — including groups responsible for attacks on hospitals, municipalities, and critical infrastructure.
This convergence is not accidental. Russian money laundering networks have evolved into general-purpose financial utilities — infrastructure agnostic to the source of funds. A sanctioned oligarch’s capital and a drug cartel’s proceeds flow through the same channels, use the same shell companies, and exploit the same jurisdictional gaps. The economic logic is straightforward: diversified client bases increase volume, which improves liquidity, which makes the service more attractive to all users.
For Russian state actors, this convergence provides an additional layer of cover. When laundering infrastructure serves criminal organizations alongside state clients, enforcement becomes more complex — disrupting the network risks collateral intelligence losses, while the criminal clients create noise that can obscure state-directed financial flows.
The Federation Tower Connection: Real Estate as Infrastructure
Federation Tower’s role in this network deserves scrutiny beyond its function as an office address. The building has appeared repeatedly in investigations of Russian financial crime. Its combination of prestige commercial real estate, proximity to Moscow’s financial district, and a tenant base that includes both legitimate businesses and entities of investigative interest makes it a recurring node in financial crime mapping.
The choice of Federation Tower as a base of operations for both Smart and TGR Group is consistent with a broader pattern: Russian money laundering networks operate not from shadowy basements but from some of the most prominent addresses in Moscow’s commercial real estate market. The respectability of the address is itself a tool — it provides a veneer of legitimacy that facilitates interactions with financial institutions, corporate service providers, and international counterparts.
The Cryptocurrency Dimension
Both networks made extensive use of cryptocurrency to facilitate transfers, with the NCA seizing significant amounts in digital assets during the operation. The crypto component is particularly relevant in the context of Russia’s post-sanctions financial landscape, where stablecoins and other digital assets have become critical tools for value transfer that bypasses traditional banking oversight.
Chainalysis, a blockchain analytics firm, reported that the networks disrupted in Operation Destabilise were connected to some of the largest crypto-laundering flows identified in 2024 — volumes that suggest the networks’ digital operations may have been even larger than their traditional cash-based activities.
What Operation Destabilise Reveals
The NCA’s investigation offers a rare window into the mechanics of Russian financial crime at scale. Several structural observations emerge.
First, the networks’ durability suggests institutional support — or at minimum, tolerance — from Russian state structures. Operating openly from Moscow’s most prominent commercial building, handling funds for espionage operations, and processing billions in annual volume is not possible without some form of accommodation from security services.
Second, the UAE’s role as a transit point for laundered funds is consistent across nearly every recent investigation of Russian financial crime. From Federation Tower to Dubai — the pathway is well-worn, and the regulatory environment that enables it remains largely intact.
Third, the arrest count — 84 individuals across multiple countries — represents the downstream operatives, not the architects. Zhdanova and the senior leadership of both networks operated from Russian territory, beyond the reach of the NCA and its international partners. The structural capacity to rebuild these networks remains intact.
The towers of glass in Moscow continue to cast long shadows across the global financial system. Operation Destabilise illuminated one corner of that shadow. How many others remain in the dark is a question that current enforcement capabilities are only beginning to answer.
Sources: NCA — Operation Destabilise | The Record — Russian Money Laundering Networks Uncovered | OCCRP — Crypto Laundromat Tied to Russian Financial Sector | Chainalysis — NCA Disrupts Russian Laundering Network | Euronews — Russian Money Laundering Rings Exposed