🇷🇺🇺🇦🇷🇴🇧🇾🇲🇩🇬🇪
EASTERN EUROPE & CIS
The technical core of cybercrime: ransomware crews, carding forums and malware builders, with laundering routed through the region's banks.
TAP A COUNTRY FOR ITS OWN PAGE
🇷🇺 #1 WCI
Russia
Fraud typesRansomware, carding, dark web, APT hacking, money laundering
#1 in all 5 WCI categories. Most technically skilled globally. State tolerance of outbound cybercrime. LockBit, REvil and other major ransomware brands were run by Russian-speaking crews.
🇺🇦 #2 WCI
Ukraine
Fraud typesRansomware, carding, malware dev, hacking-for-hire
#2 globally for cybercrime skill. War has not reduced output. Criminal/hacktivist overlap.
🇷🇴 #6 WCI
Romania
Fraud typesCarding, auction fraud, ATM skimming, malware
'Hackerville' (Ramnicu Valcea). Top 10 in every WCI category. Strong technical pipeline.
🇧🇾 WCI top 20
Belarus
Fraud typesRansomware infrastructure, money laundering
Safe harbor alongside Russia. Infrastructure for ransomware operations.
🇲🇩 GI-TOC flagged
Moldova
Fraud typesMoney laundering, banking fraud
The 'Russian Laundromat': $20.8B moved through Moldovan banks in 2010–2014 (OCCRP); some estimates go up to $80B.
🇬🇪 Sumsub flagged
Georgia
Fraud typesCall center scams, identity fraud
Growing digital economy and weak enforcement mean rising fraud.
🇰🇿 Emerging
Kazakhstan
Fraud typesCrypto mining fraud, investment scams
Growing crypto adoption without matching regulation.