Why Is Binance Facing Questions Over Russian Client Data?
Binance provided Russian law enforcement with transaction details linked to cryptocurrency donations to Ukrainian fundraising campaigns, according to law enforcement documents, raising questions about the exchange’s continuing cooperation with authorities after saying it had fully exited Russia in 2023.
The documents concern Yuri Belenkiy, a 49-year-old Russian passport holder with a Bulgarian residency permit who was detained in September 2025. Russia’s Investigative Committee later accused him of sending more than $700 to the Ukrainian military and a group Moscow designates as a terrorist organization.
Russian investigators requested Belenkiy’s transaction history from Binance, and the exchange supplied information showing cryptocurrency transfers to Ukrainian organizations, the documents show. Those transactions were subsequently incorporated into evidence supporting terrorism financing charges against him.
Binance said it complies with lawful information requests from law enforcement agencies while considering applicable privacy and regulatory requirements. The company declined to discuss the specific request or Belenkiy’s case.
“Binance does not make or enforce the laws of any jurisdiction, determine charges, or decide how any government uses information in legal proceedings,” a spokesperson said. “Those decisions rest solely with the relevant Authorities.”
Why Does Binance’s 2023 Russia Exit Matter?
The case is drawing attention because Binance announced in September 2023 that it was selling its entire Russian business and fully leaving the country. At the time, the exchange said operating in Russia was incompatible with its compliance strategy and that it would retain no revenue-sharing arrangement or option to repurchase the business.
The documents nevertheless indicate that Russian investigators were still able to request information from Binance after the exit. Investigators received replies from an email address associated with Binance’s Russian law enforcement request process, while the company’s website had advised Russian and Belarusian authorities to use that address when seeking information.
Corporate withdrawal from a market does not necessarily end an exchange’s obligation to respond to legally valid requests concerning historical users or transactions. The central issue is whether Binance was legally permitted to disclose the information under the privacy rules that applied to Belenkiy.
The documents relate only to his case. They do not establish whether Binance supplied information about other people who donated to Ukrainian causes, although one document shows investigators also asked the exchange to identify other users who sent funds to a wallet promoted by exiled Kremlin critic Arkady Babchenko.
Investor Takeaway
The case creates a compliance and reputation risk for Binance because it tests how the exchange handles law enforcement requests from countries it has publicly exited, particularly when customers may be protected by stricter privacy rules elsewhere.
Could The Data Transfer Have Breached EU Privacy Rules?
The legal question may depend on whether Belenkiy was registered with Binance as an EU resident. His Bulgarian residency permit could potentially bring his data within the scope of the European Union’s General Data Protection Regulation, although it has not been established how his Binance account was registered.
Crypto regulation lawyer Mike Bystrov said that if Belenkiy was covered by GDPR, transferring his personal information to Russian authorities could require strict legal safeguards. Russia is not treated by the EU as a jurisdiction providing an adequate level of personal-data protection, making transfers of personal information there particularly sensitive.
Binance disputed the suggestion that it had no basis to provide the information but did not address whether the specific disclosure complied with GDPR. Bulgaria’s Commission for Personal Data Protection did not provide an assessment of whether privacy rules had been breached.
The European Data Protection Board also declined to comment on the individual case, saying enforcement is handled by national authorities within EU member states.
That leaves the privacy question unresolved. Belenkiy’s lawyer did not clarify whether his Binance account was registered using his Bulgarian residency, and the available documents do not establish what legal framework Binance relied on when responding to Russian investigators.
What Does The Case Mean For Crypto Exchanges?
The dispute illustrates the difficult cross-border obligations facing global cryptocurrency platforms. Exchanges routinely receive law enforcement requests from multiple jurisdictions, but privacy, sanctions and data-transfer laws can impose different requirements depending on where the customer lives and where the requesting authority is based.
The issue is especially sensitive in Russia, where dozens of people who donated to causes later classified by Moscow as extremist or terrorist have been prosecuted and convicted, according to rights groups tracking such cases.
Belenkiy remains in a Russian jail awaiting trial. The Investigative Committee alleges that he made cryptocurrency transfers between January 2023 and March 2024 after seeing fundraising appeals for medical equipment for Ukrainian soldiers.
For Binance, the immediate risk is less about whether exchanges should ever cooperate with law enforcement and more about how those requests are screened when customers may fall under another jurisdiction’s privacy protections. Regulators and users may now focus on whether the company’s procedures adequately separate legitimate cooperation from transfers that could conflict with European data rules.
The case may also prompt closer scrutiny of what an exchange means when it says it has exited a country. Selling a local business can end commercial operations while leaving historical records, customer accounts and law enforcement channels active for years afterward.
