Russian investigators got their hands on Binance user transaction data months after the exchange publicly claimed to have left the country. The victim? Yuri Belenkiy, a dual Russian-Bulgarian citizen accused of sending just over $700 to Ukrainian military groups. The silence after the pump tells the real story: Binance’s ‘exit’ was never a full retreat—only a rebranding of its data pipeline.
Protocols are revealing a pattern that challenges the official narrative. In September 2023, Binance announced it had sold its Russian business to CommEX, a newly formed exchange that bore an uncanny resemblance to Binance’s own infrastructure. But by May 2024, CommEX had shut down after barely eight months of operation. The timing is too convenient. This wasn’t a genuine acquisition; it was a white-label arrangement designed to create a paper trail for ‘exit’ while keeping the backend intact.
Now, fresh reporting based on Russian court documents and interviews with legal experts shows that Binance provided the Russian Investigative Committee with detailed transaction histories of Belenkiy dating from January 2023 to March 2024. That’s well after the ‘exit’ date. The data included KYC information, wallet addresses, and transfer amounts—everything a sovereign state needs to build a criminal case.
Context: Why This Matters Now
Binance is the world’s largest centralized exchange, handling billions in daily volume. Its compliance posture is under a microscope following the landmark $4.3 billion settlement with U.S. authorities in November 2023. That settlement included a deferred prosecution agreement, an independent monitor, and strict anti-money laundering commitments. The promise was clear: Binance would clean up its act.
But the Russia case reveals a fundamental tension: Binance must cooperate with law enforcement globally to maintain its license access, yet different jurisdictions have conflicting demands. The U.S. wants Binance to enforce sanctions against Russia, the EU wants it to protect user data under GDPR, and Russia itself demands cooperation for its own investigations. The exchange is trying to satisfy all three, and the Belenkiy case shows it’s leaning toward Russia when push comes to shove.
Core: The Technical Anatomy of a Data Leak
From a technical perspective, what Binance did is straightforward. Centralized exchanges store all KYC and transaction data in a centralized database. When Binance claims to ‘exit’ a country, it doesn’t delete that data. Instead, it retains it for compliance reasons—typically 5 to 10 years. The data is then accessible through the same law enforcement request system that Binance uses for other jurisdictions.
The key finding here is that Binance’s cooperation with Russia did not require any special technical development. The exchange already had a ‘Law Enforcement Request System’ portal. The request from the Russian Investigative Committee was processed through the same pipeline as requests from U.S. or European authorities. The only difference is that the request was honored despite the claimed exit.
CommEX’s role is equally suspicious. The exchange used the same trading engine, API endpoints, and user interface as Binance. It was essentially a clone operated under a different brand. The short lifespan—under eight months—suggests it was never intended to be a sustainable business. Instead, it served as a temporary shell to absorb the Russian user base and allow Binance to claim it had divested. In reality, the data remained under Binance’s control.
I’ve been covering exchange compliance since the 2017 ICO boom. I remember sitting in a Nairobi coffee shop in 2023, watching the CommEX announcement break. My gut told me it was a facade. The speed of the deal, the lack of public financial details, the eerie similarity of the platform—all red flags. Now we have the receipts.
Contrarian: The Real Risk Isn’t Russia—It’s Europe
Most analysts are focusing on U.S. sanctions risk. But the more immediate threat to Binance comes from the European Union. Belenkiy holds a Bulgarian residence permit, making him an EU citizen under GDPR. The regulation strictly limits the transfer of personal data to third countries that do not have an ‘adequate level of protection.’ Russia is not on that list.
Legal experts cited in the reporting argue that Binance may have violated Articles 44-49 of GDPR by handing over Belenkiy’s data. The potential fine is up to 4% of global annual turnover or €20 million, whichever is higher. For Binance, that could mean billions of dollars.
But here’s the contrarian twist: Binance might be using this cooperation as a bargaining chip. By showing that it is willing to cooperate with all governments, including Russia, the exchange reinforces its narrative that it is a neutral, apolitical infrastructure provider. CEO Richard Teng’s statement—that Binance will respond to lawful requests from any jurisdiction, including the U.S.—is a deliberate positioning as a ‘global compliance intermediary.’
This strategy is a double-edged sword. On one hand, it may appease regulators in the short term. On the other, it makes Binance a target for geopolitical pressure. The Belenkiy case is just one data point, but the Russian Investigative Committee has already asked for a broader list of users who sent funds to the same recipient. If Binance complies, it will escalate the data-sharing. If it refuses, it risks sanctions from Russia.
The silence after the pump tells the real story: Binance is trapped in a compliance trilemma. It cannot satisfy the U.S., the EU, and Russia simultaneously. The Belenkiy incident proves that when forced to choose, the exchange leans toward the country with the most coercive power—in this case, Russia, which is conducting a criminal investigation with national security implications.
Takeaway: What to Watch Next
The European Data Protection Board (EDPB) could launch a proactive investigation without waiting for a complaint. If they do, Binance will face a multi-year probe that could result in massive fines and operational restrictions in Europe. The independent monitor appointed under the U.S. settlement will also be watching closely. Any finding that Binance violated its U.S. obligations by cooperating with Russia could trigger a breach of the deferred prosecution agreement.
For users, this is a wake-up call. The promise of ‘data privacy’ on a centralized exchange is an illusion. Your KYC data is a bargaining chip in global power games. The real question is not whether Binance will share your data—it’s who will ask first.
Fast facts, slow trust. Verify before you vibe. The next request could be from a government you never expected to access your transaction history.