The Numbers That Don't Lie

Confirmed - Trade Data

In 2023, Armenia imported approximately 17 tons of gold from Russia, valued at roughly $1 billion. That alone was anomalous for a country with no significant gold refining tradition and a GDP of $24 billion.

Then came 2024.

In the first five months of 2024 alone, Armenian gold imports from Russia exploded to 68 tons -- valued at approximately $4 billion. That is four times the entire previous year's volume, compressed into five months. For a country the size of Armenia, this is not gold trade. This is a pipeline.

None of this gold remained in Armenia. It arrived from Russia. It was re-labeled as "Armenian-origin." It was exported to the United Arab Emirates, India, and China. The country was a waystation -- a laundering mechanism with a flag.

PeriodVolumeValue (approx.)SourceDestination
Full year 202317 tons$1 billion~30 Russian companiesUAE, India, China
Jan-May 202468 tons$4 billion~30 Russian companiesUAE, India, China

To put this in perspective: $4 billion in five months is roughly 17% of Armenia's entire annual GDP flowing through a single commodity, through a single factory, and leaving the country completely. This is not an economy participating in global trade. This is an economy being used as a washing machine.

The Factory: Yerevan Jewelry Factory

Confirmed - Corporate Records Pattern Analysis

At the center of this operation sits the Yerevan Jewelry Factory -- controlled by Khachatur Sukiasyan, one of Armenia's most powerful oligarchs. The factory received gold from approximately 30 different Russian companies. It processed the metal. It re-certified its origin as Armenian. And it shipped it out.

The operation is elegantly simple. Russian gold cannot easily enter international markets due to sanctions imposed after Russia's invasion of Ukraine. But Armenian gold can. So Russian gold becomes Armenian gold inside the walls of this factory, and then it flows freely to Dubai, Mumbai, and Shanghai.

This is the textbook definition of sanctions evasion -- and it is happening at industrial scale.

The Sukiasyan Empire

Confirmed - Corporate Records Confirmed - DNS Records

To understand the gold laundromat, you must understand the man behind it. Khachatur Sukiasyan is not simply a jeweler. He controls a sprawling business empire that touches nearly every sector of the Armenian economy:

One man. One family. Banking, aviation, gold processing, consumer brands, fuel distribution. And at the center of it all, a $4 billion sanctions evasion pipeline.

The Diamond Connection: FSB and Alrosa

Pattern Analysis

The gold is not Sukiasyan's only connection to Russian precious commodities under sanctions pressure. Russia's Federal Security Service (FSB) has accused Sukiasyan of benefiting from stolen diamonds from Alrosa -- Russia's state-controlled diamond mining giant and the world's largest diamond producer by volume.

The specifics: 250 carats of diamonds were allegedly sold to ADM Diamonds for just $24,153 -- a fraction of their market value. The FSB flagged this transaction as suspicious. When Russia's own security services question your diamond deals, the scale of the operation becomes apparent.

Alrosa itself has been sanctioned by the United States, the European Union, and the United Kingdom. The Sukiasyan network appears to sit at the intersection of multiple sanctioned Russian commodity flows -- gold, diamonds, and the financial infrastructure to move them.

The Cyprus Architecture

Confirmed - DNS Records Confirmed - Breach Data

No major sanctions evasion scheme operates without offshore infrastructure. The Sukiasyan network is no exception. Three Cyprus-registered entities form the financial architecture:

EntityJurisdictionDigital FootprintFunction
MirelisCyprusMicrosoft 365; employee "dorothy" -- password 123456Offshore shell
NeltaxCyprusSmarsh financial compliance softwareFinancial compliance/monitoring
Vardi InvestCyprusCorporate registryInvestment vehicle

Mirelis is particularly revealing. This offshore shell uses Microsoft 365 for its operations. An employee account under the name "dorothy" was found in breach data with the password 123456 -- the same password that protects Armenia's border checkpoints, the same password found on the Bjni mineral water account. The 123456 network from Investigation #1 extends directly into the offshore architecture of the gold laundromat.

Neltax runs Smarsh -- a financial compliance and communications monitoring platform typically used by firms that need to demonstrate regulatory compliance. The irony is staggering: a compliance tool deployed by a network engaged in industrial-scale sanctions evasion.

Physical Presence in Cyprus: The Password That Proves It

Confirmed - Breach Data

One piece of evidence ties the Sukiasyan family physically to Cyprus operations. A CyTA (Cyprus Telecommunications Authority) subscriber account was found in breach data:

Account: a26952566@cytanet.com.cy
Password: mariam-sukiasyan

CyTA is the state-owned telecommunications provider in Cyprus. A cytanet.com.cy email is not something you obtain remotely -- it requires a physical subscription, a Cyprus address, a local presence. And the password itself -- "mariam-sukiasyan" -- contains the family name.

This is not circumstantial. This is a digital fingerprint that places the Sukiasyan family physically in Cyprus, where their offshore entities operate. The password is the proof of presence.

The Russian Digital Infrastructure

Confirmed - DNS Records Confirmed - Breach Data

The digital infrastructure of the Sukiasyan empire reveals where its true loyalties lie:

The pattern is consistent: a network engaged in laundering Russian gold through Armenia maintains its digital infrastructure in Russia, uses Russian email services, and protects it all with the world's most common password.

The Azerbaijani Gasoline Paradox

Confirmed - Trade Data

Perhaps the most revealing detail about Sukiasyan's true nature is Ran-Oil's importation of Azerbaijani gasoline into Armenia.

Azerbaijan blockaded Armenia's Lachin corridor in 2023, starving 120,000 ethnic Armenians in Nagorno-Karabakh. Azerbaijan launched a military offensive that emptied Nagorno-Karabakh of its entire Armenian population. Azerbaijan continues to threaten Armenian sovereign territory.

And Khachatur Sukiasyan's company imported Azerbaijani gasoline for profit.

This is a man who launders Russian gold to evade Western sanctions while simultaneously enriching Azerbaijan's petro-state economy. National loyalty is not a factor. Money is the only flag this empire salutes.

Scale of the Operation

To appreciate what $4 billion in five months means for Armenia:

This is not a business. This is a state-within-a-state financial operation, running parallel to Armenia's legitimate economy and dwarfing most of its sectors.

Who Benefits?

The gold laundromat serves multiple parties:

Who does not benefit? Armenia. Not a single gram of this gold stayed in the country. No jobs were created at scale. No national wealth was built. The country's name was used, its sovereignty was leveraged, and its international reputation was damaged -- all for the profit of one oligarch and his Russian partners.

What This Means

Armenia is being used as the world's largest gold laundering station. The scale -- $4 billion in five months -- places this among the largest sanctions evasion operations documented anywhere in the world since the invasion of Ukraine.

The man at the center, Khachatur Sukiasyan, simultaneously owns the bank that moves the money, the factory that re-labels the gold, the airline that connects the country, the consumer brands that make his name household, and a fuel company that imports from Armenia's enemy.

His offshore shells in Cyprus are protected by 123456. His websites are hosted in St. Petersburg. His bank emails through Russian servers. And 68 tons of Russian gold passed through his factory in five months without a single Armenian institution raising an alarm.

When $4 billion in sanctioned gold flows through your country and not a gram stays behind, you are not a trading partner. You are a crime scene.

Methodology

This investigation is based on analysis of international trade statistics, publicly available breach databases, DNS registration records, corporate registries in Armenia and Cyprus, BEGET hosting records, CyTA subscriber data from public breaches, and open-source intelligence. No systems were accessed, penetrated, or tested. OWL does not encourage unauthorized access to any system.

Previous: Investigation #10 Next: Investigation #12 -- Coming Soon