Binance has handed over data of a Russian client to law enforcement: a precedent that changes the rules of the game.
The world's largest cryptocurrency exchange has once again found itself at the center of a scandal involving the transfer of user personal data to government agencies. This time, it concerns the disclosure of information at the request of Russia's Investigative Committee, which formed the basis for charging IT specialist Yuri Belenky with financing terrorism.
The essence of the case is as follows: the investigation claims that Belenky, from January 2023 to March 2024, transferred funds in support of Ukrainian military structures, including a unit known as the Azov brigade. The total amount of transfers, according to the prosecution, exceeded $700. The key evidence was transaction data that Binance provided upon an official request from Russian authorities.
Why this raises questions among lawyers and the community
The situation is notable because Binance officially announced its complete withdrawal from the Russian market back in 2023. It would be logical to assume that after this, the company should have had no remaining obligations to local regulators. However, as case materials show, the exchange not only maintained a communication channel with Russian law enforcement agencies but also promptly responded to the request, providing not only transaction history but also passport data, address, phone number, and even copies of the client's documents.
This story gains particular resonance due to Belenky's status. Holding Bulgarian residency, he could be considered an EU resident, which automatically falls under GDPR. According to this regulation, transferring data to countries with insufficient levels of protection (which the EU includes Russia) without a court decision and strict procedures is a gross violation.
Lawyers familiar with the case note that after leaving Russia, Binance had no formal obligations to respond to such requests. Moreover, the voluntary transfer of data could be regarded as a violation of European personal data protection legislation.
Official position and context
Exchange representatives, in response to inquiries, stated that the company "does not create laws" and merely cooperates with legitimate requests from authorities around the world, while decisions on how to use the obtained information are made by the states themselves. However, Binance previously published instructions for Russian and Belarusian security forces with an address for official inquiries, which indirectly confirms the existence of an established communication channel.
Belenky himself, currently in pre-trial detention, called the disclosure of donation data "inappropriate" and emphasized that he had warned other Russians about the risks of such transfers.
My view as an analyst: This case is a troubling signal for the entire industry. It demonstrates that even after leaving a market, cryptocurrency exchanges can remain tools in the hands of states, and the declared decentralization and privacy protection are merely a marketing ploy. For users from jurisdictions with unstable political situations, this means the need to reconsider fund storage strategies and choose platforms with stricter privacy policies, or better yet, use non-custodial solutions. Questions about how legal the data transfer was and whether the exchange violated GDPR remain open, and the answers to them could create an important precedent for the entire crypto market.