Alex Slavomir Bures, a London resident with deep ties to cybercrime and money laundering, has resurfaced under the new identity “XXX Rico.” Until 2019, Bures was a key player in laundering stolen funds for the cybercrime organization of the late Uwe Lenhoff. Now, whistleblower reports suggest he remains active in the crypto space, operating the online magazine Crypto Daily under a newly established Albanian entity. This report examines Bures’ criminal background, his potential involvement in new illicit activities, and the alarming irregularities surrounding his British passport.
Key Points:
- Slavomir Bures was a key money launderer for German cybercriminal Uwe Lenhoff, who defrauded retail investors of millions.
- Bures, originally from Czechoslovakia, moved to London in the 1990s and allegedly laundered money for illegal casinos, brothels, and pornography businesses.
- Lenhoff and Bures sought to integrate cryptocurrencies into their money laundering operations, replacing human money mules.
- After Lenhoff’s 2019 arrest and his mysterious death in custody in 2020, Bures vanished but has now reappeared under the identity “XXX Rico.”
- Documents reveal that Bures, under his new alias, founded Crypto Daily sphk in Albania, an entity potentially linked to past cybercrime activities.
- Crypto Daily was previously used to publish defamatory articles against FinTelegram and was linked to cybercriminal networks.
- British authorities issued a passport under the suspicious first name “XXX,” raising questions about fraudulent identity manipulation.
- Bures allegedly still owns real estate in London and remains under suspicion for ongoing financial crimes.
- Crypto Daily, previously operated from Singapore under CryptoDaily.co.uk, played a central role in Lenhoff’s money laundering operations.
- OCBC Bank accounts associated with Crypto Daily were used to funnel stolen funds from Lenhoff’s broker scams, including XMarkets and TradoVest.
- Investigators confirmed payments from Crypto Daily to boiler rooms in the Czech Republic (Global TactiCall) and Kosovo (Silkline Group).
- Bures (a/k/a XXX Rico) is linked to Dolores Invest s.r.o. in Prague, another money laundering entity in Lenhoff’s cybercrime network.
- Authorities traced approximately €11 million laundered through Dolores Invest, with €7.86 million directly tied to victims of Lenhoff’s scams.
- Crypto Daily and Dolores Invest were financially interconnected, processing stolen funds for fraudulent online operations.
Narrative: The Money Launderer in the Shadows
In the intricate world of cybercrime, the names of facilitators often fade into obscurity once a criminal enterprise is dismantled. However, some key figures resurface under new guises, continuing their illicit trade. One such individual is “Alex” Slavomir Bures, who played a crucial role in laundering millions in stolen funds for the now-infamous German cybercriminal Uwe Lenhoff.
Bures first came to FinTelegram’s attention in 2016, when Lenhoff identified him as one of his top financial facilitators. According to Lenhoff, Bures was instrumental in channeling illicit proceeds from fraudulent online gambling and betting platforms into seemingly legitimate businesses. Bures’ self-professed history in organized crime is as audacious as it is damning—he claimed to have laundered money for illegal casinos, brothels, and porn businesses before transitioning into cyber-enabled financial crime.
FinTelegram’s undercover investigations led to direct encounters with Bures in London’s Canary Wharf. During these meetings, Bures flaunted his connections to Eastern European elites and claimed lineage to a former Czechoslovakian prime minister. At the time, he and Lenhoff were actively seeking cryptocurrency partners to scale their money laundering operations, aiming to bypass traditional banking systems and eliminate reliance on money mule networks.
FinTelegram reported these findings to the UK’s National Crime Agency (NCA) and other European law enforcement bodies, which were already investigating Lenhoff’s fraudulent empire. This intelligence played a critical role in Lenhoff’s arrest in early 2019. However, Lenhoff’s sudden death in custody in 2020 remains shrouded in mystery, with speculation that Serbian organized crime could have orchestrated his demise due to financial disputes.
Following Lenhoff’s downfall, Bures disappeared from FinTelegram’s radar—until now. New whistleblower reports indicate that Bures has re-emerged under a bizarre new identity: “XXX Rico.” His newly acquired British passport, listing this improbable name, has raised significant red flags regarding identity fraud and passport manipulation. Despite this, Albanian authorities accepted his documentation without issue, allowing him to establish Crypto Daily sphk.
Crypto Daily, previously operated out of Singapore, was actively involved in Lenhoff’s cybercrime network between 2017 and 2021. The publication played a dual role—promoting fraudulent schemes while launching smear campaigns against investigative entities like FinTelegram. Investigators have linked Crypto Daily’s OCBC Bank accounts in Singapore to payments received from victims of Lenhoff’s fraudulent broker platforms such as XMarkets and TradoVest.
In addition, Crypto Daily made payments to boiler rooms run by Lenhoff’s organization in the Czech Republic and Kosovo. Evidence suggests that another entity, Dorodes Invest s.r.o., operated as a parallel money laundering unit for Lenhoff. Initially managed by Bures, Dorodes Invest processed approximately €11 million in suspect transactions, with €7.86 million traced directly to victims of Lenhoff’s scams.
Bures’ name change to XXX Rico appears to coincide with Lenhoff’s arrest in 2019—suggesting that he sought to evade law enforcement scrutiny. Despite his new identity, bank records confirm transactions between Crypto Daily and Dorodes Invest, reinforcing their role in Lenhoff’s cybercrime empire.
Actionable Insight & Call for Whistleblower Information
The resurfacing of Slavomir Bures, now operating as “XXX Rico,” underscores the persistent nature of cybercriminal networks and their ability to exploit regulatory loopholes. His involvement in Crypto Daily, coupled with his history of money laundering, demands urgent investigation.
FinTelegram is calling on whistleblowers, industry insiders, and anyone with relevant information about Bures’ current financial dealings, properties, or connections to report their findings via our whistleblower system Whistle42. Any information that aids in exposing illicit financial networks will contribute to global financial transparency and the dismantling of cybercriminal enterprises.
