A Kosovo national who helped operate the Rydox cybercrime marketplace has pleaded guilty in the United States to charges connected to selling stolen personal information and tools used for online fraud.
Ardit Kutleshi, 28, entered his guilty plea in federal court in Pennsylvania on September 22. He admitted to aggravated identity theft and conspiracy to commit money laundering, bringing another major part of the case against the Rydox operation closer to completion.
Rydox had been active since at least 2016 and served as an online marketplace where criminals could purchase stolen personally identifiable information, compromised access devices, and other resources useful for fraud and cybercrime. According to court documents, the platform completed more than 7,600 transactions and generated at least $232,000 in revenue during its operation.
The marketplace included personal information stolen from victims in the United States. By providing both stolen identities and tools that could be used in additional crimes, Rydox created an infrastructure through which customers could obtain material needed for identity theft and other forms of online fraud.
Kutleshi operated the service with his brother, Jetmir Kutleshi. Jetmir previously pleaded guilty and was sentenced in December 2025 before being deported to Kosovo.
Law enforcement began dismantling the marketplace in December 2024. Kosovo authorities arrested Ardit Kutleshi that month, while US authorities obtained a court order to seize the Rydox.cc domain. Taking control of the domain prevented operators and customers from continuing to use the website to trade stolen information and cybercrime products.
Kutleshi was subsequently extradited from Kosovo to the United States in 2025. The investigation involved the FBI as well as law enforcement and judicial authorities in Kosovo, Albania, and Malaysia, highlighting the international nature of the operation and the effort required to pursue its administrators.
He now faces significant prison time. Aggravated identity theft carries a mandatory minimum sentence of two years, while the money laundering conspiracy charge carries a maximum sentence of 20 years.
Kutleshi is scheduled to be sentenced on February 9, 2027. The final punishment will be determined by a federal judge after considering US sentencing guidelines and other statutory factors.