Marina Levkovich (Ginzburg) — a Ukrainian national whom the Financial Monitoring Agency of the Republic of Kazakhstan (AFM) placed on its wanted list on 2 February 2026. The agency suspects her of organising an illegal gambling business and considers her to be one of the coordinators of the PIN-UP and PINCO payment infrastructure. A Kazakhstani court authorised her detention in absentia. Levkovich’s name came up again in August, when the AFM answered journalists’ questions following the extradition from Vietnam of the Kazakhstani blogger Kaisar Kamza. [1] [2]
In this case, the player’s money may have passed through companies whose names he had never seen on the casino’s website. The investigation outlined where payment intermediaries may have operated within the chain. The key question regarding the Levkovich case is: what decisions, according to the investigation, did she make personally, and what documents can be used to confirm her involvement? [1] [3]
Marina Levkovich and Marina Ginzburg: how the name is listed in the wanted notice
In its February statement, the AFM listed the surname ‘Ginzburg’ in brackets after ‘Levkovich’, along with Ukrainian nationality and a date of birth of 8 November 1985. An August article by Tengri Life used the form ‘Marina Levkovich-Ginzburg’. These variations are important for source-tracing. It is not possible to determine from the alert when or on what grounds the second spelling appeared. The AFM does not specify Levkovich’s patronymic or position. [1] [2]
The portrait on the profile card is taken from a photograph provided. It matches the photograph of the woman in the wanted notice published by the Kazakhstani publication Informburo, citing the portal of the authorities responsible for legal statistics and special registers. [4]
What exactly does the AFM accuse Levkovich of?
The agency describes the alleged joint activities of Levkovich and Dmitry Druzhinsky. According to its account, they recruited participants, liaised with commercial banks and payment organisations, and were involved in setting up a system that received and transferred funds. The investigation links the activities of PIN-UP and PINCO to a group operating from abroad via affiliated companies. [1] [5]
Three types of action are key to establishing Levkovich’s personal role. Who proposed connecting a specific company? Who agreed the terms for receiving funds and the commission? Who could have given the order to transfer money from the transit account? These actions may have been carried out by different individuals, and the publicly released document does not attribute them to either Levkovich or Druzhinsky. Nor does it contain any contracts signed by her, details of personal income, or a list of transactions that the investigation directly attributes to her. [1]
Where did ‘Bonami’, Gold Pay and Cyber Pay appear in the payment chain?
The AFM has identified ‘Bonami’ LLP as the Kazakhstani entity. The company was granted a bookmaking licence to operate under the PIN-UP.KZ brand. Investigators claim that the authorised bookmaking activities were used as a front for an online casino. Verifying a specific payment requires comparing the service the customer selected on the website with the purpose of the transaction and the agreement under which the bank or aggregator processed it. [1] [6]
The authority also identifies Gold Pay and Cyber Pay as payment aggregators and reports that Cyber Pay has been renamed Pinnacle Financial Solutions. In a historical extract from the National Bank of Kazakhstan’s register dated 22 December 2025, the Cyber Pay system is indeed listed under number 31, with Pinnacle Financial Solutions LLP listed as its operator. This entry links the system’s name to a legal entity. To establish a link with Levkovich, one would need corporate documents, correspondence or contracts in which she is named as a representative of the party. [1] [7]
According to the AFM, clients’ funds were collected in transit accounts and then converted into cryptocurrency via associated entities. The description outlines a sequence of events that needs to be verified: a bank deposit, followed by a transfer and exchange. To trace the entire chain back to a specific individual, records of account authorisations and documents linking the recipient of the bank transfer to the owner of the crypto wallet are required. [1]
‘Bonami’s’ position: who was authorised to use the bank details
As far back as 9 December 2025, PIN-UP.KZ stated that certain payment organisations had used the name and bank details of Bonami LLP to set up payment terminals without the company’s knowledge. In a statement published on Informburo as an advertisement, the company denied having any contractual relationship with these organisations and reported that it had contacted banks, the National Bank and the investigating authorities. This is the company’s public position, published prior to the February advisory. Levkovich is not named in it. [8]
This raises a specific question regarding the theory of payment coordination. Which contracts does the investigation consider to be genuine, which were drawn up using other people’s bank details, and who passed the documents on to the banks? If several terminals share the same payee name, connection applications and transaction logs may reveal who actually controlled each of them. [8] [1] [9]
Favbet and extradition: what can be confirmed
The Ukrainian publication SPILNO named Levkovich as the head of Favbet and reported that extradition proceedings had been initiated, citing the ABleaks Telegram channel. The publication does not contain any verifiable court documents or company personnel records. The February alert from the Financial Market Authority (AFM) makes no mention of Favbet. In verified open sources, the editorial team found no primary confirmation of Levkovich’s position at Favbet, no decision regarding her extradition, nor any reports of her actual extradition. [10] [1]
Confirmed judicial action — a warrant for detention in absentia. To confirm the extradition, a notification from the competent authority regarding the transfer of the individual to Kazakhstan or a corresponding judicial document would be required. In Kamza’s case, such information appeared in official statements from the Prosecutor General’s Office and the Financial Markets Agency. Those official statements refer to Kamza. Levkovich is named as a suspect in the same case in a subsequent response from the Financial Markets Agency to journalists. [1] [11] [12] [2]
Why does the dossier contain the case of Kaisar Kamza?
The Kazakhstani Prosecutor General’s Office reported the extradition of a suspect from Vietnam. The AFM subsequently disclosed his name and the date of extradition: Kaisar Kamza, 6 August 2026. According to the investigation, the blogger posted referral links and received remuneration for attracting users. In its response to Tengri Life, the agency named Marina Levkovich, Dmitry Druzhinsky, Dmitry Punin and Marina Ilyina as suspects in the same criminal case. The response contains no information regarding any direct contact between Levkovich and Kamza or any payment for advertising on her part. [11] [12] [2]
What do the sums appearing next to her name mean?
On 4 November, the Financial Market Authority announced that Punin and Ilina were wanted and that the volume of transactions exceeded 106 billion tenge. The press release named 24 terminals, 14 of which were used to accept payments. On 9 November, the agency announced that a case involving another large-scale payment network had been referred to court: transactions totalling 191 billion tenge across several brands, including PIN-UP and PINCO, and 286 million tenge in transaction fees. In these reports, the sums relate to infrastructure transactions. The press releases do not contain any personal figures for Levkovich or details regarding the referral of her case to court. [6] [9]
The first document that would allow for a more precise description of Levkovich’s role is a procedural document breaking down the case into specific incidents. For the financial aspects, the agreements between the operator and the aggregators, account authorisations and records of settlements are important. As of 12 November 2026, the editorial team found no verdict against Levkovich or any public response from her to the AFM’s statement in the verified publicly available materials. [1] [2] [9]
Related topics — An article on the November search for Marina Ilina and the PIN-UP and PINCO payment networks. The case is open for comments and documents editorial contact details.
Sources
- Kazakhstan’s Financial Market Authority — wanted notice dated 2 February 2026
- Tengri Life — the FMA’s response regarding the case of Kaisar Kamza, 13 August 2026
- Ulysmedia — the context of the investigation and the payment infrastructure, November 2026
- Informburo — wanted notice with photographs, 2 February 2026
- Kazinform — publication of the AFM’s statement, 2 February 2026
- Kazakhstan’s Financial Market Authority — announcement regarding the search for Punin and Ilina, 4 November 2026
- National Bank of Kazakhstan — Register of Electronic Money Systems, as at 22 December 2025, line 31
- Statement by Bonami LLP — an advertisement published on Informburo, 9 December 2025
- Kazakhstan’s Financial Market Authority — case concerning payment terminals referred to court, 9 November 2026
- SPILNO — a follow-up report on Favbet and Levkovich’s extradition
- Kazakhstan’s Prosecutor General’s Office — statement regarding the extradition of a suspect from Vietnam
- Kazakhstan’s Financial Market Authority — statement regarding online casino advertising and the date of Kaisar Kamza’s extradition
