An international enforcement action, known as Operation Alice, has unleashed a forceful pressure against thousands of criminal enterprises involved in multi-billion-dollar activities, perpetrating the exploitation of children using the internet today. Authorities in Germany led the operation, with assistance from Europol (European Union Agency for Law Enforcement Cooperation).
The law enforcement partners from 23 different nations joined hands to shut down over 373,000 dark web platforms that scam users on child sexual abuse content. This international cooperation took place within a ten-day span, from March 6 through March 16, this year.
The investigation began back in the year 2021 when German authorities first uncovered a dark web platform called “Alice with Violence CP.” What they found was shocking: a single operator was running hundreds of thousands of fake websites that pretended to sell child sexual abuse material and cybercrime services, but never actually delivered anything after taking people’s money.
How the dark web scam works
The scam was surprisingly simple. One individual, who investigators believe is based in China, created more than 373,000 fake websites. These sites offered what they posted as “packages” of child sexual abuse material, with prices ranging from about €17 to €215 (20 to 250 USD approximately), depending on how much data they promised. Some packages claimed to offer gigabytes or even terabytes of material.
But here’s the catch: none of these sites actually delivered what they promised. After people paid using Bitcoin, they received nothing. The operator was also running other scams, offering cybercrime services like stolen credit card data and access to hacked computer systems. Even though customers never got the illegal content they paid for, just attempting to buy it made them targets for investigation.
Global investigation leads to major seizures
A joint effort of law enforcement agencies from roughly 23 countries, under the leadership of Europol, led to a successful operation that shut down over 373,000 dark websites. Through law enforcement’s success, the authorities seized 105 servers and many electronic devices – including computers and cell phones.
In addition to shutting down dark web websites, law enforcement authorities from around the world have indicated that they identified 440 customers, and over 100 of them are either suspects or under investigation.
The German authorities have a global search warrant for the person they believe is the head operator, who is located in China. The authorities estimated that this network had an operational peak of 287 servers, with 105 of those servers located in Germany. In total, the investigative process took almost five years before the execution of the takedown occurred.
Why is this operation important?
This operation exposes a growing problem where individuals are setting up phony underground marketplaces to sell something of no value to other individuals, primarily illicit content.
According to Europol, while a person may not get the illicit items in the end, their intent to purchase such content qualifies them as a suspect, and the authorities will therefore treat them as a viable intelligence target.
Also, this operation will send a strong message to persons committing crimes that no matter where they may try to hide, there is no safe haven based on the unified effort of law enforcement to work together across their respective borders.
Europol, through its various programs or initiatives such as Stop Child Abuse, Trace an Object, and Help4U, is supporting the prevention of child abuse. Help4U is an anonymous online platform where Law Enforcement agencies around the globe provide assistance or resources to help protect children.
There is an example of a 31-year-old father who gained notoriety after his conviction three years ago. The case revealed that the man attempted to purchase 70 gigabytes of child sexual abuse material on one of multiple phony online sources.
With the intelligence they gathered during this operation, law enforcement agencies acted quickly to protect children who were in danger.
These successes are being replicated across the globe. Not too long ago, the INTERPOL-led takedown of 45,000 malicious servers showed that coordinated international action can dismantle criminal infrastructure at scale, protecting potential victims before they can be exploited.