
- Published
- Source
- US Department of Justice
- Filed under
- Law & courts, Regulation, Attacks
- Length
- 1,062 words, in full
Note: Relevant court documents can be found here.
Today, the Department of Justice, through the Joint Criminal Opioid and Darknet Enforcement (JCODE) team, joined Europol to announce the results of Operation TorNado: a coordinated, multi‑agency and international law enforcement effort targeting criminal enterprises that use Dark Web markets to traffic fentanyl, opioids, and other illicit drugs. The operation, which was conducted across the United States, Europe, Australia and New Zealand, demonstrates the continued partnership between JCODE and Europol against the illegal sale of drugs and other illicit goods and services on the Dark Web. Operation TorNado represents the sixth — and most extensive — internationally coordinated action since JCODE was created in 2018 and builds on the success of last year’s Operation RapTor. This operation included actions against Dark Web vendors and buyers who were active on prominent Dark Web drug markets seized by law enforcement including: Archetyp, Bohemia, Nemesis, Kingdom, and Tor2Door.
“Nothing will stop the Trump Administration from identifying and dismantling drug trafficking networks,” said Attorney General Todd Blanche. “Thanks to our partnerships with state, federal, and international law enforcement through the Joint Criminal Opioid and Darknet Enforcement (JCODE) team, Operation TorNado crippled Dark Web market vendors and will bring alleged drug traffickers to justice. The Department of Justice will continue protecting the American people from lethal synthetic drugs and identifying bad actors around the globe who threaten American lives.”
Following the takedown of multiple darknet marketplaces and vendor targets in the previous JCODE operation, U.S. and international law enforcement agencies obtained intelligence to identify Dark Web drug traffickers, resulting in a series of complementary, but separate, law enforcement investigations. Operation TorNado actions have resulted in the arrest of 354 Dark Web drug traffickers and fraudulent criminals who engaged in tens of thousands of sales of illicit goods and services across the United States, Europe, Australia, and New Zealand.
This operation resulted in the seizure of over $234 million in both cash and virtual currencies; approximately 5.7 metric tons of illicit drugs worldwide, including fentanyl and other opioids, methamphetamine, heroin, cocaine, ecstasy, and MDMA, 38 pill presses; and 209 firearms. Dark Web vendor accounts were identified and attributed to real individuals selling illicit goods on Dark Web markets such as DrugHub, Archetyp, and others. By leveraging complementary partnerships and surging resources across the U.S. government and Europol, Operation TorNado significantly disrupted the online opioid trade and sends a strong message that criminals operating on the Dark Web are not beyond the reach of law enforcement.
Operation TorNado led to 132 arrests in the United States, two in Australia, six in Austria, four in Czechia, one in Finland, 23 in France, 41 in Germany, 45 in Hungary, five in Ireland, 12 in the Netherlands, 13 in New Zealand, 11 in Slovenia, and 59 in the United Kingdom (UK).
A number of investigations are still ongoing to identify the individuals behind Dark Web accounts.
“Operation TorNado is the largest interagency takedown of Dark Web drug vendors and buyers to date, resulting in 354 arrests worldwide, including 132 in the United States,” said FBI Director Kash Patel. “Through the coordinated effort, this FBI and our partners collectively seized 5.7 metric tons of illicit drugs, including deadly fentanyl, as well as $234 million in cryptocurrency and cash. This FBI continues to accelerate our cyber capabilities including through our newly established Cyber Branch, evolving how we operate to meet the dynamic threat landscape presented by the Dark Web. The success of the Operation TorNado makes clear that criminals cannot hide behind technology or geography – no matter where you operate, justice will find you. Thank you to our JCODE and Homeland Security Task Force partners who continue to do elite work defending the homeland.”
“Drug traffickers are exploiting the dark web to distribute fentanyl and other deadly drugs into American communities, profiting from addiction and overdose deaths,” said Administrator Terrance Cole of the Drug Enforcement Administration (DEA). “Operation TorNado demonstrates the strength of JCODE and our international law enforcement partnerships. DEA, working as part of the Homeland Security Task Force through our field offices, played a significant role in identifying these criminals, exposing their trafficking networks, and disrupting their operations. Whether they operate on the streets or behind anonymous online accounts, DEA will use every available investigative tool to dismantle these organizations and bring those responsible to justice.”
“Operation TorNado demonstrates the power of global partnership and underscores a vital truth: when the international law enforcement community stands united, borders offer no sanctuary to criminals,” said U.S. Postal Inspection Service (USPIS) Chief Postal Inspector Gary Barksdale. “No matter where criminals attempt to hide, the U.S. Postal Inspection Service and our partners around the world will pursue them, dismantle their networks, and bring them to justice. Our commitment to protecting the public and holding these criminals accountable remains unwavering.”
“The dark web is not a safe haven for criminals,” said Acting Executive Associate Director John A. Condon of Homeland Security Investigations (HSI). “This operation demonstrates what happens when law enforcement agencies around the world combine their intelligence, resources and expertise to dismantle criminal networks. With 354 arrests, more than five tons of drugs seized, and hundreds of millions of dollars in criminal assets taken out of circulation, we’ve sent a clear message: Criminals can operate in the shadows, but they can’t hide from justice.”
“Criminal networks may operate across borders and in the shadows of the Dark Web, but they cannot operate without money,” said Chief Jarod Koopman of IRS Criminal Investigation (IRS-CI). “IRS-CI is a global leader in financial crime investigations because our special agents have the expertise and international reach to follow the money, unravelling even the most complex schemes and exposing the people behind them. Operation TorNado demonstrates the power of combining financial intelligence with strong international law enforcement partnerships to disrupt illicit markets, seize criminal proceeds and hold traffickers accountable.”
“The sale of illegal drugs through darknet marketplaces carries real and often tragic consequences for consumers and communities alike,” said Assistant Commissioner Justin Green of the Food and Drug Administration (FDA) Office of Criminal Investigations. “The FDA is steadfast in its commitment to identifying, investigating, and holding accountable those who use these platforms to traffic in dangerous drugs at the expense of public health.”
The extensive operation, which spanned from May 2025 to October 2026, resulted in dozens of federal prosecutions including:
Source: US Department of Justice. Information on Department of Justice websites is in the public domain and may be copied and distributed without permission. Department of Justice copyright status, published by US Department of Justice.
What it means for organisations
- Check whether it applies to you – by sector, size and the services you provide.
- Map it to the controls you already have: most new rules ask for evidence of things you should already do.
- Keep records of decisions, risks and incidents – regulators ask for evidence, not intentions.
More helpICO: guidance for organisations (opens in a new tab)
MyCyberWay training
Compliance, part of our training
Regulation lands on the security team. We teach how it works day to day.
Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.
- ISO 27001 Annex A and NIST CSF 2.0
- CIS Controls v8 and Cyber Essentials Plus
- Audit evidence with Purview and Intune
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
