Law enforcement agencies from 23 countries dismantled more than 373,000 dark websites as part of an international operation targeting a large-scale network of fraudulent platforms.
The operation, known as Operation Alice, began in 2021 and focused on a platform called “Alice with Violence CP.” Investigators reported that a single operator controlled a network of hundreds of thousands of websites that advertised illegal material, including child sexual abuse content and stolen financial data.
Authorities stated that the sites sold access to this material through paid “packages.” Users were required to provide an email address and transfer cryptocurrency to complete a purchase. Prices ranged from €17 to €215, with listings claiming to offer data volumes from several GB to multiple terabytes. Investigators said that no content or services were delivered after payment, describing the network as a large-scale fraud operation.
The enforcement phase of the operation took place between March 9 and March 19, 2026. During that period, authorities shut down the sites and seized 105 servers located in Germany. Law enforcement also confiscated computers, mobile phones, and other digital storage devices linked to the operation.
Investigators identified 440 individuals worldwide who had used the platform. Authorities said follow-up investigations were initiated into these users based on the nature of the attempted transactions.
One suspect was identified as the alleged operator of the network. According to law enforcement estimates, the individual generated more than €345,000 through payments made by users across the network of sites.
Europol supported the investigation by coordinating information sharing between participating countries and assisting with cryptocurrency tracing. The operation involved agencies from multiple jurisdictions, including the United States, the United Kingdom, Germany, and Lithuania.
Authorities said the investigation relied on cross-border cooperation and technical analysis to identify connections between the sites and trace financial transactions linked to the network.