The United States Department of Justice and Europol have jointly announced the results of Operation TorNado, revealing 354 arrests and the seizure of more than $234 million in cash and virtual currencies. The FBI described this operation as the most extensive crackdown to date targeting drug vendors and buyers operating on the dark web.
International crackdown and scope of Operation TorNado
Operation TorNado was coordinated by the Joint Criminal Opioid and Darknet Enforcement team (JCODE), an FBI-led task force that has focused on tackling illicit opioid sales and related activities since 2018. This operation marks JCODE’s sixth and largest globally coordinated action, following the groundwork established by last year’s Operation RapTor. The enforcement sweep ran from May 2025 through October 2026.
Europol, the European Union’s law enforcement agency, worked in partnership with authorities from 14 countries to coordinate the international effort. The targeted individuals included vendors and buyers who operated on five dark web markets previously taken down by police: Archetyp, Bohemia, Nemesis, Kingdom, and Tor2Door. Investigators also identified suspects active on DrugHub, along with various online forums, individual shop sites, and private messaging networks.
During the sweep, authorities seized about 5.7 metric tons of illegal drugs that included fentanyl, other opioids, methamphetamine, heroin, cocaine, ecstasy, and MDMA. The operation also resulted in the confiscation of 38 pill presses and 209 firearms worldwide. The agencies did not provide a specific breakdown of the $234 million total between cash and cryptocurrencies, nor did they name particular coins in official summaries.
Europol reported that more than €60 million in cash and cryptocurrencies, 950 kilograms of drugs, and 57 firearms were seized across Europe, while the US share included over €150 million (approximately $166 million) in cash and cryptocurrencies, along with more than 4.8 metric tons of narcotics and 152 firearms. The agency highlighted that forensic and blockchain analysis teams contributed to tracing illicit financial transactions.
| Region | Seized Money (Cash & Crypto) | Drugs Seized (kg) | Firearms |
|---|---|---|---|
| Europe | €60 million | 950 | 57 |
| United States | €150 million ($166 million) | 4,800 | 152 |
Mini dictionary: Europol is the European Union Agency for Law Enforcement Cooperation, responsible for supporting EU member states in their fight against serious international crime and terrorism.
Dark web payment methods and specific US cases
Details from the Justice Department and court documents provide insights into the cryptocurrencies involved. In one case, Alexander Green of Jacksonville, North Carolina, was arrested for his alleged involvement as the operator of STARLABS, a vendor active on DrugHub—a platform described as accepting only Monero payments. Green faces charges connected to the distribution of controlled substances, including fentanyl, with two overdose deaths linked to the group. If found guilty, he could face up to 20 years in prison.
Another case in Florida involved brothers Stanislav and Vladislav Chernyshov, accused of running the “BarbaraWhite” vendor account. Prosecutors allege the pair sold counterfeit oxycodone pills containing nitazenes and shipped over 1,000 parcels across 49 states. A search-warrant affidavit describes bitcoin transactions tied to the Nemesis market and the vendor’s activities. Both Chernyshovs face the prospect of up to 20 years in prison if convicted.
Undercover purchases from certain vendors, including STARLABS, involved payments made entirely in cryptocurrency, with platforms like DrugHub reportedly accepting only Monero, while evidence in other cases referenced bitcoin transfers for illegal sales tied to dark web markets.
Mini dictionary: Monero is a privacy-focused cryptocurrency designed to provide anonymous and untraceable transactions, making it a preferred medium of exchange on some darknet markets.
Global arrest figures and ongoing investigations
Operation TorNado resulted in 132 arrests in the United States, 59 in the United Kingdom, 45 in Hungary, and 41 in Germany. Additional arrests were made in countries including France, New Zealand, the Netherlands, Slovenia, Austria, Ireland, Czechia, Australia, and Finland. Authorities report that further investigations are still underway to identify individuals linked to remaining dark web accounts.
FBI Director Kash Patel described the operation as the largest interagency action against dark web drug networks to date. IRS Criminal Investigation Chief Jarod Koopman emphasized the critical role financial tracing played in the success of Operation TorNado. He noted that while criminal organizations may operate in difficult-to-reach areas of the internet, their activity depends on the ability to move and store funds.
Koopman underscored that despite the borderless nature of digital crime, disrupting financial flows remains key to law enforcement’s ability to dismantle illicit networks.
Prosecutors in more than 20 US districts have filed federal charges in connection with the operation. Authorities reiterated that indictments and complaints are allegations at this stage, and that all defendants are presumed innocent unless proven guilty.
Although officials have released the total value of seized assets, they have not specified how much of the $234 million was made up of cryptocurrencies or whether bitcoin comprised a significant portion. Public records show both cash and digital assets were confiscated, with Monero-only payment records in at least one case and bitcoin transactions referenced in others, but no further asset breakdown has been provided.
