Operation Alice Shuts Down 373,000 Fake CSAM Sites

Summary
Operation Alice shut down more than 373,000 sites that fraudulently advertised CSAM and cybercrime services. Europol says about 10,000 users paid roughly $400,000; authorities seized 287 servers and issued an international arrest warrant.
Key points
- Germany led Operation Alice with Europol support; the investigation began in mid-2021 and targeted the “Alice with Violence CP” platform.
- Europol said the sites advertised fake CSAM packages and cybercrime services, including stolen credit card data and access to compromised systems.
- The sites used previews to solicit Bitcoin payments of EUR 17–250, but the advertised material was never delivered.
- About 10,000 users reportedly paid roughly $400,000; authorities identified 440 users across 23 countries and are investigating 100.
- Authorities seized 287 servers, including 105 in Germany, and issued an international arrest warrant for the suspected operator, a 35-year-old based in China.
- Europol also highlighted its Help4U support platform and the “Stop Child Abuse – Trace an Object” initiative.
Article Details
- Event Type
- International law enforcement takedown of a fraudulent dark web platform advertising fake CSAM packages and cybercrime-as-a-service.
- Impact
- Authorities shut down more than 373,000 sites and seized 287 servers, including 105 in Germany. The scam reportedly defrauded about 10,000 users of roughly $400,000 in Bitcoin; authorities identified 440 users across 23 countries and were investigating 100 of them. Europol said the advertised material was never delivered.
Countries
Chinaand cybercrime-as-a-service through a platform called “Alice with Violence CP” operated by a suspect in China.GermanyOperation Alice, led by Germany with Europol support, shut down more than 373,000 dark web sites that fraudulently advertised CSAM packages and cybercrime-as-a-service through a platform called “Alice with Violence CP”
