Arrest Made in JokerOTP Phishing Tool Operation in Netherlands

Arrest Made in JokerOTP Phishing Tool Operation in Netherlands

First seen 13 Feb 2026, 02:10 UTC BleepingcomputerScworldFeeds2.Feedburner 31.3

Article Content

Browse articles
ThreatCluster

A 21-year-old man from Dordrecht has been arrested by the Netherlands Police for allegedly selling access to the JokerOTP phishing automation tool, which intercepts one-time passwords (OTP) to hijack user accounts. This arrest is part of a three-year investigation that previously dismantled the JokerOTP phishing-as-a-service operation in April 2025, following earlier arrests of the platform's developer and a co-developer.

Timeline

2025-04-01
JokerOTP phishing-as-a-service operation dismantled
2025-04-01
Developer of JokerOTP arrested
2025-08-01
Co-developer of JokerOTP arrested
2026-02-11
Recent arrest of 21-year-old suspect in Netherlands
2026-02-13
Article published about the arrest