Back

DOJ Disrupts 1.4 Million Scam Accounts in Coordinated Cyber Fraud Operation

Severity: High (Score: 71.5)

Sources: coinedition.com, www.justice.gov, Coinmarketcap, Mexc

Published: 2026-06-04 · Updated: 2026-06-05

Keywords: operation, million, scam, crypto, coordinated, technology, doj-led

Severity indicators: rat

Summary

The U.S. Department of Justice (DOJ) announced the results of its first-ever 'Disruption Week,' targeting cyber-enabled investment fraud networks primarily operating from Southeast Asia. The operation disrupted over 1.4 million scam-related accounts and froze more than $3.8 million in cryptocurrency. Key participants included major tech firms like Coinbase, Meta, and Microsoft, along with various law enforcement agencies. The initiative led to the arrest of seven alleged scammers in Thailand and involved intelligence sharing to dismantle infrastructure used by organized crime. The operation highlighted the growing threat of industrial-scale fraud targeting Americans, particularly through schemes known as 'pig butchering.' The collaboration between government and private sectors demonstrated the effectiveness of joint efforts in combating cybercrime. The FBI reported that losses from crypto-related scams exceeded $11 billion in 2025, with investment scams being the most damaging category. Key Points: • Over 1.4 million scam accounts disrupted during the DOJ's Disruption Week. • More than $3.8 million in cryptocurrency frozen, primarily by Coinbase. • Seven alleged scammers arrested in Thailand as part of the coordinated operation.

Detailed Analysis

**Impact** More than 1.4 million scam-related social media, email, and internet accounts were disrupted, primarily targeting Americans. Over $3.8 million in cryptocurrency was frozen, with Coinbase accounting for $3 million of that amount. The operation led to at least seven arrests in Thailand, with additional suspects identified for prosecution. The fraud networks operated mainly from Southeast Asia, including scam compounds in Cambodia, Laos, and Myanmar near the Thai border, affecting financial services, social media platforms, and internet infrastructure. **Technical Details** The operation targeted cyber-enabled investment fraud schemes, specifically “pig butchering” scams, involving fake cryptocurrency platforms and forced-labor scam compounds. Attackers used social media, email accounts, malicious internet traffic, and hosting infrastructure, including Starlink kits, to conduct scams. Law enforcement and private sector partners dismantled servers and hosting infrastructure across Southeast Asia. No specific malware or CVEs were mentioned; the focus was on infrastructure disruption and account takedowns. **Recommended Response** Defenders should monitor for suspicious account activity across social media and email platforms, focusing on indicators related to crypto investment fraud. Organizations should collaborate with law enforcement and share intelligence on scam infrastructure. Financial institutions and crypto exchanges must maintain robust transaction monitoring to detect and freeze illicit funds. No specific patches or CVEs were identified; emphasis should be on blocking identified scam accounts and infrastructure and enhancing cross-sector information sharing.

Source articles (4)

  • Coinbase freezes $3 million in crypto as DOJ — Mexc · 2026-06-04
    Leading crypto exchange Coinbase froze more than $3 million in cryptocurrency tied to a global operation targeting cyber-enabled crypto scam networks in Southeast Asia, the exchange said this week. Th…
  • Coinbase Helps DOJ Freeze $3.8M in Scam Crypto — Coinmarketcap · 2026-06-04
    US authorities and several technology firms have run a coordinated operation against crypto fraud networks, freezing more than $3.8 million in cryptocurrency. It also led to 63 arrests, according to t…
  • Scam Center Strike Force Announces Results Us Private Industry Disruption Week — www.justice.gov · 2026-06-04
    The Department of Justice, through U.S. Attorney Jeanine Ferris Pirro for the District of Columbia and Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, today ann…
  • DOJ-Led Operation Disrupts 1.4 Million Scam Accounts — coinedition.com · 2026-06-04
    The U.S. Department of Justice (DOJ) has announced the results of its first-ever “Disruption Week.” The coordinated effort involved government agencies, law enforcement partners, and major technology…

Timeline

  • 2026-05-18 — Disruption Week begins: The DOJ launched a coordinated effort involving multiple agencies and tech firms to combat cyber fraud.
  • 2026-05-21 — Disruption Week concludes: The operation resulted in the disruption of over 1.4 million scam accounts and the freezing of $3.8 million in cryptocurrency.
  • 2026-06-04 — Seven scammers arrested: Thai authorities arrested seven individuals linked to the scam networks during the operation.
  • 2026-06-04 — Coinbase freezes $3 million: Coinbase confirmed it froze over $3 million in cryptocurrency associated with the fraudulent networks.
  • 2026-06-04 — DOJ announces operation results: The DOJ detailed the outcomes of Disruption Week, highlighting the scale of the operation and its impact on organized crime.

Related entities

  • Disruption Week (Campaign)
  • Scam Center Strike Force (Campaign)
  • Australia (Country)
  • Burma (Country)
  • Cambodia (Country)
  • Canada (Country)
  • Laos (Country)
  • Myanmar (Country)
  • New Zealand (Country)
  • Thailand (Country)
  • Financial (Industry)
  • Starlink (Platform)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed