Back

DOJ Operation Disrupts 1.4 Million Scam Accounts and Freezes $3.8M in Crypto

Severity: High (Score: 60.9)

Sources: coinedition.com, www.justice.gov, Coinmarketcap

Published: 2026-06-04 · Updated: 2026-06-05

Keywords: operation, million, scam, crypto, coordinated, technology, doj-led

Severity indicators: rat

Summary

The U.S. Department of Justice (DOJ) announced the results of its first-ever 'Disruption Week,' which targeted cyber-enabled investment fraud networks, primarily from Southeast Asia. The operation disrupted over 1.4 million scam-related accounts and froze more than $3.8 million in cryptocurrency, with Coinbase responsible for over $3 million of the frozen assets. Seven alleged scammers were arrested in Thailand, and authorities identified additional suspects and platforms for further investigation. The initiative involved collaboration between multiple U.S. agencies, including the FBI and U.S. Secret Service, and foreign law enforcement from Australia, Canada, New Zealand, Thailand, and the UK. The operation highlighted the importance of cross-industry cooperation, as major tech firms like Meta and Microsoft participated in identifying and dismantling the infrastructure used by these criminal organizations. The scams, known as 'pig butchering' schemes, have reportedly defrauded victims of billions globally. Key Points: • Over 1.4 million scam accounts were disrupted during the DOJ's 'Disruption Week'. • More than $3.8 million in cryptocurrency was frozen, primarily by Coinbase. • Seven alleged scammers were arrested in Thailand, with further investigations ongoing.

Detailed Analysis

**Impact** Over 1.4 million scam-related social media and email accounts were disrupted, affecting victims primarily in the US but involving global operations. The fraud networks stole billions of dollars through crypto investment scams, with $3.8 million in cryptocurrency frozen during the operation. Seven suspects were arrested in Thailand, with additional investigations ongoing. The scams targeted financial services, social media platforms, and internet infrastructure, impacting sectors including technology, finance, and telecommunications across Southeast Asia and Western countries. **Technical Details** The operation targeted cyber-enabled investment fraud networks using “pig butchering” scams, which involve persuading victims to invest in fake cryptocurrency platforms displaying fabricated profits. Attack infrastructure included social media accounts, email accounts, servers, hosting platforms, and thousands of Starlink internet kits primarily located in scam compounds near the Thai border in Cambodia, Laos, and Myanmar. No specific malware or CVEs were reported. The kill chain stages disrupted include initial access, command and control, and exfiltration of funds via cryptocurrency transactions. **Recommended Response** Organizations should monitor for and block suspicious social media and email accounts linked to crypto investment scams and coordinate intelligence sharing with law enforcement and private sector partners. Financial institutions and crypto exchanges must enhance transaction monitoring to detect and freeze illicit funds promptly. Network defenders should identify and disrupt malicious infrastructure, including unauthorized use of satellite internet kits and hosting services. No specific patches or CVEs were mentioned; focus should be on detection and disruption of scam infrastructure and accounts.

Source articles (3)

  • Coinbase Helps DOJ Freeze $3.8M in Scam Crypto — Coinmarketcap · 2026-06-04
    US authorities and several technology firms have run a coordinated operation against crypto fraud networks, freezing more than $3.8 million in cryptocurrency. It also led to 63 arrests, according to t…
  • Scam Center Strike Force Announces Results Us Private Industry Disruption Week — www.justice.gov · 2026-06-04
    The Department of Justice, through U.S. Attorney Jeanine Ferris Pirro for the District of Columbia and Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, today ann…
  • DOJ-Led Operation Disrupts 1.4 Million Scam Accounts — coinedition.com · 2026-06-04
    The U.S. Department of Justice (DOJ) has announced the results of its first-ever “Disruption Week.” The coordinated effort involved government agencies, law enforcement partners, and major technology…

Timeline

  • 2026-05-18 — Disruption Week commenced: The DOJ's coordinated effort against cyber-enabled investment fraud networks began in Washington, D.C.
  • 2026-05-21 — Disruption Week concluded: The operation resulted in the disruption of over 1.4 million scam accounts and the freezing of $3.8 million in cryptocurrency.
  • 2026-06-04 — Seven arrests made in Thailand: Thai authorities arrested seven individuals linked to the scam networks as part of the operation.
  • 2026-06-04 — Operation results announced: The DOJ confirmed the freezing of over $3.8 million in cryptocurrency and the disruption of 1.4 million accounts.

Related entities

  • Disruption Week (Campaign)
  • Scam Center Strike Force (Campaign)
  • Burma (Country)
  • Cambodia (Country)
  • Laos (Country)
  • Myanmar (Country)
  • New Zealand (Country)
  • Thailand (Country)
  • Financial (Industry)
  • Starlink (Platform)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed