Introduction
Police and law enforcement agencies from 14 countries conducted a joint operation codenamed 'Operation TorNado' targeting dark web marketplaces and vendors. The operation aimed to dismantle illicit marketplaces and apprehend suspects involved in cybercrime. The operation ran from May 2025 to October 2026.
Joint Operation Details
Operation TorNado involved agencies from 14 countries, including national authorities conducting independent investigations with support from Europol. The operation targeted vendors and buyers active on forums, single-vendor shops, and encrypted messaging services. Europol reported that the operation highlighted the evolving resilience of dark web marketplaces, which continue to adapt despite takedowns.
Seizures and Arrests
Law enforcement authorities seized over €66 million in cash and cryptocurrency, 950 kilograms of illicit drugs, and 57 firearms in Europe. In the United States, they seized more than 4.8 metric tonnes of illicit drugs, 152 firearms, and over €166 million in cash and cryptocurrency. The operation also involved the arrest of 354 suspects, including vendors and buyers active on dark web marketplaces.
Operation Highlights
The operation was part of a series of similar actions over the last six years, including DisrupTor in 2020 (which led to 179 arrests) and Dark Huntor in 2021 (in which 150 more high-volume darknet vendors were apprehended). Operation SpecTor led to the arrest of 288 suspects in 2023, and Operation RapTor resulted in the arrest of 270 suspects in May 2025.
Conclusion
Operation TorNado demonstrated the effectiveness of international cooperation in combating cybercrime on the dark web. The operation highlighted the continued resilience of dark web marketplaces and the need for ongoing efforts to disrupt illicit activities. The seizures and arrests made a significant impact on the illicit drug trade and other forms of cybercrime.
Comments