{"id":688,"date":"2026-04-20T18:29:52","date_gmt":"2026-04-20T18:29:52","guid":{"rendered":"https:\/\/refundauthority.com\/?p=688"},"modified":"2026-04-20T18:29:53","modified_gmt":"2026-04-20T18:29:53","slug":"us-uk-and-canada-freeze-12m-in-crypto-phishing-operation","status":"publish","type":"post","link":"https:\/\/refundauthority.com\/?p=688","title":{"rendered":"US, UK and Canada Freeze $12M in Crypto Phishing Operation"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Investigators identified more than 20,000 victim wallet addresses spanning more than 30 countries.<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/academy-public.coinmarketcap.com\/optimized-uploads\/089991e21b8d417db31ee6f63cad4dca.png\" alt=\"US, UK and Canada Freeze $12M in Crypto Phishing Operation\"\/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Table of Contents<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/coinmarketcap.com\/academy\/article\/us-uk-and-canada-freeze-dollar12m-in-crypto-phishing-operation#crypto-news\">Crypto News<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"crypto-news\">Crypto News<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Authorities from the United States, the United Kingdom, and Canada&nbsp;<a href=\"https:\/\/x.com\/NCA_UK\/status\/2042242727853568214?s=20\" rel=\"noreferrer noopener\" target=\"_blank\">froze&nbsp;<\/a>more than $12 million in cryptocurrency proceeds linked to approval phishing schemes during a coordinated enforcement operation last month. The campaign, called Operation Atlantic, ran for one week in March and was led by the U.S. Secret Service, the U.K.&#8217;s National Crime Agency, the Ontario Provincial Police, and the Ontario Securities Commission.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Investigators&nbsp;<a href=\"https:\/\/www.secretservice.gov\/newsroom\/releases\/2026\/04\/operation-atlantic-disrupts-more-45-million-cryptocurrency-fraud-freezes\" rel=\"noreferrer noopener\" target=\"_blank\">identified&nbsp;<\/a>more than 20,000 victim wallet addresses spanning more than 30 countries. Law enforcement directly contacted over 3,000 individuals who were believed to be at risk or already affected by the schemes. The NCA&nbsp;<a href=\"https:\/\/x.com\/NCA_UK\/status\/2042242727853568214?s=20\" rel=\"noreferrer noopener\" target=\"_blank\">said&nbsp;<\/a>the operation uncovered more than $45 million in total cryptocurrency fraud proceeds across all cases reviewed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Authorities also dismantled more than 120 web domains that scammers had been using to target victims. A further $33 million in suspected investment fraud proceeds was flagged and remains under active investigation. Some of the scam websites identified during the operation were still defrauding victims at the time investigators found them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Approval phishing works differently from conventional crypto fraud. Rather than persuading victims to send funds directly, these&nbsp;<a href=\"https:\/\/www.chainalysis.com\/blog\/approval-phishing-cryptocurrency-scams-2023\/\" rel=\"noreferrer noopener\" target=\"_blank\">schemes&nbsp;<\/a>trick users into signing wallet permissions that give attackers control over specific tokens. Once that permission is signed, the scammer can drain those tokens without any further action from the victim.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Operation Atlantic demonstrated the importance and need for international collaboration to stop cryptocurrency fraud,&#8221; said Brent Daniels, assistant director of the Secret Service&#8217;s Office of Field Operations. NCA Deputy Director of Investigations Miles Bonfield said the operation showed what becomes possible when international agencies and private industry work in coordination.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Binance&#8217;s Special Investigations team participated in the operation, conducting live account screening and providing intelligence on suspected bad actors to support asset seizure efforts. The team also identified scam websites that were still active during the operation. Flavio Tonon, Binance&#8217;s senior regional advisor for Europe, the Middle East, and Africa, said blockchain transparency limits how far criminals can move stolen funds before they are traced. Binance confirmed that no funds on its platform were frozen as part of the operation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The scale of Operation Atlantic is notably larger than a comparable campaign from the previous year. Operation Avalanche traced approximately $4.3 million in&nbsp;<a href=\"https:\/\/coinmarketcap.com\/currencies\/ethereum\/\" rel=\"noreferrer noopener\" target=\"_blank\">$ETH<\/a>&nbsp;to approval phishing schemes. Separately, phishing tactics have begun appearing in physical form. Crypto users have reported receiving letters impersonating hardware wallet providers Ledger and Trezor, directing recipients to scan QR codes or visit fraudulent websites under the pretense of mandatory security checks. Investigators believe some of these physical campaigns draw from personal data exposed in past breaches at crypto companies.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Investigators identified more than 20,000 victim wallet addresses spanning more than 30 countries. Table of Contents Crypto News Authorities from the United States, the United Kingdom, and Canada&nbsp;froze&nbsp;more than $12 million in cryptocurrency proceeds linked to approval phishing schemes during a coordinated enforcement operation last month. The campaign, called Operation Atlantic, ran for one week [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_angie_page":false,"_eb_attr":"","page_builder":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-688","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/posts\/688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/refundauthority.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=688"}],"version-history":[{"count":1,"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/posts\/688\/revisions"}],"predecessor-version":[{"id":689,"href":"https:\/\/refundauthority.com\/index.php?rest_route=\/wp\/v2\/posts\/688\/revisions\/689"}],"wp:attachment":[{"href":"https:\/\/refundauthority.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/refundauthority.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/refundauthority.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}