ICE, Europol, law enforcement partners, dismantle major illicit drug networks in global Darknet crackdown

WASHINGTON — U.S. Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history.

The seizures, to which ICE Homeland Security Investigations significantly contributed, include more than $200 million in currency and digital assets, over two metric tons of drugs, comprised of 144 kilograms of fentanyl or fentanyl-laced narcotics, and over 180 firearms. In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States.

Led by Europol’s European Cyber Crime Centre Operation RapTOR united the FBI-led JCODE team — comprised of ICE HSI and law enforcement partners from the United States, Europe, South America, and Asia — to disrupt fentanyl and opioid trafficking, as well as sale of other illicit goods and services on the Darknet. Building on the successes of prior years’ operations, Operation RapTOR furthered global efforts to dismantle darknet marketplaces, resulting in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. These actions provided investigators across the globe with invaluable leads and evidence, strengthening the ongoing fight against cybercrime and illicit activities on the darknet.

“This record-breaking operation sends a clear message to every trafficker hiding behind a screen — your anonymity ends where our global reach begins,” said ICE acting Director Todd Lyons. “Thanks to the unwavering efforts by ICE HSI, Europol and our international partners, we’re cracking the code of the so-called ‘safe spaces’ for cybercriminals — they are in our sights and we’re not backing down.”

The Head of Europol’s European Cybercrime Centre, Edvardas Šileris, commented: “Operation RapTor shows that the dark web is not beyond the reach of law enforcement. Through close cooperation and intelligence sharing, officers across three continents identified and arrested suspects, sending a clear message to those who think they can hide in the shadows. Europol will continue working with our partners to make the internet safer for everyone."

In furtherance of Operation RapTOR and in their first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Behrouz Parsarad, an Iranian national, for his role as the founder and operator of Nemesis Market following seizure of the market.

“This historic international seizure of firearms, deadly drugs, and illegal funds will save lives,” said Attorney General Pam Bondi. “Criminals cannot hide behind computer screens or seek refuge on the dark web — this Justice Department will identify and eliminate threats to the American people regardless of where they originate.”

"By cowardly hiding online, these traffickers have wreaked havoc across our country and directly fueled the fentanyl crisis and gun violence impacting our American communities and neighborhoods. But the ease and accessibility of their crimes ends today," said FBI Director Kash Patel. "The FBI could not do this work without our partners both at home and abroad, and the staggering success of this year's record-breaking amount of fentanyl, guns, and drugs seized prove that our efforts are working. Anyone looking to anonymously harm our citizens through illicit darknet trafficking: your days of recklessness are numbered."

“These predators who peddled poison on the dark web might have thought they are untouchable — hiding behind screens, pushing fentanyl, fueling overdoses, and cashing in on misery. However, Operation RapTor just proved them wrong,” said DEA acting Administrator Robert Murphy. “DEA and our global partners reached across borders, across platforms, and across currencies to rip their networks apart. Let this stand as a warning: no mask, no marketplace, and no digital wallet can hide you from facing justice.”

“This unprecedented operation is a testament to the power of global partnership and the unwavering dedication of our team,” said Chief Guy Ficco of IRS Criminal Investigation (IRS-CI). “Working through the JCODE initiative, IRS Criminal Investigation and our international partners led the largest and most impactful takedown to date — seizing over $200 million in assets, removing deadly drugs and weapons from circulation, and holding more than 270 individuals accountable. This critical strike against dark web networks fueling the fentanyl crisis marks a proud moment in our ongoing effort to protect communities worldwide.”

“Operation RapTor shows what’s possible when the U.S. Postal Inspection Service and our partners around the world stand united. No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice. This operation was about protecting innocent people from predatory criminals who profit from violence, addiction, and fear. Our commitment is unwavering,” said Chief Postal Inspector Gary Barksdale, United States Postal Inspection Service.

“The FDA is committed to continuing its work to disrupt and dismantle the illegal sales of drugs on the dark web, where such sales far too often have tragic consequences,” said Chad Menster, Deputy Director of the Food and Drug Administration’s Office of Criminal Investigations (FDA OCI). “We will continue to monitor, investigate and bring to justice those who misuse the internet in a quest for profits with reckless disregard for the risk to public health and safety.”  

The impact of Operation RapTOR builds on years-long legacy of dark web enforcement and the tireless work of HSI and our U.S. and international law enforcement partners, as seen in the following cases:

• “Incognito Market” Owner Pleads Guilty For Operating One Of The Largest Illegal Narcotics Marketplaces On The Internet
  • Incognito Market sold more than $100 million of narcotics — including hundreds of kilograms of cocaine and methamphetamine as well as heroin, cocaine, LSD, MDMA, oxycodone, methamphetamine, ketamine, and alprazolam, and misbranded prescription medication. Incognito Market was available globally to anyone with internet access and was designed to foster seamless narcotics transactions across the world. It incorporated many features of legitimate e-commerce sites such as branding, advertising, and customer service. While concealing their identities users were able to search thousands of listings for narcotics of their choice. Prescription medication was also listed that was advertised as being authentic but was not, as seen in November 2023, when an undercover federal agent purchased and received several tablets that purported to be oxycodone, but were in fact, fentanyl pills.
• Central District of California | Two Southern California Men Who Supplied Fentanyl Sold to Darknet Customers in All 50 States Sentenced to Federal Prison | United States Department of Justice
  • Ruiz of Orange County was sentenced to over 17 years in federal prison, and Omar Navia of South Los Angeles was separately sentenced to 15 years in federal prison in January 2025 for supplying fentanyl-laced pills to a drug trafficking ring that sold these drugs to more than 1,000 customers nationwide via the Darknet Navia and Ruiz admitted that at least August 2021 to December 2022, they supplied fentanyl-laced pills to Michael Ta, 26, of Westminster, and Rajiv Srinivasan, 38, of Houston, who used the Darknet and encrypted messaging applications to sell more than 120,000 fentanyl-laced pills, 20 pounds of methamphetamine, and other drugs directly to more than 1,000 customers in all 50 states, causing several fatal overdoses in the process.
• In February 2024, the Eastern District of Virginia issued a criminal complaint charging Joshua Vasquez, Joseph Vasquez, and Rafael Roman with conspiracy to distribute 500 grams or more of methamphetamine.
  • Joshua Vasquez, Joseph Vasquez, and Rafael Roman conspired to sell counterfeit Adderall containing methamphetamine on darknet markets such as Bohemia and Tor2Door. The defendants allegedly sold drugs on darknet marketplaces in exchange for cryptocurrency. Collectively, these prolific darknet vendors were responsible fulfilling over 13 thousand drug orders shipped throughout the United States, ranging in size from user quantities, e.g., 5 pills, to “reseller” quantities, e.g., 10 thousand pills. While executing search warrants in New Jersey and New York, Federal Law Enforcement officers seized more than $330 thousand, close to 80 thousand counterfeit Adderall pills, one firearm, and two industrial pill press machines. FBI, FDA, and USPIS investigated this matter with significant contributions from HSI and our law enforcement partners.
• Van Nuys Man Sentenced to More Than 20 Years in Prison for Trafficking Fentanyl and Cocaine via Darknet Marketplaces and Possessing Guns
  • A San Fernando Valley man was sentenced to 20 plus years in federal prison for using darknet marketplaces to sell hundreds of thousands of dollars’ worth of fentanyl-laced pills and cocaine to buyers nationwide. He admitted in court documents to causing one fatal fentanyl overdose. From at least April 2021 to May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. Specifically, McDonald purchased bulk quantities of fentanyl and cocaine and then directed the activities of other coconspirators to carry out hundreds of drug sales involving the distribution of large quantities of both fentanyl and cocaine, including hundreds of thousands of fentanyl-laced pills. The FBI and the DEA investigated this matter as part of JCODE.

“Cybercriminals think the Darknet makes them untouchable — we just proved they’re dead wrong,” said ICE HSI acting Executive Associate Director Robert Hammer. “HSI is on the front lines of a digital battlefield, deploying cutting-edge tech, relentless enforcement, and global coordination to hunt down these predators. Cybercrime is a global threat, and that’s why we’re committed to working hand-in-hand with our partners at Europol and across the world to dismantle these networks together. If you profit from pain online, we’re looking for you — and you’ll soon learn that no corner of the internet is beyond our reach.”

Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below. Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR. Local, state, and other federal agencies also contributed to investigations through task force participation and regional partnerships. The investigations leading to Operation RapTOR were significantly aided by support and coordination from the Justice Department Criminal Division’s Narcotic and Dangerous Drug Section and Computer Crime and Intellectual Property Section, with additional support from the Organized Crime Drug Enforcement Task Forces; multi-agency Special Operations Division; Money Laundering and Asset Recovery Section’s Digital Currency Initiative, and Fraud Section; the Justice Department’s Office of International Affairs; Europol and its Dark Web team; and international partners.

The international partners include Europol; Eurojust; Austria’s Criminal Intelligence Service with various Provincial Criminal Police Departments (Bundeskriminalamt und Landeskriminalämter); Brazil’s Civil Police of the State of Pará (Polícia Civil do Estado do Pará) and Civil Police of the State of São Paulo (Polícia Civil do Estado do São Paulo); France’s French Customs (Douane), National Gendarmerie (Gendarmerie Nationale); Germany‘s Federal Criminal Police Office (Bundeskriminalamt), Prosecutor’s Office in Cologne – Central Cybercrime Contact Point (Staatsanwaltschaft Köln, Zentral- und Ansprechstelle Cybercrime), Central Criminal Investigation in Oldenburg (Zentrale Kriminalinspektion Oldenburg) various police departments (Dienststellen der Länderpolizeien), German Customs Investigation (Zollfahndungsämter); The Netherlands’s National Police (Politie), Post Interventie Team; Spain’s National Police (Policía Nacional); South Korea’s Seoul Central District Prosecutors’ Office – Darknet Investigations Unit; Switzerland’s Zurich Cantonal Police (Kantonspolizei Zürich) and Public Prosecutor's Office II of the Canton of Zurich (Staatsanwaltschaft II); and the United Kingdom’s National Crime Agency, National Police Chiefs’ Council.

HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats.

C3 delivers computer and cyber-based technical services in support of HSI cases — including investigations into underground online marketplaces selling illegal drugs, weapons and other contraband; enabling the trade of images of child exploitation materials; and facilitating the theft of intellectual property, trade secrets, and export-controlled technology and data.

Individuals across the world can report suspicious criminal activity to the ICE Tip Line 24 hours a day, seven days a week at 866-DHS-2-ICE. Highly trained specialists take reports from both the public and law enforcement agencies on more than 400 laws enforced by ICE.

An indictment is merely an allegation. All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.

Source: U.S. Immigration and Customs Enforcement (ICE.gov)