FBI Sweep Seizes $234M in Cash and Crypto in Dark Web Bust

What Was Operation Tor Nado?

International law enforcement agencies recently wrapped up one of the largest dark web busts in history. Known as Operation Tor Nado, this massive sweep targeted online drug networks operating across multiple continents.

Between May 2025 and October 2026, investigators worked behind the scenes to track down illicit vendors and buyers. On November 12, 2026, the U.S. Department of Justice and Europol shared the details of their multi-year effort.

In total, authorities seized over $234 million in combined cash and cryptocurrency. But money was not the only thing taken off the streets. Officers also confiscated 5.7 metric tons of illicit drugs, 209 firearms, and 38 industrial pill presses.

Global Scope and Arrest Numbers

Operation Tor Nado was coordinated by JCODE, short for the Joint Criminal Opioid and Darknet Enforcement team. Led by the FBI, JCODE brings together federal and international agencies to stop criminal networks hiding on the dark web.

This operation marks JCODE's sixth and most extensive international action since the team was created in 2018. The crackdown spanned across the United States, Europe, Australia, and New Zealand.

During the official announcement, FBI Director Kash Patel highlighted the unprecedented scale of the sweep.

Operation Tor Nado is the largest interagency takedown of Dark Web drug vendors and buyers to date, resulting in 354 arrests worldwide, including 132 in the United States. Through the coordinated effort, this FBI and our partners collectively seized 5.7 metric tons of illicit drugs, including deadly fentanyl, as well as $234 million in cryptocurrency and cash.

Regional Breakdown of Seizures

The breakdown of seized assets highlights the massive global coordination required for this operation.

United States Operations

• Seized $166 million in cash and cryptocurrency.
• Executed operations leading to federal prosecutions across more than 20 U.S. districts.
• Arrested 132 individuals connected to dark web vendor and buyer accounts.

European Operations

Europol coordinated efforts across 14 European countries, bringing specialized forensic and blockchain analysis teams to assist local authorities.

• Seized over 60 million euros in cash and digital assets.
• Confiscated 950 kilograms of illicit drugs.
• Recovered 57 firearms from suspect locations.

Blockchain Tracing Leads to Key Arrests

One prominent prosecution involved a dark web drug vendor operating under the handle Barbara White.

According to blockchain analytics firm Chainalysis, investigators used software named Reactor to follow digital currency transactions on the public ledger. The software mapped payments connecting buyers, postage services, other drug vendors, and a chemical supplier located in China.

The Case Against the Chernyshov Brothers

Investigators linked the crypto wallet activity of Barbara White directly to a mobile payment account belonging to Stanislav Chernyshov. Federal agents combined blockchain data with physical surveillance, postal records, and undercover drug purchases.

Stanislav Chernyshov and his brother, Vladislav Chernyshov, were subsequently arrested in Florida. They face charges for distributing counterfeit pills containing nitazenes, which are highly potent synthetic opioids. Authorities linked the vendor account to at least 12 overdoses, including three deaths.

Building on Previous Marketplace Busts

Law enforcement did not start from scratch. Much of the intelligence for Operation Tor Nado came from analyzing data gathered during earlier marketplace seizures.

Investigators targeted active vendors and buyers who previously used shut-down platforms, including:

• Archetyp
• Bohemia
• Nemesis
• Kingdom
• Tor2Door

Beyond major marketplaces, authorities also focused on encrypted messaging platforms, standalone vendor shops, and illicit online forums.

Precedents set by Earlier Investigations

• Archetyp: Seized in June 2025 across six countries, leading to 8 arrests and 7.8 million euros in confiscated assets.
• Nemesis: Closed in March 2024. In March 2025, the U.S. Treasury sanctioned alleged operator Behrouz Parsarad and identified 49 BitcoinBTC-1.90% and Monero addresses linked to his activities.
• Incognito Market: Dismantled during Operation Rap Tor in 2025 after facilitating over $100 million in illegal transactions. Crypto exchange Binance assisted investigators by tracing transactions and freezing over $3.5 million in connected funds.

The Ongoing Fight Against Dark Web Narcotics

While Operation Tor Nado marks a major success for global law enforcement, officials emphasize that dark web enforcement remains an ongoing effort.

Europol noted that when major dark web marketplaces close, vendors frequently attempt to migrate to newer platforms or encrypted communication channels. Law enforcement agencies across 20 U.S. districts and international borders continue active investigations to uncover remaining accounts.