Key Takeaways
- Authorities confiscated 209 firearms and 38 pill presses worldwide.
- The account BarbaraWhite was linked to at least 12 overdoses, including three deaths.
- Federal prosecutions extended across more than 20 U.S. districts.
Global Drug Sweep Seizes Cash, Crypto, and Weapons
The U.S. Department of Justice (DOJ) and Europol announced on Nov. 12 that Operation TorNado resulted in more than $234 million in combined seizures of cash and cryptocurrency. Investigations ran from May 2025 through Oct. 2026. Authorities also confiscated 209 firearms and 38 pill presses.
The FBI-led Joint Criminal Opioid and Darknet Enforcement team, known as JCODE, brought together federal agencies targeting online drug trafficking. TorNado was its sixth and most extensive internationally coordinated action since its creation in 2018. The campaign spanned the United States, Europe, Australia, and New Zealand.
FBI Director Kash Patel said:
“Operation TorNado is the largest interagency takedown of Dark Web drug vendors and buyers to date, resulting in 354 arrests worldwide, including 132 in the United States.”
“Through the coordinated effort, this FBI and our partners collectively seized 5.7 metric tons of illicit drugs, including deadly fentanyl, as well as $234 million in cryptocurrency and cash,” he added.
Europol supported agencies in 14 countries through its forensic and blockchain analysis teams, intelligence sharing, and coordination to prevent overlapping investigations. American authorities seized $166 million in cash and cryptocurrency. European seizures exceeded 60 million euros, alongside 950 kilograms of drugs and 57 firearms.
Crypto Tracing Connects BarbaraWhite to Alleged Operator
One featured prosecution involved BarbaraWhite, a darknet drug vendor account that blockchain intelligence linked to Stanislav Chernyshov, Chainalysis said. He and his brother, Vladislav Chernyshov, were arrested in Florida and accused of distributing counterfeit pills containing nitazenes, highly potent synthetic opioids. The firm said the vendor was linked to at least 12 overdoses, including three deaths.
A recreated graph from Reactor, Chainalysis’ software for tracing digital currency payments, mapped transactions involving potential buyers, a postage service, another drug vendor, and a China-based chemical supplier. Investigators connected wallet activity to Stanislav through his mobile payment account. Postal records, surveillance, and undercover purchases supplemented that analysis.
Seized Marketplaces Supplied Leads for Further Cases
TorNado pursued users of Archetyp, Bohemia, Nemesis, Kingdom, and Tor2Door after those marketplaces were seized. Authorities also targeted activity on forums, individual vendor shops, and encrypted messaging services. The Archetyp marketplace takedown occurred in June 2025 across six countries. It resulted in eight arrests and 7.8 million euros in seized assets.
Nemesis faced financial enforcement following its March 2024 shutdown. Treasury imposed sanctions targeting its alleged administrator, Behrouz Parsarad, and identified 49 bitcoin and monero addresses in March 2025. Officials accused him of operating the marketplace.
Operation RapTor in 2025 provided another precedent for financial investigations. Binance said its assistance tracing Incognito Market funds included intelligence sharing and freezing more than $3.5 million in linked assets. Incognito had facilitated more than $100 million in illicit transactions.
Federal prosecutions were underway in more than 20 U.S. districts. Europol cautioned that disrupted marketplaces were rapidly replaced as criminals migrated to new platforms. Investigations continued to identify people behind remaining dark web accounts.
