The FBI has concluded a 60-day international operation targeting cybercrime networks accused of defrauding Americans and laundering illicit proceeds. Operation Riptide, launched in June, produced arrests, cryptocurrency seizures and disruptions of criminal infrastructure linked to phishing, romance fraud, cargo theft and ATM jackpotting. The FBI said Americans lost more than $20 billion to cybercrime last year. Officials credited artificial intelligence, intelligence sharing and international coordination with helping investigators reach networks operating across borders.
The campaign involved foreign law enforcement, technology companies and specialist cybersecurity teams. Actions included the arrest of an alleged member of the pro-Russia hacktivist group Cyber Army of Russia Reborn, the seizure of a cloud computing account connected to subsidiaries of Cambodia-based Huione Group and the technical disruption of a Chinese phishing-as-a-service platform.
| No. | Article Subheadings |
|---|---|
| 1) | Operation Riptide and its international reach |
| 2) | Financial networks and phishing infrastructure disrupted |
| 3) | Arrests, convictions and sentences across major cases |
| 4) | Artificial intelligence raises the threat for victims |
| 5) | FBI pledges continued pressure on cybercriminals |
Operation Riptide and its international reach
The FBI launched Operation Riptide in June against criminal groups using online platforms, anonymous communications and infrastructure rented across national borders. The operation concluded after 60 days and addressed networks targeting people in the United States and other countries. FBI Director Kash Patel described it as an aggressive effort to dismantle criminal enterprises rather than pursue isolated offenders.
“Operation Riptide was the FBI’s historic 60-day campaign targeting cybercriminals preying on Americans here at home and around the world,” said Kash Patel.
Investigators worked with international law enforcement and private-sector partners because the targeted groups operated through distributed networks. The campaign combined arrests and prosecutions with efforts to remove digital tools and financial channels supporting the schemes.
Financial networks and phishing infrastructure disrupted
One action involved seizing a cloud computing account used by subsidiaries of Huione Group, a corporate conglomerate based in Cambodia. The subsidiaries were accused of helping people and organizations move proceeds from cryptocurrency investment fraud, cyber scams and other crimes across blockchains. Investigators said the activity enabled illicit funds to be converted into apparently legitimate banking assets without detection.
In a separate operation, law enforcement worked with Google and Black Lotus Labs on a technical takedown of Outsider, a Chinese phishing-as-a-service platform. The service allegedly supplied hosting infrastructure and phishing kits to criminals targeting U.S. citizens and businesses, as well as victims in at least 54 other countries. The action was intended to make campaigns harder to launch at scale.
Arrests, convictions and sentences across major cases
The operation included the arrest of an alleged Cyber Army of Russia Reborn member. Other cases connected to the broader effort reached significant legal milestones. Eight people were convicted in an international cargo theft conspiracy affecting U.S. supply chain security, while five Ghanaian citizens were indicted over alleged online romance fraud schemes targeting Americans.
Two people were sentenced to 6.5 years in prison for participating in a nationwide ATM jackpotting scheme. Prosecutors said the scheme used Ploutus malware to force cash machines to dispense money, resulting in millions of dollars in theft across the United States. In another case, Barry Augustinsky was convicted of operating a multiyear VoIP-based fraud scheme that primarily targeted elderly Americans, laundered proceeds and used false access to credit reports.
Artificial intelligence raises the threat for victims
Retired FBI agent Scott Augenbaum, who specialized in cybercrime, said modern technology has made convincing fraud easier to create. Artificial intelligence can improve phishing messages, while voice cloning and fabricated websites can make impersonation schemes harder to identify. He said advice about spotting poor grammar is less reliable because criminal groups can now produce polished messages.
“Artificial intelligence is enhancing the cybercriminals’ ability to trick people,” said Scott Augenbaum.
The same tools can be adapted for financial fraud, account theft and business compromise. The FBI’s actions sought to disrupt supporting infrastructure while warning that technological sophistication continues to raise risks for victims.
FBI pledges continued pressure on cybercriminals
FBI officials said the conclusion of the 60-day campaign does not mark the end of enforcement activity. Heith Janke, assistant director of the bureau’s Criminal Investigative Division, said coordinated actions and international partnerships were used to disrupt networks, impose consequences and protect the public.
Brett Leatherman, assistant director of the FBI’s Cyber Division, said criminals rely on borders, anonymity and rented infrastructure to avoid detection. He said arrests, extraditions, infrastructure takedowns and seizures affected different parts of the criminal ecosystem.
“Cybercriminals depend on borders, anonymity and rented infrastructure to stay beyond reach, and over 60 days, the FBI and our partners took those advantages away,” said Brett Leatherman.
| No. | Key Point |
|---|---|
| 1 | Operation Riptide ran for 60 days after launching in June. |
| 2 | The FBI said cybercrime cost Americans more than $20 billion last year. |
| 3 | Authorities seized funds and disrupted cryptocurrency, cloud and phishing infrastructure. |
| 4 | Cases included romance fraud, cargo theft, ATM jackpotting and VoIP fraud. |
Summary
Operation Riptide brought arrests, seizures and technical takedowns against cybercrime networks targeting Americans and victims abroad. The FBI said international partnerships, intelligence sharing and artificial intelligence helped disrupt criminal operators and the infrastructure supporting their schemes. Officials said enforcement will continue after the campaign.
Frequently Asked Questions
What was Operation Riptide?
Operation Riptide was a 60-day FBI campaign launched in June to target cybercriminals, online fraud networks and illicit digital infrastructure affecting Americans and victims internationally.
Which crimes were targeted?
The effort addressed phishing, cryptocurrency investment fraud, romance fraud, cargo theft, VoIP-based fraud and ATM jackpotting involving Ploutus malware.
What happened to Outsider?
Law enforcement, working with Google and Black Lotus Labs, carried out a technical takedown of Outsider, a Chinese phishing-as-a-service platform that allegedly supplied hosting and phishing kits.
Will enforcement continue?
FBI officials said pressure will continue through arrests, extraditions, infrastructure disruptions and seizures aimed at international criminal networks.
