The Federal Bureau of Investigation (FBI) has formalized its blockchain defense playbook with the official launch of Operation Riptide: a sweeping crypto-centric counter-offensive engineered to choke the financial pipelines of global cybercrime networks.
The operation represents a structural shift in how federal law enforcement interacts with the Web3 space. Rather than executing reactive, isolated wallet-level seizures, the bureau is utilizing multi-jurisdictional authority to target exchange exit ramps, unverified mixing protocols, and the anonymizing network layers that attackers use to cash out.
Criminal Division Assistant Director Heith Janke said organized fraud networks remain a growing threat, particularly as many schemes target vulnerable victims and operate across multiple countries, making investigations more complex for law enforcement agencies.
According to federal filings, the initiative operationalizes the strict cybersecurity and tracking enforcement mandates outlined in Executive Order 14390 and President Donald Trump’s Cyber Strategy for America.
FBI targets criminal ecosystems
The tactical focus of Operation Riptide was made clear this week with the international seizure and domain takedown of “First VPN Service.” Operating since 2014 across 27 countries, this specific virtual private network functioned as an institutional-grade obfuscation layer explicitly tailored for illicit operations. Blockchain intelligence units revealed that at least 25 major ransomware collectives, including the notorious Avaddon syndicate, integrated First VPN’s infrastructure directly into their exploit deployment strategies to mask the hosting servers used during network intrusions.
FBI Cyber Division Assistant Director Brett Leatherman said Operation Riptide is designed to put sustained pressure on cybercriminals and the networks that support them. “Our goal is to apply persistent pressure on cyber adversaries and destabilize the criminal ecosystems that enable them,” Leatherman stated.
He said recent enforcement actions have included arrests, indictments, search warrants, infrastructure takedowns, and cryptocurrency seizures. The strategy is aimed at making cybercrime more costly and disruptive for criminal groups while limiting their ability to operate at scale.
Combating the $11.3B fraud wave
The launch of Operation Riptide comes at a time when crypto-related fraud is rising sharply. The FBI said in April that Americans lost about $11.36 billion to crypto scams in 2025, based on complaints filed with the agency. Those complaints totaled 181,565, up over 21% from a year earlier.
The data highlights a highly coordinated ecosystem. Advanced social engineering campaigns, such as “pig butchering” velocity scams, lure retail investors into committing substantial capital to unverified, closed-source smart contracts. With average individual victim metrics eclipsing $62,000, these operations rely on the instant finality of public ledgers to layer funds through split-addresses before asset-freezing actions can be taken by compliance teams.
In response, federal investigators are scaling real-time tracing pipelines. A few days ago, authorities charged three U.S. citizens accused of supporting ISIS through cryptocurrency transfers. Prosecutors allege the funds were intended to help purchase drones and rocket-propelled grenades for attacks targeting American servicemembers overseas.
Tracking sovereign threats
The FBI’s macro focus is also on state-backed cyber threats. In February last year, the bureau linked North Korea to the $1.5 billion theft from cryptocurrency exchange Bybit, one of the largest digital asset hacks on record.
According to the FBI, the North Korean-linked Lazarus Group moved the stolen funds through thousands of blockchain addresses, converting portions of the assets into Bitcoin and other cryptocurrencies in an effort to obscure the money trail. Investigators said they continue to monitor and trace the movement of the funds.
Operation Riptide brings those enforcement efforts under a broader campaign aimed at disrupting cybercriminal networks and the financial systems that support them. Federal authorities say the initiative will focus on increasing the cost of cybercrime, seizing illicit assets, and protecting victims, with additional enforcement actions expected in the months ahead.
Also Read: Washington Man Jailed 5 Years for Laundering $100M via Crypto
