Operation Alice shut down more than 373,000 dark web sites that advertised fake child sexual abuse material packages in an international investigation led by Germany that began in mid-2021.
KEY FACTS
- Operation Operation Alice, led by Germany
- Scale More than 373,000 dark web sites shut down
- Payments About 10,000 buyers paid roughly $400,000 in Bitcoin
- Infrastructure 287 servers seized, 105 located in Germany
In a press release by Europol, investigators said the platform used the name “Alice with Violence CP” and was run by a 35-year-old suspect based in China. The sites showed previews of supposed CSAM packages to lure users to enter contact information and pay between EUR 17 and EUR 250 in Bitcoin while delivering nothing.
The platform fooled around 10,000 users into paying roughly $400,000. Authorities identified 440 buyers in 23 countries and are investigating about 100 of them.
At its peak the network ran on 287 servers, with 105 hosted in Germany. All servers have been seized and German authorities issued an international arrest warrant for the suspect.
Buyers never received the illegal material. Attempting to purchase CSAM can be prosecuted in many jurisdictions. Support platforms include Help4U and the “Stop Child Abuse 6 Trace an Object” initiative.
WHY IT MATTERS
The takedown removed a large fraudulent network that financially supported child abuse and produced investigative leads. Identified buyers and seized infrastructure may lead to prosecutions and prevent further victimization.

