Operation Atlantic: A proactive strike against evolving crypto scams
Crypto scams have become highly sophisticated cross-border operations that exploit advanced technology and human psychology. By the time victims become aware of the fraud, the stolen cryptocurrency is often rapidly dispersed across a chain of wallets and exchanges in multiple countries.
Operation Atlantic represents a coordinated international effort by law enforcement agencies from the US, the UK and Canada to counter this threat. Rather than limiting itself to post-incident investigations, the operation focuses on identifying, tracking and disrupting crypto scams while they are still in progress.
The initiative brings together key agencies, including the US Secret Service, the US Attorney’s Office for the District of Columbia, the Ontario Provincial Police, the Ontario Securities Commission, the Royal Canadian Mounted Police, the UK Financial Conduct Authority, the UK National Crime Agency and the City of London Police.
Contrary to conventional investigations that begin only after funds have been stolen, Operation Atlantic is structured to:
-
Identify victims who are at risk
-
Detect active scam infrastructure
-
Interrupt fraudulent transactions
-
Help recovery efforts where feasible
Officials have stressed that the primary objective is to disrupt scams in near real time, marking a significant shift toward faster, more proactive enforcement strategies.
Why approval phishing lies at the heart of Operation Atlantic
A particular form of fraud known as approval phishing lies at the center of Operation Atlantic. Rather than stealing private keys or seed phrases, attackers deceive users into signing what appear to be legitimate blockchain transactions.
These transactions grant scammers permission to spend tokens directly from a victim’s wallet. Once approval is given, the attacker gains the ability to:
This makes approval phishing particularly dangerous. Victims often remain unaware that anything is wrong until their assets begin disappearing.
Scammers frequently integrate this technique into larger scams, such as fake investment platforms or gradual trust-building schemes.
From investigation to intervention
The standout feature of Operation Atlantic is its emphasis on real-time disruption rather than post-event analysis.
This strategy rests on a straightforward idea: While crypto transactions are irreversible, they are also public and fully traceable.
By using blockchain analytics, authorities and private-sector partners can:
-
Detect suspicious wallet activity
-
Identify addresses linked to known scams
-
Track fund flows toward exchanges or liquidity pools
-
Alert platforms and investigators
-
Contact victims before their funds are completely drained
This model does not guarantee full recovery, but it opens a critical window during which meaningful intervention remains possible.
Did you know? The US Secret Service, originally established to combat currency counterfeiting in 1865, now tracks crypto fraud using blockchain analytics. It is one of the oldest agencies adapting to one of the newest financial systems.
Building on earlier initiatives
Operation Atlantic did not happen overnight. It builds upon earlier efforts such as Project Atlas, which was launched in 2024 by Canadian authorities in partnership with the US Secret Service to target crypto fraud networks.
It also draws on lessons from Operation Spincaster, an effort that involved blockchain analytics firms, exchanges and law enforcement agencies.
Spincaster demonstrated that coordinated action could deliver tangible results:
-
Thousands of scam-linked wallet leads identified
-
Significant losses mapped across jurisdictions
-
In some cases, victims were warned in time to revoke malicious approvals
These initiatives suggest that crypto fraud can be interrupted while it is still in progress.
What “real time” actually means
The concept of real-time disruption is sometimes misunderstood. It does not mean instant recovery or guaranteed prevention.
Instead, it operates across three stages:
-
Pre-loss prevention: spotting suspicious approvals before funds are moved
-
Mid-transaction disruption: flagging or freezing assets during transfers
-
Post-loss response: attempting recovery after funds have been dispersed
Operation Atlantic concentrates mainly on the first two stages, where intervention is still feasible.
Its success depends on how quickly data can be analyzed, shared and acted upon across borders and platforms.
Did you know? Approval phishing scams often exploit wallet permissions rather than passwords, which means victims technically authorize the theft themselves. This psychological twist makes these scams harder to detect than traditional hacking attempts.
Why scams now operate like organized networks
Approval phishing scams are generally not standalone events. They typically operate as structured networks with several interconnected parts:
-
Social engineering pipelines to attract victims
-
Fake interfaces or decentralized applications
-
Wallet…
cointelegraph.com