Law enforcement authorities from 14 countries have arrested 354 suspects in a coordinated international operation targeting dark web marketplaces. Codenamed Operation TorNado, the action ran from May 2025 to October 2026 and focused on vendors and buyers active on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom platforms.
Europol stated that national authorities carried out independent investigations with support including cross-checks via SIENA and forensic analysis. The operation also targeted activity on forums, single-vendor shops, and encrypted messaging services. Authorities highlighted the continuing resilience of dark web marketplaces despite repeated takedowns.
In Europe, officers seized over €60 million ($66 million) in cash and cryptocurrency, 950 kilograms of illicit drugs including amphetamines, cocaine, ketamine, psilocybin mushrooms, MDMA, and cannabis, plus 57 firearms. In the United States, more than 4.8 metric tonnes of illicit drugs, 152 firearms, and over €150 million ($166 million) were confiscated.
The U.S. Department of Justice explained that intelligence gathered after the previous JCODE operation enabled identification of dark web drug traffickers, leading to complementary investigations. The effort significantly disrupted the online opioid trade and demonstrated that criminals on the dark web remain within reach of law enforcement.
Operation TorNado continues a series of similar actions over the past six years. These include DisrupTor in 2020 (179 arrests), Dark Huntor in 2021 (150 high-volume vendors apprehended), the 2022 takedown of Hydra (the largest dark web marketplace at the time with over 19,000 seller accounts), Operation SpecTor in 2023 (288 arrests and €50.8 million seized), and Operation RapTor in May 2025 (270 arrests across ten countries).


