Loading article…
Interpol’s Operation First Light 2026 uncovered a 20‑year‑old’s wallet that moved $122.5 million in romance‑scam proceeds over 10 months, prompting 5,811
A single cryptocurrency wallet linked to a 20‑year‑old suspect moved more than $122.5 million in suspected romance‑scam proceeds over a ten‑month period, a centerpiece of Interpol’s Operation First Light 2026 crackdown [2].
| At a glance | |
|---|---|
| Amount processed | $122.5 million |
| Duration | 10 months |
| Arrests (global) | 5,811 |
| Victims identified | 142,000 |
Operation First Light ran from mid‑January through the end of April 2026, coordinating actions across 97 countries and territories. Interpol reported the sweep blocked 31,014 bank accounts, analyzed 152,808 cases, and intercepted $293 million in illicit assets, of which the $122.5 million crypto flow was the largest single wallet finding [2]. The operation also issued 99 Interpol Notices and Diffusions, underscoring the scale of the coordinated response [2].
Thai investigators uncovered a cross‑chain laundering scheme: scam operators converted victims’ fiat into a mix of cryptocurrencies and repeatedly swapped tokens across different blockchains to obscure the audit trail. While Interpol did not disclose the specific blockchains used, the technique allowed the syndicate to move roughly $12 million per month through the wallet, suggesting it functioned as a money‑mule conduit rather than a direct operator account [3]. The use of cross‑chain swaps highlights a growing challenge for AML tools that must now trace assets across multiple protocols.
The bust adds to a string of recent crypto‑related fraud actions, including a $580 million seizure from Chinese networks in February 2026 and a 24‑person fraud sweep in Argentina in May 2026 [2]. Authorities also employed Interpol’s Global Rapid Intervention of Payments (I‑GRIP) mechanism to freeze both fiat and virtual assets in real time, a capability that could become standard in future multinational investigations [1].
The $122.5 million flow demonstrates how romance‑scam syndicates exploit crypto’s speed and pseudonymity to launder large sums, and it underscores the need for coordinated, cross‑jurisdictional forensic tools to keep pace with evolving multi‑chain laundering tactics.
Coverage is mostly measured — 109 of 111 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · Jul 12, 2026 · How we report
Approval phishing involves tricking users into signing malicious contract approvals, which can give attackers unlimited access to drain funds, as described by Chainalysis researcher Ryan Coleman.
Cross‑chain swaps move assets between blockchains, creating multiple technical and legal handoffs that make it harder for investigators to trace funds, as highlighted in the Interpol case.
MetaMask launched live address‑poisoning detection in June, comparing pasted addresses with previously interacted ones to help users avoid sending funds to look‑alike malicious addresses.