US UK Canada launch anti-phishing crackdown

TLDR

The United States, United Kingdom and Canada have launched Operation Atlantic, a coordinated crackdown on crypto phishing scams that abuse wallet approvals.

1. Operation Atlantic is a joint law-enforcement effort targeting approval phishing and related crypto fraud, led by agencies such as the US Secret Service and UK National Crime Agency.
2. These scams trick users into signing malicious approvals that let attackers drain wallets, contributing to billions of dollars in crypto fraud losses in recent years.
3. Users should expect more takedowns and warnings, but personal wallet hygiene remains critical: carefully check every signature, app permission, and link before interacting.

Deep Dive

1. Cross-Border Operation Atlantic

Authorities in the US, UK and Canada have launched a joint initiative called Operation Atlantic to disrupt crypto fraud schemes built on phishing.

The effort involves the US Secret Service, the UK National Crime Agency, and Canadian bodies including the Ontario Provincial Police and Ontario Securities Commission, with support from the Royal Canadian Mounted Police, City of London Police and the UK Financial Conduct Authority.

Officials say the focus is real-time disruption of scams, early warnings to potential victims, and guidance on securing compromised wallets and recovering stolen funds, building on earlier joint work under Project Atlas and similar operations.

2. How Approval Phishing Drains Wallets

Approval phishing scams work by getting a victim to sign a malicious blockchain transaction that grants the scammer permission to spend specific tokens from the victims wallet. Once approved, the attacker can drain those tokens without further consent.

Chainalysis data cited by regulators indicates approval phishing alone led to around $2.7 billion in stolen crypto between May 2021 and July 2024, while broader crypto scams generated at least $14 billion in onchain revenue in 2025, potentially rising toward $17 billion as more illicit wallets are identified.

Scammers increasingly combine fake investment pitches or pig butchering romance schemes with realistic websites, AI-generated content and phishing-as-a-service toolkits to scale these attacks across borders.

3. What To Watch And How To Protect Yourself

Operation Atlantic aims to freeze funds, seize infrastructure and generate investigative leads across jurisdictions, which could increase disruption of large phishing networks and lead to more coordinated takedowns and asset freezes.

However, the scams rely on user actions, so the main defenses stay in your hands: verify URLs, treat unsolicited security alerts with suspicion, read every transaction and approval prompt, and regularly revoke unnecessary token permissions using reputable tools.

Conclusion

Operation Atlantic shows that major Western regulators now treat approval phishing and related crypto scams as a coordinated cross-border crime problem, not isolated incidents.

If the crackdown succeeds, it could make large-scale scam operations riskier and less profitable, but individual users still need robust wallet hygiene and skepticism toward unsolicited offers to avoid being the weak link.