TLDR
UK, US and Canadian authorities ran Operation Atlantic, freezing over $12 million in suspected crypto scam proceeds tied to approval phishing schemes.
- Operation Atlantic mapped more than $45 million in crypto fraud, froze over $12 million and identified 20,000+ victims across three countries.
- The crackdown targeted approval phishing, where users are tricked into signing wallet permissions that let scammers drain tokens without another transaction.
- Major exchanges and analytics firms helped trace funds, and similar joint operations and stricter security practices are likely to expand from here.
Deep Dive
1. What Operation Atlantic Actually Did
The UKs National Crime Agency (NCA) led Operation Atlantic in March with the US Secret Service, Ontario Provincial Police and Ontario Securities Commission.
Authorities say they froze more than $12 million in suspected criminal proceeds and mapped over $45 million in crypto fraud linked to the same infrastructure, while identifying more than 20,000 victims across the UK, US and Canada. These figures are cited by multiple reports, including a CoinsKid community brief and coverage from Cointelegraph and Bitcoin.com.
The action ran as an intense, week-long sprint hosted at the NCAs London headquarters and focused on investment-style scams that exploited wallet permissions rather than simple send me coins tricks.
2. How Approval Phishing Steals Crypto
Operation Atlantic focused on approval phishing, a scam pattern where users are fooled into signing malicious on-chain approvals that let an attacker spend specific tokens from their wallet.
Instead of sending funds to an address, victims interact with fake investment sites, pop-ups or cloned interfaces and approve token allowances that silently grant control to scammers. Once the approval is in place, the criminal can drain assets without further consent. The NCA and partners describe this as one of the most damaging scam types for everyday crypto users, because it abuses normal DeFi mechanics rather than obvious theft.
The riskiest click is often not a transfer, but any Approve or Allow permission on a dApp you do not fully trust and verify independently.
3. Industry Role And What To Watch Next
The operation relied heavily on private partners. Binance, Coinbase, Kraken, Tether and Chainalysis provided live account screening, scam intelligence and identification of active phishing sites, helping law enforcement trace and freeze funds in near real time. Decrypt highlights that more than 120 fraudulent domains were uncovered and that no funds were frozen on Binance itself.
Going forward, the NCA says intelligence from Operation Atlantic will be used to pursue suspects and support additional victims. For users, the practical focus is on hardened hygiene: only connect wallets to verified URLs, read approval prompts carefully, regularly review and revoke token allowances, and treat unsolicited investment or compliance messages as red flags.
Conclusion
Operation Atlantic shows that coordinated law-enforcement and exchange action can claw back some stolen crypto and disrupt large phishing networks, even if the recovered $12 million is small versus total scam losses. For crypto users, the main takeaway is that wallet permission scams are a central threat, and reducing blind approvals is one of the most effective ways to stay out of the next enforcement headline.
CoinsKid.Com