A coordinated takedown of scam networks targeting Americans has resulted in the largest cross-company and law enforcement operation of its kind. Meta, Microsoft, Starlink, Coinbase, and federal agencies including the FBI and DOJ, working alongside law enforcement from the UK, Australia, Canada, and New Zealand, have dismantled criminal infrastructure operating primarily out of Southeast Asia.
Key Takeaways
- Meta disabled over 1.4 million accounts, pages, and groups linked to scam operations
- Microsoft suspended 20,000 accounts used by scammers across its platforms
- Coinbase froze more than $3 million in cryptocurrency tied to criminal networks
- Starlink disconnected thousands of kits determined to be used for scam operations
- Law enforcement has arrested 63 suspects so far, with operations ongoing
How the Takedown Unfolded
The operation began with intelligence sharing. During the week of May 18, representatives from Meta, Microsoft, Coinbase, Starlink, the DOJ, and international law enforcement partners met in Washington, DC to coordinate their response. This collaboration allowed agencies to identify scam-center locations, map criminal syndicates, and pinpoint which platforms and services were being abused. The result was a synchronized enforcement action across multiple companies and jurisdictions simultaneously.
Meta’s role proved decisive. The social media giant identified and disabled more than 1.4 million accounts, pages, and groups across Facebook and Instagram that were tied to the scam networks. This scale dwarfs typical single-platform takedowns. For context, Meta previously removed more than 2 million accounts linked to pig butchering schemes alone, showing the persistence of these criminal operations.
The breadth of Meta’s enforcement during 2025 illustrates the scope of the problem. The company removed 159 million scam ads and disabled 10.9 million Facebook and Instagram accounts tied to criminal scam centers throughout the year. Yet the coordinated action represents a shift from platform-by-platform enforcement to synchronized, multi-company disruption.
The Scam Networks Targeting Americans
Scam networks targeting Americans employ multiple schemes. Romance scams exploit emotional vulnerability, building fake relationships over weeks or months before requesting money. Pig butchering schemes lure victims into fake investment opportunities, gradually building trust before stealing deposits. Law-enforcement impersonation involves criminals posing as federal agents to intimidate victims into sending money. These schemes are not new, but their scale and coordination have grown significantly.
The criminal infrastructure operates from Southeast Asia, where scam centers employ dozens of people working in shifts to manage hundreds of victim accounts simultaneously. Starlink’s involvement in the takedown highlights how satellite internet services can be weaponized by criminal networks. The company disconnected thousands of kits it determined were being used by scammers, cutting off internet access to entire operation centers.
Microsoft’s suspension of 20,000 accounts demonstrates how email and productivity platforms become vectors for fraud. Scammers use compromised or fraudulent Microsoft accounts to send convincing phishing emails, impersonate legitimate companies, and coordinate with accomplices across time zones.
Cryptocurrency and Financial Disruption
Cryptocurrency has become the preferred payment method for scam networks because transactions are difficult to reverse and trace. Coinbase, one of the largest cryptocurrency exchanges, froze more than $3 million linked to criminal networks as part of the operation. This action disrupts the financial incentive for scammers, though it represents only a fraction of total losses inflicted on victims.
The freezing of cryptocurrency is not restitution—victims do not automatically recover stolen funds. Instead, it removes liquid assets from criminal networks, making it harder to pay operatives, purchase new equipment, or invest in infrastructure. Law enforcement can also use frozen cryptocurrency as evidence in prosecutions of the 63 suspects arrested so far.
Why This Operation Matters Now
Scam networks have grown bold because they operate across borders, exploit platform policies, and leverage technologies like VPNs and cryptocurrency to hide their tracks. Single companies acting alone cannot disrupt networks that span multiple platforms, payment systems, and jurisdictions. This operation demonstrates that coordinated action—when companies share intelligence and law enforcement acts decisively—can scale enforcement beyond what any single actor could achieve.
The operation is not finished. Law enforcement arrested 63 suspects so far, language that implies investigations and arrests are ongoing. Additional suspects remain at large, and new scam networks are forming to replace those dismantled. The real test will be whether this model of coordination becomes routine or remains an exception.
How Does Pig Butchering Compare to Other Scams?
Pig butchering differs from romance scams in duration and sophistication. Romance scams may move quickly to financial requests, while pig butchering schemes invest weeks or months building fake investment credibility before the final theft. Romance scams exploit emotional connection; pig butchering exploits greed and the appearance of legitimate financial opportunity. Both are devastating, but pig butchering typically results in larger per-victim losses.
Why Did Starlink Disconnect Thousands of Kits?
Starlink kits provide internet connectivity independent of traditional broadband infrastructure, making them attractive to criminal networks operating in remote areas or countries with limited internet access. By disconnecting thousands of kits, Starlink severed the communication backbone of scam operations, forcing them to rebuild infrastructure or relocate. This action was unprecedented in scope for a satellite internet provider.
What Happens to Victims of These Scams?
The takedown does not automatically restore stolen money to victims. Frozen cryptocurrency may eventually be returned through civil restitution or victim compensation programs, but this process is slow and uncertain. Victims of romance and pig butchering scams should report losses to the FBI’s Internet Crime Complaint Center (IC3) and their local law enforcement. The coordinated operation may provide evidence for future prosecutions, but recovery depends on jurisdiction and the victim’s ability to prove financial loss.
This takedown signals that major technology companies and law enforcement agencies are willing to invest resources in disrupting scam infrastructure at scale. The operation removed millions of accounts, froze millions in cryptocurrency, and arrested dozens of suspects—but the real victory lies in demonstrating that coordinated action across companies and borders can work. Scam networks will adapt and rebuild, but they now face a higher cost and greater risk of exposure. For Americans targeted by these schemes, the message is clear: report suspicious activity immediately and verify requests for money through independent channels, never through links or contact information provided by the potential scammer.
Edited by the All Things Geek team.
Source: TechRadar
