Chainalysis-Led ‘Operation Lighthouse’ Exposes 7,700 Crypto Accounts Tied to Child Sexual Abuse Material

In one of the largest coordinated crackdowns of its kind, blockchain analytics firm Chainalysis has identified more than 7,700 suspect cryptocurrency accounts linked to child sexual abuse material, or CSAM, as part of a sweeping global initiative called Operation Lighthouse. The announcement, shared with Cointelegraph in a Tuesday press release, marks a significant escalation in the use of onchain intelligence to combat crimes that often hide in the shadows of the internet. The operation, which brought together law enforcement agencies, private-sector partners, and child-protection specialists, investigated 29,120 crypto addresses and digital identifiers connected to over 100 CSAM platforms, forums, and distribution networks operating across both the surface web and the dark web. The findings represent a major breakthrough in the fight against online child exploitation, revealing not only hidden payment flows but also the disturbing breadth of individuals involved in accessing and distributing illegal material. For investigators, the results underscore a simple but powerful truth: every digital transaction, no matter how carefully anonymized, leaves a trace that can be followed.

The scale of the investigation becomes even more striking when set against the operational details released by Chainalysis. Operation Lighthouse generated 14,300 investigative leads across 11 cryptocurrency exchanges and payment services, giving authorities in multiple jurisdictions a concrete starting point for criminal inquiries. Suspects were flagged in 125 countries, a geographic footprint that highlights the borderless nature of this form of criminal activity. Among those identified were 16 registered sex offenders, a chilling reminder that known predators are continuing to exploit digital tools to access harmful content. But equally concerning, according to Chainalysis senior intelligence analyst Tom McLouth, is the diversity of the suspect pool. It included military personnel, law enforcement officers, medical professionals, and educators—people in positions of trust, including some with direct access to children. “Behind every lead is a real child at risk,” McLouth told Cointelegraph, capturing the gravity of the operation and the urgency that drives investigators to turn raw blockchain data into actionable intelligence. The phrase is not merely rhetorical; it reflects the central mission of Operation Lighthouse, which was designed not simply to identify offenders but to protect victims and prevent further abuse.

The operation itself was the culmination of months of intensive data enrichment work, culminating in a multi-day sprint hosted at the National Cyber-Forensics and Training Alliance in New York. This setting was deliberate: by physically assembling experts from multiple organizations, Chainalysis and its partners were able to accelerate the analysis process and move quickly on leads. The collaborative effort brought together some of the most prominent names in law enforcement and financial technology, including Europol, the UK National Crime Agency, cryptocurrency exchanges Binance and Coinbase, financial services company Block, and the Internet Watch Foundation, a UK-based charity dedicated to identifying and removing online child sexual abuse content. Each participant brought a distinct set of tools and expertise to the table. Law enforcement agencies contributed investigative authority and legal expertise, while private-sector partners supplied data, technical infrastructure, and deep knowledge of blockchain networks. Together, they used onchain intelligence to trace movement of funds, identify patterns of behavior, and develop leads that could support follow-on legal processes, case development, arrests, and prosecutions. The goal, Chainalysis said, was not just to generate intelligence but to disrupt the networks enabling CSAM distribution, including at the account level, in a way that would make it harder for offenders to operate in the future.

This growing focus on crypto-enabled child exploitation reflects a broader recognition within the industry and among regulators that digital assets, once seen as a haven for illicit transactions, can also be a powerful tool for accountability. Europol, which participated in Operation Lighthouse, said joint action was essential because perpetrators systematically exploit financial services, payment systems, and internet platforms to further their crimes. No single organization can tackle the problem alone, the agency stressed, pointing to the need for continued cooperation across borders and between sectors. The involvement of major crypto firms marks a notable shift in how the industry perceives its role in protecting vulnerable populations. Historically, cryptocurrencies were associated with anonymity and deregulation, but the rise of sophisticated blockchain analytics has changed that narrative. Today, exchanges and payment providers are increasingly working alongside investigators to detect and report suspicious activity. Blockchain intelligence has become a frontline defense, enabling the identification of individuals who purchase or distribute CSAM by tracing payments and wallet interactions across public ledgers. For companies like Binance and Coinbase, participation in Operation Lighthouse is part of a broader commitment to corporate responsibility and regulatory compliance, as well as a recognition that the financial infrastructure of Web3 must not be allowed to become a safe harbor for predators.

Beyond Operation Lighthouse, crypto firms and child-protection organizations are expanding their efforts in this space through a variety of partnerships and initiatives. In July, Binance announced a formal collaboration with the nonprofit Stop The Traffik, an organization focused on disrupting human trafficking and child exploitation. The exchange said the partnership would provide intelligence, training, and insights designed to improve its detection and investigation capabilities. By combining technical expertise with the real-world experience of anti-trafficking specialists, Binance aims to identify patterns and red flags that might otherwise go unnoticed. This kind of collaboration is increasingly seen as essential in an environment where offenders continuously adapt their methods. The use of privacy-enhancing technologies, such as mixing services and anonymity-focused cryptocurrencies, presents challenges for investigators, but blockchain tracing has evolved rapidly to meet these threats. The success of Operation Lighthouse suggests that public-private intelligence sharing, when executed properly, can produce meaningful results in a relatively short period of time. It also sends a clear message to those involved in CSAM-related activity that their transactions are not as hidden as they may believe.

This is not the first time that blockchain tracing has played a pivotal role in a major CSAM takedown, and the historical precedent offers a powerful reminder of what can be achieved. In 2019, the U.S. Department of Justice announced the takedown of Welcome to Video, at the time the largest darknet child sexual exploitation marketplace by volume of content. Authorities were able to trace Bitcoin payments linked to the platform, ultimately locating the website’s server in South Korea and identifying its administrator. The investigation resulted in 337 users being arrested and charged, the rescue of at least 23 victims, and the seizure of approximately eight terabytes of illegal material. Chainalysis later confirmed that its software was used to analyze the transaction flows and map the site’s users and contributors, providing critical evidence that supported the enforcement action. That case became a defining moment for the use of blockchain analytics in criminal investigations, and Operation Lighthouse builds on that legacy. The progress made in the years since has been substantial, with tools now capable of handling far larger datasets and identifying connections across multiple blockchain networks. As the latest operation demonstrates, the intersection of cryptocurrency and child protection is one of the most consequential areas of modern law enforcement. The work is far from over, but each successful operation brings investigators closer to dismantling the networks that enable abuse. For the children behind the leads, and the survivors who live with the consequences, that progress is a lifeline. The data has been analyzed, the leads have been generated, and the next stage—arrests, prosecutions, and justice—is just beginning.