Chainalysis has generated 14,300 investigative leads after tracing 29,120 cryptocurrency addresses and digital identifiers linked to more than 100 child sexual abuse material platforms, forums and distribution networks across the surface and dark web. According to the latest reports, the multi-day operation identified more than 7,700 suspect accounts across exchanges and payment platforms, including accounts associated with 16 registered sex offenders. The operation, held at the National Cyber-Forensics and Training Alliance in New York, brought together investigators, cryptocurrency companies and specialist nonprofit organizations to examine financial activity connected with child sexual abuse material. Tom McLouth, senior intelligence analyst at Chainalysis, emphasized that "behind every lead is a real child at risk," highlighting the serious nature of the investigation. The operation demonstrated the value of bringing partners together around a shared mission, with each contributing from their own authorities, capabilities, and areas of expertise.
The operation identified suspects across 125 countries, giving the investigation a cross-border scope that involved law enforcement agencies from several continents. As reported by Chainalysis, eleven cryptocurrency exchanges and payment services were involved in the investigative leads generated during the operation. Participating organizations included Binance, Coinbase, Block, the Australian Federal Police, Royal Canadian Mounted Police, the United Kingdom's National Crime Agency, Europol, and the Internet Watch Foundation. The suspect pool included military personnel, law enforcement officers, medical professionals and educators, including individuals with direct access to children. Participants used onchain intelligence to develop leads for follow-on legal processes and case development, with Chainalysis expecting the results to lead to arrests, prosecutions and account-level disruption. The effort is a model for future public-private collaboration to support child-safety investigations while remaining appropriately targeted, controlled and operationally responsible.
According to Chainalysis research, cryptocurrency accounts represent only a small portion of activity associated with CSAM, though the company noted increased use in recent years. The firm's February research found that cryptocurrency flows connected with suspected human trafficking services increased 85% during 2025. As reported by Chainalysis, some operators have increasingly used privacy-focused Monero to obscure proceeds, while instant exchangers without know-your-customer requirements are part of the laundering process used by some operators. Bitcoin had previously been common across identified CSAM services, with one platform analyzed receiving over $530,000 since July 2022 using more than 5,800 cryptocurrency addresses. Blockchain intelligence enables investigators to trace cryptocurrency flows tied to CSAM platforms, vendors, and consumers across multiple blockchains, connecting on-chain activity to real-world offenders.
Binance has increased spending on financial-crime controls, spending approximately $300 million annually on compliance and employing nearly 1,500 people in related roles. According to Binance's June compliance update, the exchange supported 313,653 law-enforcement requests globally by late June, including 72,632 requests during 2025 and another 36,235 by June 2026. The exchange also reported intercepting $10.53 billion in potential fraud, scams and unusual activity between 2025 and the first quarter of 2026. Coinbase stated that Operation Lighthouse demonstrated how blockchain transparency can help companies and investigators convert transaction data into actionable information. Binance announced a partnership with nonprofit Stop The Traffik in July, with the organization providing intelligence, training and insights intended to improve detection and investigation of crypto activity linked to human trafficking and child exploitation.
Operation Lighthouse follows other efforts by crypto firms and child-protection organizations to expand intelligence sharing around crypto activity linked to exploitation. Europol emphasized that joint action is essential because perpetrators exploit financial services, payment systems and internet platforms. Blockchain tracing has previously contributed to significant enforcement actions, including the 2019 takedown of Welcome to Video, described as the largest darknet child sexual exploitation market by volume of content. Authorities traced Bitcoin payments to locate the website server in South Korea and identify its administrator, leading to 337 users being arrested and charged, the rescue of at least 23 victims and the seizure of about eight terabytes of material. Chainalysis noted that monitoring standards across cryptocurrency businesses have tightened over recent years, with 47% of crypto businesses entering the market in 2026 already meeting alerting standards that would have ranked among the strictest 10% of settings used in 2020. As the results from this sprint continue to mature into arrests, prosecutions, and account-level disruption, Chainalysis looks forward to sharing further updates on the impact of this work and applying the Lighthouse model to future operations.
