Chainalysis-Assisted Probe Flags 7,700 Accounts in Child Abuse Case

Blockchain analytics firm Chainalysis says it has identified more than 7,700 suspect accounts tied to child sexual abuse material (CSAM) through an international enforcement effort known as Operation Lighthouse.

Chainalysis reports that the operation examined 29,120 crypto addresses and other digital identifiers connected to more than 100 CSAM platforms, forums and distribution networks spanning both the surface web and the dark web. The company says the work produced 14,300 investigative leads that were shared for further legal action.

Key takeaways

• Chainalysis says Operation Lighthouse flagged more than 7,700 suspect accounts linked to CSAM.
• The operation analyzed 29,120 crypto addresses and digital identifiers associated with over 100 CSAM platforms and forums.
• Chainalysis estimates it generated 14,300 investigative leads across 11 crypto exchanges and payment services.
• Suspects were flagged in 125 countries, including 16 registered sex offenders, according to the company.
• The initiative brought together law enforcement, private-sector partners and nonprofits to support follow-on legal processes.

Operation Lighthouse: tracing activity tied to CSAM

In a Tuesday press release provided to Cointelegraph, Chainalysis described Operation Lighthouse as a multi-day intelligence sprint focused on isolating crypto-related identifiers connected to CSAM markets and distribution channels.

The company said investigators examined more than 100 CSAM platforms, forums and distribution networks, using onchain intelligence to develop case leads. Chainalysis also stated that the operation created 14,300 leads across 11 crypto exchanges and payment services, and identified suspects operating across 125 countries.

Among those flagged were 16 registered sex offenders. Chainalysis also said its suspect pool included military personnel, law enforcement officers, medical professionals and educators—along with people who may have direct access to children.

“Behind every lead is a real child at risk,” said Tom McLouth, senior intelligence analyst at Chainalysis, in comments provided to Cointelegraph.

Why the operation matters for crypto compliance and enforcement

Beyond the headline numbers, Operation Lighthouse highlights how blockchain analytics can move from identifying illicit flows to supporting downstream casework. Chainalysis said the leads generated by the operation were intended to feed “follow-on legal processes and case development,” with outcomes expected to include arrests, prosecutions and account-level disruption.

The operational model also underscores a practical point for exchanges and payment providers: crypto platforms increasingly sit at a critical junction where financial and platform-layer activity can overlap. Chainalysis’s involvement with leads across multiple exchanges and payment services suggests investigators are looking to connect transactional behavior to individuals and infrastructure rather than treating crypto as a standalone data silo.

A coordinated multi-agency push in New York

Chainalysis said the sprint took place at the National Cyber-Forensics and Training Alliance in New York after months of data enrichment. The company described the event as bringing together law enforcement agencies, private-sector participants and specialized nonprofits.

Participants named in the press release included Europol, the UK National Crime Agency, Binance, Coinbase, Block and the Internet Watch Foundation. According to Chainalysis, attendees used onchain intelligence to develop leads for legal processes and broader case development.

While the operation itself focused on intelligence development, Chainalysis framed the work as part of a wider enforcement pipeline—one that depends on coordinated information sharing across jurisdictions and organizations to act quickly once leads are established.

Expanding industry intelligence sharing against child exploitation

Operation Lighthouse comes amid a broader push by crypto firms and child-protection organizations to improve how information about exploitation-related activity is detected and shared. Europol has previously argued that perpetrators leverage financial systems and internet platforms, making joint action essential.

Chainalysis’s effort also aligns with other industry initiatives aimed at strengthening detection. For example, Binance—named as a participant in Lighthouse—announced a partnership with nonprofit Stop The Traffik in July. In that announcement, Binance said the nonprofit would provide intelligence, training and insights intended to improve the detection and investigation of crypto activity linked to human trafficking and child exploitation.

Blockchain tracing has played a role in major CSAM enforcement actions before. In 2019, the US Department of Justice announced a takedown of “Welcome to Video,” described at the time as the largest darknet child sexual exploitation market by volume of content. The DOJ said investigators traced Bitcoin payments to locate the website server in South Korea and identify its administrator. That case reportedly resulted in arrests and charges for hundreds of users, the rescue of at least 23 victims, and the seizure of about eight terabytes of material.

Chainalysis has said that its software was used in that investigation to analyze transactions and map users and contributors, describing the effort in a post about the “Welcome to Video” shutdown.

What to watch next

Operation Lighthouse shows how onchain intelligence is increasingly being operationalized into tangible investigative leads across multiple exchanges and jurisdictions. The next question for readers is how quickly these leads translate into arrests and case disruptions—and whether wider enforcement partnerships will continue to broaden the measurable outcomes beyond account-level flags.