Multi-agency operation shuts down phishing site behind mass fraud

In the latest effort to combat large-scale online fraud, the Metropolitan Police, in collaboration with various international law enforcement agencies and tech partners, infiltrated and disrupted a criminal website called LabHost. The website established in 2021, facilitated the creation of phishing websites used by over 2,000 criminals to defraud victims worldwide.

The operation, initiated in June 2022 after crucial intelligence from the Cyber Defence Alliance, involved coordinated efforts from the Met’s Cyber Crime Unit, the National Crime Agency, City of London Police, Europol and Regional Organised Crime Units (ROCUs) across the country and other international police forces to take action.

With support from tech companies like Chainalysis, Intel 471, Microsoft and Trend Micro, the operation culminated in the arrest of 37 suspects across the UK and abroad.

“You are more likely to be a victim of fraud than any other crime. In addition to the financial impact, it undermines the public’s confidence in the tools and technology they need to use in daily life. Our collective approach should ensure suspects feel that same level of distrust in their own criminal environment.”

Dame Lynne Owens, Deputy Commissioner of the Metropolitan Police Service.

LabHost had amassed over 40,000 fraudulent sites by early 2024, with users paying monthly subscriptions to access phishing templates mimicking trusted brands.

Following the disruption of LabHost, law enforcement sent warnings to 800 users, revealing their identities and activities. Additionally, detectives identified nearly 70,000 UK victims and recovered substantial amounts of compromised data globally.

This operation is part of a broader strategy to combat online fraud, following previous successes such as Operation Elaborate in November 2022 and Operation Cronos in February 2024.

“Online fraudsters think they can act with impunity. They believe they can hide behind digital identities and platforms such as LabHost and have absolute confidence these sites are impenetrable by policing.

“But this operation and others over the last year show how law enforcement worldwide can, and will, come together with one another and private sector partners to dismantle international fraud networks at source. Our approach is to be more precise and targeted with a clear focus on those enabling online fraud to be carried out on an international scale.”

Dame Lynne Owens, Deputy Commissioner of the Metropolitan Police Service.

To read similar articles, check out our Technology channel.

You can also read more on the operation here.