Facebook Pixel
Help CenterBlog

Unveiling of the Tycoon Phishing Network with the Help of Europol

Reading time: 2 min
March 4, 2026
Author: Team Resonance
Unveiling of the Tycoon Phishing Network with the Help of Europol

Europol and Coinbase, assisted by key companies, dismantled the Tycoon phishing network responsible for vast phishing attacks.

Get started with top trading resources and expert support

Europol and Coinbase Halt Tycoon 2FA

Unveiling of the Tycoon Phishing Network with the Help of Europol

Europol, in collaboration with giants like Coinbase and Microsoft, disrupted the operations of the phishing resource Tycoon 2FA, which specialized in providing phishing software. European law enforcement claims Tycoon, operating since August 2023, was responsible for 62% of all phishing attacks blocked by Microsoft.

Phishing platforms like Tycoon are illegal services that operate on a subscription and reselling model. These platforms create convincing clones of websites, intercepting user data and their 2FA (two-factor authentication), posing a threat to privacy.

Role of Coinbase and Microsoft in the Investigation

The company Coinbase conducted a thorough analysis of the transactions passing through the blockchain, which made it possible to establish the financial ties of the Tycoon resource, as well as the identity of the alleged administrator — the Pakistani Saad Faridi. Microsoft, in turn, achieved the confiscation of key domain names of the resource through a civil suit.

Technical Aspects of the Phishing Platform’s Operation

The Tycoon platform created clones of popular websites, allowing it to steal user data, including their authentication codes, through access to cookies. This enabled attackers to bypass protective protocols and access victims’ accounts.

Impact of the Shutdown on the Market

The closure of Tycoon is a significant step in combatting phishing schemes in cryptography. Such measures are expected to significantly reduce the amount of stolen funds, as occurred in 2025, when an 83% decline was recorded. This demonstrated how cryptocurrency transactions and blockchain can be used to track illegal activity.

Conclusion

The exposure of Tycoon demonstrates the effectiveness of collaboration between international agency branches and financial industry specialists. This event has several significant aspects:

  • Strengths: international collaboration and technical expertise helped shut down a major phishing network.
  • Opportunities: the use of blockchain transactions to thwart criminal activities.
  • Risks: the constant adaptation of criminals to new protection methods and technologies.
  • Threats: the possibility of the restoration or reorganization of similar phishing operations in other formats using cryptography.

Follow new insights in our telegram channel.

No need to invent complex schemes and look for the "grail". Use the Resonance platform tools.

Register via the link — get a bonus and start earning:
OKX | BingX | KuCoin.

Promo code TOPBLOG gives you a 10% discount on any Resonance tariff plan.

Get started with top trading resources and expert support
Loading...