INTERPOL Unveils New Leads in Subscription Platform Fraud Networks
Law enforcement agencies from seven European nations have identified new leads in human trafficking and sexual exploitation networks leveraging content subscription platforms through a multinational operation coordinated by INTERPOL and the Organization for Security and Co-operation in Europe (OSCE).
Operation Details
The initiative, conducted between May 19 and May 22, 2026, targeted the rising use of subscription-based services to facilitate illicit activities involving vulnerable individuals. Operation CyberProtect III generated multiple investigative leads, including the identification of suspect profiles, potential victims, and suspicious cases.
Tactics Used by Criminal Networks
Organized criminal groups are increasingly exploiting subscription platforms typically associated with adult content to recruit and exploit women, minors, and other vulnerable populations. Victims are reportedly enticed with promises of income before being coerced into producing exploitative material. A February 2026 Purple Notice highlighted a tactic where criminal organizations impersonate legitimate modeling agencies. Once individuals are involved, these groups seize control of their accounts, retain most of the revenue, and employ psychological pressure to compel the creation of increasingly explicit content.
Collaboration and Findings
During the operation, 14 officers from participating countries collaborated in a law enforcement “hackathon” to detect warning signs across websites, social media, messaging apps, and subscription platforms. The effort uncovered 34 suspicious cases, 18 suspect profiles, and 27 potential victims. Investigators noted that the structure of subscription platforms and the use of coded language on these services complicate detection, particularly for agencies operating across multiple jurisdictions.
Exploitation Techniques
Criminal networks also promote “coaching programs” that teach users how to profit from exploiting women through subscription platforms. This practice, termed “e-pimping,” involves digital tools to orchestrate large-scale exploitation. The operation revealed several trends linked to online sexual exploitation. A significant number of advertisements featured female models from South America, indicating a major source region for both real-world and virtual exploitation.
Communication and Financial Aspects
Recruiters frequently used encrypted messaging platforms to contact potential victims, often requesting nude images without age verification. Content producer accounts were bought and sold at high prices, with one messaging group containing up to 28,000 advertisements. Investigators also identified cryptocurrency transactions and the use of diamond emojis as payment indicators. Rates for private video content were reported as low as USD 3 for 25 minutes.
Social Media and Technology
Social media platforms were used by individuals described as e-pimps and managers to share strategies and experiences. Additionally, artificial intelligence was employed to generate fake profiles supporting human-led content operations.
Participating Countries and Leadership
Participating countries in Operation CyberProtect III included Germany, the Netherlands, Romania, Spain, Sweden, Ukraine, and the United Kingdom. The operation was led by INTERPOL and the OSCE, with support from public and private sector organizations.
