International Operation Dismantles Encrypted Messaging Platform Used by Criminal Networks

Law enforcement agencies continue to disrupt encrypted communication services exploited by criminal groups. In the latest joint effort, authorities from France and the Netherlands have taken down MATRIX, an encrypted messaging platform designed and used by criminals. Over a three-month period, investigators successfully monitored communications on the service, collecting valuable intelligence now supporting ongoing criminal investigations.

The operation, coordinated with support from Europol, involved follow-up actions by Lithuanian and Spanish authorities. MATRIX was originally discovered by Dutch investigators on the phone of a suspect convicted in the 2021 murder of a Dutch journalist. That discovery launched a comprehensive investigation into the platform’s origins and operations.

A Sophisticated Network Built for Criminal Use

Unlike previous platforms such as Sky ECC and EncroChat, MATRIX featured a more complex infrastructure. Access to the service was restricted to invited users, and its developers believed it offered greater security and privacy. The system ran on over 40 servers located across multiple countries, with key infrastructure found in France and Germany.

Dutch and French authorities collaborated through a Joint Investigation Team (JIT), using advanced technologies to intercept communications. During the three-month surveillance window, more than 2.3 million messages in 33 languages were intercepted and decrypted. These messages revealed links to major criminal activity, including international drug and arms trafficking, money laundering, and other forms of organized crime.

Coordinated Actions Across Europe

The takedown operation was executed on 3 December in four countries:

• France: One arrest made, and a property searched.
• Spain: Two suspects arrested under Dutch-issued European Arrest Warrants; six properties searched.
• Lithuania: Six property searches conducted.
• Germany and France: Main MATRIX servers dismantled.

The operation resulted in significant seizures, including:

• EUR 145,000 in cash
• EUR 500,000 in cryptocurrency
• 4 vehicles
• Over 970 encrypted phones
• A luxury villa in Spain worth an estimated EUR 15 million (frozen under legal order)

Following the platform’s dismantling, a splash page now notifies users of the takedown. Authorities can now access messages for investigative use through legal channels.

Strong International Collaboration

This cross-border investigation highlights the critical role of international cooperation in tackling complex, transnational crime. Through the JIT, Dutch and French authorities were able to coordinate rapidly and share evidence efficiently. To support this effort, Europol established an Operational Task Force (OTF) in June 2024, including France, the Netherlands, Lithuania, Italy, and Spain. The OTF played a central role in monitoring criminal activity on MATRIX and continues to support follow-up investigations.

German law enforcement contributed technical expertise, while Spanish authorities were actively engaged from the early stages of the case.

Fragmentation of the Criminal Communication Landscape

Since the dismantling of major platforms like Sky ECC, EncroChat, Exclu, and Ghost, the encrypted communications landscape has become increasingly fragmented. Criminals have shifted to smaller or custom-built services, presenting new challenges for law enforcement. However, this latest takedown reaffirms that authorities remain one step ahead, continuously adapting to the evolving technologies used by organized crime.

Agencies Involved:

Spain: Investigative Courts 1 & 5 of the Audiencia Nacional, Investigative Court 1 of Marbella, Spanish National Police

France: JUNALCO (National Jurisdiction against Organised Crime), OFAC (Cybercrime Division – National Police)

Netherlands: Team High Tech Crime, Special Operations (NIS), Serious Organized Crime & Financial Crimes Units, Netherlands Public Prosecution Service

Germany: Frankfurt Prosecutor General’s Office – ZIT, Federal Criminal Police – Serious and Organised Crime Division

Italy: National Antimafia Directorate (D.N.A.), Central Directorate for Anti-Drug Services (D.C.S.A.)

Lithuania: Prosecutor General’s Office, Lithuanian Criminal Police Bureau