Vast pedophile network shut down in Europol’s largest CSAM operation

[fffanatic]

It appears EUROPOL and the Bavarian police seized and shutdown Kidflix, a dark web streaming service and pedophile network.

" 79 arrested after Europol shuts down massive child porn platform. "

[CLEARNET LINK]
https://arstechnica.com/tech-policy/2025/04/vast-pedophile-network-shut-down-in-europols-largest-csam-operation/
[/CLEARNET LINK]

Europol has shut down one of the largest dark web pedophile networks in the world, prompting dozens of arrests worldwide and threatening that more are to follow.

Launched in 2021, KidFlix allowed users to join for free to preview low-quality videos depicting child sex abuse materials (CSAM). To see higher-resolution videos, users had to earn credits by sending cryptocurrency payments, uploading CSAM, or "verifying video titles and descriptions and assigning categories to videos."

Europol seized the servers and found a total of 91,000 unique videos depicting child abuse, "many of which were previously unknown to law enforcement," the agency said in a press release.

KidFlix going dark was the result of the biggest child sexual exploitation operation in Europol's history, the agency said. Operation Stream, as it was dubbed, was supported by law enforcement in more than 35 countries, including the United States.

Nearly 1,400 suspected consumers of CSAM have been identified among 1.8 million global KidFlix users, and 79 have been arrested so far. According to Europol, 39 child victims were protected as a result of the sting, and more than 3,000 devices were seized.

Police identified suspects through payment data after seizing the server. Despite cryptocurrencies offering a veneer of anonymity, cops were apparently able to use sophisticated methods to trace transactions to bank details. And in some cases cops defeated user attempts to hide their identities—such as a man who made payments using his mother's name in Spain, a local news outlet, Todo Alicante, reported. It likely helped that most suspects were already known offenders, Europol noted.

"The online world is not anonymous," Europol warned. "Most of the suspects identified in Operation Stream were matched against records in Europol's databases, proving that most offenders engaged in child sexual exploitation are repeat offenders and are not unknown to law enforcement authorities."

Arrests spanned the globe, including 16 in Spain, where one computer scientist was found with an "abundant" amount of CSAM and payment receipts, Todo Alicante reported. Police also arrested a "serial" child abuser in the US, CBS News reported.

"Some of those arrested not only uploaded and watched videos but also abused children," Europol said, while confirming that "the investigation is ongoing," making it appear likely that more arrests could follow.

More arrests could prevent more abuse. In Germany, cops conducted raids in nearly 100 locations. Guido Limmer, the deputy head of the Bavarian Criminal Police, told CBS News that a 36-year-old German man was among those arrested. He not only allegedly searched for CSAM on KidFlix but "offered his young son for games," Limmer said.

Other users potentially uploaded fake child sex images generated by artificial intelligence, as police found AI CSAM on one suspect's devices, Todo Alicante reported. Law enforcement globally has warned that a flood of AI CSAM is making it harder to identify real victims, which could complicate Europol's task of protecting more kids through its ongoing investigation.

[radagast37]

To complement this info:

International crackdown on Darknet platform "KidFlix"

Joint press release from the Bamberg Public Prosecutor's Office and the Bavarian State Criminal Police Office.

Since early 2022, Bavarian investigators have been focused on the Darknet platform "KidFlix," which, unlike other similar platforms, emphasizes streaming videos that often depict severe sexual abuse of children.

After registering and paying with cryptocurrencies, users had access to over 91,000 high-quality videos totaling 6,288 hours, with an average of 3.5 new videos uploaded per hour.

Investigations, supported by authorities in the Netherlands and Switzerland, targeted the operators and approximately 190,000 users registered from April 2022 to now. These efforts led to the identification of 1,393 suspects worldwide, despite their attempts to conceal their identities. A key aspect of the investigation was tracking cryptocurrency payment, with specialists successfully tracing transactions back to the accused, even when using mixing services and anonymity-focused cryptocurrencies. Overall, around 1.8 million users were registered at some point during this period.

Throughout the investigation, authorities acted swiftly to address risks to children. Cases involving children living with suspects were promptly referred to relevant judicial and police authorities to ensure appropriate protective measures. Identifying abused children was a crucial part of the work, leading to the protection of victims in North Rhine-Westphalia and the identification of others in Brandenburg.

In mid-January 2024, investigators arrested a 36-year-old man in the Chemnitz area, suspected of seeking children for severe sexual abuse on the "KidFlix" platform. Following his identification and the execution of an arrest warrant, his minor son was placed in the care of youth services due to indications of sexual abuse.

On January 24, 2025, officers from the Middle Franconia Police searched the home of a 30-year-old man who was believed to have viewed child pornography on "KidFlix." His family environment was immediately checked, revealing two minor children living in the household. After the search and seizure of evidence, the children were promptly placed in the care of the relevant youth services and are no longer with the family.

As a result of international investigations, a suspected abuser was arrested in the United States based on cryptocurrency data provided by the Bavarian State Criminal Police Office (BLKA). The suspect is believed to be a repeat offender accused of ongoing abuse of a known minor, with potential additional victims.

On March 10, 2025, officers from the Central Criminal Service in Hanover arrested a 52-year-old man. During a search of his home, they found over 70 data storage devices, a sex doll resembling a young girl, various drugs, and evidence of operating a Darknet drug trafficking platform.

On March 11, 2025, the server containing approximately 72,000 videos was seized with the assistance of Dutch authorities. The website is now marked with a seizure banner.

At the request of the Bavarian State Criminal Police Office (BLKA), Europol took over the global coordination of the operation and contributed directly to the successful investigations through data analysis. In addition to the Federal Criminal Police Office at the national level, Europol initiated the international identification of victims, playing a crucial role in this significant effort to combat child sexual abuse.

In Bavaria, a joint Action Day on March 10, 2025, resulted in nine searches of suspects in Augsburg, Munich, Nuremberg, and the districts of Landsberg am Lech, Regen, Rosenheim, Oberallgäu, and Neumarkt i. d. Opf. A total of twelve suspects were based in Bavaria.

In Germany, 96 searches were conducted across 13 federal states (Baden-Württemberg, Bavaria, Berlin, Brandenburg, Bremen, Hamburg, Hesse, Lower Saxony, North Rhine-Westphalia, Rhineland-Palatinate, Saarland, Saxony, and Thuringia), with investigations ongoing against 103 suspects.

From March 10 to 23, 2025, a total of 38 countries (including Germany, Albania, Georgia, Canada, Colombia, Australia, New Zealand, Serbia, the USA, the UK, Belgium, Bulgaria, Denmark, Estonia, Finland, France, Greece, Ireland, Italy, Croatia, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Austria, Poland, Portugal, Romania, Sweden, Slovakia, Spain, the Czech Republic, Hungary, Cyprus, Iceland, Norway, and Switzerland) participated in a coordinated operation against online child sexual abuse, named "OP Stream." The initiative and preparation for the operation were led by the Center for Combating Child Pornography and Sexual Abuse on the Internet at the Bamberg Public Prosecutor's Office and the Bavarian State Criminal Police Office.

During the police actions, numerous electronic storage devices, mobile phones, and PCs were seized.

Investigations are ongoing, particularly as the operators of the platform have not yet been identified

[LikelyHuman]

Nearly 1,400 suspected consumers of CSAM have been identified among 1.8 million global KidFlix users, and 79 have been arrested so far. According to Europol, 39 child victims were protected as a result of the sting, and more than 3,000 devices were seized.

These numbers are rather interesting. It seems like there's a pretty wide berth between the number of suspected consumers versus actual arrests, which is also rather interesting considering the amount of devices reportedly seized. If you figure that most of the "suspected consumers" have one or more device then it seems to suggest that they merely seized many computers but were unable to actually press charges in most cases. I don't know how search and seizure laws differ in Europe, but it seems interesting that a seizure can come before[/] an arrest.

[fffanatic]

I don't know how search and seizure laws differ in Europe, but it seems interesting that a seizure can come before[/] an arrest.

Makes sense to me because first you have to prove that the material exists or it is there. But first you have to have clear suspicion that such material exist.

I am not aware of how it works on any of the jurisdictions tho.

[LikelyHuman]

I don't know how search and seizure laws differ in Europe, but it seems interesting that a seizure can come before[/] an arrest.

Makes sense to me because first you have to prove that the material exists or it is there. But first you have to have clear suspicion that such material exist.

I am not aware of how it works on any of the jurisdictions tho.

Yeah, I mean, in the states under the 4th amendment they would have had to have a judge sign a warrant in order to seize anything, but it makes me wonder what the limit is on for how long a device can be seized before they determine there's nothing to find on it. Then, compared to the U.S., I know there are less protections against the court compelling someone to disclose encryption keys in Europe. I guess my main thought is basically how much the gap between devices-seized and arrests-made comes down to investigators not being able to find anything on the devices--either because material was deleted beyond forensic-recovery means or  because the data is encrypted. I sort of wonder if the limiting factor was simply how easily and how expediently they could examine that many devices, because I can't really imagine that many people having destroyed data beyond the means of investigators to recover it. Not just because of the technical proficiency needed to do that, but also because they would have needed to be prompted to erase the data in the first place. That sort of leaves the question of whether the devices are just encrypted, but again as far as I know the courts over there have a lot more power to demand the disclosure of encryption keys over there than in the states.

[fffanatic]

That sort of leaves the question of whether the devices are just encrypted, but again as far as I know the courts over there have a lot more power to demand the disclosure of encryption keys over there than in the states.

So you have to surrender your encryption keys in case a judge orders it. That part never came up when I studied the GDPR.

Seems like the safest bet is always to download nothing. But I believe there is far more people unaware or uncaring enough to really sanitize any drives they would have with on-topic material.

[LikelyHuman]

That sort of leaves the question of whether the devices are just encrypted, but again as far as I know the courts over there have a lot more power to demand the disclosure of encryption keys over there than in the states.

So you have to surrender your encryption keys in case a judge orders it. That part never came up when I studied the GDPR.

Seems like the safest bet is always to download nothing. But I believe there is far more people unaware or uncaring enough to really sanitize any drives they would have with on-topic material.

I'm not exactly super keen on the details of all the jurisdictional nuances over there, but just have a cursory understanding that the UK in particular has key-disclosure laws. Though, I don't really know if the GDPR changed that or not, but I doubt it. The UK has always been notoriously anti-crypto, dating back to the early 1990s even. I doubt they would have adopted any regulations which didn't have some kind of loophole, such as allowing to compel people to disclose keys if the case involves on-topic materials.

[IntoSunlitDays]

kidflix was free? i never used it but i always heard that it cost money to make an account. maybe im thinking of something else as im kinda new to this stuff but idk. its a shame that these sites keep getting shut down

[fffanatic]

Well, the site was not free. You could either pay for credits, that's how they got a lot of people, or you could upload. The other way to get credits was checking content and categorizing or validating it was on-topic.

You could sign up for free, yeah, but content was limited for free accounts.

There was a "good samaritan" that left their username and password so people could watch the full content "free".

[User8737]

It was a treasure trove of amazing materials and I love the person that shared those credentials! Hopefully, another streaming style platform like it pops up soon.

[DarkNeko]

It was a treasure trove of amazing materials and I love the person that shared those credentials! Hopefully, another streaming style platform like it pops up soon.

I agree that Kidflix had some very wonderful videos. The team behind it knew "what the pedos like" so to speak.

[DarkNeko]

Interesting that the article never mentioned bisho.ps, I know that this particular online pedo hunter group managed to dox one of the mods of Kidflix with the username Shiza/MrS. I think they sent a copy to the feds too. Maybe it over time led to the downfall of this site. Then again, bisho.ps themselves said it was possible that Shiza was already doxxed way before they got their hands on Shiza's info.

[OneLove]

Yikes. Scary stuff. Law enforcement works quietly behind the scenes for months, even years, until they get all their legal ducks in a row, then strike swiftly in one devastating blow.

As a friend of mine liked to say, "next thing you know be the last thing you know."