Back to Case Studies
TR-001The Trail

12,000 Devices. One App. The FBI Built It.

They thought their phones were encrypted. Every message was being copied to law enforcement. Then came the raids.

Case #TR-001

Two thousand eighteen. The FBI had a problem. Encrypted phones had gone mainstream in organized crime. Drug cartels, arms dealers, contract killers — all running their operations through devices that law enforcement couldn't crack. So the FBI tried something different. They built their own.

They thought their phones were encrypted. Every message was being copied to law enforcement. Then came the raids.

The Pattern

Globe fills with "encrypted device users" → sudden synchronized global raids. Network illumination → global blackout.

The Turn

The devices went dark. Twelve thousand phones, suddenly useless. In courtrooms across three continents, prosecutors presented messages the defendants thought were encrypted. The largest sting operation in history didn't involve a single undercover agent. It was an app. And every criminal who downloaded it carried the wire in their pocket.

The Trail

11 waypoints · Global, 2018–2021

Every point below is dated and placed from the case record. Coordinates are WGS84 approximations of the named site.

  1. San Diego, US

    Investigation roots

  2. Multi-country

    ANOM device distribution begins

  3. Europe

    EncroChat dismantlement pushes criminals to ANOM

  4. Belgium/Netherlands

    Sky ECC dismantling increases ANOM demand

  5. Global (platform)

    ANOM platform taken down

  6. Worldwide

    500+ arrests, 700+ locations searched

  7. Germany

    Major drug lab seizure

  8. Sweden

    Arrests

  9. Netherlands

    Arrests

  10. Australia

    Arrests

  11. New Zealand

    Arrests

The Narration

What the film says

San Diego, United States, 2018

Two thousand eighteen. The FBI had a problem. Encrypted phones had gone mainstream in organized crime. Drug cartels, arms dealers, contract killers — all running their operations through devices that law enforcement couldn't crack. So the FBI tried something different. They built their own.

San Diego (development), 2018

An FBI informant — a former encrypted phone distributor — agreed to help design a new device. It looked like a regular Android phone. It ran an app called ANOM. Every message appeared end-to-end encrypted. But hidden inside the app was a blind carbon copy — every message was silently duplicated to a server in a third country, where law enforcement could read it. The back door was baked in from day one.

Australia, 2018–2019

The Australian Federal Police were the first partner. They seeded the devices into criminal networks in Sydney and Melbourne. Word spread. The phones were clean, fast, reliable. Users recommended them to associates. The network grew the way drug networks grow — through trust.

Europe (EncroChat collapse), Jul 2020

In July twenty-twenty, European police dismantled EncroChat — the encrypted platform used by thousands of criminals across the continent. Suddenly, a market of desperate buyers needed new phones. ANOM was waiting.

Global expansion, 2020–2021

The network exploded. Ninety countries. Twelve thousand devices. Three hundred criminal organizations. Drug shipments, assassination plots, money laundering — all documented in real time. The FBI was reading every message. For three years, organized crime ran its most sensitive operations on a platform built by the people hunting them.

Belgium & Netherlands (Sky ECC), Mar 2021

March twenty-twenty-one. European police dismantled another platform — Sky ECC. Another wave of criminals switched to ANOM. The FBI was now monitoring conversations about tonnes of cocaine, weapons shipments, and contract killings. Twenty-seven million messages collected.

Global (the decision), May 2021

By mid-twenty-twenty-one, the operation had reached its limit. Some users were growing suspicious. Intelligence agencies in sixteen countries had been reading along in real time. The question was no longer whether to act — but when. They chose June eighth.

Worldwide raids, Jun 8 2021

June eighth, twenty-twenty-one. Simultaneous raids across sixteen countries. More than five hundred arrests in the first forty-eight hours. Thirty-two tonnes of drugs seized. Two hundred fifty firearms. Forty-eight million dollars in cash and cryptocurrency. In Germany, a drug lab. In Sweden, safe houses. In Australia, entire distribution networks. Every dot on the map lit up at once.

The Hague, Europol announcement, Jun 8 2021

That afternoon, law enforcement held coordinated press conferences in The Hague, Washington, and Canberra. They showed the criminals' own messages on screen. Drug deals. Hit orders. Photographs of cocaine shipments — sent by the criminals themselves, on the app the FBI built.

Aftermath, 2021–2024

The devices went dark. Twelve thousand phones, suddenly useless. In courtrooms across three continents, prosecutors presented messages the defendants thought were encrypted. The largest sting operation in history didn't involve a single undercover agent. It was an app. And every criminal who downloaded it carried the wire in their pocket.