Privacy and evidence

What Was Operation DisrupTor? The 2020 Vendor Investigation

Operation DisrupTor was an international enforcement effort announced in September 2020 against darknet drug trafficking. The FBI reported 179 arrests across participating countries. It was not the closure of every dark-web market or a public demonstration that all Tor users could be identified.

Coordinated investigation represented by separate service evidence and case files
Last reviewed2026-11-03
Reading time3 min read
DifficultyBeginner
EvidenceModerate

Place the 2020 announcement correctly

  1. Before the announcement

    Investigative work concerned multiple targets and participating jurisdictions.

    The release date is not necessarily the date of every underlying action.

  2. September 22, 2020

    The FBI published its DisrupTor results.

    Operational totals should retain their date and the distinction between arrest and conviction.

Use the announcement’s scope

The FBI’s September 22, 2020 account describes coordinated action involving international partners and reports arrests, drug seizures and other results. These are announced operational totals for that effort, not a census of all darknet activity.

An arrest count should not be silently rewritten as a conviction count. Later proceedings concern individual defendants and evidence. A summary can accurately explain the operation while preserving that legal distinction.

Similar names, different operations

Similar names, different operations
SubjectPeriodMain distinction
Operation Onymous2014Specified services including Silk Road 2.0
AlphaBay–Hansa operation2017Coordinated action against those marketplaces
Operation DisrupTor2020A wider vendor-focused drug-trafficking effort

An operation title is not a technical method

Public reporting can describe cooperation and outcomes without disclosing every investigative step. Do not infer a universal browser exploit from the existence of arrests. Equally, do not assume anonymity tools made conventional evidence irrelevant.

Applications, financial records, devices and physical-world activity can all be relevant to individual cases. The public record needs to support any specific attribution claim rather than leaving it to the dramatic spelling of an operation name.

A global announcement can be mistaken for one simultaneous raid

Imagine a retelling treats all announced arrests as the result of one website being switched off at one moment. An international operation can instead summarize connected work across multiple targets and jurisdictions.

Distinguish the announcement date from every underlying investigative action.

Questions people ask

Sources

Further reading

Continue learning

Next useful step

Keep going

The next door is usually the interesting one

The answer you came for touches a few neighboring questions. These are the ones most likely to make the picture click.

What you should remember

The useful version

  • Operation DisrupTor was an international enforcement effort announced in September 2020 against darknet drug trafficking. The FBI reported 179 arrests across participating countries. It was not the closure of every dark-web market or a public demonstration that all Tor users could be identified.

A few useful next steps

Where this question wanders next

The dark web is less a single tunnel than a set of side passages. These are the useful ones from here.

If this made you wonder

Operation DisrupTor collection

Place it in context

1

What Was Operation Onymous? A 2014 Operation, Not the End of Tor

2

What Killed Silk Road? A Case Built Beyond the Network

3

What Was Dream Market? History and Evidence

4

What Was Operation Bayonet? AlphaBay and Hansa

5

What Is a Honeypot Site on the Dark Web? Control and Evidence

Questions people ask first

Choose by the time in your pocket