How the FBI Tapped the Encrypted Chats of Criminals Around the World w/ Joseph Cox

Episode Summary

Executive Summary: The episode examines Dark Wire, Joseph Cox’s investigation into Anom, an FBI-run encrypted phone company used by criminals worldwide. It traces the rise of bespoke criminal devices, law enforcement’s global sting operation, the legal and ethical compromises involved, and the broader implications for privacy, surveillance, and the future of encrypted communications.

Main Topics: Origins of criminal encrypted phones (Priority: 5/5): Cox explains how criminals moved from BlackBerry Messenger to heavily modified phones with encryption, removed cameras/mics/GPS, and strong brand loyalty as law enforcement adapted in a constant cat-and-mouse game. From Phantom Secure to Anom (Priority: 5/5): The FBI’s takedown of Phantom Secure created a vacuum that led a company insider to approach authorities with Anom, which the FBI and Australian Federal Police secretly turned into a surveillance platform. Global law enforcement collaboration (Priority: 5/5): The operation expanded through partnerships with the AFP, Europol, and agencies in roughly 16 countries, using a shared intelligence model to coordinate arrests, seizures, and disruption of transnational criminal networks. Legal and ethical workarounds (Priority: 5/5): The discussion highlights the FBI’s restriction from monitoring U.S.-based Anom messages, the workaround of routing U.S. traffic to AFP for threat-to-life monitoring, and broader concerns about parallel construction and warrant limits. Criminal network visibility and impact (Priority: 4/5): Anom exposed how modern organized crime operates as interconnected international networks involving drug supply chains, money laundering, corruption, safe houses, and elite trafficking coordination across borders. Privacy, encryption, and future surveillance (Priority: 5/5): The conversation ends with concern that criminal distrust in bespoke platforms may push users toward mainstream encrypted apps, prompting law enforcement to pursue more aggressive tools such as device exploitation or broader message scanning. COVID-19 and operational acceleration (Priority: 3/5): Pandemic conditions accelerated remote FBI workflows and changed criminal tradecraft, with more dead drops and concealment methods, while the operation continued to scale toward its June 7, 2021 reveal.

Key Arguments: Criminal encrypted phones evolved in response to law enforcement pressure; every time police cracked one form of secure communication, criminals shifted to another device or platform. Anom was uniquely powerful because the FBI didn’t just gain a backdoor—it effectively ran the company, giving investigators unprecedented access to criminal communications. The operation’s success depended on international coordination; agencies needed to share intelligence in one room rather than create bottlenecks across jurisdictions. The legal architecture was deeply compromised: U.S. messages were not directly monitored by the FBI, but workarounds still allowed some U.S. content to be reviewed for threats to life. The intelligence gathered revealed more than individual crimes; it mapped the hidden infrastructure of global organized crime, including logistics, corruption, and money laundering. Even if targeted surveillance seems justified against criminal-only networks, the precedent may push authorities toward broader compromise of encrypted systems or device-level hacking. The operation likely changed criminal behavior by creating paranoia about encrypted phone vendors, but it did not end the drug trade or eliminate demand for secure communications.

Data Points: Initial Anom seeding: 5 phones - Anom began with only a handful of phones seeded in Australia before expanding globally. Law enforcement access start: 2019 - The FBI began accessing Anom messages in 2019 after the platform had already been operating for some time. Operation start: 2018 - The secret Anom operation began around 2018. Reveal date: June 7, 2021 - The planned public takedown and disclosure date for the operation. Countries involved: about 16 countries - The Anom operation expanded to include multiple international law enforcement partners through Europol. Phantom Secure user base: 10,000 users - Cox notes Phantom Secure had roughly 10,000 users, the vast majority appearing to be criminals. Target list: 800 people - Authorities prepared a single-day arrest list of 800 targets for the June 7 operation. Total arrests: well over 1,000 - The broader Anom operation ultimately produced more than a thousand arrests. Drug seizures: multi-tons - Authorities seized multi-ton quantities of drugs based on intelligence from Anom. Weapons seized: about 150 - Cox cites roughly 150 weapons seized as part of the operation. Threat-to-life mitigations: about 150 - Police intervened in around 150 situations involving threats to life.

Pivotal Quotes: "We want to fundamentally shift how criminals think about encryption." — Paris Marks: Opening the episode’s framing of the operation’s broader goal beyond arrests. "This wasn't just an operation to gather evidence and arrest people. It was like, we want to fundamentally shift how criminals think about encryption." — Paris Marks: Summarizing the DOJ/FBI mindset behind the Anom sting and its deterrent ambitions. "We believe we should have access to any encrypted messages that we're legally entitled to." — Joseph Cox: Cox relays the FBI’s stance on future encrypted platforms and legal access.

Implications: The episode suggests Anom was a landmark in surveillance and undercover policing, likely chilling criminal use of bespoke devices while accelerating an arms race toward mainstream encrypted apps, device hacking, and new legal fights over privacy and state access.