How Australian police hosted a pedophile forum on the dark web, which had thousands of active users, in order to execute a global sting operation
Christopher Knaus / The Guardian :
Context & Ripple Effects
This story sits at the center of a documented escalation in Australian-led covert operations online. Court documents reported a year earlier showed Australian authorities had already hacked Tor users inside the US and shared findings with the FBI (Australian authorities hacked Tor users in the US); hosting the Childs Play forum outright — with thousands of active users — went a step further, from exploiting anonymity tools to operating the criminal platform itself.
The Guardian's report also triggered independent scrutiny: Norwegian hacker Einar Otto Stangvik's exposure of how Childs Play was run (Stangvik's exposure of Childs Play) showed outside researchers could pierce the secrecy of police-run dark web infrastructure. Four years on, the same agencies scaled the playbook to an entire product, running the encrypted chat service AN0M with the FBI for more than three years to intercept criminals' messages globally (the FBI-AFP AN0M sting).
First-order effects
- Thousands of active forum users became identifiable to investigators worldwide, since Australian police controlled the server logs and content flow of the very platform the suspects trusted.
- Because police ran the forum rather than merely surveilling it, every upload and message passed through infrastructure whose evidentiary chain of custody is set by the investigating agency itself.
Second-order effects
- Other agencies adopted the operate-don't-infiltrate model: the FBI and Australian Federal Police later ran their own encrypted messaging service, AN0M, for 3+ years, converting the forum-hosting tactic into a mass-interception channel.
- Independent researchers like Stangvik demonstrated that police-run dark web services can be unmasked from outside, forcing law enforcement to weigh operational secrecy against exposure by the security research community.
Third-order effects
- If the pattern holds, major investigations shift toward agencies building and controlling criminal infrastructure end-to-end, which pressures courts and legislatures to define when running a criminal service crosses from evidence-gathering into facilitation.
- Each confirmed case of state-operated criminal platforms erodes user trust in anonymity and encryption tools generally, pushing technically sophisticated offenders toward harder-to-penetrate channels while civil-liberties scrutiny intensifies.
The trend: Law enforcement is moving from infiltrating criminal networks to owning and operating the platforms themselves, with Australia's federal police as the recurring pioneer.