Phones with the “Anom” messaging app used in FBI and AFP's global sting are being sold on the secondary market, revealing the ArcaneOS operating system and more
Joseph Cox / VICE :
Context & Ripple Effects
When the FBI and AFP's Anom sting went public, the handsets themselves became evidence — and now merchandise. As Joseph Cox reports, devices loaded with the $1,700-plus-subscription An0m service are turning up on the secondary market, giving outsiders their first hands-on look at ArcaneOS, the custom operating system built to make police-run phones look like hardened criminal tools.
The find matters because the encrypted-device market didn't die with the takedown: later reporting traced successor firms like "No. 1 Business Communication" loading similar apps onto phones for organized crime groups, while court records show investigators leaning on other device-level signals such as push alert tokens in CSAM and murder cases. What's inside an Anom phone shows exactly how far law enforcement had moved from intercepting these products to manufacturing them.
First-order effects
- Buyers and security researchers who acquire these secondhand handsets can now inspect ArcaneOS directly, exposing how the FBI- and AFP-run platform presented itself as legitimate secure hardware.
- Former Anom users whose devices circulate on resale markets face renewed exposure risk, since the phones carry artifacts of a communications network whose operators already had full access.
Second-order effects
- The public teardown of Anom hands every rival encrypted-phone seller a checklist of what got compromised, accelerating design changes across the gray-market secure-device trade that firms like "No. 1 BC" now serve.
- Law enforcement gains a template it has since applied elsewhere: rather than cracking messaging apps, agencies seed or exploit the device layer itself, as the push-token cases in federal courts demonstrate.
Third-order effects
- If the pattern holds, the structural battleground shifts from message content to hardware provenance — buyers of 'secure' phones will increasingly need verifiable supply chains, and regulators will face questions about governments operating the very platforms they publicly condemn.
- Each takedown of a police-infiltrated network appears to spawn a replacement vendor, suggesting an ongoing cycle where encrypted-device demand persists and law enforcement competes to own the next distribution channel.
The trend: Law enforcement is shifting from intercepting encrypted communication platforms to building and distributing its own, with the resale of seized-style hardware like Anom phones now exposing that operational model to public scrutiny.