The Civil Police of Santa Catarina conducted Operation ClickFix on September 10, 2026, targeting a phishing ring. Authorities seized $1,708,534 in Bitcoin, Ethereum, TRON, and Tether from self-custody wallets, marking the largest recovery of such assets by Brazilian police to date.
Investigators used Chainalysis tools to track the funds, which were moved in 13 transactions to an institutional account at the Brazilian exchange Foxbit. The operation also resulted in two arrests and the seizure of luxury vehicles, including a Corvette valued at over BRL 1.5 million.
Judicial measures included freezing bank accounts totaling up to BRL 93 million and seizing real estate worth BRL 5 million. The criminal group utilized the ClickFix social engineering technique to compromise victim devices and steal credentials.
Police gained access to the assets by recovering seed phrases during raids, allowing them to import the wallets and perform controlled transfers. Additional reports have identified approximately $218,000 in further funds, though their status remains unconfirmed.
