[Back to Operation Cookie Monster](https://takedownindex.org/takedowns/operation-cookie-monster)

# Organizations and roles

April 2023, Fraud and stolen data
[Operation Cookie Monster](https://takedownindex.org/takedowns/operation-cookie-monster)

Last reviewed August 21, 2026

The public record puts 5 organizations on this action. Operational lead: FBI and Dutch National Police. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

## Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

## Organizations and roles

| Emblem | Organization | Role | What the record says |
| --- | --- | --- | --- |
| | [Federal Bureau of Investigation](https://takedownindex.org/organizations/federal-bureau-of-investigation), United States | Co-lead | Led the US component and executed the domain seizures. |
| | [Politie (Netherlands National Police)](https://takedownindex.org/organizations/politie-netherlands-national-police), Netherlands | Co-lead | Co-led the international operation. |
| | [European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/organizations/european-union-agency-for-law-enforcement-cooperation) | Coordinator | Coordinated the 17-country action and hosted the operational centre. |
| | [Qintel](https://takedownindex.org/organizations/qintel), United States | Technical partner | Provided technical analysis supporting the investigation. |
| | [National Crime Agency](https://takedownindex.org/organizations/national-crime-agency), United Kingdom | Supporting | Executed UK arrests and searches. |

## Accountability

### Legal authority

US seizure warrant (Eastern District of Wisconsin); parallel Dutch and partner judicial process; Europol and Eurojust coordination

### Ongoing investigation

Group accounted for: Partial. Infrastructure was seized and a large number of users arrested, but no core administrator was publicly identified, charged, or apprehended.

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 21, 2026