Welcome to Video seizure
Verified core entry, last reviewed August 21, 2026
What was taken down?
Server seized in South Korea and site taken offline; approximately eight terabytes of material and roughly 250,000 videos secured; Bitcoin transaction analysis used to identify users.[1][2][3]
See what happenedWhat happened to the people?
Officials reported 337 charged and 337 apprehended.
1 charged, 1 apprehended, and 1 convicted named in the public record.
Group accounted for: Likely complete
Did it stay down?
After this action later activity was recorded, though its link to the original is not established. Medium confidence in the link between the two.
See what happened afterwardIRS Criminal Investigation, Homeland Security Investigations, the UK National Crime Agency, and Korean National Police seized the server operating the Welcome to Video darknet site and arrested its operator in South Korea, with Bitcoin tracing identifying hundreds of users worldwide.[1][2][3]
Announced October 16, 2019.
- Date
- March 2018
- Target
- Welcome to Video, tor hidden service
- Activity
- Child sexual abuse material, Cryptocurrency laundering
- Operational lead
- IRS-CI and HSI
- Partners
- USAO-DC, KNPA, and 2 more[1][2][3]
- United States Attorney's Office for the District of Columbia , charging
- Korean National Police Agency , arresting
- Chainalysis , financial tracing
- National Crime Agency , supporting
- Jurisdiction
- South Korea, United States, United Kingdom, Germany, Saudi Arabia, United Arab Emirates, Czechia, Canada, Ireland, and Spain
- Outcome
- Server seized in South Korea and site taken offline; approximately eight terabytes of material and roughly 250,000 videos secured; Bitcoin transaction analysis used to identify users.
- Status
- Completed
- Legal mechanism
- Korean judicial process for the server seizure; US indictment and forfeiture (District of Columbia); mutual legal assistance
- Group accounted for
- Likely complete
Infrastructure
1 server seized and 1 onion service seized.
- 1
- server seized
- 1
- onion service seized
| Identifier | Recorded as | Status | Notes |
|---|---|---|---|
| Not published | 1 server | Seized, South Korea | Server seized in South Korea, yielding approximately eight terabytes of material and roughly 250,000 videos.[1] |
| Not published | 1 onion service | Seized | Hidden service taken offline.[1] |
Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources.
- 1
- charged
- 1
- apprehended
- 1
- convicted
Named in the public record: 1 charged, 1 apprehended, and 1 convicted.
Figures count individuals named in charging documents and official statements, each person once per outcome. People alleged to be involved but not publicly identified are not counted.
| Person | Role | Current public status |
|---|---|---|
| Operator of Welcome to Video | ArrestedIndictedConvicted | |
|
||
Jong Woo Son
Operator of Welcome to Video. Current public status: Arrested, Indicted, and Convicted.
- Charging authority
- United States Attorney's Office for the District of Columbia
- Main charges
- Advertisement of child pornography; Distribution of child pornography; Conspiracy to launder monetary instruments
- Case number
- Not established in the public record
- Arresting authority
- Korean National Police Agency
- Arrest location
- South Korea
- Extradition status
- Not established in the public record
- Conviction or plea
- Convicted
- Sentence
- Served a term of imprisonment in South Korea
- Segment
- Core operator
- Sources
- [1]
- Full record
- Everything indexed for Jong Woo Son
Rows expand to show charging authority, case identifiers, custody status, and sources.
Group accounted for: Likely complete
The sole identified operator was arrested, convicted in South Korea, and separately indicted in the United States, and the server was seized. No official statement closes the roster absolutely.
A single operator ran the site, per US and Korean charging documents.
Operator convicted in South Korea and separately indicted in the District of Columbia; 337 users arrested and charged across at least 12 countries; 23 children identified and rescued.[1][2][3]
-
Date not established
No documented return. Relationship not established. Confidence: Medium. Not established.[1]
No affirmative evidence of a return of this specific service was found through the cutoff.
Date not established
No documented return. Relationship not established. Confidence: Medium. Not established.[1]
No affirmative evidence of a return of this specific service was found through the cutoff.
Return class F. The class is a research grading carried in the source dataset and its scale is not published, so this page relies on the relationship and confidence values instead. How this index handles it.
Numbered markers throughout this entry link to the source that supports the claim beside them.
Official sources
-
[1]
South Korean National and Hundreds of Others Charged Worldwide in the Takedown of the Largest Darknet Child Pornography Website, Which was Funded by Bitcoin
Server seizure in South Korea, Son's arrest and US indictment, 337 arrests, 23 children rescued, site scale
-
[2]
NCA statement on the Welcome to Video investigation
UK participation and arrests
Additional reporting and technical analysis
-
[3]
Chainalysis account of blockchain analysis in the Welcome to Video investigation
Bitcoin tracing methodology used to identify users
- The 337 arrested users are a customer population and are strictly separate from the single core operator.
- The action date of 2018-03-05 and the announcement date of 2019-10-16 are more than 19 months apart and are deliberately kept distinct.
- Only the operator is carried as a named person record; individually prosecuted users are a deliberate named-person gap.