Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Netherlands Police arrest Dordrecht suspect in JokerOTP case

Law Enforcement
First reported
Last updated
Happening score
H score 15
1 unique sources, 1 articles

Summary

Hide ▲

The Netherlands Police arrested a 21-year-old man from Dordrecht for allegedly selling access to JokerOTP, a phishing tool used to intercept one-time passwords (OTP) and hijack accounts. The arrest extends enforcement against a phishing-as-a-service operation that had already been dismantled after a three-year investigation. Authorities say the service was tied to more than 28,000 attacks and at least $10 million in losses.

Related Happenings

Zhimin Qian sentencing and bitcoin seizure

Law Enforcement
First: 14.01.2026 12:00 Last: 14.01.2026 12:00 Sources 1

About this happening: **Zhimin Qian** was **sentenced** at **Southwark Crown Court** in a major **investment fraud** case, extending the legal consequences of a crypto-linked laundering scheme. The sen...

Open Happening

Coinbase support-agent arrest in India

Law Enforcement
First: 29.12.2025 16:16 Last: 29.12.2025 16:16 Sources 1

About this happening: A former Coinbase customer service agent was **arrested** in **Hyderabad, India** for helping hackers steal customer information from a **Coinbase** database, escalating the crimi...

Open Happening

Timeline

  1. 11.02.2026 21:14 2 articles · 3mo ago

    Dordrecht suspect arrested over JokerOTP sales

    Legal Policy Action Update

    The Netherlands Police arrested a 21-year-old man from Dordrecht on 2026-02-11 on suspicion of selling access to JokerOTP, a phishing automation tool used to intercept one-time passwords and hijack accounts.

    Show sources
    Open in new tab
  2. 11.02.2026 21:14 1 articles · 3mo ago

    Police disclose JokerOTP investigation details

    Initial Disclosure

    Police disclosed that the Dordrecht suspect was the third person arrested in a three-year JokerOTP investigation that dismantled the phishing-as-a-service operation in April 2025; authorities said the seller advertised access through a Telegram account with license keys, the service targeted PayPal, Venmo, Coinbase, Amazon, and Apple, and it was linked to at least $10 million in losses across more than 28,000 attacks in 13 countries.

    Show sources
    Open in new tab