Global Crackdown Targets Tycoon 2FA, One of the World’s Largest Phishing Operations
-

Authorities have taken down Tycoon 2FA, a phishing platform that provided ready-made tools for hackers to steal login credentials and bypass security systems. The operation was active since at least 2023 and had grown into one of the largest phishing services globally, according to experts from Microsoft. At its peak, the platform accounted for 62% of phishing attempts blocked by Microsoft, including more than 30 million malicious emails in a single month.
Cybersecurity experts warn that phishing remains one of the biggest threats in the crypto sector. Reports from CertiK estimate that phishing scams caused around $722 million in losses in 2025 alone across hundreds of incidents. While dismantling Tycoon 2FA removes a major tool used by attackers, security specialists say criminals may attempt to rebuild similar systems, highlighting the ongoing importance of vigilance and strong cybersecurity practices.