Microsoft, Coinbase, and Europol team up to dismantle the massive phishing platform Tycoon 2FA.

According to a report by Cointelegraph, Microsoft, Coinbase, and Europol have successfully dismantled the core infrastructure of Tycoon 2FA, one of the world's largest phishing-as-a-service platforms. This platform specifically provides tools to bypass multi-factor authentication, launching attacks by forging login pages and stealing session tokens. Microsoft has blocked 330 domains associated with the platform, while Coinbase assisted in identifying the platform administrator through blockchain transaction tracing. Tycoon 2FA reportedly accounted for 62% of phishing attempts blocked by Microsoft by mid-2025, sending over 30 million phishing emails monthly, impacting multiple industries from healthcare to education, causing serious consequences such as data breaches and stolen funds. Blockchain security company Certik previously pointed out that phishing scams are the second largest threat in 2025, causing $722 million in losses for crypto investors.