Microsoft, Coinbase, and Europol Shut Down Major Phishing Platform Tycoon 2FA

According to Cointelegraph, Microsoft, Coinbase, and Europol successfully dismantled the core infrastructure of Tycoon 2FA, one of the world’s largest phishing-as-a-service platforms. The platform specialized in providing tools to bypass multi-factor authentication by deploying fake login pages and stealing session tokens. Microsoft has blocked 330 domains associated with the platform, while Coinbase assisted in identifying the platform’s administrators through blockchain transaction analysis. Tycoon 2FA was reported to account for 62% of all phishing attempts blocked by Microsoft in mid-2025, sending over 30 million phishing emails per month and impacting industries ranging from healthcare to education, resulting in severe consequences such as data breaches and stolen funds. Prior to this, blockchain security firm Certik noted that phishing scams were the second-largest threat in 2025, causing $722 million in losses to cryptocurrency investors.