How Law Enforcement Agencies Compromise Entire Encrypted Chat Platforms

The talk opens with a case of cocaine hidden in welding machines shipped to Australia, which were seized after the gang's messages had been read by the FBI. The speaker, a journalist who has covered the encrypted phone industry for about ten years, sets out to explain how such operations work across several investigations, drawing on his book Dark Wire and interviews with sellers, traffickers and investigators.

He describes how handset makers sold stripped-down devices with paid subscriptions and how each platform failed in turn. BlackBerry's shared global key for BBM let authorities read messages, and Encom kept keys on its own server, which allowed Dutch investigators to decrypt traffic. Phantom Secure's operator was pressured into cooperating after an informant lured him, and the FBI then ran ANOM, a supposedly new criminal phone, with a hidden copy of every message. Later, French authorities pushed a malicious update to tens of thousands of EncroChat devices, and Sky was compromised through server-side interception. Each shutdown sent users to the next platform, which the speaker argues law enforcement anticipated.

He closes by noting that ANOM's takedown in 2021 involved hundreds of arrests in a single day, and that smaller platforms have continued the pattern. Criminals have moved toward Signal and GrapheneOS, and he raises concern that these tools could sweep up non-criminal users, citing Telegram's data disclosures. For practitioners, the takeaway is that vendor key management and trust in a provider's architecture matter a great deal for privacy.