TL;DR: Blockchain analysis helped investigators shut down Welcome to Video, the largest child sexual abuse material site by stored content, leading to more than 337 arrests across 38 countries and the rescue of 23 minors, according to Chainalysis research. The case shows how transaction tracing can convert on-chain evidence into operational law-enforcement action, not just retrospective visibility.
NHIMG editorial — based on content published by Chainalysis covering the Welcome to Video case: how blockchain analysis helped take down the largest child sexual abuse material site
Questions worth separating out
Q: How should investigators use blockchain analysis to connect cryptocurrency activity to real people?
A: Investigators should combine on-chain tracing with off-chain records such as exchange logs, KYC data, infrastructure telemetry, and seized credentials.
Q: Why does pseudonymity not protect criminals using cryptocurrency at scale?
A: Pseudonymity hides names, not behaviour.
Q: What do security teams get wrong about blockchain investigations?
A: They often assume the ledger itself is either fully anonymous or fully identifying.
Practitioner guidance
- Map wallet-to-identity touchpoints Inventory every service that can connect cryptocurrency activity to a real-world identity, including exchanges, hosted wallets, KYC gateways, and support systems.
- Preserve chain-of-custody for on-chain evidence Record query paths, analyst annotations, timestamps, and data sources so a blockchain tracing result can be reproduced and defended in an investigation or prosecution.
- Coordinate fraud, trust, and identity teams Build a shared response model for abuse cases that cross payment rails and account systems, so investigators can move from suspicious transactions to accountable entities without losing evidence.
What's in the full article
Chainalysis's full case study covers the operational detail this post intentionally leaves for the source:
- The investigator workflow used to move from suspicious transactions to attributed wallets and related service infrastructure
- The role of Chainalysis Reactor in linking on-chain activity to broader case evidence
- The law-enforcement actions that followed the tracing work, including arrests and rescues
- The specific transaction patterns and analytical methods that made the case actionable
👉 Read Chainalysis's case study on how blockchain analysis helped shut down Welcome to Video →
Crypto crime intelligence and blockchain tracing: what it means?
Explore further
Blockchain intelligence is now a governance tool, not just an investigation aid. The practical value of on-chain analysis is that it connects digital activity to accountable actors when the platform layer alone is insufficient. For teams dealing with fraud, abuse, or trust and safety, that changes blockchain from a niche forensic source into part of the control stack.
A question worth separating out:
Q: Who is accountable when cryptocurrency infrastructure supports abuse networks?
A: Accountability usually spans the operators of the abusive service, the intermediaries that process payments, and the platforms that retain identity-linked records. Governance teams should define retention, disclosure, and escalation responsibilities before an incident, because the evidentiary window can close quickly.
👉 Read our full editorial: Blockchain analysis in crypto crime cases: what investigators proved