Brazilian police have seized approximately $1.71 million worth of cryptocurrency as part of an investigation into a cybercrime network accused of orchestrating large-scale financial fraud and breaching public-sector computer systems. The operation, dubbed ClickFix, led to the recovery of 8.78 million Brazilian reais in digital assets, in addition to real estate and vehicles valued in the millions.

The Civil Police of Santa Catarina carried out the operation on September 10, 2026, with support from law enforcement agencies in other Brazilian states. Authorities also obtained court orders to freeze bank accounts believed to hold potentially significant sums connected to the case.

The seizure marks a major development in Brazil's efforts to combat cybercrime and recover digital assets allegedly tied to financial offenses. It also illustrates how digital asset recoveries are now folded into conventional forfeiture work that extends from real estate and vehicles to court-ordered bank freezes.

Assets Moved From Self-Custody Wallets

The confiscated digital assets totaled 8,781,864 reais and comprised Bitcoin (BTC), Ethereum (ETH), Tron (TRX), and Tether (USDT), a stablecoin pegged to the US dollar. Investigators recovered the funds from three self-custody wallets and transferred them into state custody.

Self-custody wallets allow users to hold and control their cryptocurrency without depending on a centralized exchange to safeguard their assets. Recovering funds from such wallets can pose added challenges for investigators, particularly when it comes to identifying wallet owners and tracing transactions across blockchain networks. At the same time, transfers on public blockchains leave permanent records, giving investigators a trail to follow once the wallets involved are identifiedn
According to Brazil's Ministry of Justice and Public Security, the operation also included 17 search warrants and two arrest warrants targeting individuals identified during the investigation. Authorities have not announced any final determination of criminal liability for the suspects, and the probe remains focused on mapping the alleged network's activities and establishing the origins of the assets.

Seizures Extend Beyond Digital Assets

Beyond cryptocurrency, investigators seized or secured other assets believed to be linked to the case, including real estate valued at roughly 6.5 million reais and vehicles worth approximately 2.43 million reais. Taken together, the digital assets, property, and vehicles account for about 17.71 million reais in seized or restricted assets. Authorities further ordered the freezing of bank accounts, with the total potentially reaching 93 million reais.

Investigators allege the group employed the ClickFix phishing technique to trick victims into executing malicious commands on their computers. The attackers reportedly displayed fake browser or website error messages that prompted users to run code, potentially granting unauthorized access to compromised devices. Because the commands are executed by the victims themselves, this class of attack does not rely on exploiting software vulnerabilities to gain an initial foothold.

The investigation also identified alleged intrusions affecting public institutions, police and judicial systems, and companies connected to the financial services sector.

The case underscores the growing role of blockchain analysis and digital asset recovery in financial crime investigations. As cryptocurrency adoption expands, law enforcement agencies face mounting pressure to trace illicit funds while navigating the technical complexities associated with decentralized financial assets. Attention now turns to whether the frozen bank accounts hold sums approaching the potential 93 million reais, and whether investigators reach a final determination of criminal liability for the suspects.

This article is based on reporting by CryptoMeter io. Original: Brazil Seizes $1.7 Million in Bitcoin and Other Crypto Assets.