ThreatPaper
False

A First VPN administrator was arrested in the takedown

Assessment

Several outlets framed Operation Saffron as including the arrest of First VPN's administrator. The primary sources do not support that: Eurojust's own release and CyberInsider's reporting both describe authorities searching a residence in Ukraine and interviewing the alleged administrator of the service — not arresting or charging them. No formal arrest or charge is stated in the primary release. The distinction is legally and factually meaningful: 'searched and interviewed' leaves the suspect's status open, whereas 'arrested' implies custody and the start of a prosecution that the sources do not describe. A reader repeating that an administrator was arrested would be asserting more than the coordinating authorities have said.

Where this claim appeared

TechJuice (headline framing) · 2026-05-21

https://www.techjuice.pk/europol-first-vpn-ransomware-takedown-operation-saffron-arrest/

What “False” means

Contradicted by primary sources. Reserved for claims checked directly against the authoritative record — an advisory that does not exist, a catalogue that does not list the entry, a directive that says something other than what is reported.

1 of 5 · rating scale

Assessed in

Operation Saffron: Europol dismantles First VPN, the bulletproof anonymity layer behind years of ransomware cases

Think this assessment is wrong? Report an error.