Frankfurt Closed Elysium After Tens of Thousands of Darknet Accounts, Limburg Jailed the Operators, and Kidflix Still Reached Nearly Two Million Users
German investigators did not stumble onto a rumor. In early June 2017 they took down a hidden-service forum called Elysium, a site that existed only on the darknet, the slice of the internet that does not appear in an ordinary search and that requires special software to reach. The Federal Criminal Police Office, the BKA, said the forum had been online since the end of 2016 and that more than 87,000 accounts were on it when the servers went dark. Members were not trading ordinary files. The BKA said the forum was used for the worldwide exchange of child sexual abuse material and for arranging the sexual abuse of children. Investigators described recordings of serious abuse, including of very young children. That sentence is as far as a news report needs to go. The pictures are evidence, not content.
DIE ZEIT and Der Spiegel reported the same skeleton of facts from the Frankfurt Public Prosecutor General, where the Central Office for Combating Cybercrime, the ZIT, sits, and from the BKA. The suspected administrator was a 39-year-old man from the Limburg-Weilburg district in Hesse. Police searched his home, seized the server, and arrested him on June 12, 2017. He was held on suspicion of gang-style distribution of the illegal material and was described as the person who had kept the technical infrastructure running. Other suspects were identified in Germany and Austria. Dutch investigators had a hand in the wider hunt. Most of the early custody cases were on the German and Austrian side of the border.
Elysium was not, even then, the biggest darknet case of its kind. The U.S. Justice Department had already seized Playpen. Its administrator, Steven Chase, later received a 30-year federal sentence. That investigation carried a second scandal that had nothing to do with mercy for the accused. After agents took the site, the FBI kept it running for a stretch and deployed a Tor exploit to identify visitors. When defense lawyers demanded the method, prosecutors dropped cases rather than disclose the tool. The Electronic Frontier Foundation called the hacking operation unprecedented and illegal. Protecting a technique mattered more, in those courtrooms, than finishing some of the prosecutions. That choice still matters whenever a government argues that a secret method is worth more than an open case.
Limburg Put a Number on the Operators
The July 2017 announcement was an arrest, not a sentence. On March 7, 2019, a regional court in Limburg, in Hesse, jailed four German men for founding and running the forum. The Local, citing AFP, reported sentences from three years and ten months to nine years and nine months. All four were convicted of possessing and publishing the illegal material. The oldest defendant, 63, was also convicted of abusing two small children and of posting recordings of those crimes. Prosecutors said the sentences largely matched what they had asked for.
By the time of that verdict the membership figure had moved. The BKA’s first public number was more than 87,000 accounts at shutdown. Prosecutors in 2019 said the site had more than 111,000 members worldwide before it was closed, and that the files included what they called the most serious abuse, including of babies. The gap is not a contradiction so much as a reminder that “members” on a hidden forum is a count of accounts, not of identified people, and that the count grew in the telling as investigators mapped the logs. State prosecutors had already run nationwide raids in July 2017 against nearly 70 suspects tied to the site. Investigators said some of the trading also moved through Chatstep, a U.S.-based group-chat service. The forum itself had chat rooms in several languages, including English, German, French, and Spanish, and it had been online for about six months. A short life. A very large log.
Fourteen suspects in all, including five Germans, were described by German authorities in the wider Elysium file as arrested and later sentenced. The four men in Limburg were the operators the public could actually see in a courtroom. The rest of the account list was a pile of usernames, some of them overseas, some of them never tied to a door that police could knock on.
The Next Platform Was a Streaming Service
Elysium was a warning about scale, not a peak. On April 2, 2025, Europol and the Bavarian State Criminal Police, with the Bavarian Central Office for the Prosecution of Cybercrime, announced that they had shut Kidflix, a darknet platform built to stream child sexual abuse material rather than merely host downloads. Europol said 1.8 million users worldwide had logged on between April 2022 and March 2025. On March 11, 2025, German and Dutch authorities seized the server, which then held about 72,000 videos. Across the life of the site, investigators counted about 91,000 unique videos and roughly 6,288 hours of illegal footage. Many of those videos had not been in law-enforcement databases before. Europol said a new video was uploaded, on average, several times an hour.
The business model was the other break from the old forum. Users paid in cryptocurrency that the site converted into tokens. Tokens could also be earned by uploading material, checking titles, or sorting videos. Each video came in low, medium, and high quality, so a person could preview a crime and then pay to unlock a clearer copy. That is monetization of abuse, with accounts, payment rails, and hosting receipts attached. Those receipts are what make a case. Reputation forums are hard to trace. A cashier leaves a ledger.
Operation Stream, as the case was named, drew law enforcement from more than 35 countries, a list that ran from Germany, the Netherlands, the United Kingdom, and the United States through much of Europe and on to Australia, Canada, and New Zealand. Europol’s public tally after the March 2025 action weeks: 1,393 suspects identified, 79 arrested, more than 3,000 electronic devices seized, and 39 children placed under protection. Some of the people arrested had not only uploaded or watched. Europol said some had abused children themselves. Spain accounted for 16 of the arrests. Ars Technica, citing CBS, reported that a repeat offender in the United States was among those taken into custody. In Albania, acting on the same intelligence, prosecutors in Tirana opened a case and police arrested a 29-year-old man. The Council of Europe’s cybercrime page, still describing the file in July 2026, said the investigation was continuing. Europol’s own line in April 2025 had been the same: the investigation is ongoing.
Set the two numbers next to each other. Elysium, in half a year at the end of 2016 and the start of 2017, gathered on the order of 87,000 to 111,000 accounts. Kidflix, between 2022 and early 2025, logged 1.8 million. The German-led machinery that broke the first site was still the machinery that broke the second, eight years later, and the user count had grown by more than an order of magnitude. Streaming, tokens, and cryptocurrency did not shrink the market. They industrialized it. Catherine De Bolle, Europol’s executive director, used the Kidflix announcement to argue for sharing evidence across borders, because a platform with users in three dozen countries is not a case any single police force can finish.
The Coverage Gap Is the Other Evidence
German public television treated Kidflix as a national story. Tagesschau ran a report the day Europol spoke. U.S. cable news, then and in the months after, gave the takedown a fraction of the hours it gives a celebrity trial. That imbalance is the pattern this site flagged when Elysium first came down, and it has not corrected itself. A forum used to arrange real-world abuse, a court in Hesse that sent operators to prison, and a later platform with nearly two million logins are not niche technology items. They are criminal cases about children. The silence is a choice about what counts as news.
The same silence has a longer map, and The AEGIS Alliance has been drawing it for years. Hiding In Plain Sight followed elite protection around child-sex trafficking from Hollywood through the Epstein file fights. Welcome to Video showed how a sloppy homepage and a public Bitcoin ledger produced 337 arrests, and how a Seoul court still would not send the operator to the United States. Operation Guardian is the local version of the same work: named custody cases in Snohomish County, Washington, and a reminder that an arrest is not the same thing as a charge a prosecutor has decided to file. Amy J. Berg’s An Open Secret and the banned documentary Conspiracy of Silence remain part of that shelf. So does the crime news file.
Anyone who encounters suspected child sexual abuse material should not download it, forward it, or try to investigate it. In the United States it can be reported to the National Center for Missing and Exploited Children’s CyberTipline. Elsewhere, the report goes to local police or to a national hotline. Europol still asks the public, through its Stop Child Abuse appeals, to identify ordinary objects that appear in case images, because a school vest or a toy can be the clue that finds a child who is still alive. The work is identification and prosecution. It is not a spectacle.
