RCMP Federal Policing Annual Report 2022

Canada's critical infrastructure

Federal Policing is responsible for capturing intelligence and assessing physical and cyber criminal threats to Canada's critical infrastructure, in support of the RCMP's, and the Government of Canada's, critical infrastructure protection mandates.

In 2022, Federal Policing participated in RCMP and intergovernmental initiatives related to Arctic Security and cybersecurity.

• Federal Policing helped to bolster education and awareness concerning critical infrastructure threats and vulnerabilities of the Canadian Arctic through participation in various Arctic security and intelligence-related forums. These centred on emerging security concerns for the Arctic, including in the information, cyber and space domains.

Federal Policing also expanded the RCMP's engagement with critical infrastructure stakeholders, including through new opportunities to network and present on the critical infrastructure threat landscape.

• In May 2022, Federal Policing, along with law enforcement partners, presented on the role of law enforcement as it pertains to cybercrime at Cyber Eco's 2022 Cyberconference on cybersecurity. In September 2022, Federal Policing co-hosted an event on International Interference on Canadian Enterprises and Organizations for members of the Chief Information Officer Association of Canada.

Foreign Actor Interference Team

Foreign Actor Interference is illegal activity conducted by a foreign state (or its proxies) that targets Canadian interests, or interferes in Canadian society and threatens Canada's national security. It includes attempts to threaten, harass, influence, intimidate, corrupt or discredit individuals, organizations and governments to further the interests of a foreign country. The RCMP is responsible for investigating incidents of foreign actor interference across Canada.

To ensure public safety against foreign actor interference from all foreign actors that pose a threat to national security, the RCMP will utilize the Criminal Code, the Security of Information Act and any other practicable legislation to mitigate the threat.

In 2022, Federal Policing developed a strategic plan to address the threat of foreign actor interference. The purpose of this ongoing campaign is to coordinate with Government of Canada partners, leveraging their respective mandates and tools to address this pervasive threat.

Since September 2022, the RCMP has been investigating reports of illegal activity, including criminal offences, in relation to the allegations of overseas police stations, which are allegedly affiliated with the People's Republic of China and operating in Canada. The RCMP also continues to investigate the transnational repression activity, and those responsible for transnational repression, to ensure Canadians are safe from foreign influence.

The RCMP and the broader Canadian law enforcement, security, and intelligence community have a clear role to play in protecting Canada and Canadians from foreign actor interference. Federal Policing provides central coordination of, and governance over, these criminal investigations.

Canadian extremist travellers

Public Safety Canada has defined a Canadian Extremist Traveller as a Canadian citizen or a permanent resident of Canada who is suspected to have travelled, or intends to travel, outside Canada for terrorism-related purposes as defined in section 83.01 of the Criminal Code, or once abroad, is likely to become involved in terrorism-related activities. The RCMP conducts criminal investigations to the fullest extent that they are able, with a view to supporting criminal charges and prosecutions of alleged extremist travellers returning to Canada. Working closely with the Public Prosecution Service Canada, the RCMP lays criminal charges when there is supporting evidence and when it is deemed in the public interest to proceed.

Federal Policing is responsible for assessing, coordinating, and monitoring criminal investigations as well as for providing support to multi-agency investigative teams to ensure Canada's laws and regulations are appropriately applied to achieve shared strategic and tactical objectives. The escalation of the armed conflict in Syria and the emergence of ISIS brought on a new dimension to RCMP National Security investigations. The promise of an Islamic state attracted a large number of religiously-motivated violent extremists to the territory claimed by ISIS, including Canadian citizens. Upon the recapture of these territories, these individuals were detained either in prisons or Internally Displaced Person camps in Northern Syria. Depending on evidence gathered by law enforcement, Canadian adults that have travelled to Syria could be suspects in a criminal investigation. That said, gathering evidence in an active conflict is a major challenge. The Federal Court ruling requiring the Government of Canada to repatriate these individuals renewed the RCMP's focus on determining risks to National Security, and how those risks can be mitigated via preventive and enforcement tools under the Canadian legal framework.

Ideologically motivated violent extremism

Ideologically Motivated Violent Extremists are responsible for more fatalities in Canada than Religiously Motivated Violent Extremists and Politically Motivated Violent Extremists combined. Since 2014, ideological extremists have killed 25 and wounded 47 individuals in Canada. This threat is observed both at home and around the world, and appears to have increased over the past several years. The RCMP completed an Ideologically Motivated Violent Extremism Strategy to counter this criminal trend, presenting a comprehensive and visionary approach to this changing threat environment in order to keep Canadians safe. Most importantly, the strategy charts the way forward for further federal law enforcement leadership on Ideologically Motivated Violent Extremism, as well as where additional resources are required for the RCMP to address this growing threat.

International engagement

Federal Policing has continued its international outreach initiatives aimed at enhancing the RCMP's ability to combat threats to Canada. The program has assembled a dedicated team of specialists, known as the Extraterritorial Response Unit, who are trained in international investigations, analysis, and negotiations. The Extraterritorial Response Unit investigates crimes committed outside of Canada for which the RCMP has extraterritorial jurisdiction over and works collaboratively with both international and domestic partners.

In 2022, the Extraterritorial Response Unit successfully implemented the International Negotiator Group and Family Liaison Officer program, which has provided family support to victims of critical incidents and extraterritorial hostage takings across Canada. As a result of the unit's critical incident expertise and experience, the RCMP has become a lead agency among partners in capacity building. In 2022, the Extraterritorial Response Unit successfully planned, piloted and delivered two Critical Incident courses, in coordination with Global Affairs Canada, to domestic partners in the national security and intelligence portfolio.

The Extraterritorial Response Unit continues to support Canada's whole of government response to the humanitarian crisis in Haiti. For example, in 2022 the unit successfully participated in the safe release of over 30 victims of extraterritorial hostage taking and is supporting ongoing intelligence analysis.

In an effort to improve Canada's response to Critical Incidents and criminal hostage takings, the Extraterritorial Response Unit leads relationship building efforts with Five Eyes and international law enforcement partners as well as Non-Government Organizations.

This includes a Federal Policing National Security Foreign Integrated Person deployed to the FBI Joint Terrorism Task Force in New York City. The Foreign Integrated Person program has established a mission, vision and value framework, that not only matches the Federal Policing mandate, but also helps position the RCMP in a lead role in counterterrorism criminal investigations. The Foreign Integrated Person program maintains extensive involvement in National Security operations and has actively participated in 57 investigations that have ties to Canada and Canadian citizens.

Investigation of foreign "police" stations in Canada

Investigation

In 2022, the RCMP received reports of criminal activity in relation to foreign "police" stations operating in Canada. The RCMP takes threats to the security of individuals living in Canada very seriously and is aware that foreign states may seek to intimidate or harm communities or individuals within Canada.

Results

In November 2022, Federal Policing publicly stated it was investigating reports of possible foreign actor interference at undeclared "police service stations" believed to be operating on behalf of the People's Republic of China in the Greater Toronto Area. Members visited suspected locations to make neighborhood inquiries, sending a strong message to the threat actor(s) that these matters will be investigated and will not be tolerated. To date, Federal Policing continues to investigate the activities in relation to the alleged "police" stations. The RCMP also continues to work in collaboration with our domestic and Five Eyes partners to maintain situational awareness and respond to all threats to national security.

First economic espionage charge laid against Hydro-Quebec employee

Investigation

Foreign actor interference is a priority for many law enforcement and intelligence agencies around the world. Hydro-Quebec is considered a critical infrastructure and a strategic interest to be protected. In August 2022, Federal Policing began an investigation into a Hydro-Quebec employee who allegedly obtained trade secrets to benefit the People's Republic of China, to the detriment of Canada's economic interests. The offences are alleged to have taken place between February 2018 and October 2022.

Results

This is the first time that a person in Canada has faced the economic espionage charge, which falls under the Security of Information Act. The espionage charge carries a maximum sentence of 10 years. The RCMP and its partners continue to work together with at-risk sectors to improve Canada's response and resiliency to this threat.

Protection of Canadians subject to harassment, intimidation and violence from foreign states

Federal Policing investigates transnational repression matters, including acts of harassment, intimidation and violence committed by a foreign state. On a number of occasions in 2022, this team contacted local police forces and international partners to notify them of individuals targeted by transnational repression activity travelling to their areas of responsibility. This helped ensure local authorities were prepared to conduct routine patrols and promptly respond to calls for service. In essence, Federal Policing's efforts aim to mitigate and disrupt these types of transnational repression activities.

Seizure of firearms bound for individual with ideologically motivated extremist views

Investigation

In November 2022, Federal Policing began an investigation in response to packages intercepted by the Canada Border Services Agency . During the investigation, there were indications that the accused could subscribe to extreme right-wing ideologies. The file was transferred to the Integrated National Security Enforcement Team to ensure the risk to national security was mitigated. Collaboration between the RCMP and Canada Post identified a pattern of suspicious activity concerning packages addressed to two individuals from firearms and military equipment stores. The accused were sourcing from a variety of online platforms belonging to legitimate companies and illegal sellers internationally. The firearms were then sold on the Canadian illegal market.

Results

In November 2022, Federal Policing made a major firearms seizure at a residence in Vaudreuil-Dorion, Quebec, where a large armoury was discovered at the home of the two accused. Police seized 37 firearms, more than 10,000 rounds of ammunition, approximately 200 high-capacity magazines, and weapon parts/military accessories, as well as a copy of a book that is considered a foundational text for the Accelerationist movement.

Terrorism-related charges laid against Canadian extremist traveller

Following extensive efforts by the RCMP and partner agencies, two Canadian women were repatriated from a Syrian detention camp for ISIS family members in 2022, one of which was charged with four terrorism-related offences upon arrival in Canada. A Terrorism Peace Bond was sought by the RCMP for the second individual. Two children were also repatriated.

Arctic security: the RCMP's role

The RCMP is committed to protecting Canada's northernmost regions and continues to work with internal and external partners to expand its understanding of Arctic security and sovereignty, to identify criminal threats and to collaborate on border operations.

Throughout 2022, Federal Policing hosted meetings with internal partners, other government departments, and Indigenous groups and leaders to enhance collaboration and determine the RCMP's posture in the Arctic.

This led to multiple initiatives in 2022, including:

• National Arctic Region Environmental Scan
• Joint Canadian Armed Forces-RCMP Arctic maritime security and sovereignty patrols

Border technology projects

Federal Policing has spearheaded a series of technological projects aimed at bolstering the RCMP's border capabilities on land, in the air, and at sea. Border technology projects include:

• The Satellite Border Surveillance project: uses satellite images to analyze changes in land and maritime domains
• The Enhancing Integrity of Canada's Border Project: led by the Information Management/Information Technology project team and involves the installation of technology along the Canada-United States border to enhance situational awareness along the border
• The Enterprise Geographic Information System web application project: provides national and Divisional Common Operating Picture and domain awareness to support Border Integrity operations

Cross-Border Law Enforcement Advisory Committee

On July 28, 2022, the renewal of the Statement of Cooperation for the Cross-Border Law Enforcement Advisory Committee and the Integrated Border Enforcement Teams Charter was officially announced. This announcement marks an important step for continued cross-border collaboration with our core partners: Canada Border Services Agency, Homeland Security Investigations, United States Customs and Border Patrol, and United States Coast Guard.

Following this announcement, Federal Policing planned and chaired the first in-person meeting of the Cross-Border Law Enforcement Advisory Committee in three years, held in Detroit, in November 2022. All core agencies were in attendance, along with Public Safety Canada and the Department of Homeland Security. All agencies reaffirmed their willingness to work together in securing the Canada-United States border, with a particular focus on firearms smuggling, human smuggling, and illegal migration.

The committee endorsed moving forward on several initiatives, including re-establishing the Joint Management Team across the Border (already initiated), updating the Sharing Protocols Handbook, and creating a standing committee to support the drafting of a document (terms of reference or standard operating procedures) that provides a firm understanding of the committee's roles and responsibilities.

Canada Border Services Agency and RCMP prevent 100 kilograms of suspected cocaine from entering Canadian communities

Investigation

On June 21, 2022, a commercial transport truck arrived at the primary inspection booth at the Blue Water Bridge in Point Edward, Ontario. The truck was subsequently referred for secondary examination where border services officers noted concealed suitcases. Detailed inspection of the suitcases led to the discovery of 89 brick-shaped objects of suspected cocaine (100 kilograms).

Results

The suspected narcotics were seized and the driver was arrested and transferred into the custody of the RCMP. The RCMP charged a 62-year-old individual from Toronto, Ontario with:

• Importation of cocaine, contrary to subsection 6(1) of the Controlled Drugs and Substances Act
• Possession for the purpose of trafficking, contrary to Section 5(2) of the Controlled Drugs and Substances Act

The matter is currently before the Ontario Court of Justice, in Sarnia, Ontario

Charges laid after $7-million worth of drugs imported into Canada

Investigation

A joint operation by the Alberta Integrated Border Enforcement Team – comprised of members from the RCMP, Canada Border Services Agency, and the Calgary Police Service – into cross-border drug importation using commercial transport vehicles led to the seizure of 38 kilograms of cocaine and 30 kilograms of heroin, with a street value of $7-million CAD.

Results

On October 13, 2022, a man from Edmonton, Alberta was charged with possession of a controlled substance for the purpose of trafficking, having imported the cocaine and heroin into Canada.

Irregular migrants successfully rescued by Integrate Border Enforcement Team, Homeland Security Investigations and United States Customs and Border Patrol teams

Investigation

Following the issuance of an Amber Alert in Saskatchewan in August 2022, the provincial Integrated Border Enforcement Team worked with Homeland Security Investigations and United States Border Patrol to locate four missing subjects in South Dakota.

Results

The subjects were located after illegally crossing the border from Canada into the United States. Children were returned safely to Saskatchewan while the main suspect faced charges in the United States.

Volume of irregular migration

The RCMP saw a surge in northbound irregular migration between official ports of entry in 2022. During this period, a record high of 39,611 irregular migrants were intercepted at the Canada-U.S. border, reflecting a 92% increase since the last recorded high in 2017 (20,650 intercepts).

Evolving smuggling routes also present organized crime groups with new opportunities to import drugs, firearms and other illicit materials. As such, the changing nature of clandestine entries poses challenges for the RCMP, police of jurisdiction, and border communities.

The National Fentanyl Strategy

Following the success of the Methamphetamine National Strategy, the Canadian Integrated Response to Organized Crime is developing a National Fentanyl Strategy to bolster law enforcement's response to the fentanyl crisis in Canada. This intelligence-led operational strategy charts a course for greater information-sharing and collaboration between partner agencies working together towards the common goal of reducing the availability of fentanyl across Canada.

Federal Policing continues to support this initiative by conducting operational research and engaging with different stakeholders in multiple forums. These include:

• Divisional units and Criminal Intelligence Services Canada
• Canadian law enforcement partners, including Canada Border Services Agency
• Other Government of Canada stakeholders, such as Health Canada, Public Safety and the Public Health Agency of Canada
• American Law Enforcement, including Drug Enforcement Administration through a bi-lateral Joint Action Plan on Opioids
• Trilateral North American Law Enforcement engagement, through the North American Drug Dialogue
• The United Nations through different expert forums; information sharing and de-confliction through the International Narcotics Control Board databases

Hardened secure communications

Hardened secure communications enable sophisticated criminal organizations to communicate via secure channels in order to evade traditional police interception and legal jurisdictions. The technology, primarily used for encrypted written communication, has evolved exponentially to allow encryption capabilities for voice messages, dedicated applications and other tools commonly seen on smartphones. This has left law enforcement agencies around the world with the urgent need to develop technological tools and adopt modern investigative techniques to intercept, localize and decrypt the communications found on hardened secure communications platforms.

Hardened secure communications are a significant enabler to transnational serious and organized crime and benefit criminal organizations by facilitating the coordination of targeted homicides and the smuggling of illegal goods. Criminal networks are using evolving technology to encrypt and anonymize communications to undertake serious criminal activity and evade detection. In the last few years, international policing partners have successfully disrupted several platforms, with some located in Canada. These investigations have revealed that almost all communication was through these platforms associated to criminal activity and have forced policing agencies to quickly respond to this emerging threat. International partners have dedicated significant analytical and technological resources specific to the proliferation and use of hardened secure communications platforms by criminal organizations to conduct their illegal activities

The RCMP is looking to enhance their investigational capabilities and promote a nationally integrated approach to operations, intelligence sharing, target identification, and education. In 2022, the RCMP successfully:

• enhanced its posture on the domestic hardened secure communications landscape
• enhanced cooperation, coordination and expertise with domestic and international law enforcement and judicial partners
• coordinated an operational approach to hardened secure communications investigations between all RCMP business lines

165 kilograms of cocaine seized in Peru through a joint operation with Drug Enforcement Administration and Peruvian National Police

Investigation

On June 14, 2022, an investigation was launched into a group suspected of having the capacity to smuggle large amounts of cocaine into Canada and parts of Europe.

On February 1, 2023, in collaboration with Peruvian Police and the Drug Enforcement Administration, an undercover operation resulted in simultaneous arrests within Canada and Peru of 11 individuals, six of which were Canadian nationals.

Results

Between June 2022 and January 2023, Peru's National Police force and the RCMP seized a total of 165 kilograms of cocaine hydrochloride (60 kilograms of which were seized within Canada) that the group attempted to transport out of the country.

27-million doses of fentanyl seized from British Columbia superlab

Investigation

On January 14, 2022, the British Columbia Clandestine Laboratory Enforcement and Response team executed two search warrants on properties located in the cities of Abbotsford and Surrey, British Columbia, and arrested three men for their alleged involvement in the operation of a sophisticated clandestine drug lab (superlab). A superlab is a large-scale, highly organized lab where drugs are produced for the purpose of exporting. These labs can produce multiple kilograms per production cycle.

Results

The searches resulted in the seizure of approximately 36 pounds of crystal methamphetamine, 4 kilograms of pure fentanyl, more than 700 pounds of marihuana bud, approximately $20,000 in cash, and a cache of precursor chemicals for the production of fentanyl.

"Access and availability to toxic drugs is a primary factor in many deaths. These drugs come from unsanctioned, uncontrolled, and profit driven facilities. Out of the thousands of loved ones lost to the toxic drug supply, it seems especially tragic that many of the perished have been young Canadians who would have otherwise had their entire lives ahead of them. This is why we are unequivocally committed to preventing toxic opioids from destroying more lives, causing more grief, and threatening the future of our nation."

Targeting illicit opioid supply chains

Nearly 8,000 apparent opioid toxicity deaths were recorded in Canada in 2021 ^{Footnote 4}. Against the backdrop of this increasing death toll, the RCMP continues to face challenges in tracing the origin, understanding the supply, and operationalizing information related to production/shipment of illicit opioids in Canada.

RCMP seizure data is only one of the many pieces needed to understand the supply chain, origins and trading routes of illicit opioids and precursors in Canada, as well as the transnational serious organized crime groups involved at each phase of chemical shipment and synthesis. Inland street seizures typically offer little insight into the methods and location of production. Increasing adulteration of opioids with other illicit narcotics further obscures how these lethal products enter into Canadian markets, as well as the precursor and essential chemicals that are used to produce them.

Hardened secure communications legislative and technical challenges

Legislative Challenges – Hardened secure communications companies and users may be investigated and prosecuted in Canada if they use this technology to commit a crime. That said, encryption poses major challenges to police investigations, including a lack of records from Dedicated Encrypted Communications device companies and servers abroad. As such, Canadian law enforcement are often unable to obtain transmission or tracking data, intercept private communications, and search upon seizure of records related to these devices.

Technical Challenges – Hardened secure communications platforms deliberately employ obfuscation techniques to protect users, owners and administrators, enabling them to evade lawful enforcement. Supporting the divisions in their investigations will require:

• investment in equipment and software
• collaboration with both internal and international partners, as well as external third parties in innovative ways

Emergency Economic Measures Order

In early 2022, Federal Policing demonstrated its ability to quickly adapt in emergency situations, playing a central role in the implementation of the Economic Emergency Measures Order as part of the Emergencies Act. In this role, the Financial Crime unit at National Headquarters maintained constant communication with major key areas in the financial sector – including Virtual Assets Service Providers – to help them meet their reporting and freezing obligations under the order. The Financial Crime unit took the necessary steps to ensure the application of the Economic Emergency Measures Order was measured and reasonable, providing targeted and specific information to the private sector and ultimately helping de-escalate the illegal protest during this time.

Special Economic Measures Act

Canada's sanctions landscape rapidly evolved throughout 2022, with hundreds of new persons designated under the Special Economic Measures Act Russia, Ukraine, Belarus, Iran, and Haiti Regulations. Amendments to the act have placed a greater responsibility on the RCMP to support Global Affairs Canada and conduct investigations into sanction evasion activities. On September 30, 2022, Federal Policing responded to a request from Global Affairs Canada and provided a disclosure package related to Russian Oligarch Roman Abramovich, a designated person under the Special Economic Measures Act Russia Regulations. The information provided by the RCMP will be used to support a seizure order process, with the Government of Canada's goal of using forfeited funds to compensate victims and assist in the reconstruction of Ukraine.

The RCMP has been transparent in communicating the impact of sanctions to Canadians by publicly disclosing financial figures pertaining to frozen and blocked assets. On December 23, 2022, the RCMP reported that a total approximate CAD equivalent of $122,245,984.50 of assets in Canada have been effectively frozen and a total approximate CAD equivalent of $292,256,439.13 in financial transactions have been blocked as a result of the Special Economic Measures Act Russia Regulations.

Protecting Canadian capital markets

Investigation

Project ODYNASTY was a Toronto Integrated Market Enforcement Team investigation into suspected criminal activity by Fortress Real Capital, a privately-held company selling syndicated mortgages to finance small real estate developers in the Greater Toronto Area. Fortress Real Capital was investigated for fraud, having made false representations to its investors, allowing them to raise $900 million between 2008 and 2018. The investigation revealed that certain investors may have lost their life savings by investing in a product that was falsely represented as guaranteed.

Results

In June 2022, the two directors of Fortress Real Capital were charged with fraud and secret commission charges.

Investigation

Project OEMPIRE was a joint investigation between O Division Integrated Market Enforcement Team and the Ontario Securities Commission. The investigation looked into two of the founders of Noble Development and other companies involved in the purchase of multiple real estate developments in Brampton and Richmond Hill, Ontario. Numerous investors paid money to an unregistered investment manager, who then forwarded more than $9-million to Noble Developments. Instead of making the promised investments, the accused used the funds for personal use and expenses unrelated to construction. Several of the accused also forged documents to conceal the fraud from investors.

Results

In August 2022, four individuals were charged with offences, including fraud over $5,000, intent to obtain property by false pretense and use of forged documents.

Driving operational responses to the most serious money laundering threats in Canada

Investigation

On October 24, 2022, RCMP K Division (Alberta) Federal Policing announced charges against a man for fraudulently purchasing property and laundering proceeds of crime. After a comprehensive investigation, the team found that the Calgary man defrauded millions from multiple financial institutions in the local area between 2015 and 2020.

Results

The suspect was charged with Possession of Property Obtained by Crime Over $5,000 and Money Laundering.

Investigation

Project CARNET is a money laundering investigation that started with information received from the Drug Enforcement Administration. The investigation established that the suspects laundered over $18-million.

Results

In July 2022, three persons were charged with laundering proceeds of crime, conspiracy to import a substance, and possession of prohibited weapons.

Crimes against humanity and war crimes

Investigation

In June 2020, the RCMP received information concerning online threats against the Kasaian people, an ethnic group in the Katanga region of the Democratic Republic of the Congo. With the assistance of the RCMP's Open Source Criminal Intelligence Unit and Divisional Criminal Analysis Unit, police were able to identify a suspect, who was subsequently arrested in Kelowna, British Columbia.

Results

On February 17, 2022, the suspect was charged with uttering threats, contrary to Section 264.1 of the Criminal Code, and Wilful promotion of hatred, contrary to subsection 319(2) of the Criminal Code. This investigation received the 2022 Canadian Association of Chiefs of Police International Policing Award, which recognizes Canadian law enforcement personnel for their dedication to policing.

Update on OLUNAR: a ransomware investigation

Investigation

Project OLUNAR was the highly successful RCMP operation into the criminal activities of Canadian Netwalker ransomware affiliate Sébastien Vachon-Desjardins. The FBI and the RCMP conducted parallel investigations which led to the execution of search warrants in Canada and the seizure of more than $34 million in Bitcoin and almost $700,000 in cash.

Results

Sébastien Vachon-Desjardins pled guilty to the Canadian charges and was sentenced to seven years in prison. He agreed to forfeit the seized assets and $2.8 million was returned to Canadian victims via a restitution order. Sébastien Vachon-Desjardins was extradited to the United States and, in October 2022, pled guilty and was sentenced to 20 years in prison in Tampa, Florida.

Disruption of VPNLab.net service

Investigation

The RCMP acted against the criminal misuse of virtual private network services by targeting the users and infrastructure of VPNLab.net. The provider's service, which offered shielded communications and internet access, was used in support of serious criminal acts, such as ransomware deployment and other cybercrime activities.

A coordinated takedown took place on January 17, 2022, with law enforcement in multiple countries seizing or disrupting the 15 servers that hosted VPNLab.net's service. One such server was seized in Quebec by the RCMP's Cybercrime Investigative Team in Montreal. The operation took place in Germany, the Netherlands, Canada, the Czech Republic, France, Hungary, Latvia, Ukraine, the United States and the United Kingdom.

VPNLab.net was established in 2008, offering services based on OpenVPN technology and 2048-bit encryption to provide online anonymity for as little as $60 per year. The service also provided double virtual private networks, with servers located in many different countries. This made VPNLab.net a popular choice for cybercriminals, who could use its services to commit crimes without being detected by authorities.

Results

As a result of the investigation, more than one hundred businesses were identified as being at risk for cyberattacks. Law enforcement worked directly with these potential victims to mitigate their exposure.

RCMP charges cybercriminal responsible for attack on Canadian financial institution

Investigation

In 2018, one of Canada's largest financial institutions was the victim of an online phishing campaign and automated cyberattack, which leveraged a vulnerability against their online banking portal. Thousands of accounts were compromised, which included authentication information being altered by unauthorized users. In collaboration with domestic and international partners, the RCMP initiated an investigation involving an undercover operation, leading to the identification of a suspect. This individual was also found to be a top vendor on "Canada Headquarters", a dark web marketplace where online actors could buy and sell illicit goods and services, including compromised banking credentials and "hacking how-to" methods.

Results

On March 25, 2022, the RCMP charged the individual for his role in the cyberattack targeting Canada's banking infrastructure, in addition to counselling users of "Canada Headquarters" to commit cyber-related offences. The individual was subsequently convicted and sentenced to jail.

Fostering engagement and partnerships through training and awareness sessions

In order to address divisional resourcing backlogs caused by the pandemic, the Covert Operations branch increased training opportunities in 2022. They also provided training support to domestic and international policing partners in the context of undercover operations and human sources. Partnering with domestic and international agencies, they have continued to build capacity to support a broad range of operations and requests, including those pertaining to emerging national security concerns, money laundering and cryptocurrency, online undercover operations, and cyber investigations.

Federal Policing hosted faculty and students of Queen's University Natural Sciences and Engineering Research Council CREATE Cybersecurity Program in a one-day Information Technology presentation event at RCMP National Headquarters. The event helped raise awareness of the program with key government partners and provided the students an opportunity to present on topics related to improving Canada's digital safety. The event also provided an excellent networking opportunity for students and prospective government employers to discuss internships, which is an integral part of the Program.

Digital innovation and onboarding of new technologies

Federal Policing continues to leverage cutting edge technology to make the program as efficient as possible, including tools to assist in recruiting new employees. For example, the undercover training team is using the Integrated Collaborative Environment platform to collect and track a variety of metrics related to the selection process and candidate profiles.

Over the last year, Federal Policing procured and operationalized a new social media analytical tool, known as Babel X. The software provides situational awareness during an active threat, crisis or public event to enhance traditional investigational techniques. Babel X leverages publicly accessible information located on the internet and social media platforms. It cannot be used to bypass social media platforms' privacy settings for hacking purposes, nor does it use facial recognition or other biometric measuring techniques. A Privacy Impact Assessment was submitted to the Office of the Privacy Commissioner of Canada in June 2022, and the platform was operationalized one month later.

Federal Policing Data Operations Tactical Sciences unit provides tailored data analytics and data science solutions to assist analysts and investigators with the review, analysis, interpretation and visualization of data collected during investigations/operations. In 2022, this unit offered analytic support to a number of investigations, providing guidance to Federal Policing on extracting information from various data types, specific tools and software, specialized analytic techniques, and how to answer Crown's questions on these advanced analytics methods.

Modernizing the Open Source Information program

Following a review of the RCMP's use of open source information, Federal Policing committed to improving the program's approach to this valuable data source. This involved bringing together subject matter experts from across the organization, with representatives from Federal Policing, Specialized Policing Services, Contract and Indigenous Policing, Information Management Information Technology, policy and governance. The group has developed an action plan to review and update policy, guidelines, governance, training and Information Management Information Technology practices to modernize the Open Source Information Program. This work is further supported by a Divisional Consultative Group, which is composed of subject matter experts from every division.