Project Ghostwire dismantled Icy White North, described by York Regional Police as one of Canada’s most prolific dark web drug suppliers. Executed on February 20 following searches at multiple GTA locations including a Mississauga luxury penthouse, the operation seized $3 million in drugs, a carbine assault rifle, $200,000 in Canadian currency, and $200,000 in cryptocurrency, the first crypto seizure in York Regional Police history. Five suspects from Brampton and Vaughan face 81 charges combined.
On September 22, 2026, York Regional Police announced the results of Project Ghostwire, a nine-month investigation launched in January 2026 into a GTA-based dark web drug network called Icy White North that had been quietly supplying controlled substances to Canadian buyers since approximately 2022. Five people are now facing 81 charges. The seizures go well beyond the drug haul itself.
How Icy White North Operated
This wasn’t a street corner operation. It was structured more like an online retail business that sold controlled substances, and it targeted Canadian customers exclusively.
“Unlike traditional street-level drug trafficking, the Icy White North operation utilized a commercial-style model. Drugs were advertised through digital marketplaces, orders were processed through encrypted communications, and shipments were delivered to customers through Canada’s legitimate parcel and postal infrastructure,” Det.-Sgt. Stephen Beale said at the press conference.
That meant Canada Post. Packages sent through regular postal networks blend into millions of daily deliveries, and unless there’s a specific tip or pattern to flag, an illegal drug shipment is hard to distinguish from ordinary online shopping.
The network also had a reputation to protect. Beale said online sources indicated Icy White North had accumulated more than 9,000 positive reviews by the time the investigation began. Dark web drug markets run on the same trust mechanics as legitimate platforms: buyers leave feedback, sellers build scores, and new customers check ratings before their first order. As we’ve covered in our breakdown of how dark web criminal markets self-regulate through reputation systems, a strong review score is operational currency. More than 9,000 positive reviews over roughly four years represent thousands of completed drug transactions.
What Was Inside That Penthouse
When York Regional Police executed search warrants on February 20, one location was a luxury penthouse condominium in Mississauga. It wasn’t a stash house in the traditional sense. Police described it as a day-to-day hub for the network, a workspace that reflected how professionally the ring operated.
Investigators found more than product. It was the full picture of an organization running a scaled commercial model: drugs ready for dispatch at multiple volume levels, cryptocurrency accounts, cash in the tens of thousands, and a carbine assault rifle with ammunition.
The drug inventory was comprehensive. Beyond the 5.5 kilograms of fentanyl, police seized 5.5 kilograms of methamphetamine, 3.5 kilograms of cocaine, 4.5 kilograms of ketamine, 700 grams of heroin, 5.4 kilograms of MDMA, 205 grams of crack cocaine, over 1,100 tabs of LSD, 11,800 Xanax pills, 290 oxycodone pills, and 110 hydromorphone pills.
Total street value across all substances: approximately $3 million.
Three of the five arrested are from Brampton. One is from Vaughan. Three are men, two are women.
The Fentanyl Figure Everyone Should Sit With
The 50,000 potentially fatal doses stat deserves its own moment.
Fentanyl is a synthetic opioid estimated to be 50 to 100 times more potent than morphine. It requires only microgram quantities to cause a fatal overdose in someone without opioid tolerance. A single kilogram of fentanyl contains thousands of potentially lethal doses. The Icy White North seizure captured 5.5 kilograms.
What makes this especially alarming is the mislabeling documented elsewhere in the investigation. Police identified a product that Icy White North advertised online as “purple heroin.” When they tested it, the substance was fentanyl. Buyers who thought they were purchasing one substance received another with a drastically different potency profile and dosing risk.
This is one of the main drivers of Canada’s ongoing overdose crisis. People consume what they believe to be a drug they understand, at a dose they think is safe, and receive something entirely different. The gap between expectation and reality is often fatal. The Canadian Center on Substance Use and Addiction has consistently identified fentanyl adulteration and mislabeling as primary contributors to overdose deaths nationally.
A First for York Regional Police
One detail buried deep in the press conference coverage deserves more attention: the cryptocurrency seized represents the first time in York Regional Police history that digital currency has been confiscated in an investigation.
Police Chief Paulo Da Silva acknowledged the complexity involved. Det.-Sgt. Beale confirmed that special warrants were required to seize the cryptocurrency and that tracing and seizing digital assets can be “extremely difficult.”
The $200,000 in crypto captured alongside $200,000 in Canadian currency and over $1 million in luxury goods, including high-end vehicles and watches, reflects the operation’s full financial profile. The luxury assets point to something the basic seizure totals don’t fully convey: this was profitable. Four years of monthly revenues exceeding $100,000 generate cumulative proceeds in the millions, and those proceeds were being spent.
Cryptocurrency seizures in drug cases are becoming more common across Canadian law enforcement but remain technically demanding. As we’ve covered in the context of the AudiA6 cryptocurrency laundering bust, the same blockchain traceability that makes crypto seem anonymous actually creates a permanent record that forensic investigators can follow, given the right warrants, technical expertise, and time.
Not Just Retail: Bulk Supply to Other Traffickers
York Regional Police made a point that reframes the scope of this operation.
“The quantities being sold ranged from street-level amounts to bulk orders of up to one kilogram,” Beale said. “This indicates that the Icy White North network had the capacity to supply other drug traffickers.”
This is the detail that explains why investigators called it one of Canada’s most prolific dark web drug suppliers. It wasn’t purely selling to end consumers. It also acted as a wholesaler, moving kilogram quantities to other criminal networks that then distributed further down the supply chain.
The presence of a carbine assault rifle at one of the searched locations fits this higher-tier operational picture. Street-level dealers rarely require military-style weapons. Operations that move kilogram quantities of controlled substances and supply other trafficking networks are a different category of criminal enterprise.
The Police Chief’s Warning
Da Silva’s comment at the press conference went beyond an operational summary into something blunter. “This investigation proves that anyone in our community can anonymously order these dangerous substances as long as they have the means to pay for them.”
It’s a statement worth sitting with. The Icy White North model didn’t require buyers to know anyone, travel anywhere, or participate in any visible criminal activity. A dark web account, an encrypted messaging app, and some cryptocurrency were the entire barrier to entry.
That accessibility is precisely what makes these operations so damaging and so difficult to reduce demand against. The dark web intelligence market, growing at over 21% annually, reflects this institutional awareness: law enforcement and private monitoring firms alike recognize that visibility into where these networks operate is now central to disrupting them before they reach the seizure stage.
The parallel to other anonymous dark web criminal services is also worth drawing. Whether it’s a drug marketplace, a murder-for-hire scam site, or a carding forum, the common thread is always the same: the dark web lowers the barrier to criminal activity by removing the need for physical proximity and face-to-face transactions. As the Rotterdam dark web hitman case illustrated, that convenience extends far beyond drug trafficking.
Part of a Broader Ontario Pattern
Project Ghostwire didn’t emerge in isolation. Ontario has seen several dark web drug takedowns in quick succession.
In September 2025, the RCMP dismantled “RoadRunna,” described at the time as one of the largest known Canadian dark web drug operations. That GTA-based network shipped approximately 400 packages per week nationally, and seven people were arrested. In June 2025, Ontario Provincial Police broke up another dark web network that also relied on Canada Post for delivery.
The pattern is consistent: GTA-based operators, dark web marketplaces, encrypted communications, and Canada Post as the delivery backbone. As one operation is disrupted, another has historically emerged to fill the gap. Operation Alice, the Europol takedown of 373,000 dark web sites earlier in 2026, showed the same dynamic globally: closing one marketplace creates pressure but rarely eliminates demand.
What Comes Next
The five accused face 81 charges between them. York Regional Police have not released their names or detailed which specific charges each person faces. No trial dates have been set.
York Regional Police say they believe they have taken down what was one of the top Canadian dark web drug suppliers active at the time of the investigation. Whether subsidiary networks or affiliated suppliers continue operating separately is not addressed in available reporting.
The investigation is described as complete in terms of its primary targets. Police have not indicated whether the case will expand to additional suspects, though data from seized devices and accounts could still widen the inquiry to people who ordered from or interacted with the platform. The seized cryptocurrency and luxury assets are expected to go through proceeds-of-crime proceedings.
Anyone with information about dark web drug trafficking can contact York Regional Police at yrp.ca or report anonymously through Crime Stoppers.
Frequently Asked Questions
What was Icy White North?
A dark web drug trafficking network active since approximately 2022 that sold exclusively to Canadian customers, earned more than 9,000 positive reviews, and generated over $100,000 a month in revenue.
How many people were arrested?
Five people from Brampton and Vaughan, three men and two women, who together face 81 charges.
What was seized?
About $3 million in drugs, including 5.5 kilograms of fentanyl, plus a carbine assault rifle, $200,000 in Canadian currency, $200,000 in cryptocurrency, and over $1 million in luxury goods.
How were the drugs delivered?
Orders were placed through dark web listings and encrypted messaging, then shipped to buyers across Canada through Canada Post.
Why does the cryptocurrency seizure matter?
It was the first time York Regional Police had ever seized cryptocurrency in an investigation, and it required special warrants.
