Project Ghostwire dismantled Icy White North, described by York Regional Police as one of Canada’s most prolific dark web drug suppliers. Executed on February 20 following searches at multiple GTA locations including a Mississauga luxury penthouse, the operation seized $3 million in drugs, a carbine assault rifle, $200,000 in Canadian currency, and $200,000 in cryptocurrency, the first crypto seizure in York Regional Police history. Five suspects from Brampton and Vaughan face 81 charges combined.
On September 22, 2026, York Regional Police announced the results of Project Ghostwire, a nine-month investigation into a GTA-based dark web drug network called Icy White North that had been quietly supplying controlled substances to Canadian buyers since approximately 2022. Five people are now facing 81 charges. The seizures go well beyond the drug haul itself.
What Was Inside That Penthouse
When York Regional Police executed search warrants on February 20, one location was a luxury penthouse condominium in Mississauga. It wasn’t a stash house in the traditional sense. Police described it as a day-to-day hub for the network, a workspace that reflected how professionally the ring operated.
Investigators found more than product. It was the full picture of an organization running a scaled commercial model: drugs ready for dispatch at multiple volume levels, cryptocurrency accounts, cash in the tens of thousands, and a carbine assault rifle with ammunition.
The drug inventory was comprehensive. Beyond the 5.5 kilograms of fentanyl, police seized 5.5 kilograms of methamphetamine, 3.5 kilograms of cocaine, 4.5 kilograms of ketamine, 700 grams of heroin, 5.4 kilograms of MDMA, 205 grams of crack cocaine, over 1,100 tabs of LSD, 11,800 Xanax pills, 290 oxycodone pills, and 110 hydromorphone pills.
Total street value across all substances: approximately $3 million.
Three of the five arrested are from Brampton. One is from Vaughan. Three are men, two are women.
The Fentanyl Figure Everyone Should Sit With
The 50,000 potentially fatal doses stat deserves its own moment.
Fentanyl is a synthetic opioid estimated to be 50 to 100 times more potent than morphine. It requires only microgram quantities to cause a fatal overdose in someone without opioid tolerance. A single kilogram of fentanyl contains thousands of potentially lethal doses. The Icy White North seizure captured 5.5 kilograms.
What makes this especially alarming is the mislabeling documented elsewhere in the investigation. Police identified a product that Icy White North advertised online as “purple heroin.” When they tested it, the substance was fentanyl. Buyers who thought they were purchasing one substance received another with a drastically different potency profile and dosing risk.
This is one of the main drivers of Canada’s ongoing overdose crisis. People consume what they believe to be a drug they understand, at a dose they think is safe, and receive something entirely different. The gap between expectation and reality is often fatal. The Canadian Center on Substance Use and Addiction has consistently identified fentanyl adulteration and mislabeling as primary contributors to overdose deaths nationally.
A First for York Regional Police
One detail buried deep in the press conference coverage deserves more attention: the cryptocurrency seized represents the first time in York Regional Police history that digital currency has been confiscated in an investigation.
Police Chief Paulo Da Silva acknowledged the complexity involved. Det.-Sgt. Beale confirmed that special warrants were required to seize the cryptocurrency and that tracing and seizing digital assets can be “extremely difficult.”
The $200,000 in crypto captured alongside $200,000 in Canadian currency and over $1 million in luxury goods, including high-end vehicles and watches, reflects the operation’s full financial profile. The luxury assets point to something the basic seizure totals don’t fully convey: this was profitable. Four years of monthly revenues exceeding $100,000 generate cumulative proceeds in the millions, and those proceeds were being spent.
Cryptocurrency seizures in drug cases are becoming more common across Canadian law enforcement but remain technically demanding. As we’ve covered in the context of the AudiA6 cryptocurrency laundering bust, the same blockchain traceability that makes crypto seem anonymous actually creates a permanent record that forensic investigators can follow, given the right warrants, technical expertise, and time.
Not Just Retail: Bulk Supply to Other Traffickers
York Regional Police made a point that reframes the scope of this operation.
“The quantities being sold ranged from street-level amounts to bulk orders of up to one kilogram,” Beale said. “This indicates that the Icy White North network had the capacity to supply other drug traffickers.”
This is the detail that explains why investigators called it one of Canada’s most prolific dark web drug suppliers. It wasn’t purely selling to end consumers. It also acted as a wholesaler, moving kilogram quantities to other criminal networks that then distributed further down the supply chain.
The presence of a carbine assault rifle at one of the searched locations fits this higher-tier operational picture. Street-level dealers rarely require military-style weapons. Operations that move kilogram quantities of controlled substances and supply other trafficking networks are a different category of criminal enterprise.
The Police Chief’s Warning
Da Silva’s comment at the press conference went beyond an operational summary into something blunter. “This investigation proves that anyone in our community can anonymously order these dangerous substances as long as they have the means to pay for them.”
It’s a statement worth sitting with. The Icy White North model didn’t require buyers to know anyone, travel anywhere, or participate in any visible criminal activity. A dark web account, an encrypted messaging app, and some cryptocurrency were the entire barrier to entry.
That accessibility is precisely what makes these operations so damaging and so difficult to reduce demand against. The dark web intelligence market, growing at over 21% annually, reflects this institutional awareness: law enforcement and private monitoring firms alike recognize that visibility into where these networks operate is now central to disrupting them before they reach the seizure stage.
The parallel to other anonymous dark web criminal services is also worth drawing. Whether it’s a drug marketplace, a murder-for-hire scam site, or a carding forum, the common thread is always the same: the dark web lowers the barrier to criminal activity by removing the need for physical proximity and face-to-face transactions. As the Rotterdam dark web hitman case illustrated, that convenience extends far beyond drug trafficking.
What Comes Next
The five accused face 81 charges between them. Specific charges have not been detailed in full. No trial dates have been set.
York Regional Police say they believe they have taken down what was one of the top Canadian dark web drug suppliers active at the time of the investigation. Whether subsidiary networks or affiliated suppliers continue operating separately is not addressed in available reporting.
The investigation is described as complete in terms of its primary targets. Police have not indicated whether the case will expand to additional suspects.
