Section 04 · Canada

Canada's enforcement record: the regulator, the law, the case

Canada's darknet story is not only a police story. The marketplace this file documents is tied by the record to a predecessor case that ran through Canada's anti-spam law — the first public case in which a telecom regulator shut down a major marketplace and announced penalties against the people around it.

Who enforces what

• The CRTC — the Canadian Radio-television and Telecommunications Commission — administers Canada's Anti-Spam Legislation (CASL, in force since 2014). Its Chief Compliance and Enforcement Officer investigates spam, phishing and related activity, and can issue notices of violation with monetary penalties or accept voluntary undertakings.
• The RCMP and provincial police, such as the Sûreté du Québec, conduct the criminal investigations behind these files, alongside their international counterparts.
• International coordination — through Europol, the US-led JCODE team and others — is what turns a single marketplace's records into arrest waves abroad. Canada participates in this network; the Consequences page shows what it yields.

The Canadian Head Quarters case, January 2022

On 26 January 2022, the CRTC announced that its investigation had shut down Canadian Head Quarters (CanadianHQ) — described by the regulator as "one of the largest Dark Web marketplaces of its kind in the world and a significant contributor to harmful cyber activity in Canada" — and issued notices of violation under CASL against four individuals for a total of CA$300,000:

• Chris Tyrone Dracos (alias "Poseidon") — CA$150,000. As the marketplace's creator and administrator, the higher penalty was issued for allegedly aiding the commission of numerous violations by the platform's vendors and customers. [1]
• Marc Anthony Younes (aliases "CASHOUT00", "Masteratm") — CA$50,000.
• Souial Amarak (aliases "Wealtyman", "Supreme") — CA$50,000.
• Moustapha Sabir (alias "La3sa") — CA$50,000.

The regulator's release states that the penalties followed a series of warrants, with searches in the greater Montreal area, and were supported by the Sûreté du Québec and the RCMP National Division. It also states that the investigation identified other vendors and that further enforcement actions were expected. [1]

Precision note: notices of violation are administrative actions that recipients may pay or challenge, and the public record reflects later developments — including a voluntary undertaking recorded in the CRTC's enforcement actions register, comprising a CA$40,000 monetary payment and other conditions in the administrator's file. The register is the authoritative, current record of each file. [2]

In the regulator's words

"Some Canadians are being drawn into malicious cyber activity, lured by the potential for easy money and social recognition among their peers. This case shows that anonymity is not absolute online and there are real-world consequences when engaging in these activities."
— Steven Harroun, Chief Compliance and Enforcement Officer, CRTC [1]

What the case shows

• Enforcement against these marketplaces can arrive through unexpected instruments — in Canada, a telecom regulator using anti-spam law that also covers the phishing side of the operation.
• Penalties reach the ecosystem, not just the figurehead: vendors and support roles were named and fined alongside the administrator.
• Announced penalties and final outcomes are different things: the register shows negotiated endings (undertakings), and both the headline and the settlement belong in any honest account.
• The infrastructure perimeter keeps expanding: in March 2026 the CRTC's CASL enforcement bulletin noted an advisory clarifying that domain name registrars can, in defined circumstances, be held liable under the Act — registry-level enforcement on top of sender-level enforcement. [3]

Where to report

• Fraud and lost funds — the Canadian Anti-Fraud Centre, and your local police.
• Spam and phishing — the CRTC's Spam Reporting Centre, via fightspam.gc.ca.
• Platform threats — if you work in security and encounter stolen credentials tied to your organisation, your incident-response process, plus the police if warranted.

Sources

1. CRTC, "CRTC investigation targets Dark Web marketplace vendors and administrator", news release, 26 January 2022. canada.ca — en/radio-television-telecommunications/news/2022/01↩
2. CRTC, Enforcement actions register. crtc.gc.ca/eng/ce/actions.htm↩
3. CRTC, "Enforcing Canada's Anti-Spam Legislation (CASL)" — enforcement bulletin, 31 March 2026. crtc.gc.ca/eng/internet/pub/20260331.htm↩

Statements of fact are referenced. Assessments are labelled. Full sourcing policy on For researchers.