Operation Ironside: October sentences show the lasting role of AN0M evidence

Two NSW sentencing outcomes reported by the AFP on 9 October 2026 show how AN0M communications continue to feature in organised crime cases years after Operation Ironside arrests.

Encrypted communications were central to Operation Ironside. They are also central to the Australian Federal Police's latest account of two NSW men sentenced for offences connected with an organised crime network and drug trafficking.

In a media release published on 9 October 2026, the AFP reported prison terms totalling more than 11 years. Its account describes AN0M messages about criminal logistics, transport and the handling of a large drug consignment. These are reported sentencing outcomes following guilty pleas, rather than a fresh announcement of arrests.

Two men, two sentencing outcomes

The AFP reports that a 43-year-old man was sentenced in the District Court of NSW on 2 October 2026 after pleading guilty to supporting a criminal organisation. His sentence was 2 years and 10 months, with a non-parole period of 1 year and 10 months.

A second man, aged 35, was sentenced in the same court on 9 October 2026. According to the AFP, he pleaded guilty to trafficking a commercial quantity of a controlled drug and dealing with proceeds of indictable crime worth $100,000 or more. His sentence was 8 years and 6 months, with a non-parole period of 5 years and 1 month.

The first sentencing date falls before the current reporting week. The new development is the AFP's 9 October account, including the second sentencing that day. Both men had been arrested in June 2021.

What the AFP says the communications showed

The release describes different roles within the network. It says AN0M evidence showed the first man controlled a group responsible for logistical, counter-surveillance and violent activities. The AFP's account includes the deployment of cameras, offers to harm people suspected of helping police, and arrangements to transport and store a drug consignment.

For the second man, the AFP describes involvement in transporting and attempting to distribute about 87kg of methamphetamine. It says AN0M communications included discussions about hiring a rental van and travelling to Melbourne to facilitate a sale.

The release also says court documents detailed messages about packaging, vacuum-sealing and transporting the drugs without damage or detection. The digital material described here concerns the planning and coordination of physical criminal activity.

AN0M was a specific platform and operation

The AFP's Operation Ironside history explains the background. It describes a 3-year operation in which the AFP and FBI monitored communications on a dedicated encrypted platform. The AFP says it built a capability to access, decrypt and read the platform's communications and captured the data sent between devices using it.

That history describes AN0M phones with an encrypted messaging application concealed behind a calculator application. Features included self-expiring messages, photo sharing, altered-voice communication and secure file storage. The same page explains that the phones were stripped of other capabilities and the AN0M application was covertly run by the FBI.

This is the account of a particular platform and a particular investigation. It supports an explanation of Operation Ironside, rather than a general claim that every encrypted messaging service can be accessed in the same way.

Why the distinction matters for digital forensics

For readers interested in digital forensics, the useful point is the connection between communications and the conduct being investigated. In the AFP's account, messages concerned routes, vehicles, storage, packaging and the work of other participants. Digital communications can carry information about how people organise activity as well as the words they exchange.

The release identifies the communications platform and describes the content relied on in the investigation. It provides a public account of the results, rather than a complete forensic record. It does not identify Cellebrite or another examination product, describe an extraction procedure, or set out the complete process for associating particular messages with particular people.

Those details would require the underlying case material. The article therefore keeps the AFP's reported facts separate from assumptions about software, device examination or the full evidentiary process. A platform name and a sentencing outcome are useful facts; the technical work connecting them remains a separate question.

A long path from investigation to sentence

The AFP says this investigation commenced in March 2021, after Operation Ironside intelligence identified the men's involvement in a transnational network based in NSW with offshore links. Arrests followed in June 2021. The sentencing dates reported in this release are in October 2026.

That sequence is significant. A new official announcement may concern the outcome of an investigation that began years earlier. Here, the current news is the court outcome, while the communications and arrests belong to the earlier investigation.

The AFP's operation history contains broader statistics dated 2024 and earlier. Those figures describe the position at their stated dates. This article uses that page for the operation's background and the 9 October 2026 release for these two sentencing outcomes.

Official sources

Prepared on 13 October 2026 from the linked AFP publications. Court outcomes are reported as described by the AFP; the underlying judgments and forensic case files were not reviewed for this article.

About the expert and this article

Simon Smith, CEO of AICS, has not acted as a defence expert in any of the above matters. Mr Smith is an expert witness who regularly assists courts in the interpretation of digital evidence, and over almost five years he has been engaged in defence proceedings arising from AN0M and Operation Ironside.

This article summarises the linked public AFP publications and provides general commentary only. It expresses no expert opinion on the evidence, findings or merits of those matters and is separate from his professional work in any individual proceeding.