Cyber-criminals are getting away with millions, across borders, using the latest technologies, while law enforcement struggles with international cooperation. How do we beef up law enforcement of online activities, while protecting citizens' rights and overcoming the challenges of attribution, jurisdiction and extradition? Should we use offensive responses to disrupt criminal activities - and are we all agreed on what exactly is criminal activity online?