The dark web is creating difficulties for traditional policing. Previous studies have focused on users, but very little is known about law enforcement dealing with the core challenge of Anonymity Communication Networks: absent and anonymous suspects whose locations and identities are effectively hidden behind encryption. Based on 14 interviews with Dutch police officers and public prosecutors, enriched with a media analysis of 45 Dutch newspaper articles, we come to a model of Dutch law enforcement dealing with Tor cases. We observe that the police are adapting to the new reality of Tor use. However, they still work within their set framework which does not always match the needs for policing Tor cases. We additionally note a more prominent place for the strategy of disruption which may create the need for additional legal grounds.