Skip to main content
Mallory
Mallory

European Law Enforcement Takedowns of Phishing and Investment-Fraud Networks

investment fraudphishinglaw enforcementeurojustmoney launderingtakedownonline bankingfake trading platformaccount takeoverstolen credentialscryptocurrency
Updated February 24, 2026 at 01:17 PM2 sources
European Law Enforcement Takedowns of Phishing and Investment-Fraud Networks

Get Ahead of Threats Like This

Know if you're exposed — before adversaries strike.

European law enforcement reported multiple cyber-enabled fraud disruptions, including a Eurojust-supported operation that dismantled a fraudulent call-centre network operating from three offices in Dnipro. Authorities from Latvia, Lithuania, and Ukraine arrested 11 suspects, seized more than €400,000 in cash, and collected electronic evidence (computers, SIM cards, documents) during searches at 32 locations. The group allegedly ran a fake cryptocurrency investment platform and used remote access software to gain access to victims’ online banking and move funds to accounts and crypto wallets under their control.

Separately, Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group operating in Poland and Germany that used phishing to hijack Facebook accounts and extract BLIK payment codes. Investigators identified 11 group members, placed six in pretrial detention, and seized over 100,000 stolen Facebook credentials; prosecutors filed 400+ charges including unauthorized access, online fraud, and money laundering. A South Korean case involving the breach of Seoul’s bike-hire service Ttareungyi (4.62 million users affected) is a distinct incident and not part of the European takedown actions described above.

Related Stories

Major International Law Enforcement Actions Against Cybercrime and Financial Fraud Networks

Law enforcement agencies across multiple countries have conducted significant operations targeting cybercriminal groups responsible for large-scale financial fraud, data breaches, and cryptocurrency theft. In Spain, police arrested a 19-year-old hacker accused of stealing and attempting to sell 64 million personal data records from nine companies, while Ukrainian authorities apprehended a separate data broker who used custom malware to compromise accounts and sell access on hacker forums. In California, a member of the so-called "Social Engineering Enterprise" pleaded guilty to laundering millions in cryptocurrency stolen through sophisticated social engineering attacks, with the group responsible for a $263 million heist and extravagant spending of the proceeds. Meanwhile, Russian police dismantled a gang that used NFCGate-based malware to steal millions from bank customers by tricking victims into installing fake banking apps and harvesting card credentials for remote theft. A major international operation led by Europol and Eurojust dismantled a €700 million cryptocurrency scam network in Europe that used deepfake videos and aggressive marketing to lure victims into fake investment schemes. The network operated numerous fraudulent platforms, laundered funds through complex channels, and was taken down in coordinated raids across several countries, resulting in arrests and the seizure of cash, cryptocurrencies, and luxury items. These actions highlight the growing sophistication of cyber-enabled financial crime and the increasing collaboration between law enforcement agencies to disrupt such operations on a global scale.

3 months ago

European Law Enforcement Dismantles Ukrainian Call Center Fraud Network

European law enforcement agencies, supported by Eurojust, have dismantled a large-scale fraud network operating multiple call centers in Ukraine that targeted victims across Europe. Authorities from Ukraine, the Czech Republic, Latvia, and Lithuania arrested 12 suspects and identified 45 individuals involved in the operation, which defrauded over 400 victims of more than 10 million euros. The criminal group used various schemes, including impersonating police officers and bank employees, convincing victims their accounts were compromised, and instructing them to transfer funds to "safe" accounts controlled by the network. In some cases, victims were persuaded to install remote access software, allowing the criminals to hijack their bank accounts, and some fraudsters even met victims in person to collect cash using stolen card details. The call centers, located in Dnipro, Ivano-Frankivsk, and Kyiv, employed around 100 people recruited from several European countries. Employees were paid commissions of up to 7% of the stolen funds and were promised bonuses such as cash, cars, or apartments for exceeding certain fraud targets, though these rewards were never distributed. During coordinated raids on December 9, 2025, authorities conducted 72 searches, seizing vehicles, weapons, computers, cash, and forged identification documents. The operation highlights the transnational nature of organized fraud and the effectiveness of coordinated law enforcement action across European borders.

2 months ago
European and U.S. Law Enforcement Actions Against Cyber-Enabled Crime

European and U.S. Law Enforcement Actions Against Cyber-Enabled Crime

Multiple law-enforcement actions were reported across Europe and the U.S. targeting **cyber-enabled criminal activity**, including online intimidation, financial malware operations, and crypto/NFT theft. In Hungary, police working with Romanian authorities detained four young suspects accused of **swatting** and **doxing** tied to disputes initiated via *Discord*, including false bomb and violence threats that triggered significant emergency response deployments. Separately, U.S. authorities convicted two Venezuelan nationals for a multi-state **ATM jackpotting** operation in which they physically accessed older ATMs, connected a laptop, and deployed **malware** to force cash dispensing, resulting in hundreds of thousands of dollars in losses and restitution orders. In Romania, two suspects were investigated at the request of UK authorities over an alleged **hitman-for-hire** marketplace designed to conceal identities and payments via **cryptocurrency escrow**, with police seizing storage devices, crypto valued around **$650,000**, and significant cash. In the Netherlands, Zeeland police arrested four suspects linked to the theft of **169 NFTs** valued at roughly **€1.4 million**, seizing data carriers, cash, vehicles, and a house during raids as the investigation continued.

1 months ago

Get Ahead of Threats Like This

Mallory continuously monitors global threat intelligence and correlates it with your attack surface. Know if you're exposed — before adversaries strike.