Crypto fraud ring dismantled by European authorities
Summary
Hide ▲
Show ▼
A joint operation by European law enforcement agencies has dismantled a cryptocurrency investment fraud ring that defrauded over 100 victims of €100 million ($118 million). The operation, coordinated by Eurojust and supported by Europol, involved authorities from Spain, Portugal, Bulgaria, Italy, Lithuania, and Romania. The ring operated since at least 2018, targeting investors across 23 countries, including France, Germany, Italy, and Spain. The fraudsters used professionally designed online platforms to promise high returns on cryptocurrency investments. Funds were funneled into bank accounts in Lithuania, and victims were charged additional fees to recover their assets. The fraudulent websites eventually went offline, leaving investors with significant losses. Five suspects were arrested, and bank accounts and financial assets were frozen during the operation. The main perpetrator has been accused of large-scale fraud and money laundering.
Timeline
-
23.09.2025 17:16 2 articles · 6d ago
European authorities dismantle €100 million crypto fraud ring
The fraud ring targeted victims in France, Germany, Italy, and Spain. The main perpetrator has been accused of large-scale fraud and money laundering. The fraud ring operated an online investment platform for several years. The fraud ring diverted proceeds of the scam through 23 different countries.
Show sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
Information Snippets
-
The fraud ring operated since at least 2018, targeting investors across 23 countries.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The operation involved authorities from Spain, Portugal, Bulgaria, Italy, Lithuania, and Romania, coordinated by Eurojust and supported by Europol.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraudsters used professionally designed online platforms to promise high returns on cryptocurrency investments.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
Funds were funneled into bank accounts in Lithuania, and victims were charged additional fees to recover their assets.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraudulent websites eventually went offline, leaving investors with significant losses.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
Five suspects were arrested, and bank accounts and financial assets were frozen during the operation.
First reported: 23.09.2025 17:162 sources, 2 articlesShow sources
- Police dismantles crypto fraud ring linked to €100 million in losses — www.bleepingcomputer.com — 23.09.2025 17:16
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraud ring targeted victims in France, Germany, Italy, and Spain.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The main perpetrator has been accused of large-scale fraud and money laundering.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraud ring operated an online investment platform for several years.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraud ring diverted proceeds of the scam through 23 different countries.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The fraud ring used a compromised Zoom client to gain system access.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
Venus Protocol paused its protocol within 20 minutes of the malicious transaction taking place, effectively preventing the attacker from moving the funds further.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
Venus force-liquidated the attacker's wallet, recovered the stolen funds, and resumed full service.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
Venus passed a governance proposal to freeze $3 million in assets still controlled by the attacker.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
-
The Eurojust crackdown coincides with a similar effort by the Seoul Metropolitan Police Agency (SMPA) that disrupted a cybercrime operation estimated to have stolen about $30 million from 258 high-profile victims.
First reported: 23.09.2025 20:131 source, 1 articleShow sources
- Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries — thehackernews.com — 23.09.2025 20:13
Similar Happenings
Cryptocurrency theft via Steam game BlockBlasters
A verified game on Steam, BlockBlasters, was compromised to steal cryptocurrency from users. The malware was added to the game on August 30, 2025, and was active until September 21, 2025. The game targeted users with significant cryptocurrency holdings, leading to the theft of $150,000 from 261 to 478 Steam accounts. The attacker's operational security failure exposed their Telegram bot code and tokens. One victim, a gamer seeking funds for cancer treatment, lost $32,000. The community has since rallied to cover the loss. Similar incidents involving other Steam games have occurred this year.
Canadian authorities dismantle TradeOgre cryptocurrency exchange, seize $40 million in crypto
The Royal Canadian Mounted Police (RCMP) has shut down the TradeOgre cryptocurrency exchange and seized over $40 million in cryptocurrency believed to be linked to criminal activities. TradeOgre, known for its privacy-focused approach and lack of Know Your Customer (KYC) policies, was operating illegally without registering with FINTRAC. The investigation began in June 2024 following a tip from Europol. The platform was suspected of facilitating money laundering due to its anonymity and support for Monero. The seizure represents the largest asset seizure in Canadian history. Some users, including MetaMask’s Taylor Monahan, claim they were not involved in criminal activities and are seeking recourse.
U.S. sanctions cyber scam operations in Southeast Asia
The U.S. Department of the Treasury has sanctioned several large cyber scam networks in Southeast Asia, primarily in Burma and Cambodia. These operations, which used forced labor and human trafficking, stole over $10 billion from Americans in 2024, a 66% increase from the previous year. The scams included romance baiting and fake cryptocurrency investments. The sanctions target individuals and entities linked to the Karen National Army (KNA) and various organized crime networks. The sanctions block these entities from the U.S. financial system, freeze their U.S.-based assets, and limit their access to international financial services. The move aims to disrupt the operations and impose legal and financial consequences on the perpetrators. The cybercriminal syndicates in Southeast Asia net nearly $40 billion annually in illicit profits. The U.S. actions are part of a broader effort to degrade the infrastructure supporting these scams and punish the system enabling their crimes.
Chess.com suffers data breach via third-party file transfer app
Chess.com experienced a data breach in June 2025, where unauthorized actors accessed a third-party file transfer app used by the platform. The breach occurred between June 5 and June 18, affecting approximately 4,500 users out of the platform's 100 million user base. The compromised data includes names and other personally identifiable information (PII). Chess.com discovered the breach on June 19 and has since taken measures to secure its systems and notify law enforcement. The platform is offering impacted users free identity theft and credit monitoring services. This is the second cyber incident for Chess.com in recent years, following a 2023 data breach where over 800,000 user records were scraped and posted online.
Unauthorized access to Sinqia's Pix environment leads to $130M attempted heist
On August 29, 2025, hackers breached Sinqia S.A., a Brazilian subsidiary of Evertec, and attempted to steal $130 million via the Brazilian Central Bank’s real-time payment system, Pix. The attack was detected and halted, with partial recovery of the funds. Evertec, a major financial technology firm, disclosed the breach in an SEC filing. The hackers used stolen credentials of an IT vendor to gain access. Sinqia's access to Pix has been temporarily revoked, and the financial and reputational impact remains under investigation.