CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Crypto fraud ring dismantled by European authorities

First reported
Last updated
2 unique sources, 2 articles

Summary

Hide ▲

A joint operation by European law enforcement agencies has dismantled a cryptocurrency investment fraud ring that defrauded over 100 victims of €100 million ($118 million). The operation, coordinated by Eurojust and supported by Europol, involved authorities from Spain, Portugal, Bulgaria, Italy, Lithuania, and Romania. The ring operated since at least 2018, targeting investors across 23 countries, including France, Germany, Italy, and Spain. The fraudsters used professionally designed online platforms to promise high returns on cryptocurrency investments. Funds were funneled into bank accounts in Lithuania, and victims were charged additional fees to recover their assets. The fraudulent websites eventually went offline, leaving investors with significant losses. Five suspects were arrested, and bank accounts and financial assets were frozen during the operation. The main perpetrator has been accused of large-scale fraud and money laundering.

Timeline

  1. 23.09.2025 17:16 2 articles · 6d ago

    European authorities dismantle €100 million crypto fraud ring

    The fraud ring targeted victims in France, Germany, Italy, and Spain. The main perpetrator has been accused of large-scale fraud and money laundering. The fraud ring operated an online investment platform for several years. The fraud ring diverted proceeds of the scam through 23 different countries.

    Show sources

Information Snippets

Similar Happenings

Cryptocurrency theft via Steam game BlockBlasters

A verified game on Steam, BlockBlasters, was compromised to steal cryptocurrency from users. The malware was added to the game on August 30, 2025, and was active until September 21, 2025. The game targeted users with significant cryptocurrency holdings, leading to the theft of $150,000 from 261 to 478 Steam accounts. The attacker's operational security failure exposed their Telegram bot code and tokens. One victim, a gamer seeking funds for cancer treatment, lost $32,000. The community has since rallied to cover the loss. Similar incidents involving other Steam games have occurred this year.

Canadian authorities dismantle TradeOgre cryptocurrency exchange, seize $40 million in crypto

The Royal Canadian Mounted Police (RCMP) has shut down the TradeOgre cryptocurrency exchange and seized over $40 million in cryptocurrency believed to be linked to criminal activities. TradeOgre, known for its privacy-focused approach and lack of Know Your Customer (KYC) policies, was operating illegally without registering with FINTRAC. The investigation began in June 2024 following a tip from Europol. The platform was suspected of facilitating money laundering due to its anonymity and support for Monero. The seizure represents the largest asset seizure in Canadian history. Some users, including MetaMask’s Taylor Monahan, claim they were not involved in criminal activities and are seeking recourse.

U.S. sanctions cyber scam operations in Southeast Asia

The U.S. Department of the Treasury has sanctioned several large cyber scam networks in Southeast Asia, primarily in Burma and Cambodia. These operations, which used forced labor and human trafficking, stole over $10 billion from Americans in 2024, a 66% increase from the previous year. The scams included romance baiting and fake cryptocurrency investments. The sanctions target individuals and entities linked to the Karen National Army (KNA) and various organized crime networks. The sanctions block these entities from the U.S. financial system, freeze their U.S.-based assets, and limit their access to international financial services. The move aims to disrupt the operations and impose legal and financial consequences on the perpetrators. The cybercriminal syndicates in Southeast Asia net nearly $40 billion annually in illicit profits. The U.S. actions are part of a broader effort to degrade the infrastructure supporting these scams and punish the system enabling their crimes.

Chess.com suffers data breach via third-party file transfer app

Chess.com experienced a data breach in June 2025, where unauthorized actors accessed a third-party file transfer app used by the platform. The breach occurred between June 5 and June 18, affecting approximately 4,500 users out of the platform's 100 million user base. The compromised data includes names and other personally identifiable information (PII). Chess.com discovered the breach on June 19 and has since taken measures to secure its systems and notify law enforcement. The platform is offering impacted users free identity theft and credit monitoring services. This is the second cyber incident for Chess.com in recent years, following a 2023 data breach where over 800,000 user records were scraped and posted online.

Unauthorized access to Sinqia's Pix environment leads to $130M attempted heist

On August 29, 2025, hackers breached Sinqia S.A., a Brazilian subsidiary of Evertec, and attempted to steal $130 million via the Brazilian Central Bank’s real-time payment system, Pix. The attack was detected and halted, with partial recovery of the funds. Evertec, a major financial technology firm, disclosed the breach in an SEC filing. The hackers used stolen credentials of an IT vendor to gain access. Sinqia's access to Pix has been temporarily revoked, and the financial and reputational impact remains under investigation.