Global Crackdown Dismantles Crypto-Scam Network, Laundering Over €700 Million
An international fraud operation has culminated in a sweeping blow against a vast crypto-scam network that laundered more than €700 million. The final enforcement actions — carried out in late October and late November across multiple countries — marked the apex of a years-long investigation that gradually exposed a hidden infrastructure spanning Europe and far beyond. What began as an inquiry into a single suspicious investment service soon unraveled into a sprawling constellation of counterfeit crypto-platforms and a meticulously engineered money-laundering apparatus.
The perpetrators built scores of pseudo-investment websites promising extravagant returns and bolstered them with aggressive advertising. Victims were cold-called by operatives from underground call centers, who coaxed them into pouring in more funds while showing fabricated “profits” on fraudulent dashboards. Once cryptocurrency reached the criminals’ hands, it was rapidly funneled through chains of blockchains and exchanges, erasing traces within moments. Investigators soon realized they were dealing not with an isolated scheme, but with an entire industry — a lattice of interconnected resources supported by a highly organized financial backbone.
The first phase of the operation unfolded on 27 October 2025: at the request of France and Belgium, law enforcement carried out coordinated raids in Cyprus, Germany, and Spain. Nine members of the network were arrested, suspected of laundering proceeds generated by sham investment platforms. Authorities seized substantial assets: €800,000 held in bank accounts, €415,000 in cryptocurrency, €300,000 in cash, along with digital devices and collectible timepieces. Agencies from France, Belgium, Germany, Spain, Malta, and Cyprus participated in the effort.
The second phase, conducted between 25 and 26 November, targeted the marketing infrastructure that fed a continuous stream of new victims into the scheme. In recent years, the fraudsters had leaned heavily on social-media advertising, impersonating prominent journalists, politicians, and celebrities — often via deepfakes. These campaigns helped harvest the personal data of potential investors, a resource vital to the entire crypto-scam ecosystem. During this phase, authorities in Belgium, Bulgaria, Germany, and Israel carried out searches and other investigative actions against companies previously involved in affiliate-marketing services.
The combined actions in October and November struck at the very pillars of this global criminal enterprise. Investigators established that the network laundered no less than €700 million, navigating a “labyrinth” of crypto-exchanges and intricate transaction routes to obscure the origin of illicit funds. Following arrests, seizures, and asset freezes, authorities will continue tracing financial flows and property linked to members of the criminal syndicate across all jurisdictions in which it operated.
The operation drew on the coordinated efforts of law-enforcement agencies in Belgium, Bulgaria, Cyprus, France, Germany, Israel, Malta, and Spain — dozens of units acting in concert to deliver one of the most consequential blows to crypto-fraud in Europe.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.