European law enforcement agencies have dismantled a cross-border cryptocurrency fraud ring that investigators say stole and laundered more than €700 million. The disruption is the result of years of coordinated investigative work by police units, cyber specialists and analysts who tracked the organisation across countries and digital platforms.
The scheme began with a deceptive trading website and grew into a network of fake cryptocurrency platforms that were deliberately designed to look legitimate. Sites promised high returns and displayed professional-looking dashboards and charts. Victims were typically funneled to these pages through online advertisements—some impersonating reputable media outlets, public figures or political leaders—and in some cases using alleged deepfake video clips.
After victims engaged with the ads, their contact details were passed to call centres whose agents repeatedly pressured them to invest more, while fabricated trading screens showed false gains. The fraud combined social engineering, aggressive telemarketing, and polished but fraudulent user interfaces to sustain the deception.
Proceeds were layered and routed across multiple blockchains, exchanges and wallets to obscure the trail. The operation used fake ads, call centres, crypto channels and a network of shell companies. Seized digital devices contained logs, account details and wallet data that helped investigators connect transfers and identify parts of the infrastructure.
Following requests from France and Belgium, a coordinated law enforcement crackdown began. On Oct. 27, raids in Cyprus, Germany and Spain led to nine arrests and the seizure of assets including €800,000 from bank accounts, €415,000 in cryptocurrency and €300,000 in cash, along with numerous digital devices and documentary material. Bank records and seized data provided further leads and helped map the flow of funds through the organisation’s branches.
A second phase of actions on Nov. 25–26 targeted the network’s marketing apparatus. Police in Belgium, Bulgaria, Germany and Israel searched offices linked to firms alleged to have supported the fraudulent advertising. Several companies are reported to have offered services to amplify false claims on social media—some using automated systems—and to collect user data that was passed on to the call centres. Those measures disrupted tools used to identify and target potential victims.
Europol said analysts combined device data and exchange records to trace transfers and reconstruct the money-laundering operation. The action is part of a broader European push against crypto-enabled crime, coming after other coordinated takedowns such as a major bitcoin mixing service.