Europol and German prosecutors dismantle 'crime-as-a-service' fake trading platform network: 7 arrested, 100+ servers seized
Matéria consolidada. Reúne 4 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 4 fontes trouxeram em 04/11/2026 00:03; os links antigos trazem para cá.
Fontes: darkreading.com ↗ cyberscoop.com ↗ helpnetsecurity.com ↗ bleepingcomputer.com ↗
Europol, Eurojust and German prosecutors in Itzehoe (helpnetsecurity.com) dismantled an international investment fraud network that supplied fake trading websites to scam call centres, with victims in at least 50 countries. Authorities arrested seven suspects, including call centre managers, and seized more than 100 servers plus cash and other evidence (bleepingcomputer.com, helpnetsecurity.com, cyberscoop.com). The infrastructure was traced to a company based in Cyprus and Israel that allegedly sold the platforms as a service. Its suspected clients ran call centres in Albania, Kosovo and North Macedonia. The probe began in 2022 after a German couple could not withdraw funds from an online trading platform. The arrests were announced on 3 November 2026. Suspects are to be surrendered or extradited to Germany for prosecution. Darkreading.com reported that details on losses, victims and arrests were still limited in its initial coverage.
Detalhes técnicos
- Lure and fraud flow: Deceptive ads and affiliate marketing steered victims to fake cryptocurrency, forex and stock trading platforms (cyberscoop.com, helpnetsecurity.com). Victims' personal data was stolen and sold to call-centre operators (bleepingcomputer.com). Operators showed fabricated profits and applied psychological pressure to extract larger transfers. When victims tried to withdraw, operators stalled and then cut off contact (cyberscoop.com).
- Service model: The Cyprus/Israel-based provider supplied ready-made fraudulent platforms, and per cyberscoop.com also call-centre infrastructure. This lowered the technical barrier for multiple fraud groups (darkreading.com).
- Operation stages (helpnetsecurity.com):
- A first action day in 2022 led to two arrests and evidence seizure.
- Analysis of that evidence identified seven further suspects, including call centre managers.
- A second action day brought more arrests and seized cash, which led investigators to the scam-website supplier.
- On the final action day, 17 locations were searched, including a call centre in Kosovo, and 100+ servers were seized.
- Coordination: Eurojust set up two joint investigation teams and coordinated judicial action. Europol deployed digital forensics experts to Albania and Kosovo (helpnetsecurity.com).
- Context: Bleepingcomputer.com places this takedown in a series of European operations. These include a 2022 network stealing at least €3 million monthly, call-centre takedowns in 2023 and 2024, 2025 actions in Spain involving over €460 million laundered, and a €50 million fraud ring dismantled by Austrian and Albanian authorities in April 2025.
Remediação
No technical mitigations or IOCs were published. The seven suspects were arrested for surrender or extradition to Germany (helpnetsecurity.com, cyberscoop.com). Victims who have lost funds to such platforms should report to national law enforcement; the sources give no specific victim guidance.
Relatos divergentes
- Financial losses: At least €4 million (helpnetsecurity.com) versus at least $4.5 million (cyberscoop.com). The two figures may reflect currency conversion, but the sources do not say. Bleepingcomputer.com gives no figure.
- Search scope: Searches at 17 locations (helpnetsecurity.com) versus across 17 countries (cyberscoop.com). The location-based figure comes from the source with more operational detail.
- Participating countries: Bleepingcomputer.com lists Albania, Cyprus, Finland, Germany, Kosovo and North Macedonia. Helpnetsecurity.com adds Israel. Cyberscoop.com lists Israel and also Poland. The more complete list is the latest-published and most detailed one (cyberscoop.com), but Poland's role is not confirmed elsewhere.
- Arrest timing: Bleepingcomputer.com and cyberscoop.com describe two arrests in 2022 followed by seven suspects in the expanded action. Helpnetsecurity.com says seven were arrested over multiple action days. Whether the 2022 arrests are included in the seven is not clear. Cyberscoop.com describes the searches as taking place on Tuesday, 3 November.
Linha do tempo
-
German Police Dismantle Crime-as-a-Service Provider Behind Fake Investment Trading Platforms
ler a análise desta fonte ocultar
German law enforcement led a multinational investigation that uncovered an alleged crime-as-a-service operation supplying fraudulent trading platforms used by investment scam operators to defraud victims. The service reportedly provided ready-made infrastructure that lowered the technical barrier for running fake investment schemes, enabling multiple fraud groups to target victims across borders. Details on the scale of financial losses, number of victims, and arrests remain limited in initial reporting.
-
Europol Dismantles Investment Fraud Network Spanning 50 Countries, Arrests Seven
ler a análise desta fonte ocultar
Europol announced the takedown of a large-scale investment fraud operation that allegedly impacted victims in more than 50 countries, causing estimated losses of at least $4.5 million. Coordinated searches across 17 countries on Tuesday led to the arrest of seven suspects and the seizure of over 100 servers. The scheme was run by a company allegedly operated from Cyprus and Israel, which provided trading platforms and call-center infrastructure to cybercrime groups. Call centers linked to the operation were located in Albania, Kosovo, and North Macedonia.
Technical Details
The operation used affiliate marketing and online advertisements to funnel potential victims to fraudulent cryptocurrency, forex, and stock trading platforms. Purchased victim data from these ads was used by call-center operators to contact targets directly. Victims were shown fabricated profits and subjected to psychological pressure to invest additional funds; when they attempted withdrawals, operators used delaying tactics before eventually cutting off contact entirely, leaving victims unable to recover their money. The investigation originated from a 2022 tip by a German couple unable to withdraw funds, leading to two initial arrests that year and further evidence that enabled this week's expanded takedown.
Remediation
The seven suspects arrested face extradition to Germany for prosecution. The joint investigation was supported by law enforcement in Albania, Cyprus, Finland, Germany, Israel, Kosovo, North Macedonia, and Poland.
-
Europol-led Operation Dismantles €4M Investment Fraud Network, 7 Arrested, 100+ Servers Seized
ler a análise desta fonte ocultar
A coordinated law enforcement operation led by German prosecutors in Itzehoe, supported by Europol and Eurojust, dismantled an international investment fraud network believed to have targeted victims in at least 50 countries with losses exceeding €4 million. The investigation began in 2022 after a German couple reported being unable to withdraw profits from an online trading platform. Over multiple action days, police arrested seven suspects, including call centre managers, and seized over 100 servers along with cash and other evidence across 17 locations, including a call centre in Kosovo.
The scheme used fake cryptocurrency, forex and stock trading platforms to lure victims with promises of high returns, showing inflated fake profits to build trust before pressuring victims into investing larger sums. Investigators traced the infrastructure to a Cyprus- and Israel-based company allegedly providing "crime-as-a-service" by supplying fraudulent scam websites to criminal groups, whose suspected clients operating fraudulent call centres were located in Albania, Kosovo and North Macedonia.
Technical Details
The operation unfolded in stages: a first action day resulted in two arrests and evidence seizure; analysis of that evidence identified seven additional suspects, including call centre managers; a second action day led to more arrests and seizure of evidence and cash, which in turn led investigators to the Cyprus/Israel-based scam-website supplier. On the final action day, authorities searched 17 locations and seized more than 100 servers. Eurojust established two joint investigation teams and coordinated judicial action, while Europol deployed digital forensics experts to Albania and Kosovo. Participating countries included Germany, Cyprus, Finland, Albania, Israel, Kosovo and North Macedonia.
Remediation
The seven suspects were arrested for surrender or extradition to Germany to face prosecution.
-
European Police Seize 100+ Servers, Arrest 7 in Investment Scam 'Crime-as-a-Service' Takedown
ler a análise desta fonte ocultar
Europol and Eurojust coordinated a law enforcement action involving Albania, Cyprus, Finland, Germany, Kosovo, and North Macedonia that led to the arrest of seven suspects and the seizure of over 100 servers tied to a company providing fraudulent trading websites to criminal gangs as a 'crime-as-a-service' model. The four-year investigation began in 2022 after a German couple reported being unable to withdraw funds from an online trading platform, eventually linking the operation to call centers defrauding victims in at least 50 countries. The scheme used deceptive ads to lure victims to fake investment platforms, stole their personal data, and sold it to call center operators who used fabricated profits and psychological pressure to extract larger transfers before cutting off contact.
Technical Details
The alleged service provider operated out of Cyprus and Israel, supplying fraudulent trading platforms to clients running call centers in Albania, Kosovo, and North Macedonia. An initial 2022 action day resulted in two arrests and evidence seizure, and further Europol-supported analysis identified seven additional suspects, including suspected call center managers. This takedown follows a pattern of similar operations dismantled across Europe, including a 2022 network stealing at least €3 million monthly, 2023 and 2024 call center takedowns, and 2025 actions in Spain involving over €460 million laundered and a €50 million fraud ring dismantled by Austrian and Albanian authorities in April 2025.