Cyprus-Linked 'Crime-as-a-Service' Operation Dismantled in Multi-National Police Raid

A coordinated international law enforcement operation has dismantled the technical infrastructure of a sweeping investment fraud scheme estimated to have defrauded victims in more than 50 countries of at least €4 million.

The operation targeted a "crime-as-a-service" network. Operating primarily out of Cyprus and Israel, it allegedly provided fraudulent trading platforms, abused affiliated marketing channels to attract victims, and sold their personal data to various call center operators based in Albania, Kosovo and North Macedonia.

Led by the Itzehoe Public Prosecutor's Office in Germany, with support from Europol and Eurojust, the action on Tuesday resulted in the arrest of seven suspects and the seizure of more than 100 servers.

Authorities executed search warrants across 17 locations in multiple countries, securing evidence and freezing assets.

The arrested individuals are currently facing extradition to Germany.

The Mechanics of the Fraud

The scheme relied on deceptive affiliate marketing campaigns promising fast, substantial returns on cryptocurrency, foreign exchange and stock investments. These online advertisements were used to harvest personal data from interested individuals, which was then sold to the networks operating the call centers.

• Fake News Articles, Over 4,000 Aussie Victims: An Israeli Network Behind Investment Fraud
• €100 Million a Month Fraud Ring, and a Hacker From the 1998 Pentagon Breach
• Poland, Ukraine Joint Raids Shut Down Fake Trading Scheme That Hit Thousands of Investors

According to Europol, scammers would contact potential victims and persuade them to make a small initial investment. To establish credibility, the fraudulent platforms displayed fictitious profits.

Operating under the guise of legitimate brokers, the suspects allegedly used high-pressure sales tactics to convince victims to transfer increasingly larger sums.

When victims eventually attempted to withdraw their funds, the operators deployed delaying tactics before cutting off contact entirely, leaving investors with total losses.

A Four-Year Investigation

Tuesday’s raids mark the culmination of a four-year investigation that began with a single complaint. In 2022, a German couple reported to authorities that they were unable to withdraw funds they had invested through what appeared to be an online trading platform.

That initial report triggered a multi-year probe featuring earlier interventions in 2022 and 2025. Data and evidence recovered during those previous actions allowed authorities to map the network, ultimately identifying the central infrastructure providers and their links to the regional call centers.

This latest operation highlights an escalating trend of European authorities targeting the logistical networks behind investment scams.

In November 2025, authorities dismantled a €700 million scam operation with links to Limassol, while a 2026 Europol-supported raid resulted in the arrest of three suspects in Cyprus over an alleged crypto investment fraud network operating a call-center-style business.