9 arrested in Europe in operation against fake platforms for crypto investments

European authorities said Tuesday that nine people were recently arrested for suspected involvement in a nearly $700 million cryptocurrency investment scam network.

A multinational operation in late October targeted a network that “created dozens of fake cryptocurrency investment platforms that looked like legitimate websites and promised high returns,” but simply took the money and laundered it, according to the European Union Agency for Criminal Justice Cooperation (Eurojust).

The suspects “recruited their victims using a variety of methods such as social media advertising, cold calling, fake news articles and fake testimonials from celebrities or successful investors.”

The arrests were in Cyprus, Spain and Germany, with assistance from French and Spanish authorities, Eurojust said. 

The Paris Prosecutor’s Office said in a social media post that French investigating judges had issued arrest warrants for six of the individuals. JUNALCO, France’s agency for fighting organized crime, referred complaints from victims to other agencies in 2023, the post said.

“When victims would transfer cryptocurrency to the platforms, they were never able to recover their money,” Eurojust said. “The crypto assets earned through the various scams were then laundered using blockchain technology.”

Authorities estimate the network stole at least €600 million (about $690 million). Law enforcement seized €1.5 million ($1.7 million) in cash and cryptocurrency as well as luxury watches worth €100,000 ( $115,000), the Paris Prosecutor’s Office said.

Eurojust reported a similar operation in late September against a network that had scammed people out of at least €100 million (about $115 million).

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Joe Warminsky

Joe Warminsky

is the news editor for Recorded Future News. He has more than 25 years experience as an editor and writer in the Washington, D.C., area. He previously he helped lead CyberScoop for more than five years. Prior to that, he was a digital editor at WAMU 88.5, the NPR affiliate in Washington, and he spent more than a decade editing coverage of Congress for CQ Roll Call.

 

Total
0
Shares
Previous Post

A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces

Next Post

Treasury sanctions 8 for laundering North Korea earnings from cybercrime, IT worker scheme

Related Posts

Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely — Patch Now

Cybersecurity researchers have disclosed details of a now-patched vulnerability in the popular figma-developer-mcp Model Context Protocol (MCP) server that could allow attackers to achieve code execution. The vulnerability, tracked as CVE-2025-53967 (CVSS score: 7.5), is a command injection bug stemming from the unsanitized use of user input, opening the door to a scenario where an attacker can
Read More

A New Security Layer for macOS Takes Aim at Admin Errors Before Hackers Do

A design firm is editing a new campaign video on a MacBook Pro. The creative director opens a collaboration app that quietly requests microphone and camera permissions. MacOS is supposed to flag that, but in this case, the checks are loose. The app gets access anyway. On another Mac in the same office, file sharing is enabled through an old protocol called SMB version one. It’s fast and
Read More