Key Takeaways
- • European law enforcement dismantled a €600 million crypto investment fraud ring across Cyprus, Spain, and Germany, with nine suspects arrested during coordinated raids conducted October 27-29, 2025.
- • The criminal network operated dozens of fake cryptocurrency investment platforms using social media advertising, cold calling, fake news articles, and fabricated celebrity endorsements to deceive over 5,000 victims worldwide.
- • Authorities seized €415,000 in cryptocurrency, €800,000 in bank accounts, and €300,000 in cash, with investigations identifying €460 million in laundered illicit proceeds through a Hong Kong-based corporate and banking network.
- • Victims were systematically locked out of accounts post-deposit and cut off from operator communication, representing a sophisticated evolution in investment fraud methodology targeting retail investors across multiple jurisdictions.
- • The operation involved coordinated support from Europol, Eurojust, and law enforcement from Estonia, France, the United States, and Spain, with investigation support dating back to 2023.
Summary
European authorities have dismantled a major cryptocurrency investment fraud ring accused of stealing over €600 million from victims across multiple countries. According to Eurojust, coordinated police operations in Cyprus, Spain, and Germany resulted in nine arrests between October 27 and 29, 2025. The investigation identified that perpetrators had laundered €460 million in illicit profits extracted from approximately 5,000 victims worldwide, making this among the most significant crypto fraud operations disrupted in recent years.
The criminal network operated through dozens of fraudulent cryptocurrency investment platforms designed to replicate legitimate trading websites. Recruitment tactics were multifaceted and sophisticated, utilizing social media advertising, unsolicited cold calls, fabricated news articles, and fake testimonials attributed to celebrities and successful investors. Once victims deposited funds into these platforms, they were systematically locked out of their accounts and severed from any communication with platform operators—a common endgame in investment fraud schemes that prevents victims from detecting the fraud immediately.
Law enforcement seized substantial criminal assets during the operation: €415,000 in cryptocurrency holdings, €800,000 across bank accounts, and €300,000 in cash. Investigators determined that the criminal organization had established a corporate and banking infrastructure based in Hong Kong, utilizing payment gateways and user accounts under various names across different cryptocurrency exchanges to receive, store, and transfer illicit funds. This layered financial structure was designed to obscure the money trail and complicate asset tracing efforts.
The operation represented a coordinated multinational effort, with Europol and Eurojust coordinating support alongside law enforcement from Estonia, France, and the United States. Europol's involvement in the investigation dated to 2023, when financial crime specialists began providing operational support and strategic analysis to Spanish authorities. A dedicated crypto specialist was deployed to Spain during the final action phase to assist national investigators.
The dismantling of this network underscores both the operational sophistication of modern crypto investment fraud schemes and the increasing capability of international law enforcement to coordinate cross-border investigations. However, the ongoing investigation suggests that asset recovery and identification of additional network participants remain active priorities for authorities.
The criminal network operated through dozens of fraudulent cryptocurrency investment platforms designed to replicate legitimate trading websites. Recruitment tactics were multifaceted and sophisticated, utilizing social media advertising, unsolicited cold calls, fabricated news articles, and fake testimonials attributed to celebrities and successful investors. Once victims deposited funds into these platforms, they were systematically locked out of their accounts and severed from any communication with platform operators—a common endgame in investment fraud schemes that prevents victims from detecting the fraud immediately.
Law enforcement seized substantial criminal assets during the operation: €415,000 in cryptocurrency holdings, €800,000 across bank accounts, and €300,000 in cash. Investigators determined that the criminal organization had established a corporate and banking infrastructure based in Hong Kong, utilizing payment gateways and user accounts under various names across different cryptocurrency exchanges to receive, store, and transfer illicit funds. This layered financial structure was designed to obscure the money trail and complicate asset tracing efforts.
The operation represented a coordinated multinational effort, with Europol and Eurojust coordinating support alongside law enforcement from Estonia, France, and the United States. Europol's involvement in the investigation dated to 2023, when financial crime specialists began providing operational support and strategic analysis to Spanish authorities. A dedicated crypto specialist was deployed to Spain during the final action phase to assist national investigators.
The dismantling of this network underscores both the operational sophistication of modern crypto investment fraud schemes and the increasing capability of international law enforcement to coordinate cross-border investigations. However, the ongoing investigation suggests that asset recovery and identification of additional network participants remain active priorities for authorities.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.