Europol busts investment scam network spanning 50 countries, seizes over 100 servers

An international law enforcement operation has led to seven arrests and the seizure of more than 100 servers linked to fraudulent investment platforms accused of tricking victims into handing over millions of euros.

European authorities have dismantled infrastructure supporting an international investment fraud operation with potential victims in at least 50 countries and estimated losses exceeding €4 million.

The coordinated crackdown, carried out Nov. 3, involved law enforcement from several European countries, with support from Europol and Eurojust.

According to Europol, investigators searched 17 locations, seized more than 100 servers and arrested seven suspects who now face extradition or surrender to Germany.

Key points

• Seven suspects arrested and more than 100 servers seized in an international investment fraud crackdown
• Investigators estimate losses exceed €4 million, with potential victims in at least 50 countries
• Fraudsters used fake cryptocurrency, forex and stock trading platforms to lure investors
• Victims were shown fictitious profits and pressured into transferring larger sums of money
• A suspected crime-as-a-service provider allegedly supplied fraudulent trading websites to multiple criminal groups

Fake trading platforms promised quick profits

The fraudulent operation relied on seemingly legitimate online trading platforms promising substantial returns from investments in cryptocurrencies, foreign currencies and stocks.

Potential victims were drawn in through deceptive online advertisements and directed to websites designed to resemble genuine investment services.

Once registered, they were encouraged to make relatively small deposits initially. Their accounts then displayed fictitious profits, giving the impression that their investments were performing well.

Supposed financial brokers used these fabricated gains to persuade victims to transfer increasingly large sums of money.

When investors tried to withdraw their earnings, the operators resorted to delay tactics, making excuses and eventually cutting off communication altogether.

By that point, victims had often lost substantial amounts of money.

Personal information sold to scam call centers

Investigators also uncovered a network of intermediaries using affiliate marketing to attract potential victims.

Fraudulent ads directed users toward fake investment platforms, where their personal information was collected and then sold to criminal groups operating call centers.

Operators then contacted prospective investors, presenting themselves as financial advisers or brokers and pressuring them to deposit money.

Crime-as-a-service operation exposed

The crackdown targeted a company operating from Cyprus and Israel that allegedly supplied fraudulent trading websites to other criminal organizations.

Investigators believe the company offered its services under a crime-as-a-service model, allowing criminal groups to conduct investment scams without developing their own technical infrastructure.

Authorities also identified suspected clients operating fraudulent call centers in Albania, Kosovo and North Macedonia.

The Nov. 3 operation, led by Germany's Itzehoe Public Prosecutor's Office, resulted in searches across 17 locations, including a call center in Kosovo.

Seven suspects were arrested for possible extradition or surrender to Germany, while investigators seized servers, digital evidence and other assets.

The investigation involved authorities from Albania, Cyprus, Finland, Germany, Kosovo and North Macedonia, with international cooperation documented by Eurojust.

A couple's complaint led to a four-year investigation

The investigation dates back to 2022, when a German couple reported they were unable to withdraw money they had invested through an online trading platform.

Their complaint triggered an international investigation that gradually exposed a much larger criminal operation.

An initial coordinated action in 2022 resulted in two arrests and the seizure of evidence.

A second operation in 2025 produced additional arrests and evidence that helped investigators identify the suspected infrastructure provider behind the fraudulent websites.

Analysis of the seized material eventually led authorities to the company allegedly supplying trading platforms to multiple criminal groups.

Europol provided intelligence analysis and operational coordination, while Eurojust assisted with European Arrest Warrants, investigation orders and asset-freezing measures.

The agencies say the investigation has exposed a fraud operation that may have claimed victims in at least 50 countries, although the full extent of the losses remains unclear.

How to avoid fake investment platforms

Investment scams frequently exploit promises of quick profits, particularly in cryptocurrency and online trading markets.

Fraudsters may use professionally designed websites, fabricated account balances and persistent phone calls to convince victims that their money is growing.

Consumers should be especially cautious with investment opportunities advertised on social media or promoted by unfamiliar brokers.

To reduce the risk of falling victim to these schemes:

• Verify the investment provider. Check whether the company is authorized by a recognized financial regulator, using the regulator's official website rather than links supplied by the broker
• Be skeptical of guaranteed returns. Promises of unusually high profits with little or no risk are major warning signs
• Don't trust account balances alone. Fraudulent platforms can display fabricated earnings that have no connection to real investments
• Keep an eye out for pressure tactics. Legitimate financial advisers shouldn’t demand immediate deposits or repeatedly pressure you into investing more
• Protect your personal information. Be wary of investment websites requesting sensitive details before you have verified their legitimacy
• Never pay additional fees to unlock withdrawals. Scammers may demand payment for supposed taxes or processing charges before releasing funds, only to disappear after receiving more money

Anyone who suspects they have been defrauded should immediately contact their bank or payment provider, preserve communications with the suspected fraudster and report the incident to the relevant authorities.

Victims should also beware of recovery scams, in which fraudsters pose as investigators or financial specialists promising to retrieve stolen funds in exchange for an upfront payment.

Bitdefender Scamio can help users assess suspicious investment messages, links and online offers before engaging with potential scammers.

On topic:

FTC takes down 19 fake government websites, cracks down on impersonation scams

Police dismantle ransomware gang allegedly run by a 16-year-old

Crypto-recovery scammers steal $10 million from victims who already had their wallets drained in a previous scam