Spanish Police Operation Takes Down Massive Cyber Fraud Ring
The Spanish Police have successfully dismantled a large-scale cybercrime and money-laundering organization that generated €140 million ($160 million) in illicit funds from investment fraud and business email compromise (BEC) attacks. As part of the operation, four individuals were arrested in Spain, Portugal, and Panama.
Industrial-Level Scheme
The police described the operation as an industrial-level scheme, involving at least 800 bank accounts, 120 business accounts, and 67 external accomplices who acted as “money mules.” According to the police, the suspects created and managed a network of bank accounts to receive large amounts of illicit money defrauded from numerous victims.
The funds were then dispersed and concealed through another network of bank accounts, creating chains of transactions that placed the criminal proceeds beyond reach and allowed the enormous amounts of stolen money to be hidden and laundered through available mule bank accounts in third countries.
Investigation and Arrests
The investigation confirmed that €94 million ($107 million) was channeled through the network and linked another €61 million ($69.5 million) to the group, specifically to BEC operations that took place in 2024. The police identified the scheme as “CEO fraud” and “false-invoice fraud,” which involved social engineering tactics such as impersonating high-ranking executives and diverting payments to bank accounts controlled by the fraudsters.
The investigation began after the police detected signs of money laundering in 19 companies linked to the cybercrime operation. Following the identification of the main suspects, an international police operation was organized with the help of Interpol and Europol.
Six premises in Barcelona, Girona, and Tarragona, as well as in the city of Porto in Portugal, were raided and searched, and another suspect was arrested in Panama. The two suspects arrested outside Spain had recently left the country but continued to operate from their foreign bases in support of the cybercrime scheme.
Seized Assets and Frozen Funds
The police agents seized 15 computers and over 170 smartphones, believed to have been used for executing thousands of fraudulent transfers. Additionally, €3 million ($3.4 million) of crime proceeds was frozen immediately and will be made available to victims of the cybercrime ring.
Based on its investigation, the Spanish police believe that the money-laundering network has now been effectively dismantled, and all its main operators have been arrested.
The operation highlights the importance of international cooperation in combating cybercrime and money laundering. The use of social engineering tactics and the creation of complex networks of bank accounts and money mules demonstrate the sophistication and scale of modern cybercrime operations.
The Spanish police's success in dismantling the cybercrime ring and arresting its main operators serves as a reminder of the need for continued vigilance and cooperation in the fight against cybercrime.
Test every layer before attackers do. Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper and learn more about how to protect your organization from cyber threats.
Related Articles
- Spain arrests suspected member of pro-Russian hacktivist groups
- Authorities dismantle 'AudiA6' ransomware crypto-laundering service
- Police dismantles fake ID marketplace used by migrant smugglers
- Spain arrests doxer leaking sensitive data of govt employees
- INTERPOL ‘Operation Ramz’ seizes 53 malware, phishing servers
Source: BleepingComputer