Follow us on Google News
Authorities in seven countries have arrested seven suspects and seized more than 100 servers in an international investigation into an alleged investment fraud network with potential victims in more than 50 countries. The coordinated operation, conducted on 3 November 2026, targeted the infrastructure behind fraudulent trading platforms and involved losses estimated to exceed EUR 4 million.
The operation involved Albania, Cyprus, Finland, Germany, Israel, Kosovo and North Macedonia, with support from Europol and Eurojust. Led by the German Itzehoe Public Prosecutor’s Office, the investigation focused on a company suspected of supplying fraudulent trading websites to organised criminal groups.
Investigators believe the company provided the technical infrastructure used by criminal networks to deceive investors and obtain their savings. Authorities searched 17 locations, seizing servers, digital evidence and other assets. The seven suspects were arrested with a view to extradition to Germany.
How Did The Suspected Fraud Operate?
The investigation identified an alleged scheme that used online advertisements to attract people with promises of substantial returns from cryptocurrency, foreign currency and stock trading. The advertisements directed potential victims towards websites designed to appear like legitimate investment platforms.
Individuals who showed interest in these opportunities were reportedly targeted through a combination of online promotions and direct telephone contact. Personal information collected through the advertising process was allegedly sold to criminal groups operating call centres.
Call centre employees subsequently contacted potential investors, presenting themselves as brokers or investment professionals. They encouraged people to deposit money and used sustained communication and psychological pressure to persuade them to commit increasingly large sums.
Investigators believe the network relied on this combination of deceptive advertising, fraudulent trading websites and organised telephone operations to reach potential victims across international borders.
https://the420.in/fcrf-cp-frm-certified-professional-fraud-risk-management-ind/
How Were Investors Persuaded To Transfer More Money?
According to the investigation, victims were initially encouraged to make relatively small deposits. Once the money had been transferred, their online accounts displayed fictitious profits, creating the impression that their investments were generating positive returns.
These artificial gains allegedly helped establish credibility and encouraged investors to transfer additional money. Supposed brokers used the apparent success of the initial investments to persuade victims that larger payments could produce even greater financial benefits.
The situation changed when investors attempted to withdraw their funds. Investigators found that operators allegedly used delaying tactics and other obstacles to prevent payments from being returned. Eventually, communication with the victims stopped, leaving them unable to recover their money.
Authorities estimate that the financial losses identified during the investigation exceed EUR 4 million. The suspected operation had potential victims in more than 50 countries, highlighting the international reach of the network.
What Led Investigators To The International Network?
The investigation began in 2022 after a German couple reported that they were unable to withdraw money invested through an online trading platform. Their complaint prompted an international inquiry that gradually uncovered connections between fraudulent investment websites and organised call centre operations.
An initial international action in 2022 resulted in two arrests and the seizure of evidence. Analysis supported by Europol helped investigators develop the case and identify additional suspects, including individuals believed to have managed call centres.
A second coordinated operation in 2025 led to further arrests and the seizure of money and other evidence. Examination of the recovered material enabled investigators to identify the suspected infrastructure provider and establish its alleged connections with call centre operators.
Investigators believe the company operated a crime-as-a-service model from Cyprus and Israel, supplying the technical services used by criminal groups. They also identified suspected clients operating fraudulent call centres in Albania, Kosovo and North Macedonia.
The latest operation followed four years of investigation and earlier interventions in 2022 and 2025. Seven suspects were arrested on 3 November as authorities moved against the suspected network and its supporting infrastructure.
What Role Did Europol And Eurojust Play?
Europol provided operational and analytical support throughout the investigation. Its European Financial and Economic Crime Centre analysed information gathered during the inquiry, cross-checked data against Europol databases and brought national investigators together to coordinate the cross-border operation.
On the latest action day, Europol deployed experts to Albania and Kosovo to assist with digital forensic examinations and conduct immediate checks against its databases. Its Virtual Command Post also supported coordination between the participating authorities during the intervention.
Eurojust supported the judicial aspects of the investigation, helping authorities execute European Investigation Orders, European Arrest Warrants and freezing orders. Two joint investigation teams were established at the agency. One involved Albania, Germany and Poland, while the other brought together Albania and Kosovo. Judicial actions on 3 November were coordinated from Eurojust’s headquarters in The Hague.
The operation brought together authorities from Albania, Cyprus, Finland, Germany, Israel, Kosovo and North Macedonia. It also highlighted the importance of international cooperation in investigations involving online advertising, digital infrastructure and call centre networks operating across national borders.
Earlier interventions provided investigators with evidence that helped identify the suspected infrastructure provider and its links to criminal groups. The latest action targeted the technical and operational foundations of the alleged fraud scheme, with further judicial proceedings expected to follow the arrests and seizures.
