Sharjah Police have dismantled four interconnected international criminal networks accused of cyberattacks, digital wallet theft, online fraud, money laundering and violent assaults targeting cryptocurrency holders.
The operation, called “End of the Battle”, led to the arrest of 33 suspects from 12 nationalities.
Police said the investigation also helped protect more than 30 companies and institutions worldwide with assets valued at over AED 65 billion, while more than AED 200 million in suspected criminal proceeds was seized.
Authorities allege that the wider laundering network handled more than AED 8.8 billion through bank accounts, digital wallets and multiple online platforms.
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
Four Networks Allegedly Divided the Criminal Work
Investigators say the organisation was not built around a single type of cybercrime.
Instead, four linked groups allegedly handled different stages of the operation.
One group focused on hacking systems and stealing databases.
A second allegedly laundered criminal proceeds through virtual assets and cryptocurrency channels.
A third is accused of using social engineering to steal digital wallets and defraud victims.
The fourth allegedly used physical violence, threats and kidnapping to force cryptocurrency holders to surrender wallet passcodes.
That division of labour made the network harder to detect.
Each group could specialise in one part of the operation while passing stolen data, money or victims to another part of the organisation.
Police also allege that artificial intelligence tools were used to strengthen phishing and social-engineering operations.
What Digital Wallet Laundering Means
A digital wallet stores the credentials needed to access cryptocurrency and other virtual assets.
If criminals obtain the wallet’s private keys, passwords or recovery phrases, they may be able to move the assets to another address within minutes.
The stolen funds can then be routed through multiple wallets, exchanges and intermediaries to make the trail harder to follow.
This is similar to moving stolen cash through several bank accounts, except blockchain transactions can cross borders quickly and operate outside traditional banking channels.
Sharjah prosecutors say the accused used bank accounts, digital wallets, companies and intermediaries to disguise the origin of illicit funds.
The proceeds were allegedly converted into real estate, luxury cars, expensive watches, jewellery and other assets.
Investigators examined more than 3,000 digital wallets as part of the operation.
Teenage Suspect Helped Expose Wider Network
One of the early breakthroughs reportedly came from an investigation involving a 15-year-old boy found with a digital wallet containing large sums of money.
Police said the inquiry revealed alleged links between the teenager and international suspects involved in wallet theft and money laundering.
That trail eventually helped investigators connect multiple criminal groups.
Authorities later uncovered an alleged plot to kidnap people holding large cryptocurrency balances and force them to reveal access codes.
Police say one suspect linked to the operation was arrested before the planned attack could be carried out.
Investigators also identified a hidden communication hub on a social media platform.
Members allegedly used a security code that changed every eight hours to protect their communications.
Police Seize Cash, Cars, Property and Luxury Goods
The financial investigation became one of the largest parts of the case.
Sharjah prosecutors say more than AED 200 million was seized.
Authorities also froze or confiscated 17 luxury cars, 29 valuable watches, jewellery, residential property, land and digital wallets.
Searches also uncovered counterfeit currency, counterfeiting tools, narcotics and electronic devices.
Police reviewed more than 10,000 documents and reports and inspected 103 electronic devices.
The investigation involved hundreds of judicial and financial procedures, including requests to the UAE Financial Intelligence Unit and international cooperation channels.
Some of the principal suspects were arrested abroad and returned to the UAE.
Cross-Border Cybercrime Increasingly Mixes Digital and Physical Violence
The case shows how organised cybercrime is increasingly moving beyond online fraud alone.
Criminal groups can now combine hacking, stolen databases, cryptocurrency laundering and physical intimidation within the same operation.
That creates a difficult enforcement problem because evidence can be spread across multiple countries and platforms.
A hacker may steal information in one country, a fraud team may contact victims from another, while money is routed through wallets controlled elsewhere.
The Sharjah investigation relied heavily on digital forensics, financial tracing and international cooperation to connect those separate pieces.
Authorities say investigations are continuing into additional financial links and suspects connected to the organisation.
The allegations against the accused remain subject to the legal process.
What this means for you:
Cryptocurrency holders should never share wallet recovery phrases, private keys or passcodes, even under pressure. Large digital-asset holders should also avoid publicly revealing their holdings or personal details that could make them targets for extortion or physical attacks.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
