Inside the four-year chase of a scam platform

A German couple's failed attempt to withdraw money from an online trading platform set off a four-year investigation that ended with seven arrests and the seizure of more than 100 servers, according to Europol. The action, supported by Europol and Eurojust, involved authorities from Albania, Cyprus, Finland, Germany, Kosovo, and North Macedonia.

The operation targeted an unnamed company suspected of providing fraudulent trading websites to criminal gangs. Europol described the results in a statement, but the company's identity has not been made public.

How the investigation began

The case started in 2022, when a German couple reported they could not withdraw money they had invested through an online trading platform. Investigators then linked multiple call center operators behind investment scams to potential victims in at least 50 countries.

Europol said the action followed "four years of investigation and earlier interventions in 2022 and 2025." Evidence gathered during those operations led to the company allegedly operating the "crime-as-a-service" model from Cyprus and Israel. Investigators also identified suspected clients operating fraudulent call centres in Albania, Kosovo* and North Macedonia.

"The action follows four years of investigation and earlier interventions in 2022 and 2025. Evidence gathered during those operations led to the company allegedly operating the 'crime-as-a-service' model from Cyprus and Israel. Investigators also identified suspected clients operating fraudulent call centres in Albania, Kosovo* and North Macedonia," Europol said.

— Europol

The mechanics of the scheme

According to Europol, the scheme promised potential victims substantial, quick returns from trading in foreign currencies, stocks, or cryptocurrency. Deceptive advertisements directed people to fraudulent investment platforms, where their personal data was stolen. That stolen data was later sold to criminal groups running call centers, whose operators reached out with supposed investment opportunities.

Victims were encouraged to transfer a small amount and were shown fake online accounts displaying fictitious profits, making the platforms seem credible. Those gains were used to sustain psychological pressure to push victims into larger transfers. When victims asked to withdraw their money, the scammers used delaying tactics and eventually stopped contact, leaving victims with no way to recover their funds.

Earlier interventions and new suspects

Europol said a first international action day that year (2022) resulted in two arrests and the seizure of evidence. Europol-supported analysis helped investigators develop the case, which identified seven additional suspects, including suspected call centre managers.

"A first international action day that year resulted in two arrests and the seizure of evidence. Europol-supported analysis helped investigators develop the case, which identified seven additional suspects, including suspected call centre managers," Europol added.

— Europol

Key figures from the operation

• 7 suspects arrested in the joint action
• More than 100 servers seized
• At least 50 countries with potential victims linked to the call center operators
• Four years of investigation, with earlier interventions in 2022 and 2025
• 2 arrests during the first international action day in 2022

A pattern of takedowns

This is the latest in a series of similar criminal rings dismantled by European law enforcement in recent years. In March 2022, authorities shut down a massive call-center investment fraud network that used 200 "traders" to steal at least €3 million each month.

Police also took down multiple call centers across Europe in 2023, linked to millions of euros in losses and run by a criminal gang behind online investment fraud (also known as 'pig butchering' or romance baiting scams). European police also shut down 12 fraud call centers in May 2024 that were linked to thousands of daily scam calls.

In July 2025, Spanish police dismantled another massive crypto investment fraud ring that laundered over €460 million ($540 million) stolen from over 5,000 victims worldwide, one week after taking apart a large-scale investment scam operation behind cumulative damages exceeding €10 million ($11.8 million).

More recently, in April, Austrian and Albanian authorities also took down a criminal organization that ran a large-scale cryptocurrency investment fraud operation linked to estimated losses of over €50 million ($58.5 million).

What the company is accused of

Europol's statement says evidence gathered during earlier operations led to the company allegedly operating the 'crime-as-a-service' model from Cyprus and Israel. The agency did not name the company. The phrase 'crime-as-a-service' typically describes criminal services offered to other criminals, but Europol's statement does not provide further detail on how the company operated or what specific services it provided.

Investigators also identified suspected clients operating fraudulent call centres in Albania, Kosovo* and North Macedonia. The statement does not specify the relationship between the company and these clients beyond describing them as suspected clients.

Why it matters

The scale of the operation — seven arrests and over 100 servers seized — suggests that European authorities are pursuing not only the call center operators who interact with victims but also the entities that allegedly supply the fraudulent platforms. If the company was indeed providing crime-as-a-service support to multiple gangs, taking it down could disrupt more than a single scam operation, though Europol has not released details on the company's client list or the full extent of its operations.

For consumers, the case illustrates the mechanics of investment fraud: fake ads, small initial deposits, fictitious profits, and blocked withdrawals. The fact that victims were spread across at least 50 countries highlights the cross-border nature of these schemes. Europol's statement does not include advice for potential victims, but the pattern it describes — pressure to transfer more money based on fake account balances — is consistent with previously documented investment scams.

The four-year timeline, from the German couple's report to this month's raids, shows that such investigations can take years to reach the service providers behind the call centers. Whether this action leads to further arrests or charges has not been announced.