The Spanish police have dismantled a large-scale funding fraud operation that precipitated cumulative damages exceeding $11.8 million (€10 million).
Throughout simultaneous raids in Barcelona, Madrid, Mallorca, and Alicante, coordinated by the Mossos d’Esquadra, Civil Guard, and the Nationwide Police, 21 people had been arrested.
Together with the arrests, the police brokers additionally confiscated seven luxurious autos and greater than $1.5 million €1.3 million in money and cryptocurrency.
The fraudsters seem to have began the operation in 2022 and, since then, authorities acquired greater than 300 complaints from victims throughout the nation.
“They persuaded their victims to make pretend investments by means of a community of pretend advisors and consultants, manipulated web sites, and phone name facilities,” the police says.
“The group operated as a shell funding firm promoting its providers on social media. They supplied investments in prestigious corporations or within the cryptocurrency sector to lure their victims.”
The modus operandi is just like “romance baiting” (“pig butchering”) scams, the place fraudsters entice people by way of social media advertisements, abusing reputable manufacturers and together with pretend testimonials.
Subsequent, the scammers directed victims to pretend cryptocurrency, foreign exchange, tech shares, or gold funding portals, which present pretend earnings on the dashboard and even permit small withdrawals in the beginning.
As soon as greater investments happen, withdrawals are locked, and the scammers impose “clearance taxes” or “processing charges” to victims that wish to recuperate their cash, however solely to steal much more from them.
In organized operations just like the one dismantled by the Spanish police, scammers use name facilities that mimick skilled funding companies, with operators educated with scripts and psychological manipulation methods.
The police say the Barcelona-based name facilities supporting the operation had been rented for 3 to 4 months to hinder investigations, and have a “panic button” that will robotically shut down all programs in case of a police raid.
The presence of such name facilities in Spain is uncommon, as these are sometimes hosted in Asian or Jap European international locations the place evading legislation enforcement is simpler.
Final week, authorities in Spain dismantled a fair bigger cryptocurrency funding fraud ring that laundered over $540 million (€460 million) stolen from 5,000 victims worldwide.
In April 2025, the Spanish police arrested six people who used AI to generate fraudulent funding advertisements, tricking over 200 victims into giving them 19 million euros ($20.9 million).
Whereas cloud assaults could also be rising extra refined, attackers nonetheless succeed with surprisingly easy methods.
Drawing from Wiz’s detections throughout hundreds of organizations, this report reveals 8 key methods utilized by cloud-fluent menace actors.
