Spanish Police Dismantle €140 Million Cyber Fraud and Money Laundering Ring
Spanish authorities have arrested four individuals and dismantled a sophisticated cybercrime organization responsible for €140 million in fraud through investment scams and business email compromise attacks.
Spanish Police have successfully dismantled a large-scale cybercrime and money-laundering organization that amassed an estimated €140 million (approximately $160 million USD) through a combination of investment fraud and business email compromise (BEC) attacks. The operation, which involved international cooperation, led to the arrest of four key individuals across Spain, Portugal, and Panama.
The cybercriminal network operated with industrial-level precision, utilizing a vast infrastructure of over 800 bank accounts and 120 business accounts to receive and launder illicit funds. The group also enlisted the help of at least 67 external accomplices who served as 'money mules,' facilitating the dispersal and concealment of the stolen money. Police described the process as creating complex chains of transactions designed to obscure the origin of the funds and make them irretrievable for victims.
Investigations confirmed that approximately €94 million ($107 million USD) was channeled through this network. An additional €61 million ($69.5 million USD) has been directly linked to BEC operations conducted by the group throughout 2024. These attacks, often referred to as 'CEO fraud' or 'false-invoice fraud,' relied on social engineering tactics, including impersonating high-ranking executives to trick employees into diverting payments to accounts controlled by the fraudsters.
The investigation was initiated after Spanish police detected suspicious money laundering activities within 19 companies associated with the ring. Following the identification of the primary suspects, a coordinated international law enforcement effort was launched, with support from Interpol and Europol, to bring the operation to a halt.
Raids were conducted on six premises located in Barcelona, Girona, and Tarragona in Spain, as well as in Porto, Portugal. A further suspect was apprehended in Panama, highlighting the transnational nature of the criminal enterprise. The two individuals arrested outside of Spain had recently relocated but continued to manage and support the scheme from their new bases.
During the searches, law enforcement agents seized significant assets, including 15 computers and over 170 smartphones, believed to have been instrumental in executing thousands of fraudulent transfers. In a swift move to recover assets, €3 million ($3.4 million USD) in crime proceeds was frozen and will be made available to the victims of the fraud ring.
Spanish police are confident that the dismantling of this money-laundering network is complete, with all principal operators now in custody. The operation underscores the persistent threat posed by sophisticated financial fraud schemes that leverage both cyber capabilities and intricate money laundering techniques to exploit individuals and businesses globally.