Spanish Police Dismantle €140 Million Cyber Fraud Ring, Arrest Four Key Players
In a significant blow to cybercrime, Spanish police have dismantled an industrial-level operation that made an astonishing €140 million ($160 million) through investment fraud and business email compromise (BEC) attacks. The law enforcement operation has resulted in the arrest of four individuals in Spain, Portugal, and Panama, bringing an end to what authorities describe as a “money-laundering network” that spanned multiple countries.
The cybercrime scheme, which involved at least 800 bank accounts, 120 business accounts, and 67 external accomplices known as “money mules,” relied on sophisticated social engineering tactics. The suspects impersonated high-ranking executives to divert payments to bank accounts under their control, using the proceeds to create complex chains of transactions that concealed the origin of the stolen funds.
The investigation began after police detected signs of money laundering in 19 companies linked to the operation. An international collaboration with Interpol and Europol led to a coordinated effort to identify and apprehend the main suspects. Six premises were raided, and an additional suspect was arrested in Panama, bringing the total number of arrests to four.
The cybercrime ring’s modus operandi was to use BEC attacks to steal funds from businesses. This type of attack involves tricking employees into transferring money to bank accounts controlled by the scammers. The stolen funds were then laundered through a network of bank accounts in third countries, making it difficult for authorities to track the proceeds.
The dismantling of this operation is a significant victory for law enforcement agencies, but it highlights the need for businesses and individuals to remain vigilant against such attacks. With millions of dollars still linked to the group, the investigation has confirmed that €94 million ($107 million) was channeled through the network, while another €61 million ($69.5 million) is tied specifically to BEC operations in 2024.
The Spanish police have seized significant evidence, including 15 computers and over 170 smartphones believed to be used for executing thousands of fraudulent transfers. Moreover, €3 million ($3.4 million) of crime proceeds has been frozen immediately and will be made available to victims of the cybercrime ring.
This operation serves as a stark reminder of the importance of robust cybersecurity measures and the need for businesses to test their defenses regularly. By staying one step ahead of attackers, organizations can mitigate the risk of falling victim to such schemes. As this case demonstrates, law enforcement agencies are working tirelessly to disrupt and dismantle cybercrime operations, but it’s up to us to take proactive steps in protecting ourselves against these threats.
Source: Bleeping Computer — 2026-07-14