Spanish Police Dismantle €140 Million Cyber Fraud Ring, Arrest Four Key Suspects
In a major blow to cybercrime, Spanish police have taken down an industrial-scale operation that swindled over €140 million ($160 million) from victims of investment fraud and business email compromise (BEC) attacks. The law enforcement operation, which involved international cooperation with Interpol and Europol, resulted in the arrest of four key suspects in Spain, Portugal, and Panama.
The scheme, described as “CEO fraud” and “false-invoice fraud,” relied on sophisticated social engineering tactics to trick victims into transferring large sums of money to bank accounts controlled by the fraudsters. The operation involved at least 800 bank accounts, 120 business accounts, and a network of external accomplices who acted as “money mules.” These individuals were used to launder the stolen funds through a complex web of transactions that made it difficult for authorities to track the money.
The investigation, which began after police detected signs of money laundering in 19 companies linked to the operation, revealed that €94 million ($107 million) was channeled through the network and another €61 million ($69.5 million) was tied specifically to BEC operations carried out in 2024. The police believe that the majority of these funds were laundered through money mule accounts in third countries.
The dismantling of this cybercrime operation is a significant victory for law enforcement, but it’s also a reminder of the scale and sophistication of modern cyber threats. The use of social engineering tactics to trick victims into transferring large sums of money has become increasingly common, making it essential for businesses and individuals to remain vigilant and take proactive measures to protect themselves.
The investigation was carried out in collaboration with international partners, highlighting the importance of global cooperation in combating cybercrime. The police seized 15 computers and over 170 smartphones used by the suspects to execute thousands of fraudulent transfers, as well as €3 million ($3.4 million) of crime proceeds that will be made available to victims.
As this case demonstrates, even with the best security measures in place, businesses can still fall victim to sophisticated cyber attacks. However, by staying informed and taking proactive steps to protect themselves, individuals and organizations can reduce their risk of falling prey to these types of scams.
In light of this case, it’s essential for businesses and individuals to remain vigilant and take steps to protect themselves from BEC and CEO fraud attacks. This includes being cautious when receiving unsolicited emails or phone calls requesting large sums of money, verifying the authenticity of transactions, and implementing robust security measures to prevent unauthorized access to bank accounts. By taking these precautions, we can reduce our vulnerability to cybercrime and stay one step ahead of these sophisticated threats.
Source: Bleeping Computer — 2026-07-14