The Spanish police have dismantled a large-scale funding fraud operation that brought on cumulative damages exceeding $11.8 million (€10 million).
Throughout simultaneous raids in Barcelona, Madrid, Mallorca, and Alicante, coordinated by the Mossos d’Esquadra, Civil Guard, and the Nationwide Police, 21 people have been arrested.
Together with the arrests, the police brokers additionally confiscated seven luxurious autos and greater than $1.5 million €1.3 million in money and cryptocurrency.
The fraudsters seem to have began the operation in 2022 and, since then, authorities obtained greater than 300 complaints from victims throughout the nation.
“They persuaded their victims to make pretend investments by means of a community of pretend advisors and consultants, manipulated web sites, and phone name facilities,” the police says.
“The group operated as a shell funding firm promoting its providers on social media. They provided investments in prestigious firms or within the cryptocurrency sector to lure their victims.”
The modus operandi is much like “romance baiting” (“pig butchering”) scams, the place fraudsters entice people through social media advertisements, abusing professional manufacturers and together with pretend testimonials.
Subsequent, the scammers directed victims to pretend cryptocurrency, foreign exchange, tech shares, or gold funding portals, which present pretend income on the dashboard and even permit small withdrawals at the beginning.
As soon as larger investments happen, withdrawals are locked, and the scammers impose “clearance taxes” or “processing charges” to victims that need to get well their cash, however solely to steal much more from them.
In organized operations just like the one dismantled by the Spanish police, scammers use name facilities that mimick skilled funding companies, with operators educated with scripts and psychological manipulation strategies.
The police say the Barcelona-based name facilities supporting the operation have been rented for 3 to 4 months to hinder investigations, and have a “panic button” that will mechanically shut down all techniques in case of a police raid.
The presence of such name facilities in Spain is uncommon, as these are usually hosted in Asian or Jap European nations the place evading regulation enforcement is simpler.
Final week, authorities in Spain dismantled a fair bigger cryptocurrency funding fraud ring that laundered over $540 million (€460 million) stolen from 5,000 victims worldwide.
In April 2025, the Spanish police arrested six people who used AI to generate fraudulent funding advertisements, tricking over 200 victims into giving them 19 million euros ($20.9 million).
Whereas cloud assaults could also be rising extra subtle, attackers nonetheless succeed with surprisingly easy strategies.
Drawing from Wiz’s detections throughout hundreds of organizations, this report reveals 8 key strategies utilized by cloud-fluent menace actors.
