GoKawiilThe Spanish Police dismantled a cybercrime and money-laundering organization that made €140 million ($160 million) from investment fraud and business email compromise (BEC) attacks.
As part of the law enforcement operation, four people were arrested in Spain, Portugal, and Panama.
The police describe the operation as an industrial-level scheme as it involved at least 800 bank accounts, 120 business accounts, and 67 external accomplices who acted as “money mules.”
“The suspects created and managed a network of more than 800 bank accounts into which they received large amounts of illicit money defrauded from numerous victims,” the police say.
“The funds were immediately dispersed and concealed through another network of bank accounts, creating chains of transactions that placed the criminal proceeds beyond reach and allowed the enormous amounts of stolen money to be hidden and laundered through available mule bank accounts in third countries.”
The investigation has confirmed that €94 million ($107 million) was channeled through the network and linked another €61 million ($69.5 million) to the group, tying it specifically to BEC operations that took place in 2024.
The police announcement calls this “CEO fraud” and “false-invoice fraud,” indicating the use of social engineering tactics such as impersonating high-ranking executives and diverting payments to bank accounts controlled by the fraudsters.
The investigation into the cybercrime operation started after the police detected signs of money laundering in 19 companies linked to it.
Following the identification of the main suspects, an international police operation was organized with the help of Interpol and Europol.
In this context, six premises in Barcelona, Girona, and Tarragona, as well as in the city of Porto in Portugal, were raided and searched, and another suspect was also arrested in Panama.
... continue reading