
Authorities in Romania and the United Kingdom have taken concerted action to block criminals who illegally withdrew cash from automated teller machines (ATMs) on a large scale. By using specialised computer programs and devices, the Romanian criminal network managed to steal an estimated EUR 580 000. The criminal group was also involved in other types of payment and card fraud.
During an operation in Romania, two suspects were identified and brought in for questioning. In the UK, prosecutions have already been initiated against eight members of the group, following an action day in December 2024.

Eurojust supported a joint investigation team of the Romanian and British authorities, which investigated the case. The Agency also assisted with the preparation of the action day in Romania. Europol provided data analysis support, in addition to sending an analyst to Romania and organising meetings to prepare for the operations on the ground.
The criminal network was formed last year in the Romanian city of Bacău, mainly consisting of family members and friends. They adopted a derogatory term aimed at the police as their so-called trademark, which they used on social media, on custom license plates and on clothes they wore.
Most of the money was stolen in the UK by pretending to take money from an ATM with a bank card, removing the screen of the ATM and then cancelling the transaction. This allowed them to reach into the ATM itself and take all the cash inside, before ending the transaction.
The criminals also counterfeited public transport cards, which they distributed across the UK with the help of individuals of Turkish origin. Furthermore, they committed card fraud by using software that identifies card numbers and then generates illicit income through fraudulent payments.
The proceeds of the criminal activities were invested in luxury cars, jewellery, real estate and expensive holidays. The gang members being prosecuted in the UK and those brought in for questioning in Romania are suspected of cyber fraud, membership of an organised crime group, money laundering and forgery of payment instruments.
During the action day in Romania, a total of 18 places were searched and real estate, vehicles electronic devices and cash were seized.
The operations against the criminal network were carried out at the request of and by the following authorities:
- Romania: Directorate for Investigating Organised Crime and Terrorism (DIICOT) – Bacău Regional Service; Romanian Police – Anti Cybercrime Service of Bacău County Organised Crime Brigade
- United Kingdom: Crown Prosecution Service; Eastern Regional Special Operations Unit