Takedown of fraudulent cryptocurrency network in Bulgaria, Cyprus and Serbia

23 February 2023|PRESS RELEASE

Flags of DE, BG, CY, SRB and Europol, Eurojust logos With the active support of Eurojust and Europol, a coordinated action has led to the dismantling of a cryptocurrency fraud network operating from Bulgaria, Cyprus and Serbia. The network operated professionally to set up call centres, which defrauded numerous victims in Germany, Switzerland, Austria, Australia and Canada for at least tens of millions of euros.

Four call centres and 18 places were searched, and over 250 workplaces were identified in Serbia, Bulgaria, Cyprus and Germany. Fourteen persons were arrested in Serbia and one in Germany. Overall, more than 250 persons were interviewed and over 150 computers, various electronic equipment and data back-ups, three cars, two luxury apartments and one million US dollars in cryptocurrencies and 50 000 EUR in cash were seized.

Latest update on 23 February 2023:

During a second action day against this fraud network, another 16 suspects were arrested across Serbia, for alleged computer fraud, money laundering and criminal alliance. In total, additionally 16 places were searched and at least EUR 130.000 in cash, and also several cryptocurrency accounts and several vehicles were seized.

Supported by Eurojust, this second part of the operation was carried out by the Special Prosecutor’s Office for Cybercrime of the Republic of Serbia, together with the Ministry of Interior - Service for Combating Organized Crime, Department for Cybercrime and the Australian Federal Police International Command.

The number of victims identified are almost certainly only be the tip of the iceberg. During investigations into the organised crime group (OCG), which ran the fraudulent call centre scheme, high volumes of financial transactions were detected. The OCG operated the call centres from Serbia and used a technological infrastructure in Bulgaria to run the scheme. Allegedly, Cyprus was the base for laundering the illegal proceedings.

Crypto coins generic imageThe network attracted potential investors online and often contacted victims by phone to lure them into doing small investments, speaking English and German. After initial gains, victims invested more money, which they subsequently lost. During the operation, active call centres were searched and closed by the authorities in Serbia.

Eurojust organised a coordination centre with Germany, Bulgaria, Cyprus and Serbia to support the cross-border judicial cooperation, including the presence of a crypto expert from Germany and Europol EC3. The Agency also organised a coordination meeting, during which a joint investigation team (JIT) between Germany and Serbia was agreed upon.

Europol organised an operational meeting and provided support to the joint action day from the Eurojust coordination centre and two of the participating countries. A group of 33 German police officers took part in the actions in Bulgaria, Cyprus and Serbia, as a large share of the victims are from Germany.

Investigations into the online scam were launched in 2021 by the Public Prosecutor’s Office (PPO) in Stuttgart in Germany and the State Office of Criminal Investigations of Baden-Württemberg. Eurojust organised a coordination meeting in November 2022 to prepare for this week’s operation and provided judicial, logistical and financial support to the JIT.

The operation was carried out on the ground by:

  • Bulgaria: General Directorate National Police and Investigative Department in Sofia City PPO under supervision of the Sofia City Prosecutors’ Office;
  • Cyprus: Crime Combating Department, Office for Executing European Investigation Orders and Letters of Request Limassol/Pafos Branch;
  • Germany: PPO Stuttgart; State Office of Criminal Investigations Baden-Württemberg; Police Headquarters of Aalen and Reutlingen;
  • Serbia: Special Public Prosecution Office for Combating High-Tech Crime; Ministry of Interior of the Republic of Serbia – Service for Combating Organized Crime.