Major Europol anti-crypto fraud operation: Maltese police involved in dismantling a €700m network
In one of the largest anti-crypto fraud crackdowns ever conducted in Europe, Europol has coordinated an international operation leading to the dismantling of a criminal network worth over €700 million. Central to the investigation – which developed over several years through deep cooperation between national authorities and specialist units – was the contribution of Malta’s Police Blockchain Analysis Unit, which helped trace illicit flows and identify local victims.
The operation marks a significant turning point in the fight against crypto-related fraud. This phenomenon has rapidly grown in recent years and proved capable of moving funds across borders at a pace that challenges traditional financial oversight systems.
The investigation: from one suspicious platform to a global web
The investigation began with a single investment platform advertised online, seemingly legitimate, offering fast, guaranteed returns. What first appeared to be an isolated incident soon proved to be the entry point to something much larger. Instead of a lone fraudulent website, investigators uncovered a fully organised network: purpose-built trading platforms, international call centres persuading victims to deposit more funds, psychological manipulation tactics, and a structured money laundering chain.
Many investors were lured through highly professional online ads, often bolstered by deepfake testimonials and fabricated endorsements. Once inside the platforms, users were shown fictitious profit charts designed to encourage further investment. In reality, no trading existed.
How the funds were stolen and laundered
The mechanics of the fraud were simple, yet highly sophisticated in execution. After funds were deposited and converted into cryptocurrency, they were channelled through a complex maze of digital wallets and global exchanges. Transfers were fragmented into smaller movements, spread across multiple jurisdictions, making it harder to identify the final destination of the funds.
While the pseudo-anonymity of crypto transactions enabled the criminal operation to flourish, investigative cooperation has shown that digital movements can still be traced. Advanced blockchain forensics – and coordinated law enforcement work – enabled officers to reconstruct the entire flow of funds. This is where Malta’s role proved especially significant.
Malta’s contribution: four local victims identified
Malta’s Blockchain Analysis Unit played a decisive role by analysing crypto transaction trails associated with the network. Investigators identified four Maltese victims who collectively lost €493,750.
Criminals had convinced local investors to join fabricated trading platforms, showing them fake profits, offering remote assistance, and persuading them to deposit additional money. Remote access tools were presented as technical support, but in reality, they granted criminals the ability to carry out unauthorised transfers directly.
The cases highlight how even jurisdictions with advanced regulatory frameworks are not immune to crypto fraud, particularly when tactics combine technical skill, psychological pressure, and professional-looking interfaces.
Two operational waves across seven countries
The Europol-led operation unfolded in two major phases. The first wave, conducted on 27 October, involved coordinated raids across Cyprus, Germany and Spain. Nine suspects were arrested, and authorities seized bank funds, cryptocurrency assets, cash, digital devices and luxury items.
The second wave – on 25 and 26 November – targeted the affiliate marketing infrastructure that fuelled the recruitment of new victims. Authorities in Belgium, Bulgaria, Germany and Israel executed additional actions against groups responsible for distributing misleading advertising, deepfakes and data-harvesting funnels designed to keep the scheme alive.
Investigators have stressed that this marketing ecosystem was not a secondary component but a pillar of the fraud structure. Without a constant influx of new investors, the platform model would have collapsed.
A clear signal to the crypto sector
Europol described the scale of the operation as “vast”, signalling a clear message to criminals and the industry alike: crypto is not a lawless territory. Although fund flows may appear untraceable, investigative capabilities are advancing, intelligence-sharing is improving, and cross-border enforcement is increasingly coordinated.
The operation also highlights an urgent need for stronger oversight in digital advertising and affiliate marketing – not just in trading activity itself. Fraud schemes rely on persuasion as much as technology. Sponsored posts, deepfake video endorsements, and aggressive call-centre sales strategies remain among the most powerful tools for deception.
What this means for markets, regulators and investors
For the crypto industry, this case represents a critical junction. Either the sector accelerates towards transparency and compliance, or it risks being defined by its vulnerabilities rather than its innovation. Legitimate operators will need to enforce stricter AML controls, tighten wallet tracing procedures, vet marketing partners, and strengthen KYC requirements.
Investors must also take note: guaranteed returns are rarely real. Exercising caution over suspicious promotions, checking regulatory licences, ensuring access to verified support channels, and resisting pressure to invest quickly remain the first lines of defence.
This article was first published in Italian on 9 December 2025.
Be part of the action! Join the world’s biggest iGaming community with SiGMA’s Top 10 News countdown. Subscribe HERE for weekly updates, insider insights, and exclusive subscriber-only offers.
