Spanish law enforcement has broken a €140 million cyber‑fraud and money‑laundering operation, arresting four suspects in Spain, Portugal and Panama. The investigation uncovered a sprawling network of over 800 bank accounts and 67 money mules.
Key Takeaways
- €140 million stolen through investment fraud and BEC scams.
- Over 800 bank accounts and 67 money mules used to launder proceeds.
- Four suspects arrested in Spain, Portugal and Panama; €3 million frozen for victims.
Spanish Police have dismantled a sophisticated cyber‑crime and money‑laundering organization that generated roughly €140 million ($160 million) from investment fraud and business‑email‑compromise (BEC) attacks. The coordinated operation led to the arrest of four individuals across Spain, Portugal and Panama.
Complex Financial Web
Investigators revealed that the perpetrators operated more than 800 bank accounts, 120 business accounts and recruited 67 external accomplices acting as “money mules.” Illicit funds were funneled into these accounts and immediately layered through a secondary network of accounts in third‑country jurisdictions, making the trail extremely hard to follow.
CEO and False‑Invoice Schemes
The police described the scheme as “CEO fraud” and “false‑invoice fraud,” where attackers impersonated senior executives to divert payments into accounts they controlled. Of the total sum, €94 million was routed through the identified network, with an additional €61 million linked to BEC operations that peaked in 2024.
International Collaboration and Raids
The probe began after authorities detected money‑laundering red flags in 19 related companies. With the assistance of Interpol and Europol, a multi‑national operation was launched, targeting premises in Barcelona, Girona, Tarragona and Porto, Portugal. A further suspect was apprehended in Panama.
Seizures and Victim Compensation
Law enforcement seized 15 computers and more than 170 smartphones believed to have facilitated thousands of fraudulent transfers. Immediately, €3 million ($3.4 million) of the proceeds were frozen and earmarked for restitution to the victims. Police believe the laundering network has now been effectively neutralized.
Implications for Future Cyber‑Crime Defense
This bust highlights the transnational nature of BEC scams and underscores the importance of coordinated law‑enforcement action. Experts warn that financial institutions must tighten monitoring of anomalous transactions, while corporations should bolster employee awareness against social‑engineering tactics.