Spain Cybercrime Arrests Dismantle €140 Million Fraud and Money Laundering Network

Spanish authorities have dismantled a major cybercrime organization accused of laundering more than €140 millionthrough investment fraud and business email compromise (BEC) attacks. The international investigation resulted in four arrests across Spain, Portugal, and Panama.

Police say the operation relied on hundreds of bank accounts and dozens of accomplices to move stolen funds across multiple countries.

Fraud Network Used Hundreds of Bank Accounts

Investigators describe the organization as operating on an industrial scale.

According to police, the group controlled more than:

• 800 bank accounts
• 120 business accounts
• 67 money mule accomplices

The criminals allegedly received stolen money into the first layer of accounts before quickly transferring it through a complex chain of additional accounts.

This process was designed to hide the origin of the funds and make the money difficult for investigators to trace or recover.

Millions Linked to Investment Fraud and BEC Attacks

Authorities have confirmed that approximately €94 million passed through the laundering network.

Investigators also connected another €61 million to the same organization, specifically linking those funds to business email compromise attacks carried out during 2024.

Police say the group carried out both CEO fraud and fake invoice fraud, two common forms of business email compromise.

In these schemes, attackers impersonate company executives or trusted business partners to convince employees to transfer money into bank accounts controlled by criminals.

Investigation Led to International Operation

The investigation began after authorities detected suspicious money laundering activity involving 19 companies.

Once investigators identified the group’s key members, Spanish police launched a coordinated international operation with assistance from Europol and Interpol.

Law enforcement officers searched six locations across:

• Barcelona
• Girona
• Tarragona
• Porto, Portugal

A fourth suspect was arrested separately in Panama.

Police say two of the suspects had recently left Spain but continued supporting the criminal operation from abroad.

Computers, Smartphones, and Millions Seized

During the raids, investigators seized:

• 15 computers
• More than 170 smartphones

Authorities believe the devices were used to coordinate thousands of fraudulent financial transfers.

Police also froze approximately €3 million in suspected criminal proceeds. The recovered funds are expected to be made available to compensate victims.

Authorities Say the Network Has Been Dismantled

Based on the evidence gathered during the investigation, Spanish authorities believe they have dismantled the money laundering network and arrested its primary operators.

The case highlights the growing international nature of cyber-enabled financial crime, where business email compromise attacks, investment scams, and money mule networks work together to move stolen funds across multiple jurisdictions.