
Police and Security Service shut down fake platforms that defrauded victims in over 20 countries, netting up to $1 million monthly.
AI-generated summary
The operation involved fake investment platforms that used drainer scripts to steal assets from users in over 20 countries. The network was managed from offices in Kyiv.
Ukraine's National Police and Security Service have shut down a network of fake investment platforms that drained crypto wallets belonging to people in more than 20 countries, the agencies said on Tuesday.
Investigators have identified 62 victims so far, among them citizens of Germany, Poland, Lithuania, Latvia, Spain, France, the UK, Canada and Israel. The organizer recruited more than 46 Ukrainians and ran several offices in Kyiv and the surrounding region. Developers built the fake platforms and kept them online against blocking attempts, while others staffed the offices, worked the phones and handled security.
The Security Service described the organizer as a 25-year-old IT specialist and put the operation's turnover at up to $1 million a month at its peak. Its account reported that the pitch began on Telegram, where the group advertised supposedly profitable crypto projects.
Users who signed up connected a wallet and sent funds for what they were told were investment projects. Staff then faked the trading by hand, showing balances climbing in each customer's dashboard.
Withdrawal requests were blocked. To verify the platform was working, victims were told, they needed to connect their main wallet and approve a small test transaction. That approval fed a drainer built into the site, which moved the assets to wallets the group controlled and locked the victim out.
Investigators traced server equipment in the Netherlands holding the group's database, and got into it. It listed victims, their wallet addresses, the sums taken, internal correspondence and records of how the platforms ran. Registration and verification had also harvested passport details, phone numbers, email addresses, logins, passwords and photographs.
Officers conducted 34 searches across Kyiv and the region, seizing more than 100 computers, more than 100 phones, 79 SIM cards, a GSM gateway, cash and 15 cars. Some vehicles and property were registered to suspects' wives and relatives. The organizer moved with armed guards.
The case is proceeding under Part 5 of Article 190 of Ukraine's criminal code. Police say they are still identifying everyone involved, further victims and the total sum stolen.
AI outlook — possibilities, not facts
Prosecution of the 46 identified suspects under Article 190 of the criminal code.
Very likely · Within months

The FBI seized approximately $560,000 in cryptocurrency and took control of online infrastructure allegedly used by Hamas to collect donations, according to a Justice Department announcement. The funds were traced to wallets and accounts linked to Hamas' military wing, the Al Qassam Brigades, under warrants issued in March, June, and October 2025. Authorities stated the operation disrupts terrorist financing through digital networks and serves as a warning that cryptocurrency cannot shield illicit fundraising from law enforcement.

Britain's National Crime Agency has frozen over $13.6 million in a Barclays account held by the Premier League, received as the first payment from Sorare under a four-year sponsorship deal. The freeze, obtained under the Proceeds of Crime Act, aims to prevent dissipation while investigating potential links to third-party criminality. Sorare denies wrongdoing and states the funds are not in its account, while facing separate prosecution by the UK Gambling Commission over alleged unlicensed gambling activities.

The UK's National Crime Agency froze approximately $13.5 million linked to Sorare following a Westminster magistrates' court order, as part of an investigation into alleged unlicensed gambling. The blockchain-based digital trading card company had a terminated $162 million Premier League partnership. The FCA previously warned Premier League clubs about unauthorized crypto sponsorships.

South Korean police charged four Uzbek nationals with financing terrorism by sending cryptocurrency to a designated terrorist group and using funds to buy vehicles shipped to Syria, marking the first case of crypto flowing from a terrorist group and returning as physical goods.

The UK's National Crime Agency has frozen $13.6 million in a Premier League bank account, representing an initial sponsorship payment from crypto firm Sorare. The Premier League is not accused of wrongdoing as authorities investigate potential third-party criminality.

Avon and Somerset Police seized 20.21 BTC and related assets worth $1.4 million traced to darknet markets operating between 2016 and 2019. The funds were forfeited under the Proceeds of Crime Act after the suspect, who had a prior money laundering conviction, died. The seizure marks the largest crypto asset forfeiture by the force since new wallet freezing powers took effect in April 2024.