Ukraine Police Dismantle Crypto Fraud Ring with $1M Monthly Turnover

The Security Service of Ukraine (SBU) and the National Police have successfully neutralized a sophisticated criminal network involved in large-scale cryptocurrency fraud. According to official reports released on September 1, 2026, the group operated a series of fraudulent investment platforms that targeted users in more than 20 countries, including Germany, France, Canada, and Israel. Law enforcement officials revealed that at its peak, the organization’s monthly illegal turnover reached approximately 1 million USD.

Social Engineering and "Drainer" Malicious Code

The investigation, led by cyber experts in Kyiv, identified the alleged organizer as a 25-year-old IT specialist who recruited dozens of tech professionals to facilitate the scheme. The group utilized Telegram channels to disseminate deceptive advertisements for high-yield investment opportunities. Victims were lured with fictitious trading statistics and promises of stable profits to gain their trust.

• The suspects posed as representatives of legitimate cryptocurrency exchanges.
• Victims were directed to phishing websites that visually mimicked authentic financial services.
• A malicious software known as a "drainer" was embedded in these counterfeit platforms.

Once users connected their digital wallets to the spoofed site to "verify" their accounts or confirm a transaction, the drainer code granted the attackers full access to the funds. The assets were then immediately transferred to addresses controlled by the criminal group, effectively emptying the victims' wallets.

Law Enforcement Raids and Legal Consequences

In a coordinated operation, authorities conducted 23 searches across various offices and residential properties in Kyiv. During these raids, law enforcement seized computer hardware, mobile devices, and substantial amounts of cash believed to be proceeds of crime. Additionally, 16 luxury vehicles—including models from Porsche, BMW, and Mercedes-Benz—were confiscated as part of the evidence-gathering process.

Investigators have currently identified 62 specific victims across the international community, though the total number of affected individuals may be higher given the global reach of the Telegram-based advertisements.

Under current Ukrainian legislation, the suspects could face up to 12 years in prison with the confiscation of all property if convicted of large-scale fraud. The investigation remains ongoing as the Prosecutor General’s Office and the SBU work to identify further victims and potential accomplices within the network.