A major police operation has led to the arrest of 44 individuals accused of orchestrating large-scale online scams across Spain. The group allegedly used advanced social engineering and laundered stolen funds through cryptocurrencies, leaving over 140 victims and losses exceeding 430,000 euros.
Spanish police have arrested 44 people accused of running a well-organized cybercrime ring that defrauded at least 146 victims across the country. The group operated in several cities, using a mix of technical skills and social engineering to steal hundreds of thousands of euros. Reports from Heraldo and Diario de Almería put the total losses at over 433,000 euros, with victims spread nationwide.
The investigation started in May 2024 after a victim reported losing 0.5 Bitcoin in an online scam. That complaint led officers to uncover a much larger network. Investigators followed the digital trail of stolen funds and found a complex system for laundering money through cryptocurrencies. The group’s methods made it difficult for police to track the flow of money and identify those involved. According to Diario de Almería, police carried out coordinated raids in six provinces: Tarragona, Barcelona, Almería, Cádiz, Málaga, and Ciudad Real.
"Authorities conducted 14 simultaneous searches across six Spanish provinces, highlighting the extensive reach of the cybercrime network."
— Diario de Almería
The organization was notable for its clear structure and division of roles. Some members ran vishing campaigns, pretending to be bank employees to trick people into giving up their login details. Others managed phishing websites, posted fake rental ads, or sold fraudulent tickets for concerts and events. The group also included people who bought and resold expensive electronics, and those who coordinated a network of ‘money mules’ to move stolen funds through banks. Heraldo reports that the group used both vishing and smishing tactics, reaching victims by phone, SMS, and online ads.
Police describe the group’s approach as persistent and varied. Victims were targeted through calls, text messages, and convincing online listings. The full scale of the operation only became clear after investigators compared reports from different regions and realized they were connected. The confirmed financial damage now exceeds 430,000 euros. The group laundered money using both regular banks and cryptocurrencies.
During the raids in Tarragona, Barcelona, Almería, Cádiz, Málaga, and Ciudad Real, police seized 3,410 euros in cash, cryptoassets worth 54,000 euros, 57 bank cards, 43 SIM cards, 24 mobile phones, four computers, five USB drives, and other electronic devices. Officers also found 773 grams of hashish, a telescopic baton, and a katana, showing the group’s willingness to break the law in multiple ways.
"The investigation was not limited to a single incident but linked a series of frauds reported in different regions, which authorities were able to connect into one coordinated case after analyzing complaints from across Spain."
— Heraldo
The investigation relied on tracing digital evidence and following the money through complex crypto transactions. By mapping out the group’s structure and methods, police brought charges of fraud, money laundering, and criminal association against all 44 suspects. As of now, there are no independent updates on court proceedings in the case.
This case shows how cybercrime in Spain is changing, with criminal groups combining technical skills and classic scams to exploit both digital and real-world weaknesses. The size and organization of this network are a reminder that as fraudsters adapt, law enforcement and the public must do the same. The investigation demonstrates that even complex schemes can be uncovered with the right resources and persistence.
