Police Seize 100 Servers in International Investment Fraud Crackdown

Law enforcement agencies have seized more than 100 servers and arrested seven suspects during a multi-year international investigation into a €4m investment fraud operation.

The operation, led by the Itzehoe Public Prosecutor’s Office in Germany, targeted the infrastructure used to host fraudulent investment websites. The crackdown, which took place on 3 November 2026, included searches at 17 different locations and the seizure of various assets and evidence.

The Mechanics of the Fraud Scheme

Investigators identified a sophisticated social engineering pipeline used to defraud victims across as many as 50 countries. According to Europol, the process began with deceptive advertisements promising significant financial gains with no downside risk.

Once individuals engaged with these advertisements, their personal data was allegedly shared with criminal organisations operating scam call centres. These centres, located in Albania, Kosovo, and North Macedonia, used the data to contact victims and persuade them to invest in fictitious schemes.

Victims were presented with online accounts displaying illusory gains to encourage further investment. When attempts were made to withdraw funds, brokers used stalling tactics to prevent payments before eventually cutting all contact, leaving victims unable to recover their capital.

International Law Enforcement Cooperation

The coordinated action involved authorities from Albania, Cyprus, Finland, Germany, Israel, Kosovo, and North Macedonia. The seven suspects arrested during the operation are expected to be extradited to Germany to face charges.

The investigation has been ongoing since 2022, when a German couple reported being unable to withdraw funds from an investment scheme. Previous enforcement actions in 2022 and 2025 led to the arrest of several suspects and the seizure of electronic devices and documents in Belgium, Latvia, Cyprus, and Israel.

While the current operation has significantly disrupted the network’s hosting capabilities, authorities have not yet claimed the entire criminal organisation has been dismantled. The investigation continues as police process the seized digital evidence.