Panama Arrests Ringleader of Multi-Million Dollar Fraud that Rocked Europe

An international operation against cyber fraud resulted in the dismantling of a criminal organization that allegedly stole 140 million euros through scams in several European countries. Among the four arrested is a man captured in Panama, considered a key figure in the financial network.  The investigation, led by the Spanish National Police with support from Europol, Interpol, and authorities in Portugal and Panama, resulted in the arrest of two suspects in Portugal, one in Spain, and one in Panama.  According to the investigation, one of those arrested in Panama was responsible for managing the organization’s financial infrastructure.

Before settling in Panama, he had lived in several countries and, according to the Spanish police, coordinated some of the fraud operations from his residence there.  According to authorities, the organization used various forms of fraud, including fake investment platforms, the “CEO” scam, fraudulent invoices, and attacks known as “Man in the Middle,” in which criminals intercepted communications to divert payments.  The investigation revealed that the network opened more than 800 bank accounts and created 120 companies to receive and move the illegally obtained money.

In addition, 67 foreign front men were identified as participating in the scheme through a network of “money mules.”  During the raids, more than 170 cell phones and 15 computers used to carry out thousands of bank transfers were seized. Authorities also managed to freeze three million euros of fraudulent origin in order to return those funds to the victims.  The investigation continues to identify other possible members of the organization and determine the full scope of its operations.  More details below:

Spanish police have broken up a criminal group accused of large-scale online fraud. Four suspects were arrested in Spain, Portugal, and Panama. The group allegedly laundered millions through fake investments and complex banking schemes.

Spanish National Police have dismantled a sophisticated criminal network accused of orchestrating one of the largest online fraud operations in recent years, with losses totaling €140 million across several European countries. The investigation led to the arrest of four individuals—two in Portugal, one in Spain, and another in Panama—who now face charges related to a series of high-value scams and money laundering activities. Authorities allege the group specialized in fraudulent investment platforms, CEO impersonation scams, fake invoices, and so-called ‘Man in the Middle’ cyberattacks, where hackers secretly intercept and alter communications between parties. According to police statements, the organization managed to open over 800 bank accounts and set up 120 shell companies to funnel illicit funds from numerous victims. These funds were then laundered through a vast network of ‘money mules,’ many of whom were European nationals brought to Spain specifically to establish companies and open bank accounts for the scheme.

Investigators have so far identified 67 foreign frontmen who did not reside in Spain, tracking an economic flow exceeding €94 million through these channels. An additional €61 million was reportedly defrauded in 2024 alone via CEO impersonation tactics. The international operation, coordinated with Europol and Interpol, involved simultaneous actions in Spain, Portugal, and Panama, reflecting the cross-border nature of the criminal enterprise. The probe began when police noticed business activities by nine individuals and 19 companies that appeared legitimate but raised suspicions of money laundering. Further investigation revealed the scale of the operation and allowed authorities to pinpoint key members responsible for both management and recruitment of money mules. In February, the main suspect relocated to Porto, Portugal, prompting a coordinated effort between Spanish and Portuguese authorities, including European arrest warrants for him and his partner. Another central figure, responsible for managing the financial infrastructure, left Spain for Panama after transiting through several countries, where police discovered a fully equipped fraud management office in his residence.

Other members of the group operated from Barcelona, Girona, and Tarragona, acting as ‘mule shepherds’—mid-level managers overseeing the financial logistics. Police succeeded in dismantling two main operational centers, arresting their leaders and seizing more than 170 smartphones and 15 computers used to process thousands of transactions. Additionally, authorities have frozen €3 million in fraudulent assets, which will be made available to victims. This case highlights the growing complexity of cyber-enabled financial crime in Europe, where criminal groups exploit international banking systems and digital platforms to target individuals and businesses. The scale of the operation and the use of cross-border networks echo broader concerns about organized fraud, as seen in other high-profile cases affecting Spain and its regions. For example, issues of criminal activity and legal pressure on local courts have also been reported in Catalonia, where nearly 40% of Spain’s illegal home occupation complaints were concentrated in recent years.

According to available data, the use of ‘money mules’—individuals who transfer illegally acquired money on behalf of others—remains a persistent challenge for law enforcement across Europe. These schemes often rely on recruiting vulnerable or unwitting participants, making detection and prosecution more difficult. The involvement of international agencies like Europol and Interpol in this case underscores the need for coordinated action to combat increasingly globalized financial crime. As digital fraud methods evolve, Spanish authorities continue to adapt their investigative strategies, focusing on disrupting both the technical infrastructure and the human networks that enable such large-scale scams.