Fraud and Embezzlement
Investment fraud: 7 arrested and more than 100 servers seized in an international operation, and a company from Cyprus and Israel is suspected of supplying the fake websites
Crypto and forex investment fraud: 7 arrested, 100+ servers seized in an international operation. A Cyprus-Israel firm allegedly supplied fake trading sites.
In brief
- On November 3, 2026, seven suspects were arrested, 17 locations were searched and more than 100 servers were seized, in an operation led by the prosecutor's office in Itzehoe, Germany, with the support of Europol and Eurojust.
- According to Eurojust, a company that operated from Cyprus and Israel is suspected of supplying criminal organizations with fake investment websites as a service (crime-as-a-service).
- The estimated damage exceeds EUR 4 million, and potential victims are located in at least 50 countries.
- Status: arrests for the purpose of surrender or extradition to Germany. The names of the suspects and of the company have not been published, and they are presumed innocent.
What the operation uncovered
According to the Eurojust announcement, the investigation began in 2022, after a couple in Germany complained that they were unable to withdraw alleged profits from an online trading platform. In the current operation, seven suspects were arrested for surrender or extradition to Germany, and searches were carried out at 17 locations, including a call center in Kosovo (Eurojust).
Europol said the operation struck the infrastructure of the fraud scheme and that more than 100 servers were seized (Europol). This is the third phase of the case, following earlier actions in 2022 and 2025.
How the scheme worked, according to the announcements
Victims were lured with the promise of high, fast profits from trading in crypto, forex and stocks. After a small first transfer, the platform displayed inflated profits, and "brokers" pressed the victims to deposit larger amounts. Withdrawal requests were rejected again and again, and in the end the operators disappeared (Eurojust).
According to the suspicion, a company that operated from Cyprus and Israel supplied the fake websites to other criminal groups. Its suspected clients were located in Albania, Kosovo and North Macedonia, where they ran call centers. According to a report in the Cyprus Mail, personal details collected through misleading advertisements were sold to the call centers (Cyprus Mail).
Who took part
On the Israeli side, the Israel Police took part through Lahav 433 and the legal assistance unit of the Intelligence Division. Authorities from Germany, Cyprus, Finland, Albania, Kosovo and North Macedonia also took part in the operation. The announcements do not describe any arrests or searches in Israel (Eurojust).
What this means if you were harmed by a trading website
A website that shows profits but makes withdrawals difficult is a clear warning sign. Anyone who transferred money should keep screenshots, transfer confirmations, digital wallet details and conversations with the "broker". This information makes it possible to trace the money and the people running the website, even when it is registered outside Israel.
Sources: Eurojust, 03.11.2026, Europol, 03.11.2026, Cyprus Mail, 03.11.2026.
Further reading: Fake profile: how to find out who is behind it, Money laundering red flags in a business, and Financial fraud investigation service.
The information in this section is general and is not legal advice. The announcements do not mention indictments or convictions, the names of the suspects and of the company have not been published, and they are presumed innocent.
