Dutch police have successfully dismantled an international cryptocurrency investment fraud ring that siphoned an estimated €100 million per month from victims globally. The syndicate functioned completely unlike a disjointed scam operation. It operated with the rigid structure of a legitimate international corporation.
Active since at least 2021, the criminal enterprise employed over 700 people scattered across roughly two dozen call centers in multiple countries. Europol and Belgian authorities collaborated closely on the takedown. Europol is currently sharing the suspects’ details globally to initiate further international prosecutions.
The Mastermind and the Mechanics
At the center of the operation was a 46-year-old “well-known hacker” holding both Israeli and Polish citizenship. Authorities apprehended him at a Polish airport immediately after he arrived on a flight from Dubai. He was subsequently extradited to the Netherlands and ordered to remain in pretrial detention. The capture of the ringleader and the syndicate’s 700-employee scale highlight a highly professionalized cyber-fraud apparatus that law enforcement is still working to fully untangle.
Police also arrested five additional “financial advisers” residing in Cyprus, Belgium, and Greece. These operators did not rely on quick-hit phishing tactics. They built trust with victims over weeks of communication before convincing them to deposit funds into entirely fabricated trading platforms. In the Netherlands alone, approximately 550 identified victims suffered collective losses approaching €25 million.
Operation Sunflower
This localized bust connects directly to an intensified international crackdown on professionalized social engineering. Earlier this year, Interpol executed “Operation First Light 2026,” a global sweep spanning 97 countries that analyzed over 152,000 fraud cases and resulted in 5,800 arrests. But the Dutch police are deploying a highly specific mechanism to dismantle the rest of this €100 million operation.
Investigators launched the “Operation Sunflower” portal to actively contact the syndicate’s low-level “account managers.” The portal offers these ground-level employees a narrow window to cooperate as witnesses. If they refuse, they face imminent prosecution based on the digital evidence already seized by authorities.
The Verdict
The scale of this €100 million monthly operation proves that modern cryptocurrency scams are no longer run by isolated individuals, but by highly structured, multi-national corporations. Users must approach any unsolicited digital investment advice with extreme skepticism, as the interfaces and “financial advisers” they interact with are often entirely fabricated.