Ukraine Dismantles Crypto Scam Ring Operating Across 20+ Countries
Ukrainian police shut down a network running fake cryptocurrency investment platforms that drained wallets across more than 20 countries, with monthly turnover reaching approximately $1 million. Investigators have identified 62 victims so far and traced the scheme to Kyiv-based operators using Telegram ads to recruit targets.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
How the Scheme Operated
The network deployed fake investment advertisements on Telegram channels targeting European victims, directing them to lookalike cryptocurrency exchanges that mimicked legitimate platforms. Once users deposited funds, the fraudsters emptied their wallets. The National Police of Ukraine's Main Investigation Department led the operation to dismantle the infrastructure.
Scope and Scale
Investigators identified 62 confirmed victims across more than 20 countries, though police said the actual victim count may be higher. The operation processed approximately $1 million in monthly turnover at its peak, according to both Decrypt and Crypto.news reporting. The scheme was based in Kyiv and relied on social engineering through messaging platforms to build trust before executing the theft.
Investigation Status
The National Police of Ukraine has not yet released details on arrests or charges, though the dismantling of the infrastructure suggests the operation has been disrupted. The case adds to a broader pattern of cryptocurrency fraud originating from Eastern Europe and targeting Western victims through social platforms.
Why It Matters
For Traders
CEX users should audit recent deposit and withdrawal activity across exchange wallets; lookalike exchange sites remain a persistent vector for credential theft.
For Investors
The continued sophistication of crypto fraud rings, particularly those exploiting messaging platforms for recruitment, underscores regulatory and exchange-level verification gaps.
For Builders
DeFi and CEX teams should review identity-verification and anti-phishing measures; Telegram's ease of use for fraudster advertising remains a structural vulnerability.
This article is for information only and is not financial advice. Read the full disclaimer.
