An email lands in an employee's inbox. It looks like it came from the CEO, it's asking for an urgent wire transfer, and the employee sends the money. Spanish police say one gang turned that trick, plus fake invoices and fake investment sites, into 140 million euros, about 160 million dollars.
The Spanish National Police announced Monday that the network is dismantled. Officers arrested four people, two in Portugal, one in Spain, and one in Panama, in raids coordinated with Europol and Interpol. Police also seized 15 computers and more than 170 phones that investigators say the group used to move the transfers.
Fake bosses, fake invoices, fake returns
Some victims thought they were investing. The gang ran fake investment platforms that promised returns and simply kept the deposits. Others got the boss email, or paid an invoice that a criminal had quietly edited to point at the wrong account.
The nastiest version went further. The gang slipped into real email conversations between a company and its supplier and swapped the bank account number on a payment. Everything about that payment looked normal to the person approving it, except where the money went.
Moving the stolen money was the real operation. Police say the group ran more than 800 bank accounts, created 120 companies, and used 67 recruited money mules who let stolen funds pass through their own accounts to hide where the money came from. When a victim paid, the cash split and bounced through that maze within days, which is exactly what made it so hard to claw back.
Policía Nacional announcement, BleepingComputer on the arrests
Two cents on the euro
Police froze about 3 million euros for the victims. But that works out to roughly 2 cents back for every euro stolen. Everything else is basically gone, scattered across accounts and borders faster than any bank could stop it.
There's one boring defense that beats all of this. If an email asks you to change payment details or wire money urgently, call the person on a number you already have. Don't trust a number from the email itself. That check costs a minute. Skipping it is how companies across Europe handed one gang 140 million euros.
