Ukrainian police and the Security Service of Ukraine said they dismantled a Kyiv-based network of fake investment platforms that defrauded cryptocurrency users, identifying 62 victims from more than 20 countries and linking at least 46 people to the operation.

According to the authorities, the alleged scheme operated through fake investment websites promoted on Telegram as profitable cryptocurrency projects. Investigators said users were shown fabricated transaction results and inflated balances after depositing funds, creating the appearance of successful trading activity.

When clients attempted to withdraw their money, access to funds was blocked, authorities said. Victims were then instructed to approve a so-called trial operation, which investigators said allowed the group to steal all crypto assets held in the affected accounts. After the theft, users were blocked from the platforms.

The operation had a cross-border footprint. Authorities said victims were identified in more than 20 countries, including Poland. They also said the group collected personal data from users, creating a risk that affected individuals could be targeted again through follow-on fraud or identity abuse.

Law enforcement carried out 34 searches and seized more than 100 computers, phones, documents, and 15 vehicles. Authorities said the suspects could face prison terms of up to 12 years. The statement also cited broader cybercrime pressure in Poland, saying CERT Polska recorded 260,783 cybersecurity incidents in 2025, with 97% classified as computer fraud, while losses in cases handled by the Central Bureau of Cybercrime reached about 537 million zloty.

Why It Matters

The case highlights a persistent weak point in crypto market infrastructure: fraud built around off-platform user acquisition rather than direct attacks on blockchains or exchanges. Fake investment dashboards, Telegram promotion, and withdrawal traps can still pull users into schemes that look like legitimate crypto products, especially when operators create false trading records and balance data.

It also shows how crypto-related fraud investigations are becoming more international in scope. Even with a relatively limited confirmed victim count, a network spanning more than 20 countries raises compliance, tracing, and enforcement questions for platforms that may encounter linked wallets, stolen funds, or reused user data.