Ukraine says it busted a Kyiv crypto ring that drained EU citizens’ wallets

The SBU says the alleged scheme’s monthly turnover from stolen funds could reach $1 million during its most lucrative periods.
SBU and Prosecutor General’s Office personnel stand inside a crowded room with computers as several people with pixelated faces lie or sit on the floor. An armed tactical officer stands near the back.
Ukrainian law enforcement officers conduct a search in Kyiv as part of an operation against an alleged crypto-fraud network targeting EU citizens. Source: SBU
Ukraine says it busted a Kyiv crypto ring that drained EU citizens’ wallets

Ukraine’s Security Service (SBU) and National Police shut down a Kyiv-based network of several dozen people who allegedly used fake cryptocurrency investment platforms and malicious code to steal digital assets from citizens of EU countries, the SBU said on 1 September.

Investigators identified the alleged organizer as a 25-year-old Kyiv IT specialist, according to the SBU. The case reaches beyond Ukraine because the agency says the alleged victims were EU citizens. The agency said the network’s monthly turnover from funds obtained illegally could reach $1 million during its most lucrative periods.

The SBU said investigators had documented alleged crimes by every member of the group. However, its statement did not specify how long the network had operated, how many EU citizens were affected, which countries they lived in, or the total amount allegedly stolen.

The agency did not name any foreign law enforcement partners involved.

How the crypto ring operated

The alleged organizer of the crypto ring recruited other tech workers in the capital, the SBU said. Posing as cryptocurrency-platform representatives, they offered targets seemingly profitable ways to invest in digital assets.

The network found victims by posting about supposedly lucrative crypto projects in popular Telegram channels, then showed them fabricated trading results and fake profits to make the operation look legitimate, investigators said.

Engaged targets were sent a link to a counterfeit site that mimicked a real crypto service and were persuaded to connect their wallets and approve a transaction, the SBU said. The site carried malicious code called a “drainer” that, the agency said, let the operators withdraw the victims’ assets to addresses they controlled—emptying the wallets.

During 23 searches of the suspects’ offices and homes, officers seized phones, computers, money believed to be criminal proceeds, and 16 high-end cars, including Porsche, BMW, and Mercedes-Benz models, the SBU said.

Authorities were still deciding whether to serve notices of suspicion, while the investigation continued under the Prosecutor General’s Office, the SBU said. Those involved could face up to 12 years in prison with confiscation of property.

Ukraine’s role in combating cross-border cybercrime

Ukraine has previously joined with foreign agencies to pursue cross-border cyber threats. In April, the SBU said it worked with the FBI, EU law enforcement, and Polish counterintelligence to disrupt Russian military-intelligence spying through hacked routers. The operation blocked more than 100 servers and removed hundreds of routers in Ukraine from Russian control.

To suggest a correction or clarification, write to us here

You can also highlight the text and press Ctrl + Enter

Please leave your suggestions or corrections here



    Euromaidan Press

    We are an independent media outlet that relies solely on advertising revenue to sustain itself. We do not endorse or promote any products or services for financial gain. Therefore, we kindly ask for your support by disabling your ad blocker. Your assistance helps us continue providing quality content. Thank you!

    Related Posts

    Ads are disabled for Euromaidan patrons.

    Support us on Patreon for an ad-free experience.

    Already with us on Patreon?

    Enter the code you received on Patreon or by email to disable ads for 6 months

    Invalid code. Please try again

    Code successfully activated

    Ads will be hidden for 6 months.