Nationwide Cybercrime Raid Hits Romania’s Digital Underworld

In a sweeping crackdown on cybercrime, Romanian authorities launched a coordinated operation on June 12 targeting an organized criminal network specializing in online scams. The operation, led by the Directorate for Investigating Organized Crime and Terrorism (DIICOT) in Brașov in collaboration with the national police, executed 23 search warrants across more than twenty counties — a significant strike against the country’s digital underworld.

The investigation centers around a well-organized gang accused of unauthorized access to IT systems, fraud, computer-related fraud, money laundering, and organized crime. According to prosecutors, the criminal group operated throughout Romania, using deceptive tactics to steal significant amounts of money by exploiting popular online messaging apps.

Phishing Disguised as Friendly Support

The scammers’ method was as simple as it was effective. Victims received phishing links via popular mobile messaging applications, with messages designed to appear as if sent by a friend or acquaintance. Typically, these messages would invite the recipient to support a cause — such as voting for a student applying for a scholarship.

Once the victim clicked the link, they were redirected to a counterfeit page resembling a legitimate voting site. In the background, however, the criminals hijacked the user’s messaging account. With control of the account, they then sent out mass messages to the victim’s entire contact list, posing as the victim and urgently requesting a loan.

Unfortunately, many recipients, trusting the familiar sender, transferred money without hesitation — money that immediately vanished into the hands of the fraudsters.

A Sophisticated Financial Laundering Network

The stolen funds were initially funneled into bank accounts belonging to low-level members of the criminal hierarchy — typically unemployed individuals or those without a steady income, often recruited specifically for this purpose. From there, under the guidance of higher-ranking members, the funds were either transferred to other accounts, moved into cryptocurrency wallets, withdrawn in cash via ATMs, or even spent at foreign merchants.

Over 20 Suspects Brought in for Questioning

As part of the operation, more than twenty individuals were detained for questioning, though authorities have yet to confirm how many formal charges have been filed. The investigation remains ongoing, as cybercrime investigators work to map the full extent of the network’s activities and trace the stolen funds through the layers of digital laundering.

A Growing Problem in the Region

This latest raid underscores a worrying trend in Eastern Europe, where cybercriminal networks have increasingly exploited vulnerabilities in digital communication platforms. The phishing tactic used in this case is particularly insidious because it leverages personal trust between contacts to bypass skepticism — a method security experts have seen on the rise globally.