Cyber Security News

Authorities Dismantle Large-Scale Credit Card Fraud Scheme Affecting 4.3 Million Users

 Authorities across nine countries executed a coordinated crackdown on one of the largest credit card fraud networks ever dismantled.

Operation Chargeback, led by German prosecutors and the Bundeskriminalamt, brought down criminal organizations responsible for defrauding over 4.3 million cardholders globally.

The investigation, which began in December 2020, resulted in 18 arrest warrants and more than 60 house searches, with damages exceeding EUR 300 million and attempted fraud surpassing EUR 750 million.

The operation represents a significant victory in the international fight against organized cybercrime.

It demonstrates the power of cross-border law enforcement cooperation in dismantling sophisticated criminal networks that exploit vulnerabilities in payment infrastructure.

How Criminals Exploited Vulnerable Systems

Between 2016 and 2021, the criminal network allegedly created approximately 19 million fraudulent online subscriptions on deceptive websites.

These platforms primarily offered pornography, dating, and streaming services, designed specifically to evade search engine detection and remain accessible only through direct links.

The perpetrators deliberately kept individual charges low, around EUR 50 per month. They used obscure billing descriptions to make unauthorized transactions difficult for victims to identify.

What made this scheme particularly effective was its integration with legitimate payment processing infrastructure.

The suspects allegedly exploited the systems of four major German payment service providers, processing fraudulent transactions through official channels.

Six suspects, including company executives and compliance officers, face charges for allegedly collaborating with fraud networks in exchange for fees and providing direct access to banking infrastructure that legitimized the illegal transactions.

To conceal their operations, the suspects established numerous shell companies primarily registered in the United Kingdom and Cyprus.

These entities served as distribution channels for fraudulent transactions, dramatically reducing chargeback risk and the likelihood of detection.

Crime-as-a-service providers supplied complete corporate structures, including fake directors and falsified Know-Your-Customer documentation, creating layers of criminal obfuscation that protected the networks from discovery.

The coordinated action day involved law enforcement agencies in Germany, the United States, Canada, Singapore, Luxembourg, Cyprus, Spain, Italy, and the Netherlands. German investigators alone conducted 29 searches across multiple Federal States.

They executed five arrest warrants, with over 250 officers from federal police, prosecutors, financial regulators, and tax authorities participating. International cooperation yielded over 90 legal assistance requests to 30 countries.

Authorities secured assets exceeding EUR 35 million in Luxembourg and Germany. Investigators seized documents, data carriers, and communication devices providing evidence of the extensive criminal enterprise.

The investigation involved approximately 44 suspects accused of computer fraud, criminal organization membership, and money laundering.

Europol provided crucial analytical support since May 2023, organizing operational meetings and identifying suspects across jurisdictions.

The agency deployed crypto experts during the action day and coordinated efforts through its Liaison Bureaux network.

Eurojust facilitated judicial cooperation with the United Kingdom and the United States, ensuring seamless information-sharing among prosecutors across nations.

EU Commissioner Magnus Brunner emphasized that over 85 percent of modern investigations rely on online evidence, highlighting the critical importance of data access in combating sophisticated fraud networks.

The success of Operation Chargeback underscores how international cooperation, coordinated by Europol and supported by Eurojust, enables law enforcement to dismantle complex criminal infrastructure spanning multiple countries and affecting millions of victims worldwide.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago