Cybercrime Southeast Europe Newsletter No. 115

Investment Fraud Operation in Tirana – Victims’ Funds Moved Through Several European Countries

A new investigation in Albania has once again drawn attention to the way international investment fraud schemes can operate through organised call centres.

According to information published in September, Albanian authorities, working in cooperation with German authorities, took measures against eight individuals linked to a call centre in Tirana. The investigation concerns suspected fraudulent investment platforms allegedly used to target individuals in Germany and other European countries with purported investment opportunities.

The financial aspect of the investigation is particularly significant. According to the information currently available, victims’ funds did not remain in a single account or even within a single country. Payments were reportedly directed to accounts in Bulgaria, Lithuania, Poland and Cyprus, after which the money was transferred further or converted into cryptocurrency.

One fraud scheme – several countries

The case illustrates why international investment fraud can be particularly complex to investigate.

A person who believes they are investing through an online platform may be located in one country, the “broker” communicating with them every day may be operating from another, the bank account receiving the payment may be located in a third, while the funds themselves may quickly be transferred elsewhere.

For this reason, the name of an investment platform is often only the starting point.

Information concerning the recipient of a payment, bank accounts, payment institutions, cryptocurrency wallets, telephone numbers and the individuals communicating with the victim may be equally important when attempting to trace the movement of funds.

Why are call centres important in these investigations?

In this type of fraud, communication with the victim is often not merely a secondary part of the operation. The individuals presenting themselves as brokers or investment advisers may be responsible for building trust, encouraging additional payments and maintaining the appearance that genuine trading or investment activity is taking place.

Identifying the call centre may therefore allow investigators to connect what initially appears to be an isolated online fraud with a broader organised structure.

The latest operation in Tirana also demonstrates why cross-border cooperation can be essential. Digital fraud is not confined by national borders, while investigations and requests for financial information inevitably have to follow the jurisdictions through which the operation and the money have moved.

For victims, this is another reason to preserve complete communications and financial records. Sometimes a detail that initially appears insignificant may ultimately provide a link between an individual payment and a much broader network.

DefendMe Global