Cybercrime Southeast Europe Newsletter No. 68

The Growing Threat of Fake Telegram Groups in the Western Balkans

Dear Clients,

In recent months, we have seen a sharp rise across the Western Balkans in fake Telegram and WhatsApp groups posing as “victims’ communities” or even “official channels of the police, international investigators, or law firms.”
At first glance, these groups may appear legitimate — using official symbols, calling themselves “task forces,” posting photos of alleged asset seizures, and quoting laws.

However, in most cases, the people behind these groups are the same individuals or connected networks responsible for the original fraud.
Their goal is not to help but to exploit the victims again — or to find new ones.

Common tactics include:

• requesting copies of passports, ID cards, bank cards, or email access;
• asking for “administrative fees,” “taxes,” or “charges” to supposedly return your funds;
• organizing “membership verifications” that require an upfront payment;
• spreading false news about arrests and asset seizures to create urgency and pressure victims into acting quickly.

Why are they especially dangerous in our region?
Because of the shared language and cultural familiarity, these scams can quickly gain the trust of people — especially those already affected and desperate to recover their losses.

Our advice:
Do not share personal data or send money based on messages from such groups. Legitimate investigative bodies do not operate through private Telegram or WhatsApp channels, and they never require payment in order to return funds.

Sincerely,
Your DefendMe Team