The National Police have identified members of a criminal organisation that set up a network of fraudulent call centres in Kyiv and Dnipro, according to a press release from law enforcement.
It is reported that the perpetrators systematically seized victims’ cryptocurrency assets by using deception and abusing their trust.
“They operated with clearly defined roles. Some searched for potential victims on dating websites and in messaging apps; others gained their trust, simulated romantic relationships or posed as experienced investors. Later, the victims were persuaded to invest money in supposedly profitable crypto projects,” the police said.
To create the illusion of successful investments, the suspects used crypto wallets under their control, fake accounts and even face-swapping during video calls. When people invested funds, so-called “mentor-analysts” joined in.
Under the pretext of helping with trading, they gained access to victims’ mobile device screens, collected confidential data and took control of access to their crypto wallets.
The assets were then transferred to accounts under the perpetrators’ control, and contact with the victims was cut off. Losses in the new episodes amount to more than UAH 1.3 million. The total losses suffered by eight victims from Ukraine, Kazakhstan and Lithuania exceeded UAH 3.7 million.
As part of the investigation, detectives established the suspects’ involvement in three episodes of theft of crypto assets from Lithuanian citizens.
On 22 October 2026, seven members of the organisation were served with notices of suspicion under Part 1 of Article 255 (Establishing a criminal organisation, leading such an organisation or its structural units) and Part 5 of Article 185 (Theft committed on an especially large scale or by an organised group) of the Criminal Code of Ukraine.
- Earlier, law enforcement officers carried out a special police operation and detained eight people, including the organisers and key leaders of the criminal structure. During searches, they seized more than $100,000 in cash, computer equipment, mobile phones, data storage devices, crypto wallets, bank cards, draft notes and ten premium-class cars. According to preliminary data, more than $2 million passed through the accounts of members of the organisation.
- Investigative actions are currently under way to identify all victims, determine the full extent of the damage caused and establish whether the suspects may be involved in other similar crimes.
- Procedural oversight in the criminal proceedings is being carried out by the Office of the Prosecutor General.