Two arrested in €1.5M fraud and money laundering scheme targeting 1,500 victims

Approximately 1,500 victims, predominantly foreign residents, defrauded through multiple coordinated schemes.
Distance is protection when fraud crosses borders
The perpetrators deliberately targeted foreign victims to complicate investigation and reduce the likelihood of coordinated law enforcement response.

Em Portugal, dois homens foram detidos pela Polícia Judiciária por suspeita de terem construído, com paciência e método, um ecossistema de engano que atravessou fronteiras e afetou cerca de mil e quinhentas pessoas. A fraude não tinha uma única face: combinava investimentos fictícios em criptomoedas, burlas pelo MBWay, esquemas de manipulação em redes sociais e operações bancárias fraudulentas, tudo convergindo para dispersar mais de um milhão e meio de euros por oito contas bancárias. O caso recorda-nos que a criminalidade contemporânea prospera precisamente na sua dispersão — cada vítima isolada, cada prejuízo aparentemente menor, até que o padrão se revela na sua dimensão coletiva.

  • Cerca de 1.500 pessoas em vários países foram lesadas por um esquema que combinava criptomoedas falsas, burlas pelo MBWay e armadilhas em redes sociais — uma teia de engano deliberadamente diversificada para escapar à deteção.
  • Quatro mil operações de dispersão de fundos foram rastreadas em apenas oito contas bancárias, com 1,5 milhões de euros confirmados, mas os investigadores admitem que o valor real pode ser substancialmente superior.
  • A escolha de vítimas predominantemente estrangeiras não foi acidental — os suspeitos apostaram na dificuldade de coordenação entre jurisdições e na improbabilidade de vítimas dispersas reconhecerem uma origem comum para os seus prejuízos.
  • Os dois homens, de 26 e 42 anos, foram detidos em locais separados — Porto e Braga — e aguardam agora audiência judicial onde serão definidas as medidas de coação adequadas à gravidade dos crimes imputados.

Dois homens, com 26 e 42 anos, foram detidos pela Polícia Judiciária portuguesa por suspeita de terem liderado uma operação fraudulenta de grande escala que afetou cerca de mil e quinhentas vítimas em vários países. A investigação, conduzida pelo Departamento de Investigação Criminal da Guarda, revelou não um esquema único, mas um conjunto coordenado de métodos: carteiras fictícias de investimento em criptomoedas, transferências não autorizadas via MBWay, esquemas de inflação artificial de métricas em redes sociais e operações bancárias fraudulentas para movimentar os fundos roubados.

O que distingue este caso é a sua arquitetura deliberada de dispersão. Nenhuma vítima perdeu, individualmente, uma soma suficientemente elevada para desencadear investigação imediata. Algumas foram atraídas pela promessa de retornos em ativos digitais; outras tiveram as suas credenciais bancárias comprometidas; outras ainda foram enredadas em esquemas aparentemente inócuos de redes sociais, apenas para descobrir que os seus dados tinham sido recolhidos no processo. A escolha de vítimas maioritariamente estrangeiras reforça a dimensão estratégica da operação, explorando a complexidade da cooperação judiciária internacional.

As autoridades documentaram quatro mil transações separadas destinadas a dissimular a origem dos fundos, distribuídas por oito contas bancárias. O valor confirmado ascende a 1,5 milhões de euros, mas a investigação permanece ativa e os montantes totais poderão ser consideravelmente mais elevados. Os dois arguidos, detidos em Porto e Braga, aguardam agora audiência de primeiro interrogatório judicial, onde será determinado o conjunto de medidas de coação aplicáveis face à gravidade e extensão dos crimes que lhes são imputados.

Two men, one twenty-six and the other forty-two, were arrested by the Judicial Police in Portugal on suspicion of orchestrating a sprawling fraud operation that touched the lives of roughly fifteen hundred people across multiple countries. The scheme was not a single con but a coordinated ecosystem of deception: fake cryptocurrency investment portfolios, unauthorized transfers through the MBWay mobile payment system, artificial engagement schemes on social media platforms, and the systematic hijacking of legitimate banking operations to move stolen money.

The investigation, led by the Criminal Investigation Department of the Guarda, has already traced the damage with precision. Across eight bank accounts alone, authorities documented four thousand separate transactions designed to disperse stolen funds. The confirmed total from those accounts stands at approximately one point five million euros, though investigators acknowledge this represents only a partial accounting. Additional sums remain under investigation as the full scope of the operation becomes clear.

What makes this case notable is not merely its scale but its method. The perpetrators did not rely on a single vulnerability or a single type of victim. They cycled through approaches: some targets were lured by promises of returns on cryptocurrency holdings, a pitch that carries particular weight in an era of digital asset speculation. Others fell victim to more traditional banking fraud, their MBWay accounts compromised or their credentials stolen. Still others were drawn into schemes that seemed almost trivial—paying small sums to artificially inflate engagement metrics on social media posts—only to discover their bank details had been harvested in the process.

The victims were predominantly foreign residents, suggesting the operation had a deliberate international dimension. Rather than targeting a concentrated local population, the perpetrators cast a wide net across borders, likely banking on the difficulty of coordinating investigations across jurisdictions and the reduced likelihood that scattered victims would connect their experiences to a single criminal enterprise.

The two men were arrested in separate locations: one in Porto, the other in Braga, both major cities in northern Portugal. They are now scheduled for their initial judicial hearing, where a judge will determine what preventive measures—bail conditions, detention, asset freezes—are appropriate given the severity and scope of the allegations. The investigation itself remains active. The four thousand transactions traced so far represent the transactions authorities have had time to examine in detail; the full number of fraudulent operations may be substantially higher.

What emerges from the case file is a picture of patient, methodical criminality. The perpetrators did not need to steal enormous sums from any single victim. By distributing the fraud across thousands of people and multiple schemes, they created a diffuse pattern that took time to recognize as a coordinated operation. Each individual victim might have lost a few hundred euros, an amount painful but not catastrophic enough to trigger immediate investigation. Collectively, however, the operation generated millions in illicit proceeds that then had to be moved, hidden, and converted into usable assets—the money laundering component that compounds the original fraud.

The investigation identified 4,000 fund dissipation operations across eight bank accounts with a total estimated value of approximately 1.5 million euros, with additional amounts still to be determined across remaining accounts
— Judicial Police statement
The Hearth Conversation Another angle on the story
Inventor

Why target people abroad rather than focus on a domestic market where they'd have local knowledge?

Model

Because distance is protection. A person in Germany or France who loses five hundred euros to a fake crypto scheme is less likely to file a complaint with Portuguese authorities. Even if they do, the investigation crosses borders, which slows everything down. By the time anyone connects the dots, the money is already moving through eight different accounts.

Inventor

The MBWay scams stand out—that's a real banking system, not some fringe platform. How do you compromise those accounts at scale?

Model

You don't need to compromise the system itself. You compromise the people using it. Phishing emails, credential theft, SIM swaps. Once you have someone's login, you have access to their account. The beauty of it is that it looks like the victim authorized the transfer. The bank sees a legitimate transaction.

Inventor

And the social media engagement schemes—that seems almost quaint compared to the cryptocurrency fraud.

Model

That's the point. It's a funnel. You start with something that seems harmless, even profitable. Pay a few euros, get your posts boosted. But the payment method is how they harvest your financial information. By the time you realize something is wrong, they've already moved on to the next layer of the scheme.

Inventor

Four thousand transactions across eight accounts, but they're saying there are more accounts to investigate. How much larger could this actually be?

Model

The one point five million is just what they've had time to audit so far. If the pattern holds across the remaining accounts, you could be looking at double that, maybe more. The investigation is still in its early phase. They've arrested the operators, but now comes the forensic work—following the money through shell companies, cryptocurrency exchanges, whatever they used to launder it.

Inventor

What happens to the victims now?

Model

That's the harder question. Most of them are scattered across Europe, maybe beyond. Recovering their money requires international cooperation, asset seizure, and then distribution—which takes years. Some victims will never see a euro back. The best outcome is that authorities freeze the remaining assets and use them to compensate the people who can be identified and verified.

Contact Us FAQ