Anatomy of a Crypto Scam

An investigation by Forbes Ukraine revealed a large-scale fraud operation centred in Dnipro, where a network of call centres created fake cryptocurrency exchanges and defrauded investors from Europe and beyond of millions of dollars.

A Funnel Built on Trust and Pressure

The scheme began with targeted outreach—cold calls, social media contact, and online advertising. Victims were offered assistance from “investment specialists” promising high returns in crypto markets.

They were then directed to professionally designed platforms—pseudo-exchanges with interfaces resembling well-known trading services. After opening an account, victims typically deposited $200–$1,000 to “test” the system.

Within days, their dashboards showed rapid gains—sometimes 20–50% returns—entirely fabricated.

Scaling the Investment

Once trust was established, call centre agents—working from detailed scripts—pushed clients to increase exposure:

• additional deposits of $5,000–$20,000,

• “exclusive opportunities” requiring fast decisions,

• reassurances backed by fake “market analytics.”

In some reported cases, total losses per victim reached tens or even hundreds of thousands of dollars.

The Exit Barrier

When clients attempted to withdraw funds, the process stalled. Victims were told to pay:

• “taxes” of 10–15%,

• withdrawal commissions,

• or “account verification” fees.

Even after payment, withdrawals never occurred. Accounts were frozen or deleted, and communication ceased.

Operational Structure

The investigation describes a coordinated setup in Dnipro:

• multiple call centres, employing dozens of operators,

• IT teams maintaining several parallel fake platforms,

• CRM systems tracking victims and payment status,

• segmentation of roles (lead generation, conversion, retention).

Operators reportedly worked in shifts, handling both new leads and existing victims to maximise extraction.

Geography and Targeting

The network primarily targeted foreign investors, including individuals in:

• EU countries,

• the UK,

• and other international markets.

This cross-border focus reduced the likelihood of immediate legal consequences and complicated investigations.

Financial Infrastructure

Funds were channelled through:

• cryptocurrency wallets,

• intermediary payment services,

• layered transactions to obscure trails.

This made recovery highly unlikely once transfers were completed.

Law Enforcement Response

Ukrainian law enforcement reportedly conducted searches in Dnipro, identifying elements of the network and seizing equipment. However, as with similar operations:

• organisers may remain partially unidentified,

• infrastructure can be quickly replicated,

• funds are difficult to trace once moved offshore.

Why the Model Works

The success of the scheme lies in its hybrid nature:

• technology creates credibility,

• human interaction builds trust,

• gradual escalation maximises losses.

Unlike simple scams, this model mimics legitimate brokerage operations—making detection harder, even for experienced investors.

Entrypoint Insight

This case illustrates the industrialisation of investment fraud, where operations resemble structured businesses rather than ad hoc schemes.

For investors and corporates, key lessons include:

• verify platform ownership and regulatory status,

• conduct background checks on individuals behind investment offers,

• treat unsolicited investment advice as a primary risk indicator,

• recognise that displayed profits are not proof of real trading activity.

In an environment where fake infrastructure can be deployed quickly and convincingly, independent intelligence and due diligence are critical safeguards.