Loading story…
Ukraine’s Prosecutor General Ruslan Kravchenko resigned amid a National Anti-Corruption Bureau of Ukraine (NABU) investigation into an alleged criminal organization that took bribes to shield fraudulent call centers from law-enforcement action and laundered illicit assets. NABU said the network, allegedly assisted by officials in the Prosecutor General’s Office from mid-2025, targeted victims in Ukraine and abroad.
Senior Prosecutor General’s Office official Serhii Kropyva was detained, named as a suspect, suspended, and remanded in custody with bail set at 120 million hryvnias. Kravchenko denied participating in or protecting illegal call centers; NABU has not publicly identified or charged him as the alleged network leader referenced in released recordings.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
Investigators allege that, from mid-2025, officials in Ukraine's Prosecutor General's Office accepted bribes to prevent law-enforcement action against fraudulent call centers targeting victims in Ukraine and abroad.
Ruslan Kravchenko resigned as Ukraine's prosecutor general amid the bribery investigation. He denied protecting illegal call centers or using his authority to facilitate their activity.
Senior Prosecutor General's Office official Serhii Kropyva was detained, named as a suspect, suspended from duty, and ordered held in custody with bail set at 120 million hryvnias. He is suspected of laundering assets worth more than 89 million hryvnias.
Ukraine's National Anti-Corruption Bureau exposed an alleged criminal organization involving protection of fraudulent call centers and laundering of criminal proceeds. NABU said five people were named as suspects and released recordings referring to an alleged network boss.
Ukrainian police, the Security Service of Ukraine, and the Prosecutor General's Office conducted 411 searches and shut down 94 fraudulent call centers during a one-week nationwide operation.
Ukrainian cyber police dismantled a Kyiv call center allegedly responsible for stealing more than $500,000 from dozens of U.S. victims. The operation allegedly used English-speaking workers impersonating financial advisers to promote fictitious investments.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
therecord.media
Open sourcepravda.com.ua
Open sourcenabu.gov.ua
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ukrainian authorities dismantled **94 fraudulent call centers** in a nationwide operation involving the National Police of Ukraine, the Cyber Police Department, the Security Service of Ukraine, the Prosecutor General’s Office, and German law enforcement. Investigators carried out **more than 400 searches**—reported as **411 raids**—and formally identified **26 suspects** tied to schemes that targeted victims through fake banking, investment, and law-enforcement impersonation scams. According to investigators, operators persuaded victims to hand over money, disclose banking access, or install remote-access software, while some operations also marketed bogus medical products. Police seized large quantities of computer equipment, phones, SIM cards, bank cards, cash, vehicles, gold, and tools used to access cryptocurrency wallets, and authorities are now conducting forensic analysis to identify victims, calculate losses, and build cases against organizers, money mules, and laundering networks.
Aug 16, 2026
European law enforcement agencies, supported by Eurojust, have dismantled a large-scale fraud network operating multiple call centers in Ukraine that targeted victims across Europe. Authorities from Ukraine, the Czech Republic, Latvia, and Lithuania arrested 12 suspects and identified 45 individuals involved in the operation, which defrauded over 400 victims of more than 10 million euros. The criminal group used various schemes, including impersonating police officers and bank employees, convincing victims their accounts were compromised, and instructing them to transfer funds to "safe" accounts controlled by the network. In some cases, victims were persuaded to install remote access software, allowing the criminals to hijack their bank accounts, and some fraudsters even met victims in person to collect cash using stolen card details. The call centers, located in Dnipro, Ivano-Frankivsk, and Kyiv, employed around 100 people recruited from several European countries. Employees were paid commissions of up to 7% of the stolen funds and were promised bonuses such as cash, cars, or apartments for exceeding certain fraud targets, though these rewards were never distributed. During coordinated raids on December 9, 2025, authorities conducted 72 searches, seizing vehicles, weapons, computers, cash, and forged identification documents. The operation highlights the transnational nature of organized fraud and the effectiveness of coordinated law enforcement action across European borders.
Jun 29, 2026