Spanish Police, Europol Arrest 34 in Black Axe Cyber-Fraud Case Involving €5.9 Million

Khalid Hasan Seum

11 Jan 2026 — 1 min read

European law enforcement agencies have arrested 34 suspected members of the Black Axe criminal network in Spain as part of a coordinated operation led by Europol, authorities said.

The suspects are accused of involvement in large-scale online fraud, money laundering, and organised criminal activity, with estimated financial losses reaching €5.9 million, according to investigators.

Cross-Border Operation in Spain

The arrests followed a multi-year investigation involving Spanish police, Europol, and other European agencies. Authorities said the suspects operated as part of a structured criminal network, using online platforms, compromised websites, and digital payment systems to conduct fraudulent schemes.

Law enforcement officials seized electronic devices, financial records, and other evidence believed to be linked to the group’s operations.

Use of Online Fraud Infrastructure

Investigators said the Black Axe network relied heavily on web-based infrastructure to carry out its activities. This included:

Fraudulent websites used to deceive victims
Email-based social engineering campaigns
Online payment platforms and mule accounts
Web applications used to manage illicit transactions

The schemes primarily targeted individuals and businesses across multiple European countries.

Financial Crime and Money Laundering

Authorities said the group laundered proceeds through a combination of digital banking services, cryptocurrency platforms, and international transfers, making detection more difficult.

The operation focused not only on arrests but also on disrupting the online fraud ecosystem supporting the network’s activities.

Europol’s Warning on Organised Cybercrime

Europol said organised crime groups are increasingly combining traditional criminal structures with sophisticated cyber-enabled fraud, exploiting weaknesses in website security, web applications, and digital identity systems.

Officials warned that financial crime networks are becoming more professional, resilient, and technologically advanced.

Ongoing Investigations

Europol said the investigation remains ongoing, and further arrests or asset seizures are possible as authorities continue to analyse seized data and financial trails.

About Entivel
Entivel develops secure websites, web applications, and custom software solutions, delivering cybersecurity, penetration testing, and web application security services for organisations exposed to digital fraud and cybercrime.

Google Is Ranking Websites Differently Now — Why Many Sites Are Falling Behind | Entivel

Google Is Ranking Websites Differently Now - Many Sites Are Falling Behind

Google is increasingly ranking websites based on how users experience them, rather than relying solely on keywords and backlinks, according to web performance analysts. The shift is leaving many business websites struggling to maintain visibility in search results, even though their content and keywords remain unchanged. Industry observers say the

Hackers Use Over 240 Exploits Before Launching Devastating Ransomware Attacks

Cybercriminal groups are using hundreds of known software vulnerabilities to gain access to corporate networks before deploying ransomware, according to recent cybersecurity research. Security analysts say threat actors have been observed leveraging more than 240 distinct exploits, targeting unpatched systems, outdated software, and exposed services as part of large-scale intrusion

Windows Users Targeted by Malware Masquerading as Adult Game

Cybersecurity researchers have identified a malware campaign targeting Windows users through a malicious installer disguised as an adult-themed game, according to recent analysis. The campaign delivers xRAT, a remote access trojan capable of providing attackers with persistent access to infected systems. Researchers say the malware is being distributed through unofficial

Maduro Arrest Story Used to Spread Dangerous Backdoor Malware

Cybercriminals have leveraged reports surrounding the arrest of Venezuelan President Nicolás Maduro to distribute sophisticated backdoor malware in a targeted phishing campaign, security researchers say. The operation uses a high-profile geopolitical event as social engineering bait to trick recipients into executing malicious software, illustrating how ongoing world news continues to