Latvian-Ukrainian Vishing Network Dismantled After €2 Million Fraud

Summary

Latvian and Ukrainian authorities announced the dismantling of a vishing network that used police and bank impersonation to trick victims into installing AnyDesk and surrendering banking access. Investigators estimate losses at about €2 million.

Key points

Callers impersonated police officers and bank staff, then persuaded victims to install AnyDesk and access online banking.
Latvia’s State Police consolidated 35 fraud cases from 2023 and 2024 and estimates the network defrauded Latvian residents of about €2 million.
Investigators identified more than 170 money mules; 90 were designated suspects, and 13 call center operators were detained.
More than 20 victims in the Ukraine-linked part of the network had confirmed losses exceeding €300,000.
Authorities reported arrests and convictions across several countries; assets restrained in Latvia total €829,650.
Officials urged residents not to install remote access software at an unsolicited caller’s direction or disclose banking credentials and authentication codes.

Article Details

Event Type: Latvian and Ukrainian law enforcement dismantled a cross-border vishing network that impersonated police and bank staff.
Impact: Latvia’s State Police estimated that the network defrauded Latvian residents of approximately €2 million. More than 170 money mules were identified, 90 designated as suspects, and 13 call center operators detained. In the Ukraine-linked component, more than 20 Latvian victims had confirmed losses exceeding €300,000. Authorities reported €829,650 in assets restrained in Latvia; the article also reports arrests and custodial sentences in several countries.

MITRE ATT&CK

T1219 · Remote Access ToolsOperators instructed victims to install AnyDesk and then used the remote access to view and interact with their devices.T1566.004 · Spearphishing VoiceOperators used voice phishing, impersonating police officers and bank employees to persuade victims to cooperate.

Products

AnyDeskan organized vishing network that impersonated police and bank staff to trick victims into installing AnyDesk and handing over banking access, resulting in roughly â¬2 million in fraud.

Countries

EstoniaThe group’s leader was apprehended in Germany in 2024 through joint action with Estonian law enforcement and was subsequently convicted in Estonia.GermanyThe group’s leader was apprehended in Germany in 2024 through joint action with Estonian law enforcement and was subsequently convicted in Estonia.LatviaLaw enforcement in Latvia and Ukraine jointly dismantled a vishing ring that impersonated authorities to defraud victims.UkraineThe operation exposed call centers in Ukraine, over 170 money mules, illicit cryptocurrency exchangers in Riga, cross-border arrests and seizures, and assets restrained, underscoring how social engineering—rather than