Ukraine's Cyber Police have arrested four people, including the alleged leader, in a scam call-center network that defrauded 135 German victims of more than €4.3 million. The case matters beyond the sum. It is the first major test of Ukraine's new criminal law on call centers, and it runs alongside allegations that some centers were protected by the officials meant to police them.
What the police say happened
According to the Cyber Police's 6 November release, the group posed as brokers and financial advisers. It persuaded victims to put money into cryptocurrency and shares through fake trading platforms, using social engineering, IP telephony and messengers. In some cases it also gained access to victims' online banking. The release describes a Joint Investigation Team with German law enforcement under an operation called "Trade".
Investigators carried out 39 searches in August and 17 in September in Kyiv and the surrounding region, according to the same release. Officers seized cash alongside computers, phones and crypto wallets. The Record reported that four suspects are in custody and another co-organizer is under house arrest. Suspects face up to 12 years with confiscation of property.
Spread across 135 victims, the losses average roughly €32,000 each. These were not small, impulsive purchases. They were life-savings-scale transfers made after weeks of cultivated trust.
The strongest case for the new law
The case for a dedicated statute is serious. Before September, prosecutors had to charge call-center operators under general fraud provisions, which fit poorly. They did not cleanly reach recruiters, IT staff or people who knowingly joined an operation without personally deceiving anyone. Industrial-scale fraud depends on exactly those supporting roles. A law aimed at the whole enterprise gives prosecutors leverage over the structure, not only the person on the phone.
The Rada passed Bill 10190 on 16 September 2026, with 313 deputies voting in favor, after a first reading in May 2024. As UNN summarized the text, organizing or leading such a group carries 7 to 12 years with confiscation. Knowing participation carries 5 to 10 years. Recruiting carries 3 to 5 years. The bill also proposes an exemption from liability for people who report themselves before a suspicion notice and help expose the group. That last provision is sensible design: it gives low-level staff a reason to defect.
Where the evidence is thinner
Two things should temper the enthusiasm.
First, the November arrests do not show the new law at work. The Cyber Police release cites Articles 28(4), 190(4) and 255 of the Criminal Code, which cover organized fraud and criminal organizations. The law took effect on 18 September, after both rounds of raids. Existing statutes were enough to arrest the alleged leader, which suggests that capacity and will were the binding constraints on enforcement, not a gap in the code.
Second, the harder problem is protection. The Record reports that anti-corruption investigators uncovered a network of at least 12 people, including officials from the SBU, the Prosecutor General's Office and the National Police, accused of bribing senior officials to shield call centers. It also reports that the SBU dismissed two senior officials. Those are allegations and dismissals, not convictions, and we have only a single outlet for the dismissals. The Record's September coverage ties the broader inquiry to the NABU and SAPO anti-corruption bodies. Harsher penalties mean little if the people who decide whom to investigate are on the payroll.
Why this is a resilience question
Ukraine's wartime cyber posture is usually discussed in terms of defending networks against Russian state attacks. Call-center fraud is a different threat, but it still counts. It drains hard currency from foreign victims, damages Ukraine's reputation with the partners it needs, and gives criminal groups cash and corrupt relationships that outlast any single case. The German JIT is itself a useful signal: cross-border cooperation during a war shows a functioning law-enforcement partnership.
The lesson for policy is proportionality. Ukraine should keep the law narrow enough that it does not sweep in legitimate outsourced customer-service and sales work. Ukraine has a large IT and business-process-outsourcing sector, and its workers should not face a 3-to-5-year recruiting charge because an employer turned out to be fraudulent. The knowledge requirement in the text, which applies to those who know the group is unlawful, is the key safeguard, and courts should enforce it strictly.
The better investments are not longer sentences. They are the things that made this case possible:
- Joint investigation teams with victim countries, which supply evidence and speed.
- Tracing of crypto wallets and bank accounts, since the funds were moved through layered accounts before being split among members.
- Independent oversight of who may open or close investigations, so that protection of a call center becomes hard to arrange.
- A clear route for low-level staff to cooperate, which the self-reporting exemption provides.
What to watch
Three indicators will show whether the law matters. One is whether prosecutors bring cases under the new articles rather than relying on the old fraud charges. Another is whether the corruption allegations produce indictments, not only dismissals. The third is whether the four suspects reach trial in a case that depends on German evidence and Ukrainian courts.
If they do, Ukraine will have shown that a state under wartime pressure can police its own fraud economy, and do it with targeted tools that spare the legitimate tech sector. If they do not, the 12-year maximum will remain a headline number with little deterrent effect behind it.