Threats · 57 days ago
German and Brazilian authorities arrested seven suspects this week in Operação Klonen, a late-2023 banking fraud case that drained an estimated €30 million from German online banking users. Germany’s BKA said three people were picked up in Europe, while Brazil’s federal police arrested four others on fraud charges.
Investigators said the group exploited a vulnerability in a payment provider to make unauthorized withdrawals look legitimate, then used cloned payment cards to pull money through the banking system. The cash was then moved and laundered through Brazil and four European countries, turning a payments abuse case into a cross-border recovery problem.
For fraud, payments, and compliance teams, the lasting issue is jurisdictional: once stolen funds are split across multiple countries, tracing, seizure, and prosecution move much slower than the fraud itself.
3 sources covering this story
Police bust cybercrime ring accused of stealing €30 million in four-day spree - Help Net Security
Police in Germany and Brazil dismantled a €30 million bank fraud ring, arresting four in Brazil and three more in Spain and Bulgaria.
The Record from Recorded Future
Investigation of banking hack leads to arrests in Europe, Brazil
Germany’s federal police agency, the BKA, said three suspects were picked up in Europe and charged with fraud, and Brazil’s federal police said four others were arrested on similar charges.
Hackers arrested over €30M bank fraud exploiting service provider flaw
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts.
Part of the PlainSec briefing for 2026-08-17