In one of the largest coordinated cybercrime operations in recent years, international law enforcement agencies have dismantled three major credit card fraud and money laundering networks responsible for defrauding more than 4.3 million cardholders across 193 countries, causing confirmed damages of over €300 million ($347.4 USD) and attempted losses exceeding €750 million ($868.4 USD).

The joint effort, code-named Operation Chargeback, was led by the Cybercrime Department of the General Prosecutor’s Office in Koblenz and the German Federal Criminal Police Office (Bundeskriminalamt).

Chargebacks are something the adult industry is ever so familiar with. So this news isn’t good for content creators who may have been victims.

The multi-year investigation began in December 2020 and culminated in 18 arrests, more than 60 property searches, and asset seizures in a sweeping international enforcement action carried out on November 4.

According to Europol and Eurojust, the criminal networks allegedly created over 19 million fake online subscriptions between 2016 and 2021 using stolen credit card data. The fraudulent websites primarily advertising pornography, dating, and streaming services were designed to avoid detection, not indexed by search engines, and only accessible through direct links.

Monthly charges, typically around €50 ($57.90), were purposefully kept vague in billing descriptions, making unauthorized transactions harder for victims to identify and dispute.

“The fraud was organised around three networks… The arrested persons are German, British, Latvian, Dutch, Austrian, Danish, American, and Canadian nationals,” Eurojust confirmed.

The fraud networks allegedly exploited the payment processing systems of four major German payment service providers, aided by executives, compliance officers, and intermediaries who, investigators say, facilitated access to payment systems in exchange for fees.

“Six suspects are accused of colluding with the fraud networks… enabling them to access the payment infrastructure,” Europol stated.

As part of the operation, German authorities carried out 29 searches across eight federal states, involving more than 250 officers. In total, assets valued at over €35 million were secured, including luxury cars, cryptocurrency wallets, and digital devices.

The suspects are also accused of using shell companies, largely incorporated in the UK and Cyprus, to launder proceeds and obscure financial trails. These entities were reportedly provided by crime-as-a-service operations, complete with fabricated documentation and nominee directors to bypass Know-Your-Customer (KYC) checks.

The action day involved law enforcement agencies from Germany, the United States, Canada, Singapore, Luxembourg, Cyprus, Spain, Italy, and the Netherlands. Europol and Eurojust facilitated the operation through cross-border coordination and real-time support.

“Operation Chargeback is a testament to the power of international cooperation in dismantling complex criminal networks,” said Catherine De Bolle, Executive Director of Europol. “By leveraging our analytical capabilities… we have brought down networks defrauding millions worldwide.”

Magnus Brunner, EU Commissioner for Internal Affairs and Migration, added: “Today, over 85% of investigations rely on online evidence. Without access to this data, the fight against crime cannot be effective.”

The suspects now face charges including organised computer fraud, membership in a criminal organisation, and money laundering. Investigators are continuing to examine seized documents, devices, and financial records, and additional legal actions are expected in the coming months.

In a related case, European authorities this week also arrested nine suspected money launderers behind a separate cryptocurrency fraud scheme that allegedly stole over €600 million ($694.8 million) from global victims.

Operation Chargeback underscores growing concerns about the vulnerabilities of digital financial infrastructure and highlights the increasing reliance on multinational coordination to combat sophisticated, cross-border cybercrime.