For almost a month, law enforcement has shut down the activities of several scam communities, blocked thousands of phishing resources, and seized equipment that could have been used to misappropriate funds from citizens of Ukraine and EU countries.
Operatives of the Cyber Police Department and investigators of the Main Investigative Department of the National Police of Ukraine, under the procedural guidance of the Office of the Prosecutor General, uncovered participants of scam communities (from the English scam — fraud, deception) in Kyiv and 19 regions of Ukraine during the "WallHack" operation from July to August 2026.
The suspects used messengers to coordinate fraudulent activities and spread links to fake websites.
Such resources imitated trading platforms, banking and government services, as well as websites of international organizations. With their help, the perpetrators obtained payment data from citizens of Ukraine and European Union countries, as well as access to accounts in remote banking systems.
With the support of special forces, including the TacTeam of the Patrol Police Department, police conducted 239 searches and seized nearly 600 units of computer equipment during the operation.
Thousands of phishing links have also been blocked, and the activities of 300 Telegram channels, with a total reach of over 5,000 participants, have been halted.
As a result of the conducted measures, 23 individuals have been notified of suspicion, and 8 suspects have been detained under Article 208 of the Criminal Procedure Code of Ukraine. For four of them, the court has chosen a preventive measure in the form of detention. Five criminal proceedings have already been sent to court with indictments. One of them concerns an organized criminal group.
Currently, law enforcement is analyzing the information obtained during the searches and forming a body of evidence to hold all those involved in the criminal schemes accountable.
The full circle of victims and the final amount of damages are being established.
The exposure of the perpetrators was facilitated by employees of the National Bank of Ukraine and JSC "Universal Bank" (monobank).
