Europol Dismantles Romanian Gang Behind €580K ATM Fraud, Skimming, and Bold Police Taunts
Ddos 
A highly organized Romanian criminal group responsible for ATM fraud, card skimming, and money laundering across Western Europe has been dismantled in a joint law enforcement effort spearheaded by Romania and the United Kingdom, with critical support from Europol and Eurojust.
The gang’s signature tactic revolved around a scheme known as Transaction Reversal Fraud (TRF). This method exploits the cash dispensing logic of ATMs by manipulating the transaction process to extract cash while bypassing formal withdrawal mechanisms.
“The gang committed fraud using the Transaction Reversal Fraud (TRF) method. The suspects removed the screen of an ATM and inserted a bank card to request funds. Before the funds were dispensed, they cancelled the transaction (or reversed it). This allowed them to reach inside the machine and take the cash before it was retracted,” Europol states in a press release.
Investigators estimate that the group stole approximately €580,000 using this method alone.
Perhaps one of the most shocking aspects of the investigation was the group’s public display of contempt for law enforcement. Members adopted and flaunted a derogatory nickname for the police, which they emblazoned on:
- Car license plates
- T-shirts and clothing
- Social media posts
- A custom-made metal gate at the entrance of a suspect’s house
Such bold behavior not only served to mock authorities but also fed the gang’s image of untouchability and power within their criminal circles.
The gang traveled extensively from Romania to Western European countries, especially the UK, to commit fraud and launder proceeds. They invested the stolen money in:
- Luxury vehicles
- Real estate
- High-end vacations
- Jewelry and other luxury goods
The gang’s operations extended beyond TRF. Authorities also uncovered involvement in:
- Skimming of payment cards
- Forging of electronic payment and transport cards
- BIN attacks – a type of credit card fraud that exploits Bank Identification Numbers (BINs) to generate usable card numbers for illicit purchases.
Related Posts:
- Bitcoin ATM Scams Surge with Over $110 Million in Losses in 2023
- Nearly two-thirds of the surveillance camera network in Washington, DC, was hijacked by Romanian ransomware suspects
- Romanian National Sentenced to 20 Years for NetWalker Ransomware Attacks
- Russian hackers stole 860,000 euros from Raiffeisen Romanian bank in one night
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
