For more than a decade, a fraud suspect evaded law enforcement until a wave of cyber fraud tied to fraudulent websites led to his arrest in Alicante. The investigation began after a complaint from Vizcaya and spread across Spain, affecting more than 200 victims. The Civil Guard reported that at least sixty individuals and seven companies were involved in impersonation schemes designed to steal money, using four mobile devices to receive payments via popular apps and divert funds to other accounts, allowing the suspect to vanish with the proceeds. Authorities estimate the total fraud exceeded 55,000 euros.
In this operation, known as zenigata, the Civil Guard initiated proceedings to arrest a fraudulent person linked to a well-known online marketplace. The detainee is alleged to have evaded justice for more than ten years while continuing fraud, marital extortion, money laundering, and crimes against industrial property.
Identity checks identified 233 people and multiple national territories possibly affected by the scams. Seventy-one entities, including seven companies, were implicated in impersonation and fraud. Investigators found more than 180 bank accounts used to divert funds from these schemes. The author is believed to have defrauded more than 55,000 euros in total.
The operation began in January of the previous year after the Civil Guard received a complaint from a Bizkaia resident who was scammed while attempting to buy a video game console online and never receiving the product. Investigators traced an online storefront that offered products on fake web pages, imitating genuine businesses with real names and logos.
Continuing the inquiry revealed that the suspect used third-party bank accounts without authorization to collect payments and that multiple phone numbers were employed to receive funds via a widely used instant payment app. The streets and warehouses linked to the suspect were searched, and agents recovered bank cards, multiple mobile phones, and purchased parcels—all connected to the fraud network and the impersonation scheme.
Also found was a storage-area system where four mobile phones operated on the same network to manage money from scams and quickly transfer it to different accounts, complicating the trail. It became clear that the detainee took special care to evade police and judicial action by behaving as if payments were legitimate and by not appearing to own any contracts or supplies in his name.
The scammer ran an online business that copied the name and data of a legitimate store, attracting victims with prices that were slightly lower than competitors. When customers did not receive products, they requested refunds, and the suspect prompted them to provide photographs of both sides of their ID to process refunds or insurance claims. Those who complied had their documents used to activate bank accounts and mobile lines to continue the fraud.
Questions remain about the author, who reportedly has more than 15 years of experience in scamming and who used that expertise to spoof an ex-partner’s identity and access account numbers and mobile lines. It underscores the persistence and complexity of the fraud network uncovered by the investigation.
Tips
The Civil Guard has issued practical guidance to help the public prevent online fraud. Always verify the legitimacy of a website before making a purchase. Be cautious of unusually low prices and avoid trusting contact details from anonymous sources. If something seems off, search for the store’s name online, read reviews on trusted sites, and check forum discussions for corroboration. Simple prudence can stop many scams in their tracks. If you have already been victimized, report it, even if the amount involved seems small, as criminals often run many small scams that accumulate substantial sums.
The operation was conducted by the Equipo de Investigación Tecnológica (EDITE) and the Computer and Technological Crime Team of the Bizkaia Judicial Police, with cooperation from Alicante Civil Guard Command and USECIC Bilbao. The investigation remains open to identify additional victims; anyone who recognizes similar fraud characteristics is urged to come forward promptly for guidance and support. [Citation: Civil Guard press release on Operation Zenigata and related investigations.]