logo

Scam Operations Relied on Third-Party Marketing Companies for Steady Stream of Potential Victims

ID: 683dacf5-2880-58db-befc-b24174565109

STIX ID: report--683dacf5-2880-58db-befc-b24174565109

Feed Name: Organized Crime and Corruption Reporting Project

Threat Score

Date Published: 2025-03-07

Date Updated: 2026-03-24

...
...

Leaked files detail a large-scale investment scam run via aliases on Telegram and an affiliate-led marketing arm (Opulent Allies/EM Develop) that funneled victim leads to call centers, with bonuses tied to successful deposits. The operation targeted victims across Europe using deceptive ads (including celebrity impersonation), resulting in over $21M in confirmed losses among 166 of 182 contacted victims; an example victim in Spain lost €400,000. The leak links the alias “James Collins” to an individual named Ronen Kapeika and shows marketers such as Zeus Media were paid for victim information.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.