Operation Phantom Call: Albania Dismantles Multi-Million Euro Fraud Network Targeting the West

In a coordinated crackdown on international cybercrime, Albanian police dismantled a sophisticated call center network in Tirana earlier this month, exposing a operation that defrauded thousands of victims across Europe and North America. The raids, conducted on April 13 and 14, targeted a syndicate accused of stealing several million euros, with authorities estimating total losses could reach as high as €50 million. The investigation, supported by Europol and Austrian law enforcement, highlights the growing role of the Western Balkans in global financial fraud schemes.

Background and Context

The investigation, codenamed “Phantom Call,” was initiated two years ago following a request for assistance from Austrian judicial authorities. According to reporting by Balkan Investigative Reporting Network (BIRN), this trigger sparked an in-depth inquiry into a wide-ranging cyber fraud network operating out of the Albanian capital. The operation underscores a troubling trend in which Albania has emerged as a hub for organized criminal networks utilizing modern call centers to execute scams targeting victims in countries such as Austria, Italy, Germany, Greece, Canada, and the United States. These groups exploit regulatory gaps and digital infrastructure to orchestrate cross-border crimes that are difficult to trace and prosecute.

Key Figures and Entities

During the raids, police searched twelve locations across Tirana, including three call centers and nine apartments. Ten individuals were arrested, and arrest warrants were issued for four others, while one suspect remains at large. Authorities have identified five individuals—Kristian Buda, Benard Biba, Klejdi Dyrma, Ema Taipi, and Eno Hana—as suspected leaders within the operator teams. They have been detained and face charges related to their management of the fraudulent schemes. In addition to the arrests, two preventive measures were imposed: a travel ban and an obligation to report regularly to a police station. The scale of the operation was evidenced by the seizure of 443 computers, six laptops, 238 mobile phones, and various external hard drives. Police also confiscated more than €891,735 in cash, according to reports from BGNES.

Legal and Financial Mechanisms

The dismantled network relied on complex methods of extortion and psychological manipulation to extract funds from victims. Investigators are currently analyzing the seized digital equipment to trace financial flows and identify potential accomplices. The legal strategy involves building a comprehensive case that links the physical evidence of the call centers to the digital footprint of the fraud. By freezing assets and imposing strict reporting measures on suspects, the Tirana Prosecutor’s Office aims to dismantle the financial infrastructure supporting the network. The operation highlights the necessity of international cooperation, as the financial trails and victim data span multiple jurisdictions, requiring synchronized legal efforts between Albanian prosecutors and their counterparts in the European Union and North America.

International Implications and Policy Response

The “Phantom Call” case illustrates the systemic risks posed by decentralized, transnational criminal organizations that utilize telecommunications technology to perpetrate fraud. It reveals the challenges faced by national law enforcement agencies in combating crimes that transcend borders. The successful cooperation between the Tirana Prosecutor’s Office, Austrian authorities, and Europol serves as a model for future joint operations. However, the continued emergence of such hubs in the region suggests a need for stronger regulatory frameworks and international treaties to address the mechanisms of cross-border cyber fraud effectively. As the investigation continues, the focus remains on identifying all individuals involved and recovering assets for the victims.

Sources

This report draws on information provided by the Balkan Investigative Reporting Network (BIRN) and BGNES, alongside public statements from the European Union Agency for Law Enforcement Cooperation (Europol) regarding the Operation “Phantom Call” raids in Tirana.