Belgian federal police have arrested a 19-year-old man suspected of leading an international phishing operation that targeted bank customers across Europe through fake emails and fraudulent phone calls.
The suspect, from Antwerp, was arrested following a coordinated investigation involving authorities in Belgium and the Netherlands. Prosecutors allege he played a leadership role in a criminal network that stole online banking credentials by impersonating financial institutions and their employees.
According to investigators, members of the group contacted victims through convincing phishing emails before following up with phone calls posing as bank representatives. During these calls, victims were persuaded to disclose security codes, login credentials, or authorize fraudulent transactions, allowing the attackers to gain access to their bank accounts.
Authorities believe the phishing network operated across national borders, targeting victims in multiple European countries while coordinating its activities from Belgium and the Netherlands. The investigation remains ongoing, and police have not ruled out additional arrests.
Law enforcement agencies have not disclosed how much money was stolen or how many victims may have been affected. However, officials described the operation as a well-organized cybercrime network that combined technical phishing infrastructure with social engineering to maximize its success.
The arrest reflects a growing trend in cybercrime investigations, with authorities increasingly targeting the organizers behind phishing operations rather than only the individuals responsible for sending fraudulent messages. International cooperation has become essential as phishing gangs frequently operate across multiple jurisdictions while targeting victims throughout Europe.
Security experts continue to warn that phishing remains one of the most effective forms of cybercrime because it exploits human trust rather than software vulnerabilities. Criminals often impersonate trusted organizations, including banks, government agencies, and delivery companies, to convince victims to reveal sensitive information or approve fraudulent payments.
Investigators urge consumers to treat unexpected emails, text messages, and phone calls requesting account information with caution. Banks generally do not ask customers to disclose passwords, PINs, or one-time authentication codes over the phone or by email, and any such request should be considered suspicious.