Spain’s Civil Guard (Guardia Civil) has arrested four people in Navas del Rey, a small municipality west of Madrid, in connection with a cryptocurrency-investment Ponzi scheme that is estimated to have defrauded more than 100 victims across Spain of around €327,000, the force confirmed on 18 September 2026. The investigation into the scheme began in October 2025, after a number of victims came forward to report suspicious losses tied to what they had believed were legitimate cryptocurrency investments.
According to investigators, the four suspects operated the fraud using the classic structure of a Ponzi scheme, in which returns paid to earlier investors are funded not from any genuine underlying investment activity, but directly from the money deposited by new investors recruited into the scheme. The group is said to have posed as cryptocurrency brokers, promising victims unusually high returns over short investment periods — a promise investigators say was never backed by any real trading or asset-management activity, but which allowed the fraud to sustain itself for a time by using each new round of deposits to pay out apparently attractive returns to earlier participants, reinforcing victims’ confidence and encouraging them to recruit friends and family into the scheme.
The Civil Guard’s investigation identified distinct roles played by each of the four suspects within the operation. One member of the group was responsible for the technical side of the fraud, configuring the applications and devices that victims used to “monitor” their supposed cryptocurrency holdings and returns. A second suspect was responsible for physically receiving cash payments on behalf of the group. The remaining two members focused on recruitment, approaching potential victims directly, gaining their trust, and persuading them to hand over money — a role investigators describe as central to the scheme’s ability to keep expanding its pool of victims even as it had no genuine source of profit to draw on.
Officers say the fraud ultimately reached more than 100 victims spread across Spain, with total losses estimated at approximately €327,000. Because Ponzi schemes of this kind collapse once the flow of new deposits can no longer keep pace with the payments owed to earlier investors, later participants — often those who joined once the scheme had already been running for some time — are typically left with the greatest losses, since there is no remaining pool of money to repay them once the structure fails or is shut down by investigators.
Following the arrests, Spanish authorities used the case to reiterate standard warnings to the public about cryptocurrency-investment fraud, a category of white-collar crime that has grown steadily in Spain in recent years alongside the broader rise in retail interest in digital assets. Investigators recommend that anyone considering a cryptocurrency or other investment opportunity first verify whether the individual or entity offering it is authorised to provide investment services, either through Spain’s National Securities Market Commission (CNMV) or the Bank of Spain, both of which maintain public registers of authorised firms and warning lists of unauthorised operators. Authorities also urged the public to treat unusually high, guaranteed, or fast returns as a warning sign rather than an opportunity, since legitimate investments — cryptocurrency included — do not offer risk-free or guaranteed high yields. A third recommended safeguard is to be alert to pressure tactics, such as urgency to invest quickly or to recruit others, which are common features of pyramid-style schemes designed to expand before victims have time to verify the claims being made to them.
The Navas del Rey case is one of several cryptocurrency-linked fraud and money-laundering operations dismantled by Spanish police forces during 2026, reflecting a broader pattern in which criminal groups have increasingly used the complexity and relative novelty of digital-asset markets — along with victims’ fear of missing out on rapid gains — to disguise straightforward pyramid fraud behind the language of legitimate financial innovation. Because such schemes typically operate largely in cash or through informal digital transfers and rely on victims’ own social networks for recruitment, investigators say they can be harder to detect in their early stages than more traditional forms of investment fraud, often coming to police attention only once the scheme has already collapsed and a critical mass of victims has filed complaints.
The four suspects arrested in this case face charges connected to fraud and unauthorised provision of investment services; the investigation remains open as the Civil Guard continues working to identify the full scope of victims and to trace and recover, where possible, funds obtained through the scheme.
