Background and Timeline
On January 9, 2026, Spanish National Police, in collaboration with the Bavarian State Criminal Police Office and Europol, conducted a major operation against the Black Axe criminal organization. The action resulted in 34 arrests across Seville, Madrid, Málaga, and Barcelona, targeting the core group of the international syndicate. Black Axe, with origins in Nigeria, is known for its involvement in a wide range of criminal activities, including cyber-enabled fraud, drug trafficking, human trafficking, and armed robbery.
Modus Operandi
The group specialized in man-in-the-middle (MitM) scams, particularly business email compromise (BEC). By compromising or impersonating corporate email accounts, the criminals intercepted legitimate communications between companies, altered banking details, and diverted large payments to accounts they controlled. The organization also recruited money mules in impoverished areas, exploiting vulnerable individuals to receive, transfer, and withdraw funds from the scams.
Number of Victims and Financial Impact
Investigators believe the network is responsible for fraud resulting in damages exceeding €5.93 million. During the operation, authorities froze €119,352 in bank accounts and seized €66,403 in cash, along with electronic devices and vehicles. The group’s annual criminal proceeds are estimated to be in the billions of euros, generated through numerous small-scale operations that collectively have a significant impact.
Investigation Progress and Agencies Involved
The operation was supported by Europol, which provided analytical support, intelligence sharing, and on-the-spot assistance. German authorities contributed to the investigation, with two officers deployed on-site during the arrests. The cross-border collaboration aimed to disrupt the group’s operations, seize assets, and map its structure across countries. The investigation began in September 2023 and targeted the core leadership and operational cells of Black Axe in Spain.
Arrests and Suspects
A total of 34 people were arrested, including 10 Nigerian nationals believed to be leaders within Black Axe. The suspects have been charged with belonging to a criminal organization, fraud, money laundering, and vehicle theft. Authorities also seized mobile and electronic devices and five vehicles during house searches.
Broader Implications and Trends
The crackdown on Black Axe demonstrates the effectiveness of international cooperation in combating transnational cybercrime. The group’s use of BEC and MitM tactics mirrors trends seen in India and other countries, highlighting the global nature of cyber-enabled fraud. The exploitation of vulnerable communities for money mule recruitment is a recurring theme, underscoring the need for targeted prevention and public awareness campaigns. While the operation has significantly disrupted Black Axe’s European activities, the group remains active globally, necessitating ongoing vigilance and coordinated action.