Belgian Police Arrest 19-Year-Old Suspect in €500,000 Phishing and Crypto Laundering Case

Belgian authorities have arrested a 19-year-old suspected of playing a central role in a European phishing and money-laundering network that stole more than 500,000 euros by impersonating government communications and persuading victims to install remote-access software. According to Cointelegraph, the suspect was detained at an Airbnb in Antwerp, where police also found a second suspect. A Thursday police report said the Federal Judicial Police opened the investigation in March 2026, when phishing attacks became a priority in the region. The main suspect was brought before an investigating judge, who issued an arrest warrant. Investigators said the group relied on money mules and cash carriers and laundered proceeds through cryptocurrencies, underscoring how crypto can serve multiple functions in phishing operations, including as a channel for laundering illicit funds. The case comes as phishing remains a leading driver of crypto-related losses. Hacken reported that cryptocurrency investors lost $482 million in the first quarter of 2026, with phishing and social engineering responsible for $306 million of that total. The report highlights how attackers often target human behavior rather than exploiting weaknesses in protocol code. On May 25, onchain analyst “b-block” warned that scammers used Google to run malicious phishing ads impersonating decentralized exchange Uniswap, reportedly stealing more than $400,000 from victims. Data aggregator DeFiLlama said fake ads on Google are a common source of phishing attacks, while the crypto cybersecurity group Security Alliance reported in April a “significant uptick” in phishing activity on Google Search in March. CertiK’s Skynet report also identified phishing and social engineering as leading attack vectors for North Korea-linked malicious actors. CertiK attributed the 2022 Ronin Bridge exploit that stole $600 million to a spearphishing campaign involving a fake LinkedIn recruiter and a malware-laden PDF.