Automatically translated version. May contain inaccuracies compared to the original.
The Office of the Prosecutor General announced the suspicion of 23 participants in scam communities that obtained access to Ukrainian citizens' bank accounts and accounts of EU countries through phishing sites. In July–August 2026, law enforcement carried out a complex set of investigative and operational measures in Kyiv and 19 regions of Ukraine within the large-scale operation "WallHack." As a result of the investigation 23, individuals have already been informed of suspicion.
The Office of the Prosecutor General reported on the exposure of scam communities. Under the procedural guidance of prosecutors of the Office of the Prosecutor General and regional prosecutors, they established that participants coordinated illegal activity through messengers and distributed links to phishing resources.
According to the investigation, forged sites imitated trading platforms, banking and government services, as well as resources of international organizations. With their help, criminals obtained payment data of citizens and access to accounts in remote banking systems.
Within the operation, law enforcement carried out 239 searches, during which nearly 600 units of computer equipment were seized that could be used in illegal activity. Thousands of links to phishing resources were blocked, and 300 Telegram channels with a total reach of over 5 thousand participants were shut down. The National Bank of Ukraine and PJSC "Universal Bank" (monobank) employees also joined the uncovering.
Currently, investigators are analyzing the information seized during searches and digital data. The full circle of those involved in the illicit activity, victims, and the final amount of damage are being established. In accordance with Article 62 of the Constitution of Ukraine, a person is considered innocent until proven guilty by a court verdict.
How criminals lure victims into phishing traps
The scheme with forged sites of international organizations and state services operates on the same scenario: criminals promise a "guaranteed" payout, rush a person to act without verification, and after moving to the fake resource, extort banking details, login and password to online banking, or a verification code via SMS. Once obtained, the criminals gain full access to the victim's account.
The scale of the operation "WallHack"—239 searches in 19 regions and more than 300 blocked Telegram channels—shows that such scam communities operated systematically and affected thousands of potential victims. Law enforcement continues to determine the full circle of involved individuals and the amount of damage caused to citizens.
Earlier, Informator reported that the Ministry of Justice warned about fake letters allegedly from the tax service that scare citizens with tax debt and urge them to follow a link to check or pay the debt. We also wrote about how to lawfully regain access to a hacked social media account if criminals took control—the lawyer explained that the only real mechanism to restore the page is an official procedure through the platform's support service.
Document: PDF proof of the original version of the news item "Генпрокуратура оголосила підозру 23 учасникам шахрайських спільнот – через фішингові сайти крали доступ до рахунків людей". It records the publication content at the moment of the first scan, the preservation date and the source: Informator.