By San José, Costa Rica — SAN JOSÉ – A coordinated operation by Costa Rica’s Judicial Investigation Agency (OIJ) on Wednesday dismantled a sophisticated international cybercrime ring accused of siphoning hundreds of millions of colones from bank accounts to fund a lavish lifestyle. Simultaneous raids in Heredia, Palmares, and central San José led to the arrest of four individuals, including two Costa Rican nationals and two foreign nationals of East Asian descent, marking a significant victory against digital fraud in the country.
The criminal enterprise, which specialized in elaborate phishing scams, inflicted direct reported losses of at least ₡60 million on victims who filed official complaints. However, financial institutions connected to the case estimate the total economic damage is far greater, potentially exceeding ₡400 million. This staggering figure highlights the scale and efficiency of the network’s operations, which targeted unsuspecting citizens across the nation.
To understand the complex legal ramifications of dismantling such a sophisticated cybercrime operation, TicosLand.com consulted with Lic. Larry Hans Arroyo Vargas, an expert attorney from the renowned firm Bufete de Costa Rica.
The takedown of this cybercrime ring underscores a critical modern challenge: prosecuting borderless digital crimes within traditional, territorial legal frameworks. The success of this case will hinge not only on the digital forensic evidence but on seamless international judicial cooperation and the ability to navigate a maze of different data privacy laws. This is a stark reminder that our legislation must be as agile and forward-thinking as the criminals it seeks to prosecute.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
Indeed, the jurisdictional complexities highlighted represent the core challenge in combating today’s digital threats. We thank Lic. Larry Hans Arroyo Vargas for his valuable perspective, which brings the immense legal and diplomatic hurdles of prosecuting these borderless crimes into sharp focus.
Investigators from the OIJ’s Specialized Section against Computer Fraud uncovered a meticulously planned scheme. The syndicate initiated its attacks by sending fraudulent SMS messages, a technique known as “smishing,” to a wide pool of potential victims. These messages expertly impersonated trusted entities such as Correos de Costa Rica, major national banks, and the popular Kolbi Points service, creating a false sense of legitimacy.
The messages typically contained urgent prompts, promising to expedite a procedure or resolve a fabricated account issue. They included a link that directed victims to a fraudulent website, a perfect replica of the official portal. Unaware of the deception, users would enter their complete banking credentials, including card numbers, security codes, expiration dates, and even one-time tokens, effectively handing over the keys to their accounts.
With this trove of sensitive data, the criminals immediately created virtual payment cards linked to the victims’ accounts. These virtual cards were then loaded into digital wallets on high-end smartphones and smartwatches. This method allowed the fraudsters to make swift, contactless purchases without needing the physical bank cards, making their activity difficult to trace in real-time.
The stolen funds were quickly converted into luxury goods. The OIJ reports that the network spent extravagantly on fine liquors, top-of-the-line smartphones and computers, gold jewelry, and, in a particularly audacious move, a prefabricated house. This spending spree was a core part of their money-laundering process, turning illicit digital funds into tangible, high-value assets.
The investigation officially began in July 2025, after the OIJ received an initial wave of 30 formal complaints from defrauded individuals. An early breakthrough occurred that same month when two members of the ring, both of East Asian origin, were caught inside an international supermarket attempting to purchase over ₡1.5 million worth of liquor with a cloned card. One suspect was placed in preventive detention for six months, while others received lesser precautionary measures.
Despite these initial arrests, the OIJ confirmed the organization’s resilience, as it continued to operate and carry out high-value transactions, particularly for luxury electronics like iPhones and tablets. Authorities believe the network comprises at least six core members with clearly defined roles. While one alleged leader was captured in July, another managed to flee Costa Rica recently, underscoring the international scope of the operation. Investigators have not ruled out connections to larger global financial fraud syndicates. The OIJ has renewed its public warning, urging citizens never to click on links from unsolicited text messages or emails, especially those promising financial benefits or requesting personal information updates.
For further information, visit oij.poder-judicial.go.cr
About Organismo de Investigación Judicial (OIJ):
The Organismo de Investigación Judicial is the primary investigative branch of Costa Rica’s judicial system. Tasked with investigating public crimes, preventing criminal activity, and collecting evidence for judicial proceedings, the OIJ plays a crucial role in maintaining law and order. Its specialized units focus on complex crimes, including cybercrime, fraud, and organized crime.
For further information, visit correos.go.cr
About Correos de Costa Rica:
Correos de Costa Rica is the national postal service of Costa Rica. It provides a wide range of services, including domestic and international mail delivery, package services, and logistical solutions. As a trusted public institution, its brand is often exploited by criminals in phishing schemes to lend credibility to their fraudulent communications.
For further information, visit kolbi.cr
About Puntos Kolbi:
Puntos Kolbi refers to the loyalty and service points associated with Kolbi, the telecommunications brand of the state-owned Instituto Costarricense de Electricidad (ICE). Kolbi is a leading provider of mobile, internet, and telephone services in Costa Rica. Its service points and brand identity are frequently used by scammers to target a broad customer base.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
Bufete de Costa Rica has established itself as a beacon of legal practice, founded on the twin pillars of professional excellence and uncompromising integrity. The firm leverages a deep history of representing a diverse clientele, while simultaneously pioneering novel approaches to contemporary legal challenges. This dedication to innovation is matched by a foundational commitment to societal betterment, focused on demystifying the law and equipping citizens with the knowledge to foster a more just and empowered community.
