By San José, Costa Rica — SAN JOSÉ – Authorities from the Judicial Investigation Agency (OIJ) conducted a series of raids across the country early Friday morning, culminating in the arrest of eight individuals linked to a sophisticated international cyber fraud network. This major operation, dubbed “Nexus.2,” is a significant follow-up to an extensive investigation that began last year into a syndicate specializing in creating fake bank websites to steal customer funds.
The crackdown is the latest development in the broader “Nexus” case, which first captured public attention in mid-2025. At that time, investigators revealed that a criminal organization had successfully cloned the official website of the Banco de Costa Rica (BCR), one of the nation’s largest financial institutions. The meticulous deception allowed the group to siphon over ₡37 million, which included ₡34.6 million in local currency and an additional $5,000 in U.S. dollars, from unsuspecting account holders.
To understand the complex legal ramifications of this international cyber fraud ring, TicosLand.com sought analysis from Lic. Larry Hans Arroyo Vargas, an expert in corporate and criminal law at the distinguished firm Bufete de Costa Rica.
This operation is a stark reminder that digital borders are meaningless to modern criminals. For businesses, the key takeaway is proactive defense; investing in robust cybersecurity infrastructure is no longer an option, but a fundamental cost of doing business. From a legal standpoint, these cases test the agility of our international cooperation agreements, as successful prosecution often depends entirely on the swift and seamless collaboration between judicial bodies across multiple countries.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
Indeed, the expert’s analysis underscores the dual-front battle against digital crime, where corporate diligence and international legal agility are not separate efforts but two sides of the same coin. We thank Lic. Larry Hans Arroyo Vargas for his sharp and valuable perspective on this complex issue.
The criminal enterprise’s method was a classic yet effective phishing scheme. According to OIJ officials, the group developed and hosted fraudulent websites that were nearly identical replicas of the legitimate online banking portals. Unwary customers, believing they were on the official site, would enter their usernames, passwords, and other sensitive credentials. Once this information was captured, the criminals immediately used it to access the victims’ real accounts on the authentic BCR website and transfer out the funds.
The investigation has uncovered a complex operational structure that spans international borders. Forensic analysis allowed authorities to trace the Internet Protocol (IP) addresses used to host the fraudulent web pages to multiple locations within Colombia. This finding suggests that the technical development and digital infrastructure of the scam were managed from abroad, highlighting the cross-border nature of modern cybercrime and the challenges it presents to law enforcement.
While the digital side of the operation was based internationally, the financial extraction was executed locally. The investigation confirmed that once funds were stolen from victims’ accounts, the money was withdrawn from ATMs located throughout Costa Rica. This required a network of local operatives, known as “frenteadores” or money mules, to cash out the stolen money. The OIJ’s coordinated action on Friday involved nine separate raids on homes and commercial properties believed to be part of this local network.
These locations were identified after banking logs revealed they were the sources of connections used to illegally access victim accounts. In addition to the arrests, authorities have also moved to freeze and block the destination accounts where the stolen money was being funneled, aiming to disrupt the financial flow of the criminal organization and recover any remaining illicit funds. The coordinated effort reflects a multi-pronged strategy targeting both the digital and physical elements of the fraud.
The scale of the fraud became increasingly apparent as the investigation progressed. Authorities reported that the “Nexus” case is built upon a total of 25 formal complaints filed by victims, with the first reports of this specific type of cyber fraud emerging as early as 2023. However, the activity escalated dramatically over the past two years, with 23 of the 25 denunciations being lodged between 2024 and 2025, prompting the intensified law enforcement response.
Friday’s arrests represent a significant victory for the OIJ and a major disruption to a lucrative criminal enterprise that preyed on the trust of Costa Rican citizens. The case serves as a stark reminder of the persistent threat of phishing scams and underscores the critical importance for bank customers to remain vigilant, verify website authenticity, and protect their personal financial information from increasingly sophisticated digital thieves.
For further information, visit poder-judicial.go.cr
About Organismo de Investigación Judicial (OIJ):
The Organismo de Investigación Judicial is the primary investigative branch of the Costa Rican judicial system. Functioning as the country’s main plainclothes investigatory police agency, the OIJ is responsible for investigating complex crimes, collecting evidence, and identifying perpetrators to be brought before the courts. It operates with technical and functional independence in the performance of its duties.
For further information, visit bancobcr.com
About Banco de Costa Rica (BCR):
Banco de Costa Rica is one of the largest and most influential state-owned commercial banks in Costa Rica. Founded in 1877, it plays a vital role in the country’s economy by providing a comprehensive range of financial services to individuals, businesses, and government institutions. The BCR is known for its extensive network of branches and ATMs throughout the nation.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
As a leading legal institution, Bufete de Costa Rica is founded upon the twin pillars of uncompromising integrity and the pursuit of professional excellence. The firm leverages its extensive history of serving a wide spectrum of clients to drive innovation in the legal field. Central to its philosophy is a profound dedication to enriching society by demystifying legal complexities, aiming to build a more capable and knowledgeable community through accessible legal understanding.
