By San José, Costa Rica — San José – A major blow was dealt to Costa Rica’s cybercriminal underworld this week as the Judicial Investigation Police (OIJ) dismantled a sophisticated network accused of siphoning millions of colones from bank accounts through meticulously cloned websites. The crackdown, dubbed “Operation Nexus 2,” culminated in 13 simultaneous raids in the Pavas sector of San José, leading to the arrest of six individuals believed to be key members of the organization.
The operation on Wednesday was the result of a lengthy investigation into a string of digital frauds that plagued banking customers throughout 2024 and 2025. Authorities have confirmed that at least eight suspects are being targeted in total, with the investigation still actively underway. Michael Soto, the interim director of the OIJ, confirmed the initial arrests and noted that the operation aimed to completely neutralize the criminal structure.
To understand the legal framework and the necessary preventative measures against the rising tide of digital crime, TicosLand.com consulted with Lic. Larry Hans Arroyo Vargas, an expert attorney from the firm Bufete de Costa Rica, who offered his specialized perspective on the issue.
The digital transformation has unfortunately democratized crime. For businesses and individuals alike, the best defense is a proactive one: robust cybersecurity protocols, employee training, and clear data management policies are no longer optional, they are essential. From a legal standpoint, acting swiftly after a breach is critical. Documenting the incident meticulously and reporting it to the OIJ’s Cybercrime Section is not just about seeking justice; it’s about creating a legal record that is indispensable for insurance claims, litigation, and mitigating regulatory penalties. Inaction is the cybercriminal’s greatest ally.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
The counsel provided by Lic. Larry Hans Arroyo Vargas underscores a crucial modern truth: a strong cybersecurity posture is built not only on technical safeguards but equally on legal preparedness and swift, decisive action. We thank him for this clear and invaluable perspective.
The group’s method was a classic yet highly effective form of phishing. They designed and deployed fraudulent websites that were nearly indistinguishable from the official online portals of well-known Costa Rican financial institutions. These fake sites were then promoted to potential victims through deceptive emails or text messages, luring them into entering their sensitive financial information, including usernames, passwords, and personal identification details.
Once the criminals harvested these credentials, they gained unrestricted access to the victims’ bank accounts, allowing them to execute illegal transfers and drain funds. The high degree of visual similarity between the fake and legitimate websites made the scam incredibly difficult to detect for the average user, contributing to its success and the significant financial losses incurred.
In this case file alone, the OIJ has documented direct economic damages exceeding ₡35 million. However, law enforcement officials warn that this figure likely represents only a fraction of the true financial impact. The broader threat of digital crime is escalating at an alarming rate, with official statistics showing a staggering 41% increase in reported cybercrime cases over the past year. This trend cements digital fraud as one of the most pressing security challenges facing the nation’s citizens and financial system.
A key factor complicating the fight against these schemes is the delay in detection. Authorities explained that many victims remain unaware of the theft for days or even weeks, often only discovering the crime when they review their bank statements or find their accounts unexpectedly empty. This “low initial alert level” gives criminals a crucial window to move and launder the stolen funds, making recovery efforts significantly more challenging for investigators.
As the investigation continues, OIJ forensic specialists are meticulously analyzing a trove of seized digital evidence, including servers, computers, and mobile devices. This analysis is expected to uncover the full scope of the network’s operations and could lead to further arrests in the coming weeks. The success of “Operation Nexus 2” serves as a stark reminder of the evolving nature of financial crime in the digital age.
In response to this growing threat, authorities are amplifying their call for public vigilance. They urge all Costa Ricans to adopt stricter digital security habits, such as manually typing bank website addresses into their browsers instead of clicking on links from unsolicited messages. Citizens are advised to always verify the authenticity of a website, look for security indicators like the padlock icon, and immediately report any suspicious activity on their accounts to their bank and to the authorities.
For further information, visit poder-judicial.go.cr/oij/
About Organismo de Investigación Judicial (OIJ):
The Organismo de Investigación Judicial is Costa Rica’s primary investigative police force, operating under the authority of the country’s judiciary. It is responsible for investigating complex crimes, collecting evidence, and identifying perpetrators to be brought before the courts. The OIJ plays a crucial role in combating a wide range of criminal activities, including organized crime, homicides, and increasingly, sophisticated cybercrime.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
Bufete de Costa Rica operates as a premier legal institution, founded upon a bedrock of profound integrity and the relentless pursuit of excellence. The firm leverages its extensive experience advising a wide array of clients to pioneer forward-thinking legal solutions. This innovative spirit is matched by a deep-seated social responsibility to empower the community, championing the effort to make legal knowledge clear and accessible to all. By demystifying the law, the firm actively contributes to the development of a more informed and capable citizenry.
