By San José, Costa Rica — SAN JOSÉ – In a sweeping early morning operation, agents from the Judicial Investigation Agency (OIJ) executed 13 raids across Costa Rica on Friday, targeting a sophisticated international cybercrime ring. The operation, codenamed “Nexus 2.0,” aims to apprehend eight key suspects believed to be responsible for defrauding banking clients of more than ₡69 million and $5,000 through an elaborate phishing scheme that has been active since 2023.
This large-scale law enforcement action represents the second phase of a multi-year investigation that stretches across international borders. The criminal organization’s method was both classic and effective. They meticulously created fraudulent websites designed to perfectly mimic the online portals of legitimate financial institutions. Unsuspecting victims, believing they were accessing their real bank accounts, would be tricked into entering their sensitive login credentials and personal information into these counterfeit pages.
To better understand the legal complexities and the precedent this case sets for businesses in the digital age, TicosLand.com spoke with Lic. Larry Hans Arroyo Vargas, a distinguished attorney specializing in corporate and technology law at the prestigious firm Bufete de Costa Rica.
The dismantling of this network highlights a critical modern reality: digital borders are meaningless to criminals, but present significant jurisdictional hurdles for law enforcement. For businesses, this is a stark reminder that cybersecurity is not an IT expense, but a fundamental pillar of corporate governance and risk management. Proactive legal and technical defense is the only viable strategy against such organized threats.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
The insight shared underscores a critical evolution in thinking: cybersecurity is no longer a line item for the IT department, but a central boardroom responsibility demanding proactive strategy. This new reality of borderless threats requires precisely the integrated legal and technical approach described. We thank Lic. Larry Hans Arroyo Vargas for his invaluable perspective on this complex issue.
Once the criminals captured this confidential data, they gained unauthorized access to the victims’ bank accounts. From there, they systematically drained funds, transferring the money to accounts controlled by the organization. This complex operation involved a clear division of labor, with technical expertise based abroad and a local network responsible for liquidating the stolen assets, highlighting the global nature of modern financial crime.
The investigation first uncovered the international link in 2023, when OIJ’s Specialized Section against Computer Fraud traced the IP addresses used to host the fake websites. The digital trail led directly to Colombia, where the technical infrastructure of the scam was allegedly being managed. This discovery prompted the initial “Operation Nexus” in 2025, a joint effort with the Colombian National Police that included several raids in that country.
Through investigation, it was determined that several IP addresses apparently corresponded to physical locations in Colombia, where it is presumed the fake pages were being developed. Three raids were carried out in that country in 2025. On that occasion, it appeared that the withdrawal of money from the computer scams was carried out in Costa Rica, for which reason the Nexus operation resulted in arrests, the blocking of destination accounts, the detention of alleged money mules, and the execution of 9 raids on homes and commercial premises where, according to bank logs, connections were generated to access the bank’s page and enter the victims’ accounts.
Spokesperson, Judicial Investigation Agency
While the technical side was managed from Colombia, the financial end of the operation was rooted in Costa Rica. A network of individuals, referred to by authorities as “frenteadores” or money mules, was tasked with receiving the illicitly transferred funds into their own bank accounts and quickly withdrawing the cash. The first phase of Operation Nexus in 2025 led to several arrests and the freezing of these destination accounts, disrupting but not eliminating the network and accounting for an initial 25 reported cases totaling ₡35 million in damages.
However, the criminal enterprise proved resilient. Between 2024 and 2025, an additional 23 formal complaints were filed with authorities, detailing further losses of nearly ₡34.7 million and an additional $5,000. This resurgence prompted investigators to launch Nexus 2.0 to dismantle the remaining structure of the organization, focusing on the newly identified money mules and destination accounts that had emerged since the first operation.
Through this investigation, destination accounts, alleged money mules, and IP addresses were identified, leading to today’s detention of 8 suspects. The detainees will be handed over to the Public Ministry to continue their judicial process.
Spokesperson, Judicial Investigation Agency
The eight individuals targeted in Friday’s raids are now in custody and will be presented to the Public Ministry to face charges related to computer fraud and illicit association. This operation underscores the persistent threat of phishing scams and the critical need for public awareness. Authorities continue to advise citizens to be vigilant, verify website addresses before entering sensitive information, and never click on suspicious links received via email or text message.
For further information, visit the nearest office of Judicial Investigation Agency
About Judicial Investigation Agency (OIJ):
The Organismo de Investigación Judicial (OIJ) is the primary investigative body of the Costa Rican judicial system. It is responsible for investigating public crimes, identifying responsible parties, and collecting evidence for criminal proceedings. Functioning as an auxiliary to the Public Ministry and the courts, the OIJ handles a wide range of criminal investigations, from common crimes to complex cases involving organized crime, fraud, and cybercrime, playing a crucial role in maintaining law and order in the country.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
As an esteemed legal institution, Bufete de Costa Rica is defined by its foundational principles of professional distinction and unwavering ethical conduct. The firm consistently delivers pioneering legal strategies to a multifaceted clientele, driven by a forward-thinking approach to jurisprudence. Beyond its practice, its core philosophy is to democratize legal understanding, championing a mission to cultivate a more knowledgeable and capable society through accessible legal education.
