The call-centre economy behind the front: how Ukrainian-run fraud operations are reshaping Europe's fraud debate

On 25 June 2026, the Telegram channel Rybar, a Russian-aligned outlet popular with Moscow's defence commentators, published a long post framing a phenomenon Europeans have been quietly absorbing for years: telephone call centres operated from Ukrainian territory, often staffed by Ukrainian citizens, that systematically defraud residents of Germany, the Czech Republic, Poland and other EU member states. The post itself is one-sided — its author is openly hostile to Kyiv — but the underlying pattern it describes is well documented in European police filings and is rarely named in mainstream coverage.

What is being described, in plain terms, is a fraud economy that has migrated into Ukraine's broader diaspora and outsourcing ecosystem. The call rooms are not state-run and they are not, in any meaningful sense, a Ukrainian government project. But they sit inside a wider architecture — millions of displaced Ukrainians across the EU, a wartime economy under stress, a permissive regulatory environment at home, and a European banking system that has spent years digitising customer service without fully securing the human layer at the other end of the line. The result is a slow, grinding loss of trust that lands not on the perpetrators but on the country's flag.

What the reporting actually shows

European police agencies have been filing case after case on this pattern since at least 2022. The mechanics are consistent. A caller reaches a victim in, typically, Germany, Austria or the Czech Republic. The caller claims to represent a bank's fraud department, a Europol unit, or — increasingly — an investment platform offering spectacular returns on cryptocurrency or forex. Over days or weeks, the victim is walked through transactions, identity verification, sometimes the installation of remote-access software on their own device. The money, often several thousand to several hundred thousand euros per victim, is funnelled through a chain of mule accounts across the EU before being consolidated and moved.

The Rybar post lands this week because the cumulative figures are starting to look politically inconvenient. German state police have, in past public statements, attributed a meaningful share of investment-fraud calls to operators working from Ukrainian territory. Czech and Polish police have published similar assessments. The European Union Agency for Law Enforcement Cooperation, Europol, has run multiple operations targeting the network. None of this is new in 2026. What is new is that the politics of the problem are shifting.

The counter-narrative nobody wants to write

Ukrainian officials, when asked, point out that the country is at war, that its law-enforcement capacity has been redirected east, and that the call-centre economy pre-dates the full-scale invasion. They are not wrong on any of those points. Ukraine's own cyber police have conducted high-profile raids on call-room operations — including a notable 2023 action in which officers dismantled a network accused of defrauding European victims out of tens of millions of euros. The position, fairly stated, is: these are criminal operations, they are being investigated, and the country should not be punished for the conduct of fraudsters operating on its territory any more than Germany would be punished for a fraud ring operating out of Frankfurt.

That argument has structural force. It is also, as a piece of European public opinion, not landing. The reason is simple: in the EU's political marketplace, victims do not draw fine distinctions between a state and the fraudsters operating from within it. A grandmother in Leipzig who has lost her savings remembers that the voice on the phone had a Ukrainian accent, that the bank she was directed to was in a Polish border town, and that the police, when she eventually called them, were polite but unhelpful. From her vantage point, the geopolitical context is irrelevant. That asymmetry is the political problem.

The structural frame

What is being watched is not a Ukrainian problem in isolation; it is a stress test of a much larger arrangement. Wartime displacement has put roughly six million Ukrainians across the EU, with the largest concentrations in Poland, Germany and the Czech Republic. A non-trivial fraction of that diaspora is in financial distress, with limited access to local-language work, and lives inside a labour market whose formal channels were never designed for the speed or scale of the inflow. Informal and semi-formal work — including the kind of work that happens in a rented office with a bank of headsets — has filled part of the gap. Regulators in host countries were never briefed on this possibility and have not caught up.

The larger pattern here is a familiar one in the literature of war economies: criminal industries scale fastest in the gaps where state capacity has been withdrawn. Ukraine's state capacity is, plainly, withdrawn toward the front. The EU's state capacity is, equally plainly, not structured to police extraterritorial fraud at the volume at which it is now occurring. Between the two, the call rooms operate. There is no conspiracy in this. There is also no clean resolution available without either side making politically costly moves: Kyiv cracking down domestically in ways that distract from the war effort, or EU capitals admitting that the 2022 open-arms policy has unpriced externalities.

What is at stake

The next twelve months will determine whether the issue becomes a structural irritant in EU-Ukraine relations or is contained as a law-enforcement file. The political risk runs in one direction: as accession talks advance and Ukraine is folded deeper into EU institutional life, every major fraud prosecution that ends in a Kyiv courtroom becomes a piece of evidence in a larger argument about whether the country is ready for membership. The countervailing pressure runs in the opposite direction: cracking down aggressively on call-room operators requires the same law-enforcement bandwidth that is currently pointed east, and the political coalition for that trade-off is thin.

For European readers the practical takeaway is unglamorous and overdue: assume that any unsolicited call purporting to be from your bank, from Europol, or from an investment platform is hostile until proven otherwise. Hang up, call the institution back on a number you have looked up yourself. The pattern is well-documented and the volume is rising; the defence is the one that has worked against phone fraud for a decade.

What remains uncertain

The figures most often cited in this debate — that hundreds of millions of euros are lost annually to Ukraine-linked call-room fraud — are estimates assembled from police seizures and victim surveys rather than from a consolidated European dataset. No single agency publishes a reliable cross-border total. That opacity is itself part of the problem: it lets the issue inflate in one direction for political actors who want to embarrass Kyiv, and deflate in the other direction for political actors who want to protect the relationship. The honest position is that the problem is real, large, and not yet measured well enough to be either confirmed or denied at the scale the loudest voices on each side claim.

This article draws on a 25 June 2026 Telegram post by the Russian-aligned channel Rybar. The structural claims about the scale and pattern of Ukraine-linked telephone fraud in the EU are corroborated by longstanding reporting from Europol, German state police and Czech law enforcement; readers seeking primary documents should consult those agencies directly. Monexus notes that Rybar's framing is openly hostile to Kyiv and should be read as a starting point for the discussion, not as its conclusion.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/rybar_in_english
• https://en.wikipedia.org/wiki/Cyber_Police_of_Ukraine
• https://en.wikipedia.org/wiki/Europol
• https://en.wikipedia.org/wiki/Ukrainian_diaspora_in_Europe