Notes on Scam Call Center Investigation

Overview

• A massive data leak of 1.9 terabytes from scam call centers, containing over one million phone call recordings, internal chats, payrolls, and banking details.
• The data was leaked to Swedish journalists at SVT and shared with the Organized Crime and Corruption Reporting Project.
• The scams affected tens of thousands of victims globally, generating at least $275 million.
• Key discovery: Unmasking of individuals behind the scam operation using leaked data.

Affiliate Marketing and Scam Operations

• Affiliate Marketing:
  • In the scam industry, it involves promoting fake ads, such as a deepfake with Elon Musk.
  • Victims provide contact info believing in schemes like Quantum AI.
  • Affiliate marketers send details to scam centers.
• Victim Case Study:
  • An architect from Spain fell victim, paying €400,000.
  • Her details were sold by Zeus Media, earning them a $1,100 commission.

Scam Call Centers

• Location Example: Tbilisi, Georgia - employed at least 85 scammers and staff.
• Scam Process:
  • Initial investment suggestion, typically $250.
  • Victims are asked to install software like AnyDesk for remote access.
  • Fake profits shown on sites like 'Golden Currencies'.
  • Additional investments encouraged based on fake profits.
• Investigator Scam:
  • Same scam center employee calls posing as an investigator.
  • Victims are tricked into paying more under the guise of recovery.

Money Laundering Mechanics

• Case Study - Victim "Mark":
  • Convinced to send 7,000 British pounds.
  • Scammer advises using Chase Bank, under the pretext of buying theater tickets.
  • Money routed through financial services, like a company in Bulgaria with a Revolut account.
• Backup Plans:
  • Use myriad financial institutions if payments are blocked.
  • Complex laundering similar to cartels due to large amounts involved.

Internal Operations and Celebrations

• Celebrations:
  • Successful scams celebrated with leaderboards and bonuses.
  • High performers earn significant amounts.
  • New Year's parties documented online provided investigative leads.

Investigative Process

• Key Individuals Identified:
  • Mary Roberts / Mariam Charchian:
    • Linked through Telegram chats and family connections (sister Veriko Charchian).
  • The Boss - Akaki Kevkhishvili:
    • Identified via social media profiles and event photos.
    • Shared characteristics and logos connected him to scam operations.

Aftermath and Legal Actions

• Post-publication of findings in March 2025 led to the closure of the Georgian scam center.
• Georgian prosecutors launched investigations into fraud and money laundering.
• Key figures like Akaki Kevkhishvili went into hiding, deleting social media.
• Victims like Marcel began receiving support and information on scammers.

---

These notes summarize the investigation into scam call centers and highlight how investigative journalism can expose and disrupt criminal networks.