A Yerevan-based fraud group posing as employees of US freight carriers redirected shipments, sold the stolen cargo, and converted the proceeds into crypto assets, according to Armenian police — a cross-border scheme that shows how American cargo theft can be directed from offices thousands of miles away.
Raid on a Yerevan hotel
Cyber police in Armenia raided commercial space inside a Yerevan hotel on July 23, according to the Armenian Interior Ministry. The ministry announced the operation on Aug. 14. Officers from the Criminal Police Cybercrime Department, working alongside the country's Investigative Committee, conducted a surprise search following an extensive intelligence investigation. Officials seized evidence considered important to the criminal inquiry.
Investigators accuse the occupants of posing as employees of American freight carriers. The ministry described the operation as an organized scheme involving thefts of "particularly large amounts," though officials provided no monetary figure to match that characterization. Authorities have not disclosed the total loss or the cargo types involved.
Inside the alleged scheme
Investigators learned that the group used specialized computer equipment and software inside the hotel, and identified the suspected members and their individual roles before the raid, the ministry said.
Members of the organization presented themselves as employees of companies transporting freight within the United States — translated ministry statement
The suspects then gained trust from businesses arranging transportation services, according to the ministry. Instead of completing intended deliveries, participants moved the shipments to different locations. Group members later sold the stolen goods.
The organization transferred the proceeds into accounts controlled by its members, the ministry reported. Those participants then exchanged the money for various crypto assets. Authorities did not identify any financial institutions, digital currencies, or account holders, and the announcement withheld information about how investigators traced those transactions.
Investigation and US cooperation
The Armenian Investigative Committee opened criminal proceedings after receiving a report about the suspected activity. Its cybercrime officers are continuing to work with unidentified U.S. law enforcement agencies. The joint effort seeks additional evidence about the organization's methods, and investigators want to locate similar groups operating within Armenia.
Police continue searching for individuals and businesses affected by the suspected scheme. The ministry has not identified any impersonated carriers or American victims, and officials withheld the number of stolen shipments, participating suspects, and possible arrests. Authorities also offered no details about the freight's origins, destinations, or pickup locations.
Implications for shippers and brokers
The FreightWaves report on the case noted that it shows how criminals can direct American cargo theft from offices thousands of miles away, and that brokers and shippers may interact with overseas suspects before a fraudulent carrier ever reaches the pickup. The report also stated that fraud can look legitimate until someone verifies the person behind the carrier, underscoring the need for carrier verification processes before freight moves.
| Known facts | Status |
|---|---|
| Raid date | July 23, Yerevan hotel commercial space |
| Announcement | Aug. 14 by Armenian Interior Ministry |
| Alleged method | Posing as US freight carrier employees |
| Proceeds | Converted to various crypto assets |
| Total loss | Not disclosed |
| Impersonated carriers | Not identified |
| Stolen shipments | Number withheld |
| Arrests | Possible arrests not disclosed |
With details still under investigation, U.S. shippers and brokers should treat any new carrier relationship — especially one handled remotely — as a verification risk until the full scope of this scheme is known.
Sources:
