Project 4β Impact: How Debunk.org Revealed Scam Ads Impersonating Authorities Across Europe

Overview

In one of its latest investigations, Debunk.org examined a large-scale scam network operating across Europe. A long-standing partner of Oxylabs’ pro bono initiative Project 4β, Debunk.org is an independent research organization focused on disinformation, fraud, and online manipulation. The investigation uncovered campaigns impersonating Interpol, Europol, EU institutions, and national cyber police. The fraudulent ad campaign falsely promised compensation to victims of investment fraud while, in reality, directing them to deceptive websites designed to collect personal data and extract upfront fees.

These campaigns were not aimed at the general public. They specifically targeted people who had already lost money to fraudulent brokers, crypto schemes, or phone scams, those actively searching for ways to recover their funds, and individuals whose contact details may have been sold or shared by the original scammers. For people in this position, promises of “Interpol compensation” or “Europol-supervised confiscated funds” can feel less like a warning sign and more like a final chance to recover what they lost.

Using Oxylabs’ proxy infrastructure provided through Project 4β, Debunk.org analyzed the infrastructure behind the operation, traced recurring patterns across domains and landing pages, and documented how the scam adapted through multilingual targeting and rapid asset turnover. The investigation identified more than 50,000 ads, 459 domains, and over 1,100 related web pages, with an estimated reach of more than 52 million people across Europe.

The challenge

This was not a single scam page or isolated campaign. Debunk.org was tracking a coordinated online ecosystem built to scale, adapt quickly, and repeatedly target vulnerable individuals across multiple countries.

The operation impersonated trusted institutions while presenting itself as compensation funds, legal recovery services, and official victim databases. Its purpose was to exploit people who had already suffered losses from fraudulent investment schemes by luring them into a second wave of deception.

Investigating this kind of network is especially challenging because operators frequently rotate domains, redesign landing pages, relaunch ads in different languages, and replace assets quickly after takedowns. This makes manual monitoring difficult and limits the ability to connect scattered signals into a broader operational picture.

The web intelligence behind the investigation

Debunk.org combined Meta Ad Library data, OSINT techniques, and Oxylabs data collection solutions to systematically investigate the scam network at scale.

Using Oxylabs-supported data collection workflows, Debunk.org was able to gather and structure public web data across a wide set of campaign assets, including:

• landing pages tied to scam ads;

• domains used in refund-fraud funnels;

• repeated design patterns and content templates;

• multilingual variants of the same narratives;

• signals of infrastructure reuse across apparently different “brands.”

Why this matters

The findings show how online fraud actors use institutional impersonation, short-lived websites, and coordinated advertising tactics to exploit people who have already suffered financial losses. Rather than operating as isolated scams, these campaigns formed a persistent second-wave fraud ecosystem targeting victims of prior investment scams.

Beyond direct financial harm, this activity also erodes trust in legitimate institutions. When public authorities, regulators, and law enforcement are impersonated at scale, genuine recovery processes become harder to distinguish from fraud.

The case also underscores the limits of reactive enforcement. Although many tracked assets were eventually removed, the broader infrastructure was designed for rapid replacement, allowing the scam model to continue regenerating with minimal friction. You can read Debunk.org’s full investigation here.

This case shows why access to reliable web intelligence tools matters for public-interest investigations. Through Project 4β, Oxylabs supports organizations working to uncover digital threats and expose wrongdoing. To learn more, contact the team via the form or at 4beta@oxylabs.io.