Brazilian federal and state police forces executed a series of operations on Thursday aimed at dismantling criminal networks that defrauded social security, a state-owned bank, and the medical residency system, while also disrupting drug trafficking and the illegal trade in weight-loss drugs. The Federal Police reported that one group had siphoned approximately R$2 million from the National Social Security Institute (INSS) by reactivating suspended benefits and extracting back payments. In a parallel action, officers arrested a bank employee in Rio de Janeiro suspected of installing malicious software to harvest client data, enabling accomplices to steal an estimated R$2 million from a high-net-worth branch. Other teams moved against a scheme that used false identities to open accounts at Caixa Econômica Federal and obtain fraudulent loans, causing losses of at least R$424,000, and against a network that sold confidential court documents to criminal factions in Pará state.

According to Brazilian investigators, the financial fraud cases share a common architecture: the exploitation of insider access or forged documents to bypass institutional controls. In the INSS case, the group allegedly altered databases directly. The Caixa fraud relied on counterfeit identity papers and the complicity of individuals who moved funds through currency exchanges, triggering money-laundering alerts. In Bahia, a caregiver was arrested for diverting roughly R$100,000 from an elderly bedridden client, using facial recognition to authorise loans and transfers, then spending the money on online gambling. The Civil Police of Bahia also reported dismantling a drug-trafficking organisation that moved about R$110 million through shell accounts across the São Francisco Valley, with leaders coordinating cocaine and synthetic drug distribution from São Paulo to Pernambuco.

The insider threat was underscored by operations far beyond Brazil. Russia’s Investigative Committee charged a bank employee with stealing over 69 million roubles in payments destined for participants of the “special military operation,” allegedly by filing fictitious transfer requests and cashing out the funds with accomplices. In Morocco, internal auditors at a major Casablanca-based banking group detected that commercial branch officials had granted short-term credit facilities based on suspected forged financial statements and phantom commercial registers, with some borrowers vanishing after receiving amounts exceeding 500,000 dirhams. Viewed from Brasília, the Brazilian operations also exposed vulnerabilities in judicial data systems: a public servant is accused of selling access to sealed court orders, a breach made easier because some cases were incorrectly classified, according to the integrated task force.

Transnational dimensions surfaced in a separate Federal Police operation in São Paulo state, where officers executed a search warrant and sought the arrest of a suspect already in Cambodia, part of a probe into the trafficking of Brazilians to Southeast Asian scam compounds. Victims were lured with false job offers, then had their passports confiscated and were forced to commit online fraud, a pattern that made Cambodia the top destination for Brazilian trafficking victims in 2025, according to a justice ministry report. The Brazilian operations remain active, with further arrests and asset freezes expected as digital forensics continue. In Morocco, the central risk management unit is coordinating with legal and human resources departments to determine disciplinary and criminal referrals, while Russian investigators pursue additional members of the alleged group.