New revelations are coming to light in the major illegal subscription television (IPTV) case dismantled by the Crete Organized Crime Unit, exposing the full scale and methods of a criminal network that allegedly operated continuously for nearly a decade, with clients across Greece and abroad and profits running into the millions of euros. As parapolitika.gr first reported on Wednesday, June 17, investigators mapped out a structured criminal organization of seven core members that allegedly built an entire parallel subscription TV network since 2017, offering thousands of customers access to Cosmote TV, Nova, Netflix, Disney+, Amazon Prime, Apple TV, ANT1+, Bundesliga, Serie A and dozens of other platforms and sports packages — all at prices far below legitimate subscription rates.
During the police investigation, three individuals were identified at the top of the organization’s hierarchy, allegedly responsible for centrally coordinating sales, subscriptions and financial flows. Authorities believe one of them managed the central IPTV server panel — the system used to activate, renew and manage thousands of illegal subscriptions — while other members acted as resellers and were responsible for recruiting new clients. According to the case file, another member played a particularly critical role by handling the technical support of the illegal infrastructure, managing servers, domains and resolving technical issues to ensure the network remained continuously operational.
Servers in Ukraine, Bulgaria, the Netherlands and Starlink satellite internet
New evidence shows the operation was not confined to Greece. The suspects allegedly used a multinational technological infrastructure involving servers across multiple countries, VPN services, anti-cyberattack protection systems, constant rotation of domain names and relay networks that allowed the operation to continue even when legitimate providers attempted to block it. The case file even references the use of Starlink satellite internet services, as well as infrastructure based in the United Kingdom, Germany, France and Morocco.
Clients in 13 countries
Investigations revealed that the illegal network served customers well beyond Greece. Subscribers were identified in at least 13 countries, including Germany, Australia, Cyprus, the United Kingdom, Italy, Sweden, Portugal, Canada, the Netherlands and New Zealand.
Over 2,100 active subscribers and millions of euros in revenue
Financial investigations revealed that between 2021 and 2025, the ring had built a client base of at least 2,112 subscribers, who paid between €10 and €125 depending on the package, subscription duration and number of connected devices.
Police estimate that based on officially recorded bank transactions alone, organization members unlawfully obtained financial gains of at least €944,160. However, the actual figure is believed to exceed one million euros, as a significant portion of transactions was conducted in cash.
Money funneled through 58 overseas accounts
Authorities uncovered extensive use of bank accounts and financial services abroad. According to investigative findings, members of the ring allegedly moved money through more than 58 accounts and payment cards across 12 different countries, exploiting platforms including Revolut, PayPal, Binance, Viva and IRIS to conceal the origin of the funds. Investigators are also looking into real estate and vehicle purchases, as well as luxury lifestyle expenditures believed to have been financed through the ring’s illegal proceeds.
The bombshell discovery: A database of 86,000 users
The most striking finding of the investigation was uncovered within the seized servers and management systems. According to the evidence, a database was discovered showing a sequential record of more than 86,000 end-user clients, while a single management panel logged approximately 4,600 active customers. Based on this data, authorities estimate the organization’s total financial gain may exceed €7 million, while losses sustained by legitimate content providers are calculated to surpass €50 million.
Accounts and assets frozen
By prosecutorial order, bank accounts, safe deposit boxes, securities and other assets belonging to those arrested have been frozen. So far, bank accounts belonging to seven individuals with a combined balance of nearly €122,000 have been seized, and restrictions have been placed on the disposal of properties linked to the case. The case file also includes 71 end users of the illegal service, as well as five individuals allegedly providing support to the organization’s activities.
