While many cybercrimes are financially motivated, the financial aspects of cybercrime remain insufficiently understood. The aim of this study is to provide greater insight into the financial trails of online fraud and the choices of cybercriminals in the concealment of illicit proceeds. To do so, we utilize data from 15 completed police investigations into cybercriminal networks in the Netherlands and apply financial crime scripting as an analytical framework. Analysis revealed that online fraudsters use various resources to steal money from victims without being detected, including online bank accounts, cryptocurrency wallets and direct cash withdrawals. They rely heavily on the use of money mules in the financial trail. Furthermore, we observed that offenders are capable of changing and improving methods over time, but also remain fairly stable in their money laundering choices. Once the money is obtained, cybercriminals primarily seem to spend it on lifestyle, such as luxury hotels and expensive clothing. Others also invest in legitimate businesses and real estate. In the context of these findings, we discuss the implications for policy and practice, and outline directions for future research.
Bekkers et al. (2026) studied this question.