The call center had 443 computers. The voice on the line had a script.

She was sixty-one, she lived in the nineteenth district of Vienna, and the man on the phone called her by her first name on the second call.

That was the tell, if anyone had been watching for tells. Not the platform. Not the dashboard. The first name. He used it the way an old friend would use it, gently, like it was already shared between them. He said he was a broker. He said he had been assigned to her account. He said he was calling from a desk in London, or maybe it was Frankfurt, the cities moved around in her memory later because by then it did not matter where he had said he was. He had not been there. He had been in a room in Tirana with two hundred other people doing the same job.

She had clicked an ad. That part she remembered clearly. It was on a news site she trusted. The ad showed a chart going up. She filled in a form because the headline used a word that had been bothering her for two years, which was the word "retirement." A man called the next day. Then another man. Then the man who used her first name.

This is how the machine eats.

I.

On April 17, 2026, Austrian and Albanian police walked into three buildings in Tirana and shut the machine down. Europol coordinated. The release came out twelve days later. Ten people were arrested. Nine private homes were searched. Investigators carried out €891,735 in cash (about $965K USD), 443 computers, 238 mobile phones, 6 laptops, and a pile of hard drives and storage media that will take forensic teams months to read.

Read those numbers slowly. 443 computers. 238 phones.

That is not a startup. That is not a few guys in a basement. That is a factory floor.

The machine had been running since at least 2023. Austrian authorities started the investigation in June of that year because Vienna kept producing victims. Same story. Same script. Different names on the wire transfer. By the time the doors came down in Tirana, the damage estimate was at least €50 million ($54M USD). Europol's word, in their own release, is "at least." The real number lives in the laptops they hauled out of those rooms.

II.

Here is what the call center looked like, reconstructed from what police found and from what Europol described publicly. If a piece of furniture is wrong, a piece of furniture is wrong. The machinery is right.

A long room. Rows of desks. A monitor at every desk. A headset at every desk. Near each monitor, a script. The script had branches. If the mark says she is nervous, go here. If the mark says her husband handles the money, go here. If the mark says she wants to withdraw, go here, and here is the line about a tax verification fee that has to be paid before withdrawals can clear.

Roles were assigned. Some agents made the first call, the warm one, the one that handed the mark off. Other agents were "retention." Retention is the polite word. Retention agents called when the mark stopped depositing. Retention agents called when the mark tried to leave. Retention agents were the ones who used the first name.

The hierarchy went up from there. Floor managers. Operators. The names at the top are still under investigation and I am not going to put them in this piece because that is what court is for.

I have been in rooms that looked like this. Not this room. Adjacent rooms. In 2021 I sat in on a presentation by a project that wanted me to advise them, and they walked me through their "community growth team," which was eight people in Manila reading from a document on a shared drive. The document told them how to answer questions in Discord. The questions were predictable, so the answers were too. The room was clean. The coffee was good. The work was a script.

The Tirana rooms were that, scaled to industrial.

III.

The platform the victims saw was a website. It looked like a brokerage. It had charts. It had a portfolio page. The portfolio page showed gains. When the mark logged in, the number was higher than yesterday. When she logged in again, the number was higher still.

This is the part that breaks people. Not the loss. The proof of gain.

Because she watched it grow. She watched her €5,000 become €5,400 in eight days. She watched it become €6,100 in three weeks. The man on the phone called to congratulate her. He said the strategy was working. He said the next move was to deposit a little more so they could get her into a better tier. He used the word "tier." She liked the word.

The dashboard was not connected to anything. The numbers were rendered by a server that someone in Tirana could edit. The man who called her could see her dashboard on his own screen and he could see what she was about to ask before she asked it.

When she tried to withdraw, the button did not work. Or it worked and the withdrawal was "pending." Or there was a fee. Or there was a tax. Or there was a verification step. The script had branches for all of those.

This is the model law enforcement and the press now call "pig butchering." I do not love the term but I will use it because it is the term in the filings. The shape is: build trust, fatten the deposit, block the exit. The Tirana operation ran the third act in volume.

IV.

Picture her at the kitchen table in the nineteenth district. It is a Tuesday morning. She has not slept. She has logged into the platform six times since 2 a.m. The dashboard still shows her balance, big and green. The withdrawal still says pending. The man who used her first name has stopped answering. A different man has called from a different number to explain that there is a final compliance fee and once she pays it the funds will release.

She does not pay it. Something in her has finally moved.

She calls the police. The police in Vienna have heard this story before. They have heard it enough times that by mid-2023 they opened a file and started building toward Tirana.

That part may be the part worth holding onto. The reason the doors came down on April 17 is because enough women like her made the call. Not the first call. The second one. The one to the police.

V.

Now the harder part.

The day Europol announced the takedown, a second wave started. It always does. It is the reason the original story I was sent had the words "recovery scam" in the headline even though the takedown itself was an investment scam operation. The two are stitched together in the public mind because they are stitched together in the supply chain.

A "recovery service" is a person who calls a victim of a crypto scam and offers, for a fee, to get the money back. They will say they are a forensic firm. They will say they have a relationship with an exchange. They will say they have a contact at Europol. The fee is upfront. The recovery does not happen. The mark, who has already lost once, loses again.

The Tirana arrests will produce a victim list. That list will leak, or pieces of it will, or it will be reconstructed from public reporting and complaint forums. And then the second machine will start calling. Different room. Different script. Same architecture.

If you or someone you know got a call this week from a "recovery specialist" who knew details about a loss they should not have known, that is not a coincidence. That is the second factory.

VI.

Ten arrests. €50 million in alleged damages. Three call centers. 443 computers. The chairs in those rooms are empty for now.

They will not be empty for long. Not those chairs, exactly. Different chairs. Different city. The script is a file. The file moves.

The woman in the nineteenth district will get her police report number. She will not get her money. The men with the headsets will get lawyers. The investigation in Austria and Albania is active and the people arrested are presumed innocent and the case has not been tried.

She thought she was an investor.

She was the product.