It is one of the largest European cybercrime cases, with dozens of indictments and victim lawsuits. In its center - the Dutch payment facilitator Payvision. FreshIt is one of the largest European cybercrime cases, with dozens of indictments and victim lawsuits. In its center - the Dutch payment facilitator Payvision. Fresh

The Payvision Files: Exclusive Revelations on the CEO’s Complicity in Lenhoff and Barak’s Cybercrime Empire

2026/02/10 21:25
7 min read

It is one of the largest European cybercrime cases, with dozens of indictments and victim lawsuits. In its center – the Dutch payment facilitator Payvision. Fresh excerpts from criminal files obtained by FinTelegram put Payvision’s then-CEO Rudolf Booker uncomfortably close to the Lenhoff–Barak scam machine. These are not the fingerprints of a “neutral payment processor,” but the voice of an anxious, hands-on gatekeeper—tracking media risk, debating how to contain exposure, and negotiating the survival of a relationship that should have been shut down.

Key Points

  • A wiretapped call transcript shows Booker explicitly worrying what a FinTelegram reporter would “write about me now—about Payvision.” Lenhoff’s answer: “Maybe that you’re doing business on the grey market.”
  • In parallel Telegram evidence, Lenhoff tells Barak in December 2018: “Rudolf is a pussy… he will become very famous on this page (FinTelegram)… [They will] dig deeper in PV.”
  • These excerpts align with years of allegations that Payvision functioned as a critical payment “chokepoint” for the Barak/Lenhoff fraud ecosystem.
  • ING acquired a 75% stake in Payvision at a stated valuation of €360m and later announced a wind-down of Payvision’s PSP/acquiring services.
  • In April 2024, the Dutch prosecution service Openbaar Ministerie issued penalty orders (fines of €150k and €180k) against two former Payvision directors for long-standing, structural AML/CFT (Wwft) violations.
  • The central question remains: if the file excerpts show knowledge and operational entanglement, why is there still no public, courtroom-level accountability for the executive decision-makers?

The Lenhoff–Barak Cybercrime Network

German and Austrian law enforcement investigations established that German national Uwe Lenhoff and Israeli national Gal Barak ran a pan‑European cybercrime network of online trading, binary options, and gambling scams that defrauded tens of thousands of victims out of more than EUR 100 million.

Barak, identified as a principal of the E&G Bulgaria organization, was finally convicted in Vienna in 2020 for investment fraud and money laundering and sentenced to several years in prison, with courts confirming the criminal nature of the schemes operated via numerous online brands.

Lenhoff, who had been arrested after extensive investigations and EU‑wide coordination in January 2019, died in custody in Germany in 2020, with his death reported as sudden and unexplained, leaving many victims and open questions behind.

These criminal cases did not arise in a vacuum. They sat on top of a payment infrastructure that made high‑velocity fraud collection and laundering possible – and here Payvision and its founder and CEO Rudolf Booker enter center stage.

Read our Payvision reports here.

Payvision’s Role and the DNB Findings

Payvision, a Dutch card acquirer and payment processor founded and led by Rudolf Booker, positioned itself in high‑risk segments such as online gambling, forex, and similar verticals – sectors that law enforcement and regulators repeatedly associate with elevated fraud and money‑laundering risks.

In 2018, ING acquired a 75% stake in Payvision at a valuation of around €360 million, a transaction that turned Payvision’s high‑risk volume – including the Lenhoff–Barak flows – into a lucrative exit for its founders and managers.

The Dutch central bank (DNB) later issued a devastating supervisory investigation report on Payvision, describing systematic violations of the Dutch Money Laundering and Terrorist Financing Act and serious, long‑running failings in customer due diligence and ongoing monitoring.

DNB’s findings make clear that Payvision continued to onboard and maintain high‑risk, fraud‑prone merchants despite glaring red flags, large volumes of suspicious transactions, and hundreds of internal alerts and suspicious activity indications; the watchdog found that Payvision effectively suspended or ignored its compliance obligations in pursuit of transaction volume.

According to DNB‑related reporting, the central bank even filed a criminal complaint in 2021 against Payvision and Rudolf Booker personally, and ING consequently decided to wind down Payvision and surrender its license by mid‑2023. For the founders, however, the damage was already monetized: ING’s purchase price rewarded years of high‑risk growth, including the revenues generated from the Lenhoff and Barak fraud schemes.

Under standard AML and criminal‑law doctrines in Europe, a financial institution (and its responsible managers) that knowingly provides payment rails to fraudulent organizations, in spite of red flags and supervisory warnings, risks liability as an aider and abettor to fraud and as a perpetrator of money‑laundering offenses

Analysis: A “Laundromat” for Scammers

Newly obtained wiretapped calls and digital communications paint a devastating picture of the relationship between Rudolf Booker, the founder and former CEO of Payvision, and the late Uwe Lenhoff. Far from a standard arm’s-length business relationship, the records show a close personal bond; Lenhoff even referred to Booker as his “friend” and hosted him at his luxury birthday celebrations.

The evidence suggests that Booker was not merely a negligent executive but a knowing facilitator of large-scale investment fraud:

  • Awareness of Fraud: Booker was fully aware that Lenhoff and Gal Barak (the “Wolf of Sofia”) were operating scam platforms like Option888 and XTraderFX. Despite hundreds of suspicious activity reports (SARs) and high chargeback rates from victims, Booker continued to provide the infrastructure necessary for these organizations to launder over €131 million.
  • Active Manipulation: When chargebacks—claims from defrauded victims trying to claw back their money—became too frequent, the “good friend” Booker reportedly suggested using false transaction codes and new legal entities to evade detection by credit card networks.
  • Profiting from Crime: Payvision didn’t just process the funds; it exploited the scammers. Booker reportedly imposed a sort of private “penalties” on the schemes of Lenhoff and Barak for chargebacks, effectively “ripping off the rippers” to inflate Payvision’s earnings ahead of its acquisition by ING.

The chats: “Rudolf is a pussy… he will become very famous on this page”

The WhatsApp from 25–26 December 2018 shows chat traffic between “UL” (Uwe Lenhoff) and “Gal” (Gal Barak).​ Shortly after a Payvision call informing Barak that his business was being shut down, Lenhoff writes that “one guy from Pay Vision tried to call me” and then delivers the key line: “Rudolf is a pussy and I told him that now he will become very famous on this page, cause when this WB [FinTelegram editor] is seeing that he is right, he will dig deeper in PV.”​

This message is explosive for several reasons:

  • It shows that Lenhoff understood FinTelegram (“this page”) as a leverage tool against Booker and Payvision, threatening that further reporting would uncover more wrongdoing at the processor (“dig deeper in PV”).​
  • It indicates that Booker was already “affected” by the reporting and was trying to pull back under pressure, prompting Lenhoff to retaliate by weaponizing his knowledge of Payvision’s conduct.​
  • It suggests an environment in which scam operators and their payment facilitator CEO were locked in a mutual‑blackmail dynamic, each aware of the other’s exposure; this is inconsistent with any portrayal of Payvision as a misled victim of sophisticated clients.​

In other words, the criminals themselves perceived Payvision’s CEO as someone who could be pressured for money or favorable treatment precisely because of the media and regulatory risks around his conduct.​

The findings of the Dutch Central Bank (DNB) confirm that Payvision’s compliance was systematically suspended or ignored. While two former directors were eventually issued penalty orders, the evidence suggests a more severe legal reality: Rudolf Booker knowingly and willingly supported a global cybercrime organization as a contributing perpetrator.

Booker enriched himself personally through the sale to ING—a transaction valued at €360 million based on volumes built largely on the backs of defrauded consumers. While Lenhoff died in prison and Barak was sentenced to years behind bars, Booker has largely escaped the full weight of criminal prosecution.

The ING Connection and Ongoing Lawsuits

ING eventually shuttered Payvision in 2021 after realizing the “dark business” was incompatible with any ethical or regulatory framework. However, the fallout continues. Victims, represented by organizations like EFRI, are still pursuing millions in damages through courts in Austria, Germany, and the Netherlands.


CALL FOR INSIDERS: WE NEED YOUR HELP

The investigation into the “Payvision Laundromat” is far from over. We are looking for additional information regarding:

  • Internal communications at Payvision or ING regarding the Lenhoff/Barak accounts.
  • Details on the “private penalties” and fees charged to scam operators.
  • Knowledge of deliberate compliance overrides directed by the board.

Help us hold those who profited from cybercrime accountable. Submit your information securely via our Whistle42 system. Your anonymity is our priority.

Share Information via Whistle42
Market Opportunity
Notcoin Logo
Notcoin Price(NOT)
$0.0003878
$0.0003878$0.0003878
+0.31%
USD
Notcoin (NOT) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

The Channel Factories We’ve Been Waiting For

The Channel Factories We’ve Been Waiting For

The post The Channel Factories We’ve Been Waiting For appeared on BitcoinEthereumNews.com. Visions of future technology are often prescient about the broad strokes while flubbing the details. The tablets in “2001: A Space Odyssey” do indeed look like iPads, but you never see the astronauts paying for subscriptions or wasting hours on Candy Crush.  Channel factories are one vision that arose early in the history of the Lightning Network to address some challenges that Lightning has faced from the beginning. Despite having grown to become Bitcoin’s most successful layer-2 scaling solution, with instant and low-fee payments, Lightning’s scale is limited by its reliance on payment channels. Although Lightning shifts most transactions off-chain, each payment channel still requires an on-chain transaction to open and (usually) another to close. As adoption grows, pressure on the blockchain grows with it. The need for a more scalable approach to managing channels is clear. Channel factories were supposed to meet this need, but where are they? In 2025, subnetworks are emerging that revive the impetus of channel factories with some new details that vastly increase their potential. They are natively interoperable with Lightning and achieve greater scale by allowing a group of participants to open a shared multisig UTXO and create multiple bilateral channels, which reduces the number of on-chain transactions and improves capital efficiency. Achieving greater scale by reducing complexity, Ark and Spark perform the same function as traditional channel factories with new designs and additional capabilities based on shared UTXOs.  Channel Factories 101 Channel factories have been around since the inception of Lightning. A factory is a multiparty contract where multiple users (not just two, as in a Dryja-Poon channel) cooperatively lock funds in a single multisig UTXO. They can open, close and update channels off-chain without updating the blockchain for each operation. Only when participants leave or the factory dissolves is an on-chain transaction…
Share
BitcoinEthereumNews2025/09/18 00:09
Top AI Crypto Presales 2026: IPO Genie Crushes the Competition with Pre-IPO Deal Intelligence and Massive Upside

Top AI Crypto Presales 2026: IPO Genie Crushes the Competition with Pre-IPO Deal Intelligence and Massive Upside

As the 2026 crypto bull run heats up, investors are chasing the next big AI-powered opportunity. But with so many […] The post Top AI Crypto Presales 2026: IPO
Share
Coindoo2026/02/11 05:02
IP Hits $11.75, HYPE Climbs to $55, BlockDAG Surpasses Both with $407M Presale Surge!

IP Hits $11.75, HYPE Climbs to $55, BlockDAG Surpasses Both with $407M Presale Surge!

The post IP Hits $11.75, HYPE Climbs to $55, BlockDAG Surpasses Both with $407M Presale Surge! appeared on BitcoinEthereumNews.com. Crypto News 17 September 2025 | 18:00 Discover why BlockDAG’s upcoming Awakening Testnet launch makes it the best crypto to buy today as Story (IP) price jumps to $11.75 and Hyperliquid hits new highs. Recent crypto market numbers show strength but also some limits. The Story (IP) price jump has been sharp, fueled by big buybacks and speculation, yet critics point out that revenue still lags far behind its valuation. The Hyperliquid (HYPE) price looks solid around the mid-$50s after a new all-time high, but questions remain about sustainability once the hype around USDH proposals cools down. So the obvious question is: why chase coins that are either stretched thin or at risk of retracing when you could back a network that’s already proving itself on the ground? That’s where BlockDAG comes in. While other chains are stuck dealing with validator congestion or outages, BlockDAG’s upcoming Awakening Testnet will be stress-testing its EVM-compatible smart chain with real miners before listing. For anyone looking for the best crypto coin to buy, the choice between waiting on fixes or joining live progress feels like an easy one. BlockDAG: Smart Chain Running Before Launch Ethereum continues to wrestle with gas congestion, and Solana is still known for network freezes, yet BlockDAG is already showing a different picture. Its upcoming Awakening Testnet, set to launch on September 25, isn’t just a demo; it’s a live rollout where the chain’s base protocols are being stress-tested with miners connected globally. EVM compatibility is active, account abstraction is built in, and tools like updated vesting contracts and Stratum integration are already functional. Instead of waiting for fixes like other networks, BlockDAG is proving its infrastructure in real time. What makes this even more important is that the technology is operational before the coin even hits exchanges. That…
Share
BitcoinEthereumNews2025/09/18 00:32