Polish prosecutors have charged a fifth suspect in the fraud case surrounding crypto exchange Zondacrypto. A court in Katowice approved his pretrial detention. The investigation has run for years and touches 1.3 million exchange clients, most of them Polish.
What happened at Zondacrypto
The exchange launched in Katowice in 2014 as BitBay. It was founded by Sylwester Suszek. In 2020 the company re-registered in Estonia under the Zondacrypto brand, with BB Trade Estonia as its parent structure. Suszek disappeared in March 2022, and lawyer Przemyslaw Kral took over as chief executive.
In Poland, BitBay was long seen as one of the country's oldest crypto exchanges, and until 2020 it effectively served as a bank alternative for thousands of traders. That history makes the back-to-back disappearance of two chief executives in four years stand out even more: a platform with a million clients was left without a single accountable person.
Kral himself went missing on April 16 this year. Before disappearing, he told clients the exchange held 4,500 Bitcoin that only Suszek could unlock. That same month Zondacrypto froze withdrawals and effectively stopped responding to users. In late June, Estonia's financial intelligence unit revoked BB Trade Estonia's license.
Who is under investigation
On September 4, a court placed three suspects, Anna P., Jaromira W. and Rafal Z., in three months of pretrial detention. Prosecutors say they took part in a scheme aimed at seizing Suszek's assets. The alleged episodes include nearly 8 million euros moved out of the operator's account last October to buy property in France, a 2.9 million euro loan falsely recorded as repaid, and 7.5 million zloty laundered through sham property deals.
Separately, prosecutors accuse Anna P. of obstructing the investigation into Suszek's own disappearance. Investigators say she removed a hard drive from a gas station's CCTV recorder and pushed witnesses to give false testimony. All three deny the charges.
On September 7, Polish Prosecutor General Waldemar Zurek announced a fifth suspect in the case, Roman Z. He was charged with membership in an organized criminal group and misappropriating client funds through unauthorized changes to the exchange's data.
"The court granted the prosecution's motion and approved the pretrial detention of Roman Z."
- Waldemar Zurek, Prosecutor General of Poland, from a post on X, September 7, 2026
Investigators say the group misappropriated at least 7.8 million zloty (roughly $2 million) in user funds since at least 2020 by making unauthorized changes to exchange data. Roman Z. faces up to 10 years in prison. Police detained him in Silesia on Saturday and seized exchange documents. He has denied the charges.
Risks for users of centralized exchanges
The Zondacrypto case shows how fast a centralized platform can turn into a black box for its own customers. The exchange officially reported 1.3 million accounts, yet access to the funds depended on one person who vanished.
- Withdrawals can be frozen without warning and without a clear recovery timeline.
- A license in one jurisdiction offers no real protection if actual control sits elsewhere.
- Claims from thousands of clients can take years to resolve, with only partial recoveries.
- Reserve transparency is impossible to verify from the outside until an investigation starts.
The Zondacrypto case echoes other high-profile collapses of recent years. A common thread is the lack of independent reserve audits and excessive trust placed in a narrow circle of managers. EU regulators increasingly expect exchanges to publish proof-of-reserves, but for smaller or long-established platforms this remains a voluntary practice rather than a hard requirement.
There is another wrinkle: a change of registration alone guarantees users nothing. Zondacrypto held an Estonian license on paper, but actual management and servers could stay in Poland.
How regulators and the market reacted
The Zondacrypto scandal has already shaped Polish politics. Parliament failed for a third time to override the president's veto of a crypto oversight bill, and opponents of the veto point to this exact case as proof that current rules fall short. The Katowice prosecutor's office has received several thousand complaints from affected clients since April.
MiCA has applied across the EU since 2024 and was meant to unify oversight of crypto exchanges across the bloc. In practice, national regulators still interpret transition periods differently for platforms licensed before MiCA took effect, and part of Zondacrypto's operations fell right into that gap.
For the wider market, this looks more like a reputational hit than a systemic risk. Zondacrypto's volumes mattered in Poland but were never large enough to move global Bitcoin liquidity. Even so, each case like this gives EU regulators another reason to tighten MiCA enforcement against exchanges that have switched registration countries before.
What crypto holders should do next
Anyone keeping savings in BTC or ETH on an exchange runs the same risk Zondacrypto clients did, if the coins sit there longer than a trade actually requires. It makes more sense to exchange Bitcoin for hryvnia through a checked service right after a deal than to assume funds will stay safe on someone else's platform for years.
For longer-term storage, moving assets to a personal wallet, such as a hardware Ledger, keeps private keys independent of any single company or person. The Zondacrypto case is one more reminder of a simple rule: the longer crypto sits in someone else's account, the higher the odds it disappears one day.
Comments
Your email address will not be published. Required fields are marked *