iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
North Macedonia’s Interior Ministry and the FBI have linked a 20-year-old man from Golema Recica to OLVX, an illicit online marketplace that allegedly sold stolen personal data, login credentials and cybercrime services. The case has two documented stages: an April 28, 2026 operation that detained two alleged administrators and seized electronic devices, followed by October reporting that identified a 20-year-old suspect and a criminal complaint. The available reports do not establish a conviction or a separate second arrest.
What happened in the OLVX case
The Interior Ministry’s Cyber Crime Sector opened the investigation after receiving initial information from the FBI. On April 28, 2026, the ministry said investigators carried out a coordinated operation and searched a property in Golema Recica under an order from the Basic Court of Tetovo.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Cybercrime Investigations | $41.53 | Buy on Amazon |
| 2 |
|
Cybercrime and Digital Forensics: An Introduction | $53.81 | Buy on Amazon |
| 3 |
|
Cybercrime: The Investigation, Prosecution and Defense of a Computer-Related Crime | $36.29 | Buy on Amazon |
| 4 |
|
Cybercrime and Digital Forensics: An Introduction | $64.72 | Buy on Amazon |
Officials detained A.E., 20, and A.I., 23, and took desktop computers, laptops and mobile phones for forensic examination. The ministry said investigative measures were continuing to identify other participants and preserve evidence.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
On October 14, 2026, Telma reported that the ministry had filed a criminal complaint against E.A., a 20-year-old from Golema Recica. Recorded Future News described the action as an arrest but said the suspect had not been publicly named. Because the public accounts describe different procedural steps, it is more precise to say that April records two detentions, while October reporting identifies a suspect and a complaint; the sources do not support claiming that a second arrest occurred.
#1 Best Overall
What OLVX allegedly was
Authorities and the Council of Europe describe OLVX as a criminal marketplace operating through several domains. It allegedly connected sellers offering compromised personal information, stolen login credentials, cybercrime tools and related services with customers seeking to use them.
The compromised information could facilitate electronic-payment fraud, identity theft and access-device fraud. The marketplace also kept customer and seller registration data, giving investigators a potential record of how the service operated and who used it.
OLVX’s reported scale
| Measure | Reported figure | Qualification |
|---|---|---|
| Customer accounts | More than 2,600 | Figure cited by North Macedonia’s Interior Ministry in its 2026 account of the operation. |
| Seller accounts | More than 1,500 | Figure cited by the ministry; the FBI separately referred to more than 1,500 seller accounts. |
| Total sales | Above US$500,000 | Ministry estimate reported for the marketplace. |
| Stolen access credentials offered | More than 1,500 | Figure attributed to the ministry by Telma; it describes credentials, not the total number of accounts. |
| Operating period | July 2023 onward in the ministry’s description; 2023–2025 in an FBI statement quoted by Recorded Future News | The differing end-date descriptions should not be treated as a confirmed contradiction without further court records. |
What investigators seized
The April search produced desktop computers, laptops and phones. Those devices were sent for forensic analysis, which can help investigators recover marketplace records, communications, payment information, domain-management details and evidence of the people who administered or used the service. The ministry has not publicly disclosed the contents of that examination.
What charges are alleged
Telma reported that the criminal complaint alleges computer fraud, misuse of personal data, and the production and distribution of child sexual-abuse material. These are allegations in an ongoing case. The available statements do not report an indictment, conviction, sentence or final court ruling.
Rank #3
- Used Book in Good Condition
The ministry said its work continued to identify all involved parties and secure relevant evidence. In its words: “The Cyber Crime Sector continues to take measures and actions to fully resolve the case, aiming to identify all involved parties and secure relevant evidence, in accordance with applicable legal regulations.”
How the FBI and international law-enforcement cooperation fit in
The FBI supplied the initial information that helped North Macedonia’s Cyber Crime Sector begin the investigation. The FBI later characterized OLVX as active between 2023 and 2025 and alleged that it unlawfully sold victims’ personally identifiable information and login credentials through more than 1,500 seller accounts.
Rank #4
The Council of Europe presents the operation as an example of cooperation under the Budapest Convention on Cybercrime. That framework supports cross-border assistance, preservation of electronic evidence and the execution of domestic investigative measures. In this case, North Macedonian authorities obtained the Tetovo court order, conducted the search locally and performed the initial device seizures while coordinating with the FBI.
Free tools Windows power users keep installed
One-click scans. No signup required.
What is established—and what is not
- OLVX is described by authorities as an illicit marketplace for stolen data, credentials and cybercrime tools or services.
- The April operation in Golema Recica detained two alleged administrators and seized computers and phones for forensic review.
- October reporting identified a 20-year-old alleged administrator and a criminal complaint; public sources differ in whether they call that step an arrest.
- Authorities cite more than 2,600 customer accounts, more than 1,500 seller accounts and sales exceeding US$500,000.
- The case remains at the investigation and complaint stage in the available reporting, with no reported conviction or final disposition.
Why the case matters
OLVX illustrates how underground marketplaces can function as structured businesses rather than isolated exchanges: they maintain seller and customer accounts, operate across multiple domains and monetize inventories of credentials and personal data. The combination of seized devices, registration records and international evidence-sharing gives investigators several routes to identify additional operators and users. It also shows why a local search can have consequences beyond one country when the service, victims and infrastructure span borders.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
