Cratos Exposed as a Scam Payment Facilitator with Bulgarian-Israeli Ties
Following FinTelegram’s recent investigations into Cratos (Cratos.net) and its role in laundering funds for cybercriminals, new whistleblower information has revealed a deeper connection—Cratos appears to be a white label solution of Bulgarian payment processor SKYPAYGATE a/k/a SkyGate (skypaygate.com).
SKYPAYGATE is operated by Sofia-registered company Sky Mechanics EOOD, which claims to have operations in Kazakhstan, Canada, the EU (Bulgaria), and Israel—a footprint that perfectly matches the regions identified in the OCCRP “Scam Empire” report as hotspots for cybercrime and scam payment networks.
In addition to SkyPay, a/k/a Skypaygate, the Bulgarian entity Sky Mechanics also operates the Sky-Mechanics website (https://www.sky-mechanics.com). Clicking on the LinkedIn icon on the website takes you to the LinkedIn page of Wix, a well-known website-builder platform in Israel.
Key Findings
- Cratos’ Direct Link to SKYPAYGATE
- The Cratos login page explicitly reads: “Login to Skypaygate”—a clear indicator that the platform is running on SKYPAYGATE’s payment infrastructure.
- According to whistleblowers, Cratos is a white-label solution of SKYPAYGATE, meaning it is not an independent exchange but a rebranded payment gateway used to launder funds for fraudulent investment schemes.
- The Bulgarian-Israeli Cybercrime Connection
- Sofia, Bulgaria, plays a major role in the scams exposed by OCCRP.
- Software development companies tied to “Scam Empire” scams are based in Sofia, reinforcing Bulgaria’s role as a cybercrime hub.
- Once again, we see a direct link between Bulgaria and Tel Aviv, Israel—a pattern previously observed in the scam networks of Gal Barak and Gery Shalon.
- Key Individual: Aliona Kolker – The Israeli Connection
- Aliona Kolker (LinkedIn), a financial specialist based in Tel Aviv, publicly states on his LinkedIn profile that Cratos is a white label solution of SKYPAYGATE.
- He simultaneously works as a finance specialist at Cratos and as VP Sales at SKYGATEWAY, further confirming the deep integration between these entities.
- Cratos’ False Regulatory Claims
- On its LinkedIn profile, Cratos claims to be a “regulated crypto services provider in Estonia”, yet no legitimate records support this assertion.
- This aligns with typical scam payment processors that falsely claim regulatory oversight while acting as money laundering conduits for cybercriminal networks.
The Bigger Picture – SKYPAYGATE and the “Scam Empire”
The OCCRP “Scam Empire” report uncovered extensive scam networks operating from Georgia, Bulgaria, and Israel, siphoning hundreds of millions of dollars from victims. SKYPAYGATE’s presence in Kazakhstan, Canada, the EU, and Israel fits precisely into this framework, making it a likely payment facilitator for investment fraud networks exposed in OCCRP’s leaks.
This strong connection between Sofia-based SKYPAYGATE, Tel Aviv-based operators, and Cratos’ laundering activities raises urgent red flags for regulators, law enforcement, and financial institutions.
Names and Roles
Here is a structured table summarizing the key individuals, companies, and trading names mentioned in the report for quick reference:
| Name | Role / Function | Connections / Notes |
|---|---|---|
| Cratos (Cratos.net) | Crypto payment processor | White-label solution of SKYPAYGATE; linked to scams |
| Blue Whale Tech Inc. | Operator of Cratos | Registered in Vancouver, Canada; FinTRAC MSB license |
| SKYPAYGATE / SkyGate | Payment processing platform | Operated by Sky Mechanics LTD in Bulgaria; active in Kazakhstan, Canada, the EU, and Israel |
| Sky Mechanics EOOD (СКАЙ МЕХАНИКС ЕООД) | operating entity d/b/a of SKYPAYGATE and SkyPay | Registered in Sofia, Bulgaria; Company register data here. |
| Andrian Vasilevich Popov (Андриан Василевич Попов) | Director of Sky Mechanics EOOD | Director of several Bulgarian legal entities. |
| Aliona Kolker | VP Sales at SKYPAYGATW, Finance Specialist at Cratos | Works from Tel Aviv; confirms Cratos is a white label of SKYPAYGATE |
| A.K. Group | Georgian cybercrime organization | Ran call centers defrauding investors |
| OCCRP (Scam Empire Report) | Investigative organization exposing cybercrime | Uncovered financial crimes linked to Cratos and SKYPAYGATE |
| Gal Barak | Convicted cybercriminal, “Wolf of Sofia” | Ran broker scams with ties to Bulgaria and Israel |
| Gery Shalon | Israeli cybercriminal mastermind | Former partner of Gal Barak, involved in large-scale fraud |
| Kazakhstan, Canada, EU, Israel | SKYPAYGATE operational regions | Regions linked to investment scam payment networks |
This table provides an easy-to-navigate reference for understanding the corporate and individual connections involved in this financial cybercrime network.
Information Wanted – Insider Cooperation Needed
FinTelegram is actively seeking insider information on:
✔ The beneficial owners of Sky Mechanics LTD (d/b/a SKYPAYGATE)
✔ The true executives and partners behind Cratos (Cratos.net)
✔ SKYPAYGATE’s hidden connections to cybercriminal networks in Georgia, Israel, and Bulgaria
✔ Any evidence linking SKYPAYGATE to fraudulent payment processing for scam brokers
🔎 If you have any relevant intelligence, contact FinTelegram through our secure channels. Your identity will remain confidential.
Final Warning to Financial Institutions and Regulators
Cratos and SKYPAYGATE, a/k/a SkaGate, appear to be operating as a high-risk payment processing network, facilitating financial crimes across multiple jurisdictions. Immediate action is required to:
🚨 Investigate and shut down Cratos’ payment processing activities
🚨 Blacklist SKYPAYGATE and its associated entities from financial networks
🚨 Freeze any known accounts linked to these payment facilitators
This case demonstrates how fraudsters continuously evolve their money-laundering tactics by setting up bogus payment platforms in jurisdictions that enable financial secrecy. The SKYPAYGATE-Cratos network must be dismantled before more victims are exploited.
💡 Stay vigilant. Report suspicious financial activities. Support fraud victims.
📢 FinTelegram Financial Intelligence Unit
