New operation against criminal network smuggling Syrian migrants to Germany: five arrests

Source: Eurojust

Eurojust has supported the German and Dutch authorities in a coordinated action against an organised crime group (OCG) smuggling mainly Syrian migrants to Germany. In a joint operation, five suspects were arrested in Germany, the Netherlands and Bosnia and Herzegovina.

Since 2021, at least 500 migrants have been irregularly transported via the so-called Balkan route. The network itself, however, boasts about much higher numbers of migrants being trafficked and has been advertising these figures on social media. The proceeds from the migrant smuggling are estimated to be at least EUR 1.4 million.

The arrested suspects are all Syrian nationals who arranged the transport of migrants in vehicles over land from Greece to Germany. On average, they asked for a fee of EUR 4 500 per person for the irregular transports. Investigations into the OCG were supported by information obtained via a Eurojust-supported joint investigation team into a similar network, which led to 29 arrests in October and November of last year. 

These investigations also enabled contact with the authorities in Bosnia and Herzegovina, where three suspects were taken into custody. Both in Germany and the Netherlands, one suspect was arrested. The OCG members occasionally resorted to severe physical violence and used state-of-the-art communication tools. 

During this week’s coordinated action, four places were searched and a wide range of evidence was seized, including smartphones used in the smuggling activities, as well as various vehicles and small quantities of illicit drugs. Eurojust assisted the German and Dutch authorities in preparing for the action day, including organising seven coordination meetings between all the involved authorities. 

Today’s actions were carried out at the request of and by the following authorities: 

  • Germany: Public Prosecutor’s Office (PPO) Weiden; Federal Police Inspection Munich (Bundespolizeiinspektion Kriminalitätsbekämpfung)
  • The Netherlands: National PPO; Royal Netherlands Marechaussee (Koninklijke Marechaussee)
  • Bosnia and Herzegovina: Special Department for Organised Crime – Economic Crime and Corruption Service of the Prosecutor’s Office of Bosnia and Herzegovina; State Investigation and Protection Agency (SIPA)

Action against ATM fraud in Romania and UK stopped by joint investigation team with Eurojust assistance

Source: Eurojust

Authorities in Romania and the United Kingdom have taken concerted action to block criminals who illegally withdrew cash from automated teller machines (ATMs) on a large scale. By using specialised computer programs and devices, the Romanian criminal network managed to steal an estimated EUR 580 000. The criminal group was also involved in other types of payment and card fraud. 

During an operation in Romania, two suspects were identified and brought in for questioning. In the UK, prosecutions have already been initiated against eight members of the group, following an action day in December 2024.

© DIICOT Poliția Română

Eurojust supported a joint investigation team of the Romanian and British authorities, which investigated the case. The Agency also assisted with the preparation of the action day in Romania. Europol provided data analysis support, in addition to sending an analyst to Romania and organising meetings to prepare for the operations on the ground.

The criminal network was formed last year in the Romanian city of Bacău, mainly consisting of family members and friends. They adopted a derogatory term aimed at the police as their so-called trademark, which they used on social media, on custom license plates and on clothes they wore.

Most of the money was stolen in the UK by pretending to take money from an ATM with a bank card, removing the screen of the ATM and then cancelling the transaction. This allowed them to reach into the ATM itself and take all the cash inside, before ending the transaction.

The criminals also counterfeited public transport cards, which they distributed across the UK with the help of individuals of Turkish origin. Furthermore, they committed card fraud by using software that identifies card numbers and then generates illicit income through fraudulent payments.

The proceeds of the criminal activities were invested in luxury cars, jewellery, real estate and expensive holidays. The gang members being prosecuted in the UK and those brought in for questioning in Romania are suspected of cyber fraud, membership of an organised crime group, money laundering and forgery of payment instruments. 

During the action day in Romania, a total of 18 places were searched and real estate, vehicles electronic devices and cash were seized. 

The operations against the criminal network were carried out at the request of and by the following authorities:

  • Romania: Directorate for Investigating Organised Crime and Terrorism (DIICOT) – Bacău Regional Service; Romanian Police – Anti Cybercrime Service of Bacău County Organised Crime Brigade
  • United Kingdom: Crown Prosecution Service; Eastern Regional Special Operations Unit

Large-scale thefts of luxury watches: gang dismantled in Italy with support of Eurojust

Source: Eurojust

25 July 2025|

Nine members of a gang involved in stealing luxury watches were arrested this week in Italy, with the support of Eurojust. Through an exchange of information and evidence via the Agency, police forces across southern Italy were able to link the criminals to thefts in various Italian cities, as well as in Ibiza, Spain and Saint-Tropez, France. The suspects were part of a roving gang, which travelled frequently between the three countries.

The criminal network mainly targeted elderly victims in wealthier tourist resorts, following them on motorcycles. Once a target was established and with the cooperation of accomplices who followed the motorbikes by car in small and busy streets, expensive watches were snatched from the victims. 

The thefts took place at carefully chosen opportunities, for instance, when victims got out of their cars. The watches were then passed on to the accomplices in cars. The value of the stolen watches is estimated at at least EUR 370 000. 

The gang was run by two senior members. For part of the time, they ran the operation from prison in Ibiza, where they were detained for similar thefts. They have now been arrested again in Italy. The two senior gang members gave instructions for the thefts and chose new recruits and target locations. They also arranged the financing of the trips for gang members and their transport.

The operation was carried out at the request of and by the following authorities:

  • Italy: Public Prosecutor’s Office of Lucca; State Police of Naples, Caserta, Foggia, Avellino and Salerno
  • France: Public Prosecutor’s Offices of Nice, Draguignan and Paris (International Cooperation Section)
  • Spain: Investigative Court no. 4 of Ibiza; Public Prosecutor’s Office of the Baleares 

Action against ATM fraud in Romania and UK stopped by joint investigation team with Eurojust support

Source: Eurojust

Authorities in Romania and the United Kingdom have taken concerted action to block criminals who illegally withdrew cash from automated teller machines (ATMs) on a large scale. By using specialised computer programs and devices, the Romanian criminal network managed to steal an estimated EUR 580 000. The criminal group was also involved in other types of payment and card fraud. 

During an operation in Romania, two suspects were identified and brought in for questioning. In the UK, prosecutions have already been initiated against eight members of the group, following an action day in December 2024.

© DIICOT Poliția Română

Eurojust supported a joint investigation team of the Romanian and British authorities, which investigated the case. The Agency also assisted with the preparation of the action day in Romania. Europol provided data analysis support, in addition to sending an analyst to Romania and organising meetings to prepare for the operations on the ground.

The criminal network was formed last year in the Romanian city of Bacău, mainly consisting of family members and friends. They adopted a derogatory term aimed at the police as their so-called trademark, which they used on social media, on custom license plates and on clothes they wore.

Most of the money was stolen in the UK by pretending to take money from an ATM with a bank card, removing the screen of the ATM and then cancelling the transaction. This allowed them to reach into the ATM itself and take all the cash inside, before ending the transaction.

The criminals also counterfeited public transport cards, which they distributed across the UK with the help of individuals of Turkish origin. Furthermore, they committed card fraud by using software that identifies card numbers and then generates illicit income through fraudulent payments.

The proceeds of the criminal activities were invested in luxury cars, jewellery, real estate and expensive holidays. The gang members being prosecuted in the UK and those brought in for questioning in Romania are suspected of cyber fraud, membership of an organised crime group, money laundering and forgery of payment instruments. 

During the action day in Romania, a total of 18 places were searched and real estate, vehicles electronic devices and cash were seized. 

The operations against the criminal network were carried out at the request of and by the following authorities:

  • Romania: Directorate for Investigating Organised Crime and Terrorism (DIICOT) – Bacău Regional Service; Romanian Police – Anti Cybercrime Service of Bacău County Organised Crime Brigade
  • United Kingdom: Crown Prosecution Service; Eastern Regional Special Operations Unit

New operation to uncover fake paintings supported by Eurojust

Source: Eurojust

Following a successful major operation in November 2024 to uncover fake paintings, Eurojust has supported the Italian authorities with a new action to retrieve over one hundred false artworks worldwide. In this recent operation, 104 forged paintings of Picasso, Edvard Munch and Paul Klee were seized and brought to Italy. Eurojust assisted with the execution of European Investigation Orders to Germany and Spain, in order to retrieve the fake artworks and prevent them from being sold in auctions.

In 2022, the Italian Carabinieri’s specialised Command for the Protection of Cultural Heritage started investigations into a specific group of forgers, who counterfeited works of the three painters. The Italian-based culprits used a special graphic design program to print images of the originals on matrices. These were then printed on paper with falsified watermarks and copied signatures of the painters.

 

To give the fakes a semblance of authenticity, the paper for the prints underwent artificial ageing treatments through coffee or tea baths. Accompanied by forged certificates of free circulation, in order to circumvent authenticity controls by experts, the counterfeited artworks were sent to auction houses outside Italy.

The investigations by the Carabinieri Command prevented certain fakes from being sold in Germany and Spain, through auction houses. Without this intervention and the support of Eurojust, the forgers would have gained at least EUR 1 million. The Italian authorities requested the support of Eurojust last year, following the successful previous operation to uncover an estimated 2 000 fake paintings.

The operations were carried out at the request of and by the following authorities:

  • Italy: Carabinieri – Command for the Protection of Cultural Heritage
  • Germany: Public Prosecutor’s Office Stuttgart
  • Spain: Investigative Court no. 9 of Barcelona; Mossos d’Esquadra – Central Brigade for Cultural Heritage

Alleged perpetrator of sending thousands of threatening emails to schools in Czech Republic, Slovakia and Latvia apprehended

Source: Eurojust

Eurojust has assisted the authorities in the Czech Republic, Slovakia and Latvia with the apprehension of the alleged perpetrator who was responsible for sending thousands of emails in September last year threatening schools with explosions. The mass threats, which were also sent to other educational institutions and leisure centres, caused major public concern and led to the suspension of classes at the beginning of the school year.

Eurojust supported the national authorities involved by setting up a joint investigation team (JIT) dedicated to the case, as well as providing additional cross-border judicial support.

The alleged perpetrator also used the social network Telegram to spread his threats. He was apprehended in the Ukrainian city of Dnipro last week but was released pending potential further steps to be taken by the authorities.

© Dnipropetrovsk Regional Prosecutor’s Office

Given the mass scale of the threats at the same time across three countries, the police authorities involved coordinated their investigations, assisted by the setting up of the JIT. The joint investigative efforts, using the cybercrime expertise of the police, led to the identification of an alleged perpetrator, operating from the Ukrainian city of Dnipro.

With the participation of Czech and Slovak police officers, a joint action took place in Dnipro last week, during which the alleged perpetrator was apprehended and one individual was questioned. Furthermore, two locations were searched, which led to the seizure of computer equipment.

Thanks to the good and close cooperation of all the authorities concerned, the operation was successfully carried out under extremely difficult circumstances, very close to the frontline of the war in Ukraine, with Ukrainian, Czech and Slovak officers exposed to heavy risks.

Eurojust offered support not only through the establishment of the JIT but also by organising a coordination meeting to prepare for the joint action day in Ukraine. The operation was carried out at the request of and by the following authorities:

  • Czech Republic: High Public Prosecutor’s Office in Prague; National Counterterrorism, Extremism and Cybercrime Agency (NCTEKK)
  • Latvia: Rīga Pārdaugava Prosecution Office; 1st Unit of Cybercrime Enforcement Department of the Central Criminal Police Department of the State Police
  • Slovakia: General Prosecutor´s Office of the Slovak Republic; Police Department West, Anti-Crime Unit, Bureau for Combating Organized Crime of the Presidium of the Police Corps (Police ACU); Counter Terrorism Centre, Presidium of the Police Corps
  • Ukraine: Dnipropetrovsk regional Prosecutor’s Office; Main Department of National Police in Dnipropetrovsk region; Division for Combating Cybercrime in Dnipropetrovsk region of the Cyber Police Department of National Police of Ukraine

Operation targeting human trafficking and money laundering: 13 arrests in Romania and Netherlands

Source: Eurojust

Starting in 2020, the group, led by two family members, used ‘loverboy’ techniques to target vulnerable Romanian women, who were coerced into prostitution in the Netherlands under direct supervision of the criminal group.

To maintain total control over the lives of their victims, the suspects lived with them. In some cases, members of the group used physical and psychological force against the women to prevent them from escaping the situation.

© DIICOT Poliția Românăas

The sexual exploitation generated significant illegal proceeds for the criminal group, which were laundered through relatives and close friends. These individuals either transported large sums of cash or moved the money through financial institutions.

Eurojust coordinated the international investigation. After the Romanian authorities approached Eurojust for support in early 2024, several meetings were organised with the Dutch authorities. During these meetings, information about the criminal group was exchanged. To enable the authorities to work together effectively and exchange information and evidence in real time, Eurojust set up a joint investigation team in January 2025.

Together with Eurojust, the authorities organised an action day early this month to detain the suspects and gather more evidence through house searches. In the Netherlands, six suspects were arrested and four houses were searched. During actions in Romania, four suspects were arrested based on European Arrest Warrants from the Netherlands and three suspects were put under judicial control. Additionally, 18 houses were searched and a car, weapons and cash were seized.

Eight of the arrested suspects remain in pre-trial detention.

The following authorities carried out the operation:

  • Romania: Prosecution Office attached to the High Court of Cassation and Justice- Directorate for Investigating Organised Crime and Terrorism –Ploiesti Territorial Service; Police Inspectorate Prahova-Criminal Investigation Service; Brigade for Combating Organised Crime Ploiesti
  • Netherlands: Public Prosecutor’s Office Amsterdam

Eurojust and League of Arab States strengthen ties in fight against transnational crime

Source: Eurojust

17 July 2025|

In a bid to strengthen their partnership against organised crime, the General Secretariat of the League of Arab States hosted, with the support of the EU-funded CTJUST project, a high-level workshop in Cairo, Egypt, on 16-17 July 2025. The two-day meeting convened experts from Eurojust, the Arab League, and Arab League Member States to explore strategies for reinforcing cooperation between the two regions.

The workshop’s agenda featured in-depth discussions on the role of Eurojust, cooperation with non-EU countries, and the nuances of judicial cooperation between the Arab League and EU Member States. This exchange of expertise and ideas aimed to enhance collaboration in the fight against transnational crime.

By strengthening judicial cooperation, the EU and the Arab region can more effectively address the complex challenges posed by transnational crime, ultimately contributing to regional security, economic stability, and good governance. 

Hacktivist group responsible for cyberattacks on critical infrastructure in Europe taken down

Source: Eurojust

NoName057(16) has professed support for the Russian Federation since the start of the war of aggression against Ukraine. Since the start of the war, it has executed multiple DDoS attacks against critical infrastructure during high-level (political) events. The group has also exhibited anti-NATO and anti-U.S. sentiment. During a DDoS attack, a website or online service is flooded with traffic, overloading its capacity and thus making it unavailable. The hacktivist group has executed 14 attacks in Germany, some of them lasting multiple days and affecting around 230 organisations including arms factories, power suppliers and government organisations. Attacks were also executed across Europe during the European elections. In Sweden, authorities and bank websites were targeted, while in Switzerland multiple attacks were carried out during a video message given by the Ukrainian President to the Joint Parliament in June 2023, and during the Peace Summit for Ukraine in June 2024. Most recently, the Netherlands was targeted during the NATO Summit at the end of June.

To execute their attacks, the group recruited supporters through a messaging service. It is estimated that the hackers were able to mobilise around 4000 users who supported their operations by downloading malware that made it possible for them to participate in the DDoS attacks. The group also built its own botnet using hundreds of servers around the world that increased the attack load, causing more damage.

Coordination of the many international partners was crucial for the success of the operation. Through Eurojust, authorities were able to coordinate their findings and plan an action day to target the hacktivist group. The Agency ensured that multiple European Investigation Orders and Mutual Legal Assistance processes were executed. During the action day on 15 July, Eurojust coordinated any last-minute judicial requests that were needed during the operation.

Europol facilitated the information exchange, supported the coordination of the operational activities and provided extended operational analytical support, as well as crypto tracing and forensic support during the lent of the investigation, and coordinated the prevention and awareness raising campaign, released to unidentified yet offenders via messaging apps and social media channels. During the action day, Europol set-up a Command Post at Europol’s headquarters and made available a Virtual Command post for online connection with the in-person Command.

The investigation culminated in an action day on 15 July where actions targeting the group took place in eight countries. Authorities were able to disrupt of over 100 servers worldwide. Searches took place in Germany, Latvia, Spain, Italy, Czechia, Poland and France to gather evidence for the investigation. Additionally, authorities informed the group and 1100 supporters and 17 administrators about the measures taken and the criminal liability they bear for their actions. Seven international arrest warrants have been issued. Germany issued six warrants which are directed inter alia against suspects living in the Russian Federation. Two suspects are accused of being the main instigators responsible for the activities of NoName057(16). Photos and descriptions of some of the suspects can be found on the websites of Europol and Interpol.

The following authorities were involved in the actions:

  • Czechia: District Prosecutor’s Office of Prague 5; Police, National Counterterrorism, Extremism and Cybercrime Agency (NCTEKK)
  • Estonia: Estonian Police and Border Guard Board
  • Germany: Prosecutor General’s Office Frankfurt am Main – Cyber Crime Centre; Federal Criminal Police Office (BKA)
  • Finland: Prosecution District of Southern Finland; National Bureau of Investigation – Cybercrime Investigation Unit
  • France: Paris Public Prosecutor’s Office – National Jurisdiction against Organised Crime (JUNALCO) ; National Cyber Unit of the Gendarmerie nationale
  • Latvia: State Police of Latvia – International Cooperation Department & Cybercrime Enforcement Department
  • Lithuania: Prosecutor General’s Office of Lithuania; Lithuanian Criminal Police Bureau
  • Netherlands: Public Prosecutor’s Office of the Netherlands and Police of the Netherlands
  • Spain: Investigative Central Court nr. 1 Audiencia Nacional; Audiencia Nacional Prosecutor´s Offices; National Police; Guardia Civil
  • Sweden: Polisen
  • Switzerland: Office of the Attorney General of Switzerland; Federal Office of Police fedpol
  • United States: Federal Bureau of Investigation (FBI)

EuroMed Prosecutors General Forum brings cross-Mediterranean partners together

Source: Eurojust

Eurojust hosted Prosecutor Generals from six South Partner Countries – Algeria, Egypt, Israel, Lebanon, Morocco and Palestine*- and nine EU Member States – Cyprus, France, Greece, Italy, Malta, Portugal, Spain, Sweden, The Netherlands – to discuss the challenges and best practices in fighting cross-border crimes, with a focus on asset recovery and trafficking in human beings and migrant smuggling. The EuroMed Prosecutor General Forum also endorsed the multi-annual Strategy 2025-2027 with a roadmap for the project’s objectives and priorities.

The project, funded by the European Commission and implemented by Eurojust, aims at enhancing strategic and operational international criminal justice cooperation. The EuroMed Justice project aims at increased opportunities for dialogue and joint actions between relevant EU Member States and the South Partner Countries, as well as increased opportunities for cross-border cooperation in criminal matters between respective judicial authorities. 

The President of Eurojust Michael Schmid opened the Prosecutors General Forum: “It has been a great honour to host the Prosecutors General and senior officials from Algeria, Egypt, Israel, Lebanon, Morocco, and Palestine*. These past days have confirmed the strong potential of our partnerships and a shared commitment to growing our joint casework. With the 2025–2027 EuroMed Justice Strategy now in place, we are eager to expand our network of Liaison Prosecutors at Eurojust and look forward to welcoming representatives from our Southern Partner Countries in the near future. As a first step, we will facilitate study visits to Eurojust to further build mutual trust, deepen understanding, and lay the groundwork for closer cooperation.

The meeting was chaired by Alexander Van Dam, National Member for the Netherlands, he said: “It is crucial for all countries to work together to combat serious organised crime, through direct exchanges and sharing of best practices.

The agenda included the project’s results for Year 1 and 2, a presentation from the European Commission on the International Agreements on cooperation with Eurojust, as well as interventions by the Liaison Prosecutors for Serbia and Norway. Participants further exchanged challenges and best practices in judicial cooperation for asset recovery, trafficking in human beings and migrant smuggling. In the margins of the event, South Partner officials met with the  President of Eurojust. The project team also facilitated ten bilateral meetings between the delegations, representatives of Eurojust and the European Commission.

The Forum marked the adoption of the 2025-2027 multi-annual Strategy of the EuroMed Justice project. 

For further information: EuroMed Justice | Eurojust | European Union Agency for Criminal Justice Cooperation

* This designation shall not be construed as recognition of a State of Palestine and is without prejudice to the initial positions of the Member States on this issue.