Action to counter undeclared labour and tax fraud in Germany: five arrests

Source: Eurojust

11 October 2024|

Eurojust supported authorities in Germany, Croatia, Czechia and Italy to counter a long-term fraud with illegal or undeclared labour and tax evasion. During an action day, five suspects were arrested for allegedly running a network of building enterprises that employed labourers without paying taxes and social levies. In total, 47 places were searched in the four countries concerned.

The perpetrators set up three different building companies, mainly operating in and around the city of Münster in Germany, which did not pay taxes or social levies on the wages of their employees. To mask this fraud, a string of so-called service companies were set up in the Czechia, which supplied fake invoices. One of the suspects also functioned as alleged manager or administrator of some of the enterprises, to give the fraud an official front.

The fraud ran at least since 2019 and was uncovered by the Public Prosecutor’s Office of Münster in North-Rhine Westphalia. At their request, Eurojust supported the recent action day, with the execution of European Investigation Orders in the four countries and provided legal assistance.

Operations were carried out at the request of and by the following authorities:

  • Germany: Public Prosecutor’s Office Münster; Main Custom Office Münster; Tax Investigation Münster
  • Croatia: County State Attorney’s Office in Rijeka
  • Czechia: Municipal Public Prosecutor’s Office Prague; Regional Police Directorate Prague, Economic Crime Unit; Regional Police Directorate České Budějovice, Economic Crime Unit
  • Italy: Public Prosecutor’s Office Trieste; Carabinieri Unit at Public Prosecutor’s Office Trieste

Eurojust supports major operation against Albanian drug-trafficking ring in Italy: 66 arrests

Source: Eurojust

26 September 2024|

A large-scale cocaine-smuggling ring was dismantled by authorities in Italy, Albania, Poland and Switzerland, coordinated by Eurojust. During an action day, a total of 45 suspects were arrested, most of them in Italy. Prior to the action day, 21 suspects involved in the sale of cocaine in and around the city of Brescia were arrested. In total, 66 arrests were made. The Albanian-led organised crime group (OCG) had been selling cocaine from Latin America for at least four years, mainly in the north of Italy.

Eurojust set up a coordination centre this week to support and coordinate the actions of all authorities involved. During the investigations and the action day, for an estimated amount of EUR 4 million in cash was seized, as well as 360 kilograms of cocaine, luxury vehicles and watches, telecommunications equipment, arms and ammunition.

Investigations into the drug-smuggling network started in 2020 at the request of the Public Prosecutor’s Office (PPO) of Brescia. The OCG used five warehouses and storage centres in and around Brescia to distribute the cocaine.

Credits: Guardia di Finanza di Brecia 

The suspects laundered their illegal profits via an extensive network of enterprises run by an Italian-Chinese organisation set up for this purpose, which supplied fake invoices with a total value of around EUR 375 million. The OCG members will be charged with the trafficking of illicit drugs, money laundering and investment fraud.

During this week’s action day, over 400 officers were deployed across Italy. To assist the authorities on the ground, Eurojust set up a coordination centre at its premises in The Hague and supported the execution of European Arrest Warrants and requests for Mutual Legal Assistance towards Albania and Switzerland. Europol facilitated the exchange of information between the involved countries and provided operational coordination as well as analytical support. On the action day, a Europol analyst with a mobile office was deployed to cross-check information on the spot in Italy.

The operations were carried out at the request of the PPO of Brescia via the following authorities:

  • Italy: PPO Brescia; Anti-Mafia District Directorate of the Guardia di Finanza – Provincial Command of Brescia; Central Investigation Service for Organised Crime (SCICO), Rome; International Police Cooperation Service Liaison Bureau, Tirana
  • Poland: PPO Warsaw; Central Police Bureau of Investigations
  • Albania: Special Prosecution Office against Corruption and Organised Crime (SPAK); Albanian State Police
  • Switzerland: Office of Attorney-General; Federal Police (Fedpol)

Successful operation against fraudsters targeting cities and municipalities

Source: Eurojust

German and Italian authorities worked together with Eurojust and Europol to stop a fraudulent scheme. The suspects targeted public institutions, cities, and municipalities, and were able to cause damages of several million euros. On 24 September, an operation took place where technology and assets were seized and search warrants against five suspects were executed.

For over a year, suspects ran a fraudulent scheme in Germany that made them millions. Several public institutions, companies, cities, and municipalities were affected by the scheme. By using phishing techniques, the suspects gained access to real invoices that were addressed to public institutions and companies. The fraudsters manipulated them with their own financial information. The manipulated invoices were then sent to victims, who paid them to the fraudsters instead of their business partners.

Investigations into the scheme identified five suspects with Italian and German citizenship. As authorities needed to search properties in Germany and Italy, a cross-border case was opened at Eurojust. Coordination through Eurojust defined the strategy of the investigation between the German and Italian authorities. Authorities decided to execute simultaneous searches in the two countries to gather evidence of the fraud and seize assets that were gained through the fraudulent scheme. Europol provided continuous intelligence development to map out the different targets and their criminal activity.

On 24 September, search warrants against five suspects were executed in Germany and Italy and ten propereties were searched. During the operation, Europol activated a Virtual Command Post to provide support from its headquarters to the investigators on the field as they carried out their enforcement actions. Assets were provisionally secured, and cell phones, computers, and data storage devices were seized. Special Forces will now investigate the seized technology as the investigation continues.

The following authorities were involved in the actions:

  • Germany: Public Prosecution Office Leipzig – Central Cybercrime Office, Leipzig Criminal Investigation Department – Commissariat 33 (Cybercrime)
  • Italy: Public Prosecutor’s Office Naples; Economic and Financial Police Units of the Guardia di Finanza Naples, Verona, Treviso and Bolzano

Illegal trade in fake and prohibited pesticides and fertilizers halted in Romania and Italy

Source: Eurojust

The substances were all banned for trade in the European Union, as they could be dangerous to users and consumers as they contained high doses of active substances. The suspects illegally imported the products from China and Singapore, but sold them as bio- or organic fertilizers and pesticides, using fake labels. The suspects also sold goods that were fake but pretended they were legitimate organic products.

Between February and May 2023, three suspect shipments arriving from outside the European Union were detected by the Romanian customs authorities. Subsequent inspections by the phytosanitary authorities confirmed it concerned fake or banned products, using falsified labels.

Further investigations and searches in Romania, showed an organised crime group (OCG) was behind the illegal activities. The OCG was composed of Romanian and Italian nationals who took over existing companies in Romania or registered new trading companies for the sale of the products in Italy. Falsified declaration forms were used for this purpose.

The Italian judicial authority gathered extensive evidence on the destination to the domestic market of the goods illegally introduced into Romania and identified the suspects who had promoted the illicit traffic in agricultural products from Italy.

At the request of the authorities involved, early this year Eurojust assisted with the setting up and financing of a JIT team into the OCG. The Agency organised a dedicated coordination meeting and supported the cross-border judicial response to the illegal activities.

Europol held several operational meetings in order to proceed with national investigations in a synergistic and aligned manner. Furthermore, it facilitated the exchange of information and provided constant analytical support to the investigations. During operational activities, Europol sent an expert to the field to cross-check operational information in real time and provide the experts with any guidance and technical support.

This support led to a series of coordinated actions in Romania and Italy, during which ten locations were searched across Arad, Bucharest, Verona, and Naples, gathering additional evidence of the crimes. During the course of the activities, the Romanian Judicial Authority also arrested one of the suspects.

The following authorities carried out the operations:

  • Romania: Directorate for Investigation of Organized Crime and Terrorism, Constanta Territorial Office; Special Operation Directorate (DOS); Brigade for Combating Organized Crime – Sea Ports Combating Organized Crime Service; Border Customs Offices Constanta and Constanta Sud
  • Italy: PPO Verona; NAS Carabinieri Padua; Financial Police Unit of the Guardia di Finanza Verona

Eurojust supports authorities in dismantling EUR 113 million fraudulent investment scheme

Source: Eurojust

A fraudulent pyramid scheme was taken down by authorities from Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein, with the support of Eurojust and Europol. The organised crime group (OCG) used an investment model that focused on the leasing and subleasing of cryptocurrency machines, such as exchange machines and hardware for mining. The suspects were able to target thousands of victims, causing losses of up to EUR 113 million. During an action day on 11 June, six arrests were made, 29 searches were conducted and the suspects’ assets were frozen.

The advertised investment concept involved the leasing of cryptocurrency products, such as investments in server storage for internet cloud services and the subleasing of crypto exchange machines. The suspects promised returns of 70% before tax to those joining the scheme. Investigations by German authorities showed that the promised returns were not only unrealistic, but also impossible, as the leased equipment and systems allegedly did not exist.

As the promised investment scheme did not exist as advertised, the suspects created a pyramid scheme, where most of the revenue for earlier investors came from more recent investors. The funds collected were not used for the promised investments, but mainly for the suspects’ living expenses. Throughout the scheme, the suspects concluded thousands of contracts, earning up to EUR 113 million.

As soon as the fraudulent scheme was discovered by German authorities, two coordination meetings were held at Eurojust to exchange information and evidence with authorities from Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein. To ensure a continued smooth cooperation, a joint investigation team (JIT) between German and Swiss authorities was set up with the support of Eurojust.

The cooperation between authorities resulted in an action day on 11 June, with the involvement of over 280 officers on the ground. The actions resulted in six arrests, 29 searches, the seizing of evidence, and the freezing of several assets. Due to the coordination between the authorities, and the use of Eurojust’s facilities, simultaneous actions were carried out in Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein.

The following authorities were involved in the operation:

  • Germany: Public Prosecutor`s Office Erfurt, Criminal State Investigation Office Thuringia
  • Switzerland: Public Prosecutor’s Office of the Canton of Zurich
  • Austria: Central Public Prosecutor`s Office for Combating Economic Crimes and Corruption
  • Czechia: Municipal Public Prosecutor´s Office in Prague; Regional Directorate of Police of the Capital City of Prague
  • Lithuania: Vilnius Regional Prosecutor’s Office
  • Liechtenstein: Princely Court of Justice of Liechtenstein

Successful operation against cryptocurrency scam coordinated by Eurojust

Source: Eurojust

A coordinated operation to uncover an intricate cryptocurrency scam led to the arrest of a suspect in France. The investigation in Portugal, France, Germany, Italy and Romania, supported by Eurojust and Europol, revealed that the suspects were using a scam method known as ‘rip deals’ that caused losses of EUR 700 000 to Portuguese victims.

Scammers using the ’rip deal’ method trick their victims into exchanging money via a fraudulent money exchange programme, which they then use to steal the victim’s assets.

Investigations revealed that the suspects scammed victims across Europe, including in Austria, Italy, Portugal, Spain and Switzerland. The suspects would approach their victims by expressing an interest in acquiring commercial businesses. After gaining their trust and convincing them to install crypto asset wallets, the suspects would steal the victim’s funds.

In the next phase of the scam, other members of the organised crime group would launder the proceeds of the fraud by moving them through several crypto assets. This made it difficult to trace the proceeds.

The investigation, spanning several years, culminated in an action day supported by Eurojust and Europol. During the operation, carried out simultaneously in France, Germany, Italy, and Romania, one suspect was arrested and several houses were searched. Authorities froze multiple bank accounts and seized material goods such as equipment containing information on the scam.

Eurojust supported the investigation by enabling cooperation between the countries involved in the operation. The coordination meeting at Eurojust helped the authorities to exchange information and prepare for the action day. Additionally, Eurojust supported the execution of European Investigation Orders (EIOs), European Arrest Warrants (EAWs), and freezing orders.

The following authorities were involved in the coordinated operation:

  • Portugal: Regional Department for Criminal Investigation and Prosecution of Coimbra; Judicial Police
  • France: Judiciary Tribunal of Bobigny; National Police 93
  • Germany: Public Prosecutor’s Office Darmstadt; ZK32 at Criminal Directorate Offenbach, Southeast Hesse Police
  • Italy: Public Prosecutor Office in Milan; Italian State Police – Cyber Security Operations Centre “Lombardia” in Milan
  • Romania: Directorate for Investigating Organized Crime and Terrorism – Territorial Structure Timișoara; Romanian Police, Office of Combating Organised Crime Timisoara – Unit Combating Informatics Crimes.

Network of luxury car thieves dismantled with support of Eurojust

Source: Eurojust

A large-scale ring of luxury car thieves has been dismantled with the support of Eurojust and Europol. Using straw men and underprivileged people, the criminals hired or leased luxury vehicles, which they later registered in their own names through corrupt connections in official institutions.

The cars were resold outside the EU, including in the United Kingdom and the United Arab Emirates. In a series of recent coordinated actions in Spain, France, Germany, Latvia, Poland and Ukraine, 13 suspects were arrested for fraud, forgery and money laundering.

© – Ukrainian National Police

Through a coordination centre at Eurojust, over sixty places were also searched by national authorities. Several luxury vehicles, communication equipment and documents were seized, as well as over EUR 100 000 in cash.

The Spanish authorities launched their investigation in 2022 following reports of luxury cars going missing from legitimately operating car rental and lease companies in and around Malaga. These investigations revealed that dozens of vehicles were ultimately stolen across Europe by a network of linked criminals. They exploited around fifty vulnerable and underprivileged people by using their documents, such as driving licences and passports, to hire or lease luxury cars.

Through corrupt contacts in official institutions, they managed to register the hired vehicles on to their personal documents, so they could sell them in the European Union and beyond, including Ukraine, the United Kingdom and the United Arab Emirates. Some of the stolen vehicles were transported in containers to conceal the cars.

Investigations were later also started in France, Poland and Ukraine, which revealed links between different criminal groups using the same modus operandi. In March of this year, with the support and funding of Eurojust, authorities in France, Spain and Ukraine set up a joint investigation team into the car thefts. Eurojust also organised two preparatory coordination meetings to prepare for the recent action day week and set up the coordination centre.

Europol assisted the operations against the criminal network by producing criminal intelligence packages. It also provided an operational coordination centre to support the actions at police level.

Operations on the ground were carried out at the request of and by the following authorities:

  • Spain: Investigative Court no. 1, Málaga; Public Prosecutor’s Office, Málaga; Spanish National Police
  • France: Judiciary Tribunal, Grasse; National Gendarmerie, Central Office against Roving Crime (OCDLI)
  • Germany: Public Prosecutor’s Offices Essen and Osnabrück; Police Departments of Essen and Osnabrück
  • Latvia: 3rd Unit International Cooperation Department State Police
  • Poland: Public Prosecutor’s Office, Warsaw
  • Ukraine: Prosecutor General’s Office; Main Investigation Department and Department of Strategic Investigations of National Police

Take down of Austrian-based fraud scheme offering new type of crypto coin

Source: Eurojust

National authorities in Austria, Cyprus and the Czech Republic have taken decisive action against an online scam pretending to sell rights or tokens to an alleged new crypto currency. In a coordinated operation, supported by Eurojust and Europol, the six main suspects were arrested and six places were searched. In total, EUR 750.000 in assets, a property worth EUR 1.4 million and two cars were frozen/seized.

Between December 2017 and February 2018, the scammers pretended to have set up a genuine online trading company that had launched a new cryptocurrency. They offered 10 million tokens or respective rights to the new currency for sale. Investors paid them in regular crypto values such as bitcoin or ethereum. The Austrian-based fraudsters also claimed to have developed their own software and algorithm for the sale of the tokens, in order to gain credibility with investors. 

In February 2018, the perpetrators closed all their social media accounts and took the fake company’s homepage offline. This so-called exit scam made it clear to investors that they had been conned. They lost around EUR 6 million. Not all victims of the fraud have been identified at this stage.

Eurojust supported the action day against the online scam with a coordination centre, enabling real-time communication between all the authorities involved. This also enabled the rapid execution of European Arrest Warrants and search warrants. Europol assisted in the operation with a mobile office in Cyprus. Austrian police officers were present on the ground during a search in Cyprus. 

Europol’s specialists organised five operational meetings and worked closely with the Austrian desk at Eurojust, providing a holistic analysis picture of the investigation. In addition to supporting the Virtual Command Post set up at Eurojust, Europol deployed a specialist with mobile office to Cyprus in order to support the operational activities and facilitate the exchange of information.

The following authorities coordinated and supported the operations on the ground: 

  • Austria: Central Public Prosecutor´s Office for Combatting Economic Crimes and Corruption; Criminal Intelligence Service Austria – Cybercrime Competence Center (C4) 
  • Cyprus: Cyprus Police
  • Czech Republic: National Organised Crime Agency

Eurojust helps tackle massive fraud of EUR 645 million with medicinal cannabis plants across Europe

Source: Eurojust

In Germany, France and Spain alone, over 4 500 victims have lodged formal complaints against the fraudsters, who set up a crowd-funding programme to raise a minimum of EUR 50 per investor for the development of medicinal cannabis plants. In reality, no cannabis plants were ever bought, although the organisers of the scheme pretended to work with legitimate and licensed enterprises that would cultivate them. The fraud ran from at least January 2020 to July 2022.

The entire scheme had the character of a pyramid or ‘Ponzi fraud’ and promised extremely high returns on investment. Investigations in Germany and Spain, later followed by counterparts in other countries across Europe, showed that investors had been only partially paid.

Most of the invested money was used to pay affiliates, keep the scheme running and expand the fraud through extensive online campaigns. For this purpose and to launder the proceeds, a web of international enterprises was used. The scheme itself appears to have been run by a Russian criminal network, with an affiliated German-based crime group.

Victims in Germany and Spain claim to have lost at least EUR 51.5 million, but the total investment is estimated to be close to EUR 645 million. In total, around 550 000 participants worldwide were registered as online investors, most of them European citizens. Around 186 000 participants transferred funds, either via cryptocurrencies or bank transfers.

Since 2022, Eurojust has been extensively supporting the national authorities, including assisting the German, Spanish and French authorities in setting up and funding the JIT. This led to a successful Joint Action Day coordinated at Eurojust.

At the request of the German and Spanish authorities, in recent days operational actions against the criminal networks were also carried out in Estonia, Latvia, Italy, Malta, Poland, Portugal, the United Kingdom and the Dominican Republic. The French authorities made a decisive contribution to the analysis of crypto flows during the investigations and took part in searches in Germany and Spain on the action day.

Europol supported this massive cross-border investigation from the outset, taking the lead in operational coordination and providing tailored analytical support. Furthermore, Europol shared results of the financial investigations as well as other intelligence with the involved countries. On the action day, Europol deployed officers with mobile offices to various locations worldwide.

During the action days, over thirty places were also searched and for several millions of Euros in crypto assets and bank accounts were frozen. Also real estate properties, luxury vehicles, artwork, cash and various luxury items were seized, as well as large numbers of electronic devices and documents.

The operations were carried out on the ground at request of and by:

  • Germany: Public Prosecutor’s Office Berlin; Criminal Investigation Department Berlin (LKA)
  • Spain: Central Investigative Judge no. 6 at the Audiencia Nacional; National Police (Policia Nacional – UDEF Central Brigade against Economic Crime, Financial Fraud Group)
  • France: Paris’ Prosecutor’s Office JUNALCO (National Jurisdiction against Organised Crime); Gendarmerie Nationale (Research Section Rennes)
  • Estonia: Office of the Prosecutor General; Police and Border Guard Board
  • Latvia: Prosecutor General’s Office; International Cooperation Department and Economic Crime Enforcement Department of the Central Criminal Police Department of the State Police
  • Italy: Postal Police Service of the National Police – Operational Section for Cyber Security, Macerata, and Operational Centre for Cybersecurity of Marche
  • Malta: Malta Police Force – International Relations Unit
  • Poland: Public Prosecutor’s Offices of Jelenia Góra, Lublin, Warsaw, Warsaw Praga and Wrocław; Central Bureau for Combating Cybercrime
  • Portugal: Central Public Prosecutor’s Office Lisbon (DCIAP); Judicial Police (Policia Judiciária)United Kingdom: National Crime Agency
  • United Kingdom: National Crime Agency

Five criminals behind multi-million pound benefit fraud convicted in the United Kingdom with support from Eurojust

Source: Eurojust

Five members of an organised crime group (OCG) responsible for the largest ever fraud against the United Kingdom benefit system have been convicted. The suspects, all Bulgarian nationals, have pleaded guilty to fraud and money laundering offences at the Wood Green Crown Court. The damage caused by the scam is estimated at more than GBP 50 million (EUR 58 million).

The Agency supported the case and assisted the UK and Bulgarian authorities in setting up and funding a joint investigation team (JIT) into the case.

Between October 2016 and May 2021, the OCG made thousands of false claims for Universal Credit (UK social security payment) using either real people or hijacked identities. These claims were supported by an array of forged documents, including fictitious tenancy agreements, counterfeit payslips and forged letters from landlords, employers and GPs. If the claims were rejected, the fraudsters would try again and again until they were granted.

The money gained from these fraudulent claims was then laundered by moving it between several accounts through numerous transfers.

In some cases, the OCG leaders recruited people from Bulgaria, obtained their identity documents and paid them a share of the proceeds from the false benefit claims made on their behalf. The recruits then returned to Bulgaria with the proceeds of their crimes, which alerted the Bulgarian authorities.

The suspects were first arrested in the United Kingdom on 5 May 2021. Following his release under investigation, one of the five defendants fled to Bulgaria. As a result of collaborative work between the UK and Bulgarian authorities, the suspect was extradited back to the United Kingdom on 25 February 2023 to face justice.

The case was opened at Eurojust in June 2021 at the request of the UK authorities. Two coordination meetings were hosted by the Agency to coordinate the national investigations and discuss judicial cooperation matters, including the surrender of suspects and asset recovery.

A JIT was set up between the UK and Bulgarian authorities with the support of Eurojust in January 2022. The JIT has enabled the direct exchange of evidence between authorities, especially banking evidence, to support the recovery and confiscation of assets.

The following authorities took part in this investigation:

  • Bulgaria: District Prosecutor’s Office- Sliven
  • United Kingdom: Crown Prosecution Service, Department for Work and Pensions