Category: Germany

Auto Added by WPeMatico

Posted on

Action to counter undeclared labour and tax fraud in Germany: five arrests

Source: Eurojust

11 October 2024|

Eurojust supported authorities in Germany, Croatia, Czechia and Italy to counter a long-term fraud with illegal or undeclared labour and tax evasion. During an action day, five suspects were arrested for allegedly running a network of building enterprises that employed labourers without paying taxes and social levies. In total, 47 places were searched in the four countries concerned.

The perpetrators set up three different building companies, mainly operating in and around the city of Münster in Germany, which did not pay taxes or social levies on the wages of their employees. To mask this fraud, a string of so-called service companies were set up in the Czechia, which supplied fake invoices. One of the suspects also functioned as alleged manager or administrator of some of the enterprises, to give the fraud an official front.

The fraud ran at least since 2019 and was uncovered by the Public Prosecutor’s Office of Münster in North-Rhine Westphalia. At their request, Eurojust supported the recent action day, with the execution of European Investigation Orders in the four countries and provided legal assistance.

Operations were carried out at the request of and by the following authorities:

  • Germany: Public Prosecutor’s Office Münster; Main Custom Office Münster; Tax Investigation Münster
  • Croatia: County State Attorney’s Office in Rijeka
  • Czechia: Municipal Public Prosecutor’s Office Prague; Regional Police Directorate Prague, Economic Crime Unit; Regional Police Directorate České Budějovice, Economic Crime Unit
  • Italy: Public Prosecutor’s Office Trieste; Carabinieri Unit at Public Prosecutor’s Office Trieste
Posted on

Successful operation against fraudsters targeting cities and municipalities

Source: Eurojust

German and Italian authorities worked together with Eurojust and Europol to stop a fraudulent scheme. The suspects targeted public institutions, cities, and municipalities, and were able to cause damages of several million euros. On 24 September, an operation took place where technology and assets were seized and search warrants against five suspects were executed.

For over a year, suspects ran a fraudulent scheme in Germany that made them millions. Several public institutions, companies, cities, and municipalities were affected by the scheme. By using phishing techniques, the suspects gained access to real invoices that were addressed to public institutions and companies. The fraudsters manipulated them with their own financial information. The manipulated invoices were then sent to victims, who paid them to the fraudsters instead of their business partners.

Investigations into the scheme identified five suspects with Italian and German citizenship. As authorities needed to search properties in Germany and Italy, a cross-border case was opened at Eurojust. Coordination through Eurojust defined the strategy of the investigation between the German and Italian authorities. Authorities decided to execute simultaneous searches in the two countries to gather evidence of the fraud and seize assets that were gained through the fraudulent scheme. Europol provided continuous intelligence development to map out the different targets and their criminal activity.

On 24 September, search warrants against five suspects were executed in Germany and Italy and ten propereties were searched. During the operation, Europol activated a Virtual Command Post to provide support from its headquarters to the investigators on the field as they carried out their enforcement actions. Assets were provisionally secured, and cell phones, computers, and data storage devices were seized. Special Forces will now investigate the seized technology as the investigation continues.

The following authorities were involved in the actions:

  • Germany: Public Prosecution Office Leipzig – Central Cybercrime Office, Leipzig Criminal Investigation Department – Commissariat 33 (Cybercrime)
  • Italy: Public Prosecutor’s Office Naples; Economic and Financial Police Units of the Guardia di Finanza Naples, Verona, Treviso and Bolzano
Posted on

Sentences of over five years for Dutch criminals robbing ATMs in Germany

Source: Eurojust

Between November 2021 and January 2023 the OCG members used severe violence to blast ATMs and crowbars to pry them open, stealing an estimated EUR 3.4 million. The damages inflicted on the buildings, teller machines, their infrastructure and the bank’s surroundings amounted to well over EUR 4 million.

The gang members often stole fast cars to carry out the heists in Germany, which usually took place at night in the regions of Bavaria and Baden-Württemberg, before speeding back to the Netherlands. In each attack the OCG managed to steal up to EUR 250 000 in cash. The gang was highly organised, with a clear division of tasks, ranging from organising logistics to blasting open the ATMs.

At the request of the German authorities, Eurojust supported the investigations since May 2022.  The Agency organised two coordination meetings between the authorities involved and facilitated a joint action day in early 2023. In total, sixteen suspects were arrested in the Netherlands between January and September 2023, who were later surrendered to Germany. The Agency also supported the procedures for the surrender of the suspects.

In total, an estimated hundred hauls on German ATMs took place. For thirty cases the suspects were charged. Following plea bargains with the German Public Prosecution Office, fifteen suspects have now been sentenced, two on probation. One defendant is still on trial.

The following authorities conducted and/or supported the investigations:

  • Germany: Public Prosecution Office Bamberg; State Criminal Police Office of Bavaria and State Criminal Police Office of Baden-Württemberg
  • The Netherlands: Public Prosecution Office Central Netherlands/Utrecht; National Police
Posted on

Drug trafficking network active across Europe dismantled

Source: Eurojust

Drugs used for the group’s illegal activities were supplied by members in Spain. The drugs were then transported across Europe by couriers, who concealed the supplies in trucks that were in the possession of the organisation. Members based in Italy, Belgium, Germany, Spain and Ukraine, then sold the drugs on their local drug markets.

Drug trafficking remains one of the most serious security threats in Europe. Europol’s report on criminal networks shows that 50% of the most threatening criminal networks active in the EU are involved in drug trafficking, and 50% of all homicides in Europe are directly connected to drug trafficking. It is crucial that judicial authorities from different countries collaborate in their investigations, as drug trafficking frequently crosses borders. Eurojust has observed a twofold increase in cross-border drug trafficking cases since 2020, with over 2 462 cases supported in 2023.

The Italian authorities initiated investigations into the drug trafficking network in December 2021. The investigations revealed that the group, consisting of individals from various nationalities, was operating across Europe. To ensure that the group could not evade justice, Italian authorities used Eurojust’s facilities to facilitate investigations in other countries and execute house searches and seizures.

At a coordination centre at Eurojust, in the early morning of 2 July, authorities from Italy, Belgium, Germany, Spain and Ukraine worked together with Europol and Interpol to arrest 13 suspects. During house searches, several electronic devices, drugs and money was found.

The operation was financially supported by the @ON network, which funded by the European Commission and led by the Italian Antimafia Directorate (DIA).

The actions were carried out by the following authorities:

  • Italy: Procure della Repubblica di L’Aquila e Teramo (Public Prosecution Offices of L’Aquila and Teramo); Carabinieri Raggruppamento Operativo Speciale (Special Operational Group) of L’Aquila
  • Belgium: PPO Mons; Federal Police of Mons
  • Germany: Generalstaatsanwaltschaft Düsseldorf (General Public Prosecutor`s Office Düsseldorf); Landeskriminalamt Nordrhein-Westfalen (State Criminal Police Office of North Rhine-Westphalia)
  • Spain: Juzgado central of Instruccion num 6 (Central Investigative Judge num. 6 at Audiencia Nacional); Fiscalia Antidroga at Audiencia Nacional (PP Antidrug at Audiencia Nacional); Group OCT Udyco Central of Policia Nacional (Group OCT Udyco Central of National Police)
  • Ukraine: Prosecutor General’s Office; Counter Narcotics Department of the National
Posted on

Website used for child pornography, prostitution and drug dealing taken down with support of Eurojust

Source: Eurojust

An online platform known for facilitating various crimes was taken down by the French authorities, in cooperation with Bulgaria, Germany Lithuania, the Netherlands and Hungary. The authorities had been investigating the digital platform since December 2023. During an action day on 24 June the servers located in Germany were seized and disconnected and over EUR 5.6 million of criminal funds were frozen.

The website was used for many years to facilitate a range of criminal activities, in particular for child pornography, sexual exploitation, drug dealing, ambushes and even homicides. Criminals were able to send messages and connect with other criminals active in their criminal activities.

Since 2021, more than 23 000 judicial procedures have been initiated involving the online platform. At least 480 victims of the platform have been heard during these judicial procedures. Investigations into the platform were started by French authorities in December 2023. These investigations showed that the platform was concealing and facilitating transactions for organised crime groups and was enabling criminal activities such as pimping and paedophilia.

A coordinated action to take down the website was carried out with the full support of Eurojust. The authorities seized the servers located in Germany, which resulted in the platform being disconnected and the display of a splash page. The Lithuanian and Hungarian authorities ensured the swift execution of freezing orders, which led to the freezing of over EUR 5.6 million in criminal funds.

At the same time, a European Investigation Order (EIO), issued from France, was successfully executed in Bulgaria. All investigative actions have been carried out in presence of French magistrates and officials from the Law enforcement authorities of France upon authorisation by the competent Bulgarian authorities. As part of the execution of the EIO, bank statements were  revealed, searches and seizures were carried out and witnesses were questioned.

The actions were carried out by the following authorities:

  • France: PPO Paris JUNALCO (National Jurisdiction against organised Crime) Cybercrime Unit; Gendarmerie Nationale – Cybercrime unit; ONAF (Anti Fraud National Office)
  • Bulgaria: Sofia City PPO and General Police Directorate Combating Organised Crime
  • Germany: Public Prosecutor’s Office Limburg; Hessian State Criminal Police Office
  • Hungary: Budapest IX. District Public Prosecutor’s Office
  • Lithuania: Vilnius Regional Prosecutor’s Office
  • The Netherlands: Public Prosecutor’s Office Amsterdam
Posted on

Eurojust supports authorities in dismantling EUR 113 million fraudulent investment scheme

Source: Eurojust

A fraudulent pyramid scheme was taken down by authorities from Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein, with the support of Eurojust and Europol. The organised crime group (OCG) used an investment model that focused on the leasing and subleasing of cryptocurrency machines, such as exchange machines and hardware for mining. The suspects were able to target thousands of victims, causing losses of up to EUR 113 million. During an action day on 11 June, six arrests were made, 29 searches were conducted and the suspects’ assets were frozen.

The advertised investment concept involved the leasing of cryptocurrency products, such as investments in server storage for internet cloud services and the subleasing of crypto exchange machines. The suspects promised returns of 70% before tax to those joining the scheme. Investigations by German authorities showed that the promised returns were not only unrealistic, but also impossible, as the leased equipment and systems allegedly did not exist.

As the promised investment scheme did not exist as advertised, the suspects created a pyramid scheme, where most of the revenue for earlier investors came from more recent investors. The funds collected were not used for the promised investments, but mainly for the suspects’ living expenses. Throughout the scheme, the suspects concluded thousands of contracts, earning up to EUR 113 million.

As soon as the fraudulent scheme was discovered by German authorities, two coordination meetings were held at Eurojust to exchange information and evidence with authorities from Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein. To ensure a continued smooth cooperation, a joint investigation team (JIT) between German and Swiss authorities was set up with the support of Eurojust.

The cooperation between authorities resulted in an action day on 11 June, with the involvement of over 280 officers on the ground. The actions resulted in six arrests, 29 searches, the seizing of evidence, and the freezing of several assets. Due to the coordination between the authorities, and the use of Eurojust’s facilities, simultaneous actions were carried out in Germany, Switzerland, Austria, Czechia, Lithuania and Liechtenstein.

The following authorities were involved in the operation:

  • Germany: Public Prosecutor`s Office Erfurt, Criminal State Investigation Office Thuringia
  • Switzerland: Public Prosecutor’s Office of the Canton of Zurich
  • Austria: Central Public Prosecutor`s Office for Combating Economic Crimes and Corruption
  • Czechia: Municipal Public Prosecutor´s Office in Prague; Regional Directorate of Police of the Capital City of Prague
  • Lithuania: Vilnius Regional Prosecutor’s Office
  • Liechtenstein: Princely Court of Justice of Liechtenstein
Posted on

Successful operation against cryptocurrency scam coordinated by Eurojust

Source: Eurojust

A coordinated operation to uncover an intricate cryptocurrency scam led to the arrest of a suspect in France. The investigation in Portugal, France, Germany, Italy and Romania, supported by Eurojust and Europol, revealed that the suspects were using a scam method known as ‘rip deals’ that caused losses of EUR 700 000 to Portuguese victims.

Scammers using the ’rip deal’ method trick their victims into exchanging money via a fraudulent money exchange programme, which they then use to steal the victim’s assets.

Investigations revealed that the suspects scammed victims across Europe, including in Austria, Italy, Portugal, Spain and Switzerland. The suspects would approach their victims by expressing an interest in acquiring commercial businesses. After gaining their trust and convincing them to install crypto asset wallets, the suspects would steal the victim’s funds.

In the next phase of the scam, other members of the organised crime group would launder the proceeds of the fraud by moving them through several crypto assets. This made it difficult to trace the proceeds.

The investigation, spanning several years, culminated in an action day supported by Eurojust and Europol. During the operation, carried out simultaneously in France, Germany, Italy, and Romania, one suspect was arrested and several houses were searched. Authorities froze multiple bank accounts and seized material goods such as equipment containing information on the scam.

Eurojust supported the investigation by enabling cooperation between the countries involved in the operation. The coordination meeting at Eurojust helped the authorities to exchange information and prepare for the action day. Additionally, Eurojust supported the execution of European Investigation Orders (EIOs), European Arrest Warrants (EAWs), and freezing orders.

The following authorities were involved in the coordinated operation:

  • Portugal: Regional Department for Criminal Investigation and Prosecution of Coimbra; Judicial Police
  • France: Judiciary Tribunal of Bobigny; National Police 93
  • Germany: Public Prosecutor’s Office Darmstadt; ZK32 at Criminal Directorate Offenbach, Southeast Hesse Police
  • Italy: Public Prosecutor Office in Milan; Italian State Police – Cyber Security Operations Centre “Lombardia” in Milan
  • Romania: Directorate for Investigating Organized Crime and Terrorism – Territorial Structure Timișoara; Romanian Police, Office of Combating Organised Crime Timisoara – Unit Combating Informatics Crimes.
Posted on

Network of luxury car thieves dismantled with support of Eurojust

Source: Eurojust

A large-scale ring of luxury car thieves has been dismantled with the support of Eurojust and Europol. Using straw men and underprivileged people, the criminals hired or leased luxury vehicles, which they later registered in their own names through corrupt connections in official institutions.

The cars were resold outside the EU, including in the United Kingdom and the United Arab Emirates. In a series of recent coordinated actions in Spain, France, Germany, Latvia, Poland and Ukraine, 13 suspects were arrested for fraud, forgery and money laundering.

© – Ukrainian National Police

Through a coordination centre at Eurojust, over sixty places were also searched by national authorities. Several luxury vehicles, communication equipment and documents were seized, as well as over EUR 100 000 in cash.

The Spanish authorities launched their investigation in 2022 following reports of luxury cars going missing from legitimately operating car rental and lease companies in and around Malaga. These investigations revealed that dozens of vehicles were ultimately stolen across Europe by a network of linked criminals. They exploited around fifty vulnerable and underprivileged people by using their documents, such as driving licences and passports, to hire or lease luxury cars.

Through corrupt contacts in official institutions, they managed to register the hired vehicles on to their personal documents, so they could sell them in the European Union and beyond, including Ukraine, the United Kingdom and the United Arab Emirates. Some of the stolen vehicles were transported in containers to conceal the cars.

Investigations were later also started in France, Poland and Ukraine, which revealed links between different criminal groups using the same modus operandi. In March of this year, with the support and funding of Eurojust, authorities in France, Spain and Ukraine set up a joint investigation team into the car thefts. Eurojust also organised two preparatory coordination meetings to prepare for the recent action day week and set up the coordination centre.

Europol assisted the operations against the criminal network by producing criminal intelligence packages. It also provided an operational coordination centre to support the actions at police level.

Operations on the ground were carried out at the request of and by the following authorities:

  • Spain: Investigative Court no. 1, Málaga; Public Prosecutor’s Office, Málaga; Spanish National Police
  • France: Judiciary Tribunal, Grasse; National Gendarmerie, Central Office against Roving Crime (OCDLI)
  • Germany: Public Prosecutor’s Offices Essen and Osnabrück; Police Departments of Essen and Osnabrück
  • Latvia: 3rd Unit International Cooperation Department State Police
  • Poland: Public Prosecutor’s Office, Warsaw
  • Ukraine: Prosecutor General’s Office; Main Investigation Department and Department of Strategic Investigations of National Police
Posted on

Major operation to take down dangerous malware systems

Source: Eurojust

In an unprecedented operation against aggressive and dangerous computer malware, authorities in the European Union and beyond have taken actions against droppers including IcedID, Pikabot, Smokeloader, Bumblebee and Trickbot, which infiltrated computers via emails. The measures focused on disrupting criminal services through arresting suspects, the freezing of illegal proceeds, and taking down botnets, coordinated by Eurojust. The operation, which was carried out this week with support of Europol, is a follow up to the successful takedown of the Emotet malware system in 2021.

During actions carried out simultaneously in Germany, the Netherlands, France, Denmark, Ukraine, the United States and United Kingdom, 4 suspects were arrested, who offered the malware as a professional blackmail service to other criminal actors. Some of the suspects were involved in operating Emotet in the past.

Via so called ‘sinkholing’ techniques or the use of tools to access the systems of operators behind the malware, investigators managed to block and take down the botnets. Malware droppers are types of malicious software which downloads viruses, ransomware or spyware on computers. They are generally installed via mails with infected links or Word and PDF attachments, such as shipping invoices or order forms, to get access to personal data and or bank accounts of computer users.

Mainly enterprises and national authorities and institutions were made victims of the series of malware systems which now have been taken down. Users are warned to be careful when opening links and attachments to mails and check the origin of mails.

The investigations, which have been ongoing since the takedown of Emotet, also focused on the running of that malware itself as their operators did create the new botnets mentioned. During the coordinated actions 16 places were searched.

In total over 100 servers were taken down or disrupted and over 2 000 domains are under control of law enforcement authorities.

Furthermore, investigations showed that one of the main suspects has earned at least EUR 69 million in cryptocurrency by renting out criminal infrastructure for the deployment of ransomware. The transactions are constantly being monitored and legal permission to seize these assets instantly through future actions has already been obtained.

Eurojust set up a coordination centre on its premises to manage simultaneous actions in all countries concerned. The Agency also assisted national authorities in the preparation and execution of European Arrest Warrants, European Investigation Orders and requests for Mutual Legal Assistance, and organized five coordination meetings.

The following national authorities were involved in the operations on the ground:

  • Germany: Prosecutor General’s Office Frankfurt am Main – Cyber Crime Center; Federal Criminal Police Office (Bundeskriminalamt)
  • The Netherlands: National Prosecution Service; National Police
  • Austria: Public Prosecutor’s Office of Salzburg; Criminal Intelligence Service Austria (Bundeskriminalamt)
  • Denmark: National Special Crime Unit (NSK)
  • France: Prosecutor’s Office JUNALCO (National Jurisdiction against Organised Crime) Cybercrime Unit; Gendarmerie Nationale C3N
  • Ukraine: Prosecutor General’s Office; Main Investigation Department of National Police of Ukraine; Cyber Department of the Security Service of Ukraine
  • United Kingdom: National Crime Agency
  • United States: United States Department of Justice, Federal Bureau of Investigation, The Defense Criminal Investigative Service
Posted on

Crackdown on criminal network that stole 170 historical books worth EUR 2.5 million across Europe

Source: Eurojust

Eurojust and Europol have supported the competent authorities in Lithuania, France, Latvia, Poland, Switzerland and Georgia in an international operation against an organised crime group (OCG) that allegedly stole 170 books of high historical and cultural value across several European countries. The stolen books have an estimated value of EUR 2.5 million and were written by well-known Russian novelists such as Pushkin, Gogol and Lermontov.

Eurojust assisted the authorities in coordinating the actions and in setting up and funding a joint investigation team (JIT) into the case.

The perpetrators, of Georgian origin, are believed to have committed robberies in libraries located in France, Germany, Lithuania, Poland, Latvia, Estonia and Switzerland.

The OCG used different modus operandi to steal the books. In some cases, the OCG members used fake identities when ordering books in the libraries, for example presenting themselves as researchers. While one OCG member pretended to consult with the library staff, thereby distracting security, another replaced the original valuable book with a copy.

In other cases, the perpetrators simply broke into the library and stole the books. Before committing the thefts, they visited libraries and checked out books of the same type as the ones stolen.

Eurojust has supported the case since November 2023, assisting the authorities involved in the coordination of their investigations and in the determination of legal strategies. Three coordination meetings were hosted by the Agency to bring together all judicial authorities involved, in order to facilitate their judicial cooperation, and to prepare for the joint action. The Agency also facilitated the setting up of a JIT between France, Lithuania, Poland, Georgia and Switzerland in March 2024. Europol was also a participant in the JIT.

During the action day, a coordination centre was set up at Eurojust connecting simultaneously the different teams in the field in the countries where operations were taking place. The coordination centre enabled rapid cooperation and ensured that evidence and information collected were swiftly exchanged between all national authorities involved.

The coordinated operations led to the arrest of four suspects in Georgia. A total of 27 locations were searched in Georgia and Latvia. One stolen book was recovered and many other books, which have to be examined further, were also seized. Ten witnesses were interviewed and over a hundred police officers and prosecutors were involved in the operation.

With reports of rare and historical books being stolen across Europe, Europol facilitated the information exchange between the affected countries and helped to identify the main suspects. Europol’s analysis during this case helped to create links, identify leads and even uncover a theft that had not yet been discovered. Before supporting the action day, Europol held two operational meetings in its headquarters.

The following authorities took part in this investigation:

  • Estonia: Estonian Prosecutor´s Office; Police and Border Guard Board
  • France: Court of Paris, OCBC (Central Office against Cultural Goods Trafficking)
  • Germany: Public Prosecutor’s Office Munich I, Public Prosecutor’s Office Berlin, Bavarian State Criminal Police Office (BLKA, Division 622), Berlin State Criminal Police Office
  • Latvia: International cooperation Division of the Prosecutor General’s Office; International Cooperation Department of the Central Criminal Police Department of the State Police; Criminal police bureau of the Riga Regional Department of the State Police
  • Lithuania: Vilnius Regional PPO, Vilnius County Police Headquarters
  • Poland: Circuit Prosecutor’s Office in Warsaw
  • Switzerland: Public Prosecutor’s Office of the Republic and Canton of Geneva; Cantonal police of the Republic and Canton of Geneva