Category: Germany

Auto Added by WPeMatico

Posted on

Eurojust helps tackle massive fraud of EUR 645 million with medicinal cannabis plants across Europe

Source: Eurojust

In Germany, France and Spain alone, over 4 500 victims have lodged formal complaints against the fraudsters, who set up a crowd-funding programme to raise a minimum of EUR 50 per investor for the development of medicinal cannabis plants. In reality, no cannabis plants were ever bought, although the organisers of the scheme pretended to work with legitimate and licensed enterprises that would cultivate them. The fraud ran from at least January 2020 to July 2022.

The entire scheme had the character of a pyramid or ‘Ponzi fraud’ and promised extremely high returns on investment. Investigations in Germany and Spain, later followed by counterparts in other countries across Europe, showed that investors had been only partially paid.

Most of the invested money was used to pay affiliates, keep the scheme running and expand the fraud through extensive online campaigns. For this purpose and to launder the proceeds, a web of international enterprises was used. The scheme itself appears to have been run by a Russian criminal network, with an affiliated German-based crime group.

Victims in Germany and Spain claim to have lost at least EUR 51.5 million, but the total investment is estimated to be close to EUR 645 million. In total, around 550 000 participants worldwide were registered as online investors, most of them European citizens. Around 186 000 participants transferred funds, either via cryptocurrencies or bank transfers.

Since 2022, Eurojust has been extensively supporting the national authorities, including assisting the German, Spanish and French authorities in setting up and funding the JIT. This led to a successful Joint Action Day coordinated at Eurojust.

At the request of the German and Spanish authorities, in recent days operational actions against the criminal networks were also carried out in Estonia, Latvia, Italy, Malta, Poland, Portugal, the United Kingdom and the Dominican Republic. The French authorities made a decisive contribution to the analysis of crypto flows during the investigations and took part in searches in Germany and Spain on the action day.

Europol supported this massive cross-border investigation from the outset, taking the lead in operational coordination and providing tailored analytical support. Furthermore, Europol shared results of the financial investigations as well as other intelligence with the involved countries. On the action day, Europol deployed officers with mobile offices to various locations worldwide.

During the action days, over thirty places were also searched and for several millions of Euros in crypto assets and bank accounts were frozen. Also real estate properties, luxury vehicles, artwork, cash and various luxury items were seized, as well as large numbers of electronic devices and documents.

The operations were carried out on the ground at request of and by:

  • Germany: Public Prosecutor’s Office Berlin; Criminal Investigation Department Berlin (LKA)
  • Spain: Central Investigative Judge no. 6 at the Audiencia Nacional; National Police (Policia Nacional – UDEF Central Brigade against Economic Crime, Financial Fraud Group)
  • France: Paris’ Prosecutor’s Office JUNALCO (National Jurisdiction against Organised Crime); Gendarmerie Nationale (Research Section Rennes)
  • Estonia: Office of the Prosecutor General; Police and Border Guard Board
  • Latvia: Prosecutor General’s Office; International Cooperation Department and Economic Crime Enforcement Department of the Central Criminal Police Department of the State Police
  • Italy: Postal Police Service of the National Police – Operational Section for Cyber Security, Macerata, and Operational Centre for Cybersecurity of Marche
  • Malta: Malta Police Force – International Relations Unit
  • Poland: Public Prosecutor’s Offices of Jelenia Góra, Lublin, Warsaw, Warsaw Praga and Wrocław; Central Bureau for Combating Cybercrime
  • Portugal: Central Public Prosecutor’s Office Lisbon (DCIAP); Judicial Police (Policia Judiciária)United Kingdom: National Crime Agency
  • United Kingdom: National Crime Agency
Posted on

Eurojust supports an EPPO-led operation against carousel VAT fraud for the first time

Source: Eurojust

During the searches, law enforcement seized vast quantities of smartphones, worth more than EUR 15.3 million, as well as a yacht, worth EUR 3 million, and EUR 1.2 million in cash and cryptocurrency. Several luxury cars, jewellery, luxury watches and 2.5 kg of gold were also found.

The suspects are being investigated for large-scale cross-border Missing Trader Intra-Community (MTIC) fraud involving the trade of electronic goods and protective face masks through companies based in several European countries. MTIC fraud is the theft of value-added tax (VAT) from a government by organised crime groups. The perpetrators are believed to have defrauded up to EUR 195 million through several criminal schemes. Most of the VAT damage was caused in Sweden, where the missing trader companies were based.

Eurojust supported two investigations targeting the same crimes, one led by the EPPO and a second one led by the Swedish authorities. The EPPO investigation targeted the two managers and shareholders of a German distributor company that was acting as an in/out buffer/conduit company in the fraud chain. It purchased and sold mobile phones to other companies in several countries, which were then sold to the Swedish missing trader companies. Eurojust was instrumental in identifying ongoing linked investigations in Sweden, targeting the individual behind the Swedish missing trader companies.

The case was opened at Eurojust in 2021 at the request of the German European Delegated Prosecutor. Eurojust facilitated the cooperation between the EPPO and Sweden, Denmark, Hungary and Poland – all EU Member States that do not participate in the EPPO – and the United Kingdom. Eurojust can support cross-border cooperation in EPPO cases that involve countries that do not participate in the EPPO. The Agency also facilitated cooperation between Sweden and Malta.

The Agency hosted seven coordination meetings to facilitate judicial cooperation between the EPPO and the national authorities involved in the case. Eurojust facilitated the exchange of information and the execution of several European Investigation Orders and European Arrest Warrants.

During the action day, a coordination centre was set up at the EPPO premises in Luxembourg, for the first time jointly with Eurojust. The Eurojust coordination centre focused in particular on coordinating the execution of the Swedish measures in Malta.

In the run-up to the action day, Europol provided analytical support to the partners in this investigation. Furthermore, Europol supported the action day by providing over 100 secure communication channels (VCP – Virtual Command Post), and by deploying a specialist with a mobile office to the operational command centre at EPPO’s headquarters in Luxembourg.

Eurojust and the EPPO signed a Working Arrangement in February of 2021 to facilitate cooperation between the Agency and the EPPO.

The following authorities took part in this investigation:

  • Germany: German Tax Investigation Offices in Berlin, Bielefeld, Cottbus, Münster and Nuremberg; Police Headquarters from Nordhessen and Brandenburg; State Criminal Police Offices from Brandenburg and Berlin;
  • Malta: Malta Police Force – Financial Crimes Investigation Department and International Relations Unit;
  • Poland: Circuit Prosecutor’s Office in Warszawa and Zamość; Police Headquarters in Warszawa and Zamość;
  • Sweden: Swedish Economic Crime Authority.
Posted on

Over 100 searches and four arrests in Latvia, Germany, France, Italy and Malta against financial institution involved in money laundering

Source: Eurojust

National authorities in Latvia, Germany, France, Italy and Malta have carried out over 100 searches in a large-scale operation against a Russian-Eurasian criminal network and a Maltese-based financial institution allegedly involved in money-laundering services. Four suspects were detained during an action day supported by Eurojust and Europol. Potential suspects and witnesses were also interviewed in Latvia, Germany, Estonia and Malta.

During the actions, over 460 police officers were deployed to carry out the searches. Germany also deployed four officers to support the investigations and searches in Latvia and Malta. In addition to the arrests, various bank accounts and properties were seized.

The Maltese financial institution laundered at least EUR 4.5 million in proceedings from criminal activities since end of 2015. The total sum of laundered money could amount to tens of millions of euros. The financial institution and organised crime group (OCG) behind it offered money-laundering services via a network of fake enterprises and individuals who were registered directors, without performing any real business activities.

The OCG operated mainly from Riga and Berlin. Investigations were initiated in 2021 by the Latvian authorities after they noticed unusual money transfers from Latvia to the Maltese financial institution. Simultaneously, the German authorities had started investigations into suspicious money flows involving the same financial institution.

Eurojust supported today’s concerted action by setting up a coordination centre and establishing and funding a joint investigation team between the German and Latvian authorities. The Agency also organised five dedicated coordination meetings to prepare for the action day and assisted with the execution of European Investigation Orders in the countries involved.

On the action day, Europol deployed a money laundering expert to Latvia and set up a mobile office at Eurojust’s coordination centre to support the operation. Since December 2021, Europol has been supporting the investigation by providing operational and financial analysis and operational expertise. The Agency also supported the joint investigation team and provided financial support to the case.

Today’s operations were carried out by the following authorities:

  • Latvia: Rīga Northern Prosecution Office; Rīga Judicial Region Prosecution Office; 1st Unit of the Economic Crime Enforcement Department of the Central Criminal Police Department of the State Police
  • Germany: Public Prosecutor‘s Office Berlin (Staatsanwaltschaft Berlin); State Office of Criminal Investigations Berlin (Landeskriminalamt Berlin)
  • Estonia: Office of the Prosecutor General of the Republic of Estonia and Estonian Police and Border Guard Board
  • France: Public Prosecutor’s Office and Investigative Judge – Judicial Court of Nice; National Police (DIPN) Alpes-Maritimes Division (Judicial Police Nice; Research and Intervention Brigade; Financial Brigade) – Border Police
  • Italy: Public Prosecutor’s Office Rome; Guardia di Finanza, Financial Police Unit Rome (Nucleo Polizia Economica e Finanziaria di Roma)
  • Malta: Financial Crimes Investigations Department and Asset Recovery Bureau of the Malta Police
Posted on

Eurojust supports international operation against world’s largest ransomware group

Source: Eurojust

In a coordinated action supported by Eurojust and Europol, judicial and law enforcement authorities from 10 different countries have severely disrupted LockBit, the world’s most active ransomware operation. Two members of the ransomware team have been arrested in Poland and Ukraine. In addition, law enforcement has compromised LockBit’s primary platform and other enabling infrastructure. This includes the takedown of 34 servers in the Netherlands, Germany, Finland, France, Switzerland, Australia, the United States and the United Kingdom.

LockBit first emerged at the end of 2019, initially calling itself ‘ABCD’ ransomware. Since then, it has grown rapidly and by 2022 had become the most deployed ransomware variant worldwide. LockBit attacks are believed to have affected over 2,500 victims all over the world.

The group is a ‘ransomware-as-a-service’ operation, meaning that a core team creates its malware and runs its website, while licensing out its code to affiliates who launch attacks.

The joint action enabled the various police forces to take control of much of the infrastructure that enables the LockBit ransomware to operate, including the darknet, and, in particular, the ‘wall of shame’ used to publish the data of victims who refused to pay the ransom. This action has disrupted the network’s ability to operate.

Authorities have also frozen more than 200 cryptocurrency accounts linked to the criminal organisation.

This international operation follows a complex investigation led by the UK National Crime Agency. Supported by Eurojust and Europol, law enforcement from nine other countries worked in close partnership with the National Crime Agency on this case, including authorities in France, Germany, Sweden, the Netherlands, the United States, Switzerland, Australia, Canada and Japan.

The case was opened at Eurojust in April 2022 at the request of the French authorities. Five coordination meetings were hosted by the Agency to facilitate judicial cooperation and to prepare for the joint action.

Europol’s European Cybercrime Centre (EC3) organised 27 operational meetings, and 4 technical 1-week sprints to develop the investigative leads in preparation of the final phase of the investigation. Europol also provided analytical, crypto-tracing and forensic support. In addition, three Europol experts were deployed to the command post in London during the action phase.

With Europol’s support, the Japanese Police, the National Crime Agency and the Federal Bureau of Investigation pooled their technical expertise to develop decryption tools designed to recover files encrypted by the LockBit ransomware. These solutions have been made available free of charge on the ‘No More Ransom’ portal, which is available in 37 languages. So far, more than 6 million victim across the globe have benefited from No More Ransom, which contains over 120 solutions capable of decrypting more than 150 different types of ransomware.

The following authorities took part in this investigation:

  • United Kingdom: National Crime Agency, South West Regional Organised Crime Unit
  • United States: U.S. Department of Justice, Federal Bureau of Investigation – Newark
  • France: JUNALCO (National Jurisdiction against Organised Crime) Public Prosecutor’s Office Paris Cybercrime Unit – C3N (cyber unit); Gendarmerie Nationale
  • Germany: Central Cybercrime Department North Rhine-Westphalia (CCD), State Bureau of Criminal Investigation Schleswig-Holstein (LKA Schleswig-Holstein), Federal Criminal Police Office (Bundeskriminalamt)
  • Sweden: Swedish Cybercrime Centre, Swedish Prosecution Authority
  • The Netherlands: National Police (Team Cybercrime Zeeland-West-Brabant, Team Cybercrime Oost-Brabant, Team High Tech Crime); Public Prosecutor’s Office Zeeland-West-Brabant
  • Australia: Australian Federal Police
  • Canada: Royal Canadian Mounted Police
  • Japan: National Police Agency
  • Switzerland: Zurich Cantonal Police; Public Prosecutor’s Office II of the Canton of Zurich
Posted on

Support to Dutch action against violation of export sanctions to Russia: three arrests

Source: Eurojust

Eurojust and Europol have supported a coordinated action of the Dutch, German, Latvian, Lithuanian and Canadian authorities against the alleged violation of export sanctions to Russia. During a joint action day, three suspects were arrested and 14 places searched in view of investigations into the illegal export of technological and laboratory equipment, which could be used for military purposes. Such exports are illegal due to the EU-wide sanctions, which were imposed after the outbreak of the war in Ukraine.

The arrested persons are suspected of being part of an international smuggling network. The physical and digital administration of a Dutch-registered enterprise has been seized, in addition to the enterprise’s bank account and communication tools.

Investigations into the case were initiated at the end of 2023 by the Dutch authorities and led to the uncovering of a web of enterprises, which were used to circumvent the ban on exports to Russia. These enterprises were centred around a Dutch-registered trading company, which was set up in 2017 for the import, export and sales of electro-technical and laboratory equipment, among other goods.

Two of the suspects were administrators of the main trading company. The third suspect is an employee of an external contractor, who is alleged to have been aware of the violation of the export ban. The trading company in question is now run by an administrator in Russia, who is also the sole shareholder.

Eurojust enabled the cross-border judicial cooperation and organised a coordination meeting to prepare for the joint actions, at request of the Dutch authorities. It also set up a coordination centre during the action day, which was held on 9 January.

Europol has been supporting the investigation by providing analytical support, as well as conducting cross-checks on the gathered data.

The actions were carried out at the request of and were supported by the following authorities:

  • The Netherlands: National Prosecution Office for Serious Fraud, Environmental Crime and Asset Confiscation (Functioneel Parket); Investigation Service for Financial and Tax Crime (Fiscale Inlichtingen- en Opsporingsdienst, FIOD)
  • Germany: Public Prosecutor`s Offices of Berlin, Düsseldorf, Hamburg and Krefeld; Customs Investigation Service (ZFD) with offices in Berlin, Essen and Hamburg
  • Latvia: Prosecutor General’s Office; State Security Service
  • Lithuania: Vilnius Regional Public Prosecutor’s Office, Customs Criminal Service
Posted on

Crackdown on criminal network dealing with online investment fraud

Source: Eurojust

Judicial and law enforcement authorities in Germany, Cyprus, Bulgaria and Sweden have carried out a coordinated action against an organised crime group suspected of online trading fraud. The network defrauded numerous victims for several millions of euros in Germany and other European countries.

During a joint action day supported by Eurojust and Europol, four suspects were arrested and thirteen places were searched.

The suspects allegedly belong to a hierarchical criminal network with numerous members. The suspects ran several fraudulent online trading platforms from call centres and other locations in Cyprus. The perpetrators presented themselves as investment advisors and convinced victims to invest large amounts of money based on fake promises of profits.

The damage caused to German victims by the two main platforms is estimated at EUR 3.3 million and EUR 164 000, respectively. The total damage caused by the platforms is likely to be many times higher. Eurojust assisted the investigations by organising a coordination meeting and setting up a coordination centre to facilitate rapid cooperation between the judicial authorities during the joint action day. The Agency also assisted with the transmission and execution of six European Arrest Warrants and several European Investigation Orders.

Europol supported this case by hosting and financing several operational meetings as well as the action day. Furthermore, it provided analytical support and financial intelligence during the investigation. On the action day, a Europol specialist with a mobile office and a universal forensic extraction device (UFED) were deployed to Cyprus, while colleagues back in The Hague offered technical support for the virtual command post.

The following authorities took part in this investigation:

  • Germany: Public Prosecutor’s Office of Göttingen; Centre for Cybercrime, Police Göttingen
  • Bulgaria: Sofia City Public Prosecutor’s Office; General Directorate Bulgarian National Police
  • Cyprus: International Police Cooperation Sub-Directorate – Police Cooperation Bureau Cyprus Police
  • Sweden: Swedish Police Authority