Joint Operation Halts Multi-Million Euro Fraud Scheme Targeting Public Institutions

German and Italian authorities, have dismantled a cross-border fraud operation that caused millions in financial damage to public institutions, cities, and municipalities. The suspects behind the scheme used phishing techniques to manipulate legitimate invoices and redirect payments to their own accounts.

The fraud network operated in Germany for over a year, compromising real invoices addressed to public entities and companies. After altering the payment information, the suspects sent the forged documents to the intended recipients, who unknowingly transferred funds to the criminals.

The investigation identified five main suspects with dual German and Italian citizenship. Due to the cross-border nature of the scheme, Eurojust helped launch and coordinate a joint operation between German and Italian authorities. Europol supported the case by developing intelligence to map the suspects’ activities and ensure efficient coordination during enforcement.

On 24 September, simultaneous searches were conducted at ten locations in Germany and Italy. Search warrants were executed against the five suspects, and investigators seized mobile phones, computers, and data storage devices. Assets linked to the scheme were provisionally secured. Europol facilitated live coordination during the raids through a Virtual Command Post, providing real-time support to field teams.

Authorities will now examine the seized materials for further evidence as investigations continue into the full extent of the scheme.

The operation was carried out by:

Italy: Public Prosecutor’s Office in Naples; Guardia di Finanza – Economic and Financial Police Units in Naples, Verona, Treviso, and Bolzano

Germany: Public Prosecution Office Leipzig – Central Cybercrime Office; Leipzig Criminal Investigation Department – Cybercrime Unit (K 33)