INTERPOL has unearthed a sophisticated fraud scheme which is conducted using compromised emails, advance-payment fraud and money laundering targeting financial institutions and authorities across Germany, Ireland and Netherlands.
In mid-March, as a number of countries were going into lockdown due to the Coronavirus (Covid-19) outbreak, German health authorities contracted two sales companies in Zurich and Hamburg to procure EUR 15 million ($16.05 million) worth of face masks. With a global shortage on medical supplies complicating usual business channels, the buyers followed new leads in the hopes of securing the masks.
(TOP: Workers in Spain place a medical mask on a figure that was to be part of the Fallas festival in Valencia. The festival has been canceled over the Covid-19 outbreak).
It all started with an email address and website which appeared to be linked to a legitimate company in Spain selling face masks. Unbeknownst to the buyers, the site was a fake and their legitimate email addresses had been compromised.
Through email correspondence, the company initially claimed to have 10 million masks, only for the delivery to fall through. As consolation, they then referred the buyers to a ‘trusted’ dealer in Ireland. The Irish middleman promised to put them in touch with a different supplier, this time in the Netherlands.
Claiming to have a strong commercial relationship with the company, the man provided assurances that the alleged Dutch company would be able to supply the 10 million face masks. An agreement for an initial delivery of 1.5 million masks was made, in exchange for an up-front payment of EUR 1.5 million ($1.65 million).
Evidence seized by the Garda National Economic Crime Bureau
The buyers initiated a bank transfer to Ireland and prepared for delivery, which involved 52 lorries and a police escort to transport the masks from a warehouse in the Netherlands to the final destination in Germany.
Just before the delivery date, the buyers were informed that the funds had not been received and that an emergency transfer of EUR 880,000 ($959,200) straight to the Dutch supplier was required to secure the merchandise.
The buyers sent the wire transfer and the masks never arrived. It turns out the Dutch company existed, but their website had also been cloned. There was no official record of the order.
When the buyers realized they had been duped, they immediately contacted their bank in Germany, which in turn contacted INTERPOL’s Financial Crimes unit, setting off a race to intercept the funds and follow the money trail.
Banks, financial intelligence units and judicial authorities, as well as partner organizations Europol and EUROJUST, joined INTERPOL in the chase.
INTERPOL contacted its National Central Bureau in Dublin as well as the Irish bank. Prompt intervention by the Garda National Economic Crime Bureau allowed them to freeze the EUR 1.5 million ($1.65 million) in the account and identify the Irish company involved.
The Dutch Fiscal Information and Investigation Service quickly tracked down the EUR 880,000 ($959,200) which had been transferred from the German company. Nearly EUR 500,000 ($545,000) of those funds had already been sent to the UK, all of which was destined for an account in Nigeria.
Europol activated its professional networks to reach key contacts in the banking sector. Thanks to an alert raised by investigators, the UK bank was able to recall the full amount. Those funds have now been returned to Netherlands and frozen by authorities.
“Those arrested in this case had no connections to the medical equipment industry. They were simply experienced fraudsters who saw an opportunity with the outbreak of COVID-19,” noted Jürgen Stock, INTERPOL’s Secretary General.
“They adapted their sales pitches to take advantage of strained supply chains and generate huge profits. I can only salute the quick work of both the private and public authorities involved. INTERPOL will continue its work on the case – and the many others like it – in close cooperation with all of our partners.”
The operation has already led to the arrest of two suspects in the Netherlands. More arrests are likely as specialized units continue to liaise closely with INTERPOL, as well as the public prosecutor and police forces in Traunstein (Germany) on leads generated by seized devices.
As a precaution, INTERPOL has urged members of the public to be vigilant as organized crime groups continue to adapt their activities to benefit from the global health crisis.