A sophisticated fraud scheme using compromised emails, advance-payment fraud and money laundering has been uncovered by financial institutions and authorities across Germany, Ireland and the Netherlands, as part of a case coordinated by INTERPOL.
In mid-March, as a number of countries were going into lockdown due to the coronavirus outbreak, German health authorities contracted two sales companies in Zurich and Hamburg to procure EUR 15 million worth of face masks. With a global shortage of medical supplies complicating usual business channels, the buyers followed new leads in the hopes of securing the masks.
It all started with an email address and website which appeared to be linked to a legitimate company in Spain selling face masks. Unbeknownst to the buyers, the site was a fake and their legitimate email addresses had been compromised.
Through email correspondence, the company initially claimed to have 10 million masks, only for the delivery to fall through. As consolation, they then referred the buyers to a ‘trusted’ dealer in Ireland. The Irish middleman promised to put them in touch with a different supplier, this time in the Netherlands.
Claiming to have a strong commercial relationship with the company, the man provided assurances that the alleged Dutch company would be able to supply the 10 million face masks. An agreement for an initial delivery of 1.5 million masks was made, in exchange for an up-front payment of EUR 1.5 million.
The buyers initiated a bank transfer to Ireland and prepared for delivery, which involved 52 trucks and a police escort to transport the masks from a warehouse in the Netherlands to the final destination in Germany.
Just before the delivery date, the buyers were informed that the funds had not been received and that an emergency transfer of EUR 880,000 straight to the Dutch supplier was required to secure the merchandise.
The buyers sent the wire transfer and the masks never arrived. It turns out the Dutch company existed, but their website had also been cloned. There was no official record of the order.
When the buyers realized they had been duped, they immediately contacted their bank in Germany, which in turn contacted INTERPOL’s Financial Crimes unit, setting off a race to intercept the funds and follow the money trail.
Banks, financial intelligence units and judicial authorities, as well as partner organizations Europol and EUROJUST, joined INTERPOL in the chase.
INTERPOL contacted its National Central Bureau in Dublin as well as the Irish bank. Prompt intervention by the Garda National Economic Crime Bureau allowed them to freeze the 1.5 million in the account and identify the Irish company involved.
The Dutch Fiscal Information and Investigation Service quickly tracked down the EUR 880,000 which had been transferred from the German company. Nearly EUR 500,000 of those funds had already been sent to the United Kingdom, all of which was destined for an account in Nigeria.
Europol activated its professional networks to reach key contacts in the banking sector. Thanks to an alert raised by investigators, the U.K. bank was able to recall the full amount. Those funds have now been returned to the Netherlands and frozen by authorities.
“They adapted their sales pitches to take advantage of strained supply chains and generate huge profits. I can only salute the quick work of both the private and public authorities involved. INTERPOL will continue its work on the case – and the many others like it – in close cooperation with all of our partners,” added the INTERPOL Chief.
The operation has already led to the arrest of two suspects in the Netherlands. More arrests are likely as specialized units continue to liaise closely with INTERPOL, as well as the public prosecutor and police forces in Traunstein (Germany) on leads generated by seized devices.
Everyone must be extra vigilant at this time as organized crime groups continue to adapt their activities to benefit from the global health crisis.