Avila, 29/06/17

EMMA – European Money Mule Action

1, 2 & 3

Europol Unclassified – Basic Protection Level

Payment Fraud – Key Threats &
Challenges

Card Present Fraud

ATM Logical (Malware & Black Box) Money Mules

APTs large scale ATM cash-
cash-outs
E-commerce & Airline Fraud
CC data on-
on-line trade and misuse

Europol Unclassified – Basic Protection Level

What is Money Muling ..
in 60 seconds or less

Visit:
https://www.youtube.com/watch?v=C4J4qg4F7bM

What is money muling in 60 seconds or less.mp4

Europol Unclassified – Basic Protection Level

What is Money Muling ..
in 60 seconds or less
Achieved results… EMMA 1 & 2

• More than 1200 money mules identified across Europe

(with links to Ukraine, Qatar, Nigeria, Kenya, and Brazil);

• 580 interrogations and 260 arrests;

• More than 1900 fraudulent transactions reported and
linked to MM with more than 100 banks involved;
• 1800 victims identified;
• Losses € 31 million; Seized: € 2.500k;

Europol Unclassified – Basic Protection Level

Achieved results… EMMA 1, 2 & 3

EMPACT – European Multidisciplinary Platform Against Criminal Threats

Cybercrime Payment Card Fraud Priority
Operational Action 4.1 EMMA 1,2 & 3

Interaction with the private sector at national and international

level in order to assist national/international investigations related
to money mule networks.

MS to continue to focus on identifying and investigating

money/goods mule cases.

Europol Unclassified – Basic Protection Level

EMMA operational procedure

MS level European level

Cases defining

BANKS LEAs
JOINT
ACTION
WEEK-s
Incidents reporting

Analysis prevention
Project (AP) campaign
Terminal
 Coordination Meetings
at Eurojust and Europol

Agreements on:

• prosecutors and/or officers in charge

• communication contact points

 EMMA REPORTING TABLE TEMPLATE

Number Number No of No of No of No of No of No of Other No of Legal Add

of Money of banks fraudulent losses losses victi interrog detenti measu investigat consequen itio
Mules involved transactions report preve ms ations ons and res ions/ ces for nal
COUNTRY (MM) reported by ed nted identi arrests taken enquirers perpetrato info
identified banks linked (in (in fied opened rs (type of
to MM Euro) Euro) offence
(if possible and/or
explain activities)
transactions
background,
ex: phishing,
ATM/POS
etc.)

NL

TOTAL

Europol Unclassified – Basic Protection Level

Achieved results… EMMA 2

EMMA2 OPERATIONAL ACTIONS IN 11 countries:

BG, ES, FR, GR, IT, NL, PL, PT, RO, UK, and UKR

MEDIA PREVENTION ONLY IN 6 countries:

DE, HR, HU, LV, MD, and US

Europol Unclassified – Basic Protection Level

 EC3-AP Terminal
Europol Unclassified – Basic Protection Level
2nd European Money Mule Action (EMMA2) –
Operations 14-18 Nov 16 & Media prevention 22-25 Nov 16
 178 arrests in successful hit against money
muling.
 The hit on this wide-spread crime was
supported by 106 banks and private partners.

Europol Unclassified – Basic Protection Level

European Money Mule Action
(EMMA2) – Nov 2016
Judicial
Coordination Europol Liaison
Secure Centre at Officers/
Exchange of Eurojust Eurojust
Operational Prosecutors
Information
- SIENA

Mobile Office Command Post Europol databases

operational / at Europol EC3
technical AP Terminal
database
assistance
MLAT exchange
On the spot assistance
support

Europol Unclassified – Basic Protection Level

14 Europol Unclassified – Basic Protection Level
 14 Money Mules
arrested in UK
linked to

Dyre & Dridex malware

VIDEO link:

https://www.youtube.com/w
atch?v=gh2EvFzhydc

Losses in excess of
£13 million (!)

Europol Unclassified
– Basic Protection Level
 Press Releases

Visit:
https://www.europol.europa.eu/content/europe-wide-action-targets-money-mule-schemes

Europol Unclassified – Basic Protection Level

EMMA 2 – main findings

8
60 SECS VIDEO
EN, NL, IT, BG, ES,
GR, HR and LV

AWARENESS
MATERIAL

1 60 seconds video
12 4 clips
1 e-flyer
SETS 4 e-posters
EN, BG, HR, FR, NL, DE, GR, IT, LV,
ES, RO (for both Romania and
Moldova) and PT

6
2015 8 COUNTRIES
12
2016 17 COUNTRIES
??
2017 ?? COUNTRIES
Europol Unclassified - Basic Protection level
EMMA 2 – main findings

YOUTUBE VIEWS PER LANGUAGE OF THE VIDEO

700
600
500
400
300 Column1
200 Total
100 21-27 Nov
0
EN FR ES NL HR GR BG LV IT
Column1
Total 480 362 268 130 85 23 17 14 6
21-27 Nov 139 0 189 59 53 21 15 10 5

Europol Unclassified - Basic Protection level

EMMA 2 – main findings

21 Nov – 27 Nov

360 news media

Traditional / news outlets

1 mention = 1 news article /
media report

123 social media

Social media platforms

1 mention = 1 post / tweet /
share / RT

PRESS RELEASE + EBF stakeholder lunch

Europol Unclassified - Basic Protection level

EMMA 3 - communication common
action plan

PARTICIPANTS
1 LEA
Europol’s EC3
Eurojust
EBF -> national banks

COMMON MEDIA STRATEGY

2 Common messages
Common formats (translation and logos)
Web page
EMMA 3 Video(s)
E-posters
Common Action Plan E-info sheet

JOINT PRESS RELEASE

3 To be published on…
EBF launch event?
Compiling the action results
Initiating the awareness week

SOCIAL MEDIA
4 #DontBeaMule

Europol Unclassified - Basic Protection level

 Dedicated page on money muling

• How are money

mules recruited?
• Who are the most
targeted individuals?
• What are
the warning signs?
• How to protect oneself?
(..be cautious of
unsolicited emails
or approaches over
social media..)
• What to do?
(..if you have received a job offer..)

Visit: https://www.europol.europa.eu/content/money-muling

Europol Unclassified – Basic Protection Level

Europol Unclassified – Basic Protection Level
 Avila, 29/06/17

Thank you,
Are U ready
for EMMA3?

Grzegorz MAZURKIEWICZ

grzegorz.mazurkiewicz@europol.europa.eu
tel.: +31 70 3025326

AP Terminal – Operations
European Cybercrime Centre (EC3)
EUROPOL

Europol Unclassified – Basic Protection Level AP Terminal