Economic Crime and New Threats: The Dark Side of Money

Part Three – Emerging challenges for the anti-money laundering system

Edited by Sergio Silvestri

After examining the numbers in detail, we conclude this trilogy dedicated to the 2024 UIF Report with a look at the most insidious threats currently affecting the Italian financial system. Because behind every report lies a behavior, and behind every risky behavior lies a criminal organization, more or less sophisticated.

The 2024 reports are not only numerous and more accurate: they also reflect a changing criminal landscape, adopting new tools, and infiltrating where regulatory authorities struggle to reach. Cryptocurrencies, fraud involving public funds, money laundering through parallel networks, and organized corporate crime: these are some of the most significant threats identified in the report.

Cryptocurrency: Risk Becomes Systemic

The growth in reports related to the cryptocurrency sector is one of the most notable phenomena in 2024.
Suspicious transactions involving exchanges, wallet providers, and digital asset traders have increased significantly, signaling not only increased scrutiny by regulatory bodies but also the growing sophistication of illicit channels.

The most common cases include:

• multiple conversions between crypto and fiat currency with opaque entities;
• fractional operations below the threshold,
• use of anonymous or decentralized wallets (DeFi),
• use of mixers, tumblers and off-chain services;
• high-speed transactions to digital accounts, often with senders located in third countries.

A particularly significant case reported in 2024 involves the use of an offshore exchange platform, without a European license, through which a criminal group moved over €2 million in USDT stablecoin in just a few days. The funds were subsequently converted into euros through a series of microtransactions and credited to accounts held by nominees, then withdrawn as cash at various cryptocurrency ATMs in Northern Italy.

These schemes, difficult to trace back to a specific identity, are often orchestrated through platforms not registered in the EU or registered in jurisdictions with weak regulation. Traceability becomes more complicated, and the analysis effort shifts to the interconnection between cryptocurrencies and the traditional banking system.

The UIF has repeatedly called for the urgent need for harmonized European standards and specialized investigative tools, as the rapid pace of digital crime requires unprecedented technical response capabilities. In this context, the creation of AMLA is expected to be a turning point.

Public funds and the PNRR: corruption targeted

The flow of public funds linked to the National Recovery and Resilience Plan (NRRP) has highlighted a new risk category: the systematic abuse of public resources.

In 2024, reports related to public funds concerned:

• companies created specifically to participate in tenders,
• false documentation to obtain financing,
• fictitious subcontracts between associated companies,
• abnormal transactions on newly opened company accounts,
• concentration of payments made at times and in ways that are anomalous compared to the industry average.

In some cases, municipalities themselves—thanks to experimental protocols with the FIU—have reported attempted fraud before funds are disbursed. This is one of the most significant developments of the year: the activation of direct channels between local public bodies and the financial intelligence system. However, these practices remain isolated.

The UIF noted that in some cases, fraud was facilitated by poor oversight of beneficiaries and inadequate formal controls. In many cases, these flows were associated with individuals already known to have ties to criminal organizations. The risk is twofold: on the one hand, resources are diverted from the community, and on the other, the economic power of criminal networks in the region is strengthened, compromising competition and the proper functioning of the market.

False guarantees and anomalous credits: legalized deception

Another issue highlighted in the report is that of fake sureties. Reports have identified opaque networks, with operators issuing guarantees without actual financial backing, often used to access bank loans or participate in public tenders.

The phenomenon doesn't just concern marginal players: it also involves seemingly legitimate intermediaries, capable of constructing a credible financial narrative, but based on fictitious foundations. The guarantees are produced on letterhead, sometimes with forged signatures, and sent in a way that eludes automated checks.

Over the course of 2024, the UIF tracked over 300 reports related to these practices, often linked to individuals operating in multiple regions under slightly different names.

At the same time, there has been an increase in cases of credits being sold between related companies, at inflated or cross-valued values, aimed at distorting balance sheets. These transactions allow companies to present themselves as solid in the eyes of banks and investors, only to disappear once they have obtained financing. In some cases, the same companies have fraudulently accessed NRRP funds, exploiting triangulation with compliant consultants.

Organized crime: the evolution of the threat

Mafias no longer launder money only through bars, real estate, or car dealerships. The 2024 UIF Report describes an organized crime that has taken a leap forward and acquired advanced financial tools.

Today's mafia financial crime:

• enters the capital of companies in difficulty,
• manages transnational corporate networks with professional front men,
• infiltrates European financial flows (including through investment funds),
• uses intermediaries with real managerial skills,
• manipulates flows through compliant local banks or offshore foreign networks.

In one of the most complex cases analyzed by the FIU, a group operating between Lombardy and Albania used six shell companies, all formally active in different sectors (logistics, consulting, transportation, construction, catering, car rental), to move over €15 million over three years. The funds, once transferred to the Baltic countries, were subsequently converted into cryptocurrencies and finally reinvested in real estate and luxury cars in Italy, registered in the names of family members of the clan members.

The most serious reports, classified as very high risk, often come from financial intermediaries who intercept cyclical, recurring, and opaque movements between seemingly unrelated entities, but who actually share a unified agenda. The relational map created by the UIF shows geographic concentrations in areas where investigative pressure is less or where there are historic mafia establishments that have adapted to the legal economy.

Conclusion: anticipate, don't chase

The message emerging from this third episode is clear: it's no longer enough to identify crimes after they've been committed. The system must learn to anticipate, intercept weak signals, and build operational alliances.

The UIF has initiated strengthened collaborations with the Guardia di Finanza, the Bank of Italy, prosecutors' offices, and European agencies. However, much depends on the ability of whistleblowers to maintain high levels of vigilance, update internal procedures, and detect evolving patterns. An anti-fraud system is only effective if all stakeholders are involved and held accountable.

2025 will be a crucial year for the entry into force of AMLA, the European Anti-Money Laundering Authority based in Frankfurt. Italy will need to be ready not only to collaborate, but to lead the change in terms of interoperability, digitalization, and sharing of investigative expertise. The challenge will be both technical and cultural.

This concludes this trilogy on money laundering in Italy. A journey through numbers, practices, and threats, it depicts a system under pressure but also growing.

The fight against money laundering is a relentless challenge. And it concerns everyone.

As Dean of the Italian Anti-Money Laundering School and the European School of Banking Management, I wish to express my sincere appreciation to the UIF and the Guardia di Finanza for their achievements.

The data, actions, and innovations documented in the 2024 Report demonstrate a clear vision, growing operational capacity, and concrete determination to defend the legal economy. This commitment is not just a technical defense, but a defense of democracy.

This trilogy has attempted to tell this story. But the work, the real work, continues every day, in the analyses, the checks, the investigations. Our gratitude and our trust go to them.