The €61 Million That Left Luxembourg Keeps Surfacing Abroad

When Italian police detained a 41-year-old woman in Turin in the first days of June, the arrest looked like a local affair. It was not. The European warrant in the officers' hands had been issued by an investigating judge in Luxembourg, and the suspect, Clarissa La Porta, stands accused of helping to launder part of the €61.2 million drained from Caritas Luxembourg, one of the Grand Duchy's oldest and best-known charities.

Her detention is the latest move in an investigation that began as a domestic embezzlement in the summer of 2024 and has since spread across the continent. By RTL's count, the inquiry has now produced roughly nineteen arrests in several countries, as Luxembourg prosecutors follow a money trail that runs through Spain, Italy, Austria, Portugal, Sweden, Bulgaria, France and the United Kingdom.

A phone call that cost €61 million

The mechanism was almost mundane. Between February and July 2024, someone impersonating a senior figure at Caritas instructed staff to authorise urgent transfers abroad. In just over eight thousand transactions — most carefully kept below the half-million-euro mark — the money left the charity's accounts and vanished into a lattice of shell companies and mule accounts.

“The fraudster pretends, by telephone or email, to be a manager or a representative of the entity's management and demands an urgent international payment,” Luxembourg's public prosecutor's office said in describing the scheme.

It is a scam with a bland name — “fake president,” or CEO fraud — and an outsized reach, costing European businesses and institutions hundreds of millions a year. What set the Caritas case apart was the victim: not a bank or a multinational, but a Catholic charity founded in 1932 to help the poor.

• More than 8,000 transfers, most below €500,000, between February and July 2024.
• Funds traced through accounts in Spain, Italy, Austria, Portugal, Sweden and beyond.
• Roughly nineteen arrests so far; the charity's services handed to a new foundation in October 2024.

The institution did not survive

The damage was existential. By October 2024, Caritas Luxembourg's national social work — emergency shelters, the winter cold-weather programme, support for migrants and families — had been transferred to a newly created non-profit, Hëllef um Terrain, set up with state backing to keep the services running and the staff employed. The organisation that had carried that work for more than ninety years was, in effect, dismantled by a single fraud.

The fallout reached the financial sector too. In a decision dated 2 May 2025 and made public that July, Luxembourg's regulator, the CSSF, fined the state savings bank Spuerkeess €4,968,780 for anti-money-laundering failings linked to the case. The watchdog pointed to an “inadequate configuration of suspicious transaction detection tools” and the “poor analysis of atypical movements” — the very pattern of massive, simultaneous transfers that should have raised an alarm.

A small country, a continental case

For a jurisdiction whose financial centre trades on a reputation for control, the affair has become a stress test of cross-border justice. The arrests have relied on European Arrest Warrants and on direct police-to-police cooperation; in La Porta's case, Luxembourg's international police cooperation service worked alongside units in Rome. Two Bulgarian nationals were convicted in July 2025 for opening accounts in Spain that fed the laundering chain, each receiving eighteen months, fifteen of them suspended.

Investigators describe the current phase as a climb up the chain — away from the disposable “mules” who lent their names to accounts, toward the organisers who built the structure. La Porta, prosecutors allege, was among those who set up the shell companies and accounts, in Italy, Austria, Sweden and Portugal, through which the charity's money was washed and scattered.

Whether the missing millions can be recovered remains unclear; laundered funds rarely return intact. But the arc of the case carries a lesson that reaches well beyond Luxembourg. A single deceptive instruction, exploited against an organisation built on trust, was enough to bring down a ninety-year-old institution and to set off a manhunt across nine countries — proof, if any were needed, of how thin the line has become between an ordinary email and an extraordinary crime.