Two women linked to a Portuguese accounting office are now in pretrial detention, and a senior tax official from the Portugal Tax and Customs Authority has been suspended from duty, as judicial authorities move swiftly to clamp down on a sprawling fraud network that may have illegally processed documents for as many as 10,000 immigrants across the European Union.
The Regional Prosecutor's Office in Coimbra confirmed the measures following last week's five-person arrest sweep under Operation Atlantic Fog (Neblina Atlântica), an investigation by the Portugal Judicial Police (PJ) that exposed a scheme generating millions of euros by exploiting desperate foreign nationals—most of whom never set foot in the country—to obtain residency credentials while actually living and working in Belgium, France, and Switzerland.
Why This Matters
• Resident impact: The infiltration of the Portugal Tax Authority by fraud networks threatens public trust in immigration and fiscal systems, raising questions about oversight and accountability.
• International implications: Thousands of immigrants registered as Portuguese taxpayers and social security contributors are not residing or working in Portugal, distorting labor market data and tax collection.
• Financial scale: One business owner alone issued €1.5M in fake receipts, with individual victims reportedly paying between €200 and €15,000 per case.
How the Scheme Worked
The network, active since at least 2022, presented itself as a legitimate service provider specializing in immigration paperwork. According to Avelino Lima, Director of the PJ Central Directorate, the gang operated primarily in central Portugal, between the municipalities of Cantanhede and Mealhada, offering a tiered menu of fraudulent services.
The starting price was €200 per case, covering the initiation of a regularization file. From there, depending on the complexity of the client's needs, the group would charge additional fees to procure Tax Identification Numbers (NIF), register labor contracts with companies (some legitimate, others entirely fictitious), or classify migrants as self-employed workers issuing green receipts (recibos verdes). Many victims, desperate to secure legal status in Europe, took on debts to afford the service, with some paying more than €10,000 for the full package.
The critical element that set this operation apart was the alleged involvement of a head of service at a regional tax office. His position reportedly allowed the gang to validate and alter data directly in the Portugal Tax Authority's system, bypassing standard safeguards. The official has now been suspended, prohibited from contacting co-defendants, other staff at his former office, or entering the premises, according to the Coimbra Criminal Court of First Instance.
The Belgium-France-Switzerland Corridor
What makes this case particularly complex is its cross-border dimension. The "vast majority" of the immigrants who paid for these services are not in Portugal at all, Lima emphasized. They live and work in Belgium, France, and Switzerland—part of the European Union's Schengen zone, which allows free movement once initial documentation is secured in one member state.
Portugal, with its previously lenient regularization mechanism known as "manifestation of interest" (revoked in June 2024), had become a convenient entry point for fraudulent networks. Migrants could acquire Portuguese tax and social security numbers, register fictitious employment, and then move freely across borders. This allowed them to bypass stricter immigration controls in their actual countries of residence, while appearing on paper as active contributors to the Portuguese tax and social security systems.
The PJ estimates that nearly 10,000 immigrants may be tied to this single network, though the final tally is still being calculated. One arrested entrepreneur alone accounted for €1.5M in fraudulent invoicing. During the operation, authorities conducted 16 searches, seizing extensive documentation and computer equipment.
What This Means for Residents
For people living in Portugal, this case highlights a troubling reality: organized crime's capacity to infiltrate state institutions. The involvement of a tax official underscores vulnerabilities in oversight and internal controls at agencies handling sensitive data and regulatory functions.
The Portugal Cabinet and the Ministry of Justice have been working since 2024 on an Anti-Corruption Agenda, which includes 42 measures aimed at strengthening institutional integrity. Seventeen of those measures are complete, with the remainder in progress. The National Anti-Corruption Strategy (ENCC), approved in June 2024, prioritizes prevention, detection, and punishment, with special emphasis on risk prevention plans, codes of conduct, whistleblower channels, and digital interconnection of data between the Social Security Institute (ISS) and the Tax Authority.
On January 1, 2026, the government began digitizing and automating the social security contribution cycle, making it harder to artificially construct contribution histories that grant access to benefits fraudulently. The General Inspectorate of Finance (IGF) conducted 90 audits and inspections in 2025, surpassing compliance targets, and the Judicial Police has been bolstered with new recruits and digital investigation tools.
Residents should be aware that these reforms are direct responses to recurring cases of fraud involving both immigration and public institutions. The National Anti-Corruption Mechanism (MENAC), established under Decree-Law 109-E/2021, is now the central coordinating body for prevention policies.
What Happens Next
Four individuals were formally charged: the two women from the accounting office were remanded in pretrial detention and barred from contacting co-defendants or witnesses. The tax official was suspended and faces the same contact restrictions. A fourth defendant, a foreign national, must report periodically to authorities, surrender his passport, and remain in Portugal pending trial.
The charges include aiding illegal immigration, criminal association for facilitating illegal immigration, corruption, money laundering, and document forgery. If convicted, sentences could range from several years to over a decade in prison, depending on the severity and role of each defendant.
Lima warned that the financial incentives driving these operations—estimated at millions of euros per network—are powerful enough to corrupt officials and undermine state structures. He noted that Operation Atlantic Fog involved 90 PJ inspectors and specialists from multiple regional units, a scale that reflects both the complexity of the case and the resources required to dismantle it.
Broader Context: A European Problem
Portugal is not alone. Over 90% of irregular migrants entering Europe pay facilitators, making human smuggling and document fraud among the most lucrative illicit activities on the continent. Criminal networks increasingly use fake companies, forged contracts, stolen online credentials, and inactive bank accounts to launder proceeds and evade detection.
Europol and Eurojust are coordinating multinational efforts to combat these networks, which often span several countries. In May 2025, another PJ operation, "Terra Milagrosa," dismantled a group responsible for illegally legalizing around 4,000 immigrants, many of whom also ended up in other EU states. That case involved an attorney and a senior official from the Ministry of Foreign Affairs.
The recurrence of these schemes has prompted calls for deeper structural reforms, including stronger interagency data sharing, expanded audit powers for the Court of Auditors, and harsher penalties for public officials who betray their institutional duties.
What Immigrants Should Know
Migrants who believe they may have been defrauded—whether they paid for services that turned out to be illegal, or who now face irregularities in their documentation—should contact the Foreigners and Borders Service (SEF) successor agency, the Agency for Integration, Migrations and Asylum (AIMA), or consult a licensed immigration lawyer.
Using fraudulent documentation can result in deportation, criminal charges, and bans on re-entry to the Schengen zone. Victims of fraud who cooperate with authorities may receive more lenient treatment, but each case is assessed individually.
For residents concerned about institutional integrity, the government has committed to transparency measures, including public reporting on the Anti-Corruption Agenda's progress and expanded whistleblower protections. The next phase of reforms, expected in late 2026, will focus on real-time data audits and automated red-flag systems to detect anomalies in tax and social security filings.
The Road Ahead
Operation Atlantic Fog is a reminder that Portugal's openness—historically a strength—can be exploited when safeguards falter. The involvement of a tax official is a wake-up call, but the government's response, including the suspension, detention orders, and broader institutional reforms, signals a commitment to accountability.
Whether these measures are sufficient to restore public confidence will depend on the speed and transparency of prosecutions, the effectiveness of new oversight mechanisms, and the willingness of state agencies to root out corruption from within. For now, the message is clear: fraud networks are being dismantled, and officials who betray the public trust will face consequences.
