{"id":35258,"date":"2020-07-02T11:28:13","date_gmt":"2020-07-02T09:28:13","guid":{"rendered":"https:\/\/ostro.si\/?p=35258"},"modified":"2026-06-09T12:32:17","modified_gmt":"2026-06-09T10:32:17","slug":"questionable-paperwork-lets-fake-and-faulty-masks-flood-europe","status":"publish","type":"post","link":"https:\/\/ostro.si\/en\/stories\/questionable-paperwork-lets-fake-and-faulty-masks-flood-europe\/","title":{"rendered":"Questionable Paperwork Lets Fake and Faulty Masks Flood Europe"},"content":{"rendered":"\n
\n

As COVID-19 swept through Europe in March, the director of Lithuania\u2019s Central Prison Hospital was relieved to receive 3,000 FFP2 respirator masks, the gold standard for filtering out tiny airborne particles, like the coronavirus that causes the disease.<\/p>\n

The masks arrived in boxes plastered with the CE mark<\/a>, the immediately recognizable symbol showing that products have been verified as meeting European standards. This status was backed by documents from one of the continent\u2019s major certification firms. Everything seemed to be in order. <\/p>\n

But what hospital officials didn\u2019t know was that the CE marks on the Chinese-made masks were fake, and the documents meaningless. The shipment had been exported by a company whose owner is wanted by the Chinese authorities, and the masks in the boxes had never been tested to European standards. <\/p>\n<\/div>\n\n\n

\n
\"\"
Boxes of masks falsely bearing the CE mark, imported from China into Lithuania and delivered to the country\u2019s Central Prison Hospital in March.<\/figcaption><\/figure>\n<\/div>\n\n\n
\n

\u201cWe stated that we needed [the] FFP2, FFP3 [standards],\u201d said hospital director Ramunas Silobritas, who was surprised to be informed by an OCCRP reporter that the masks were subject to a Europe-wide alert for being falsely marked<\/a>.<\/p>\n

\u201cThese were a match. After we received the face masks, we had no doubts.\u201d<\/p>\n

His hospital is not alone. Since the start of the coronavirus pandemic, countries across Europe have been inundated with fake, substandard, and unverified personal protective equipment (PPE), endangering the lives of those who use it. <\/p>\n

Some of the most egregious fakes have been sold with falsified paperwork, but much of the influx is due to something else entirely: misleading certification issued by real companies.<\/p>\n

An investigation by OCCRP and 16 European media partners found scores of cases in which PPE was sold throughout Europe using documents that make it look like the goods meet the bloc\u2019s complex safety rules. In reality, the papers are legally worthless. <\/p>\n

These documents are sold by European companies, including one with a long history in the continent\u2019s safety industry, and can cost tens of thousands of euros each. Sometimes even the purchasers are unaware that the certificates have no legal basis. <\/p>\n

The documents often prominently display the CE mark, an official accreditation for goods that meet European Union standards.<\/p>\n

It\u2019s only when you get to the fine print do you find wording explaining that the documents do not actually confer the CE designation, that \u201cit\u2019s not an approval of the product, [and that] it\u2019s not meant to be any kind of mandatory document with legal value,\u201d said Dorte Kardel, a Denmark-based compliance consultant familiar with the practice.<\/p>\n

The majority of such documents uncovered by reporters were issued by one company: Ente Certificazione Macchine (ECM), a longstanding player in the EU standards certification business based in the Italian city of Bologna. The company was officially sanctioned for misleading practices by Italy\u2019s top accreditation body in early April, but OCCRP reporters have found evidence that has since continued to tout its business certifying PPE. <\/p>\n<\/div>\n\n\n

\n
\"\"
A copy of the ECM certificate for masks exported to Europe by Kangyuan Jiankang Technology.<\/figcaption><\/figure>\n<\/div>\n\n\n
\n

Reporters found that misleading documentation from ECM and other companies was used to sell PPE in at least 19 countries. This equipment included respirator masks that were later withdrawn from sale and have failed safety standards in independent tests. <\/p>\n

Among those that have sold PPE with these questionable documents are people tied to Romanian organized crime. Kangyuan Jiankang Technology, the Chinese company that brought the unverified masks to Lithuania\u2019s prison hospital, also used ECM certificates. <\/p>\n

Reporters were able to trace masks sold by the company to countries including Portugal, Malta, and Estonia. In Lithuania, the masks were sold to government institutions in at least 19 separate contracts. <\/p>\n

The trade in misleading certificates allows goods to be sold that could endanger public safety.<\/p>\n

In Sweden, independent testing has shown that masks with fake or questionable documentation fail to meet minimum requirements for particle filtration and overall quality more than half the time.<\/p>\n

The European Anti-Fraud Office (OLAF), as well as national law enforcement agencies, are currently investigating the fraudulent use of false and misleading certificates for PPE, said OLAF\u2019s director-general, Ville It\u00e4l\u00e4.<\/p>\n

Millions of articles of substandard PPE have already been seized, he said, explaining that the problem could affect all the EU\u2019s 27 member states.<\/p>\n

\u201cThe products accompanied with fake certificates could be ineffective or even detrimental to health. It doesn\u2019t only concern individual consumers, but also pharmacies, care homes, and large institutional buyers like hospitals or prisons.\u201d<\/p>\n<\/div>\n\n\n

\n
\"\"
The headquarters of Ente Certificazione Macchine (ECM) in Italy.<\/figcaption><\/figure>\n<\/div>\n\n\n
\n

Gambling with People\u2019s Lives<\/h3>\n

At the root of the problem is the challenge of complying with complex European health and safety rules during an unprecedented global health crisis.<\/p>\n

Under EU rules, respirator masks and other equipment that protect users from dangerous health risks must meet strict quality standards. These are verified by so-called \u201cnotified bodies\u201d<\/a> \u2014 private companies designated by the European Commission to oversee the assessment of products put onto the European market. <\/p>\n

But as the pandemic engulfed Europe, much of the buying was being done by people and institutions with no experience in purchasing PPE and little familiarity with Europe\u2019s rules. Prior to the outbreak, most government institutions, and even health services, didn\u2019t regularly buy respirator masks, which are usually used in fields like construction or heavy manufacturing where hazardous airborne particles are common. <\/p>\n

\u201cAs you can imagine, everybody who wants to earn a quick buck is ready to jump on the opportunity, so since mid-March the number of questions and examples we have received from our members\u2026 was just going crazy,\u201d said Henk Vanhoutte, the secretary general of the European Safety Federation<\/a>, a Europe-wide body representing companies that make, import, and distribute PPE.<\/p>\n

This has resulted in institutions purchasing goods with forged CE documents, or gray documents that only specify in the fine print that they do not confer a CE mark.<\/p>\n

Since the start of the pandemic, the European Safety Federation has published a running list of companies<\/a> believed to be using or issuing suspicious certificates. The body receives as many as a hundred inquiries a day from across Europe, Vanhoutte said. <\/p>\n

That\u2019s not to say every piece of PPE sold with the documents has turned out to be defective. In some cases, manufacturers and traders appear to have unwittingly bought unnecessary documentation for products that would have passed the verification process anyway, Vanhoutte said. <\/p>\n

The company that most frequently appears on the European Safety Federation\u2019s list is also frequently encountered by journalists investigating suspicious mask orders: Bologna-based ECM.<\/p>\n

ECM is an official notified body for goods including radio equipment and certain medical devices \u2014 but not PPE.<\/p>\n<\/div>\n\n\n\n

\"\"
The headquarters of Ente Certificazione Macchine (ECM) in Italy.<\/figcaption><\/figure>\n\n\n\n
\n

In 2010, ECM was investigated by Italian authorities for certifying protective gear for fencing without the correct accreditation.<\/p>\n

The European Safety Federation also provided OCCRP with \u201ccertificates of compliance\u201d for PPE produced by ECM from as early as 2012. (Reporters were unable to independently verify whether these documents were produced by ECM or forged by third parties.) <\/p>\n

But ECM\u2019s involvement with PPE began in earnest as demand skyrocketed with the advent of the coronavirus pandemic.<\/p>\n

Reporters collected and verified at least 66 ECM certificates for PPE issued this year as COVID-19 spread across Europe. In at least 10 cases, goods bearing ECM certificates were later subjected to safety alerts or failed to meet minimum testing requirements, reporters found. <\/p>\n

The company\u2019s activities have already attracted sanction. In early April, Accredia, the organization that oversees Italy\u2019s notified bodies, censured ECM for issuing documents designed to \u201cartfully instil in those who receive them the idea that the certificate is compliant with current European legislation.\u201d <\/p>\n

The company\u2019s actions \u201ccould discredit the entire system of accredited certifications,\u201d Accredia wrote in a public statement.<\/p>\n<\/div>\n\n\n\n

\"\"
The four-digit codes of notified bodies for PPE can be checked here.<\/figcaption><\/figure>\n\n\n\n
\n

Documents obtained by OCCRP show that ECM continued to tout its misleading certification business even after this public rebuke.<\/p>\n

In a draft contract sent to one potential European customer nearly three weeks later, on April 27, ECM offered to create a \u201csecondary verification of CE conformity\u201d for Chinese-made masks in return for a fee of 20,000 euros, to be paid up front. According to the European Safety Federation\u2019s Vanhoutte, this price is comparable to what authorized bodies charge to assess PPE, and would also include the cost of testing the goods. <\/p>\n

Kardel, the Denmark-based compliance consultant, said such a \u201csecondary verification\u201d does not exist under European rules.<\/p>\n

\u201cECM is gambling with people\u2019s lives\u201d by issuing certificates without knowing how a product is tested or how it will be used, she said.<\/p>\n

In a written response to reporters\u2019 questions, ECM CEO Andrea Secchi said the company had issued \u201cvoluntary\u201d certificates in response to requests from its branch in Shanghai, but that its Chinese customers had been made fully aware that they were responsible for securing their own CE marking with the help of a notified body.<\/p>\n

\u201cWe wish to draw your attention to the fact that our company is NOT responsible for any different, incorrect, improper use or manipulation of the Document, with respect to its nature,\u201d Secchi wrote.<\/p>\n

\u201cOur company is also NOT responsible for any non-conformities present on the product, since the production process, modifications, changes, shortcomings of any safety devices are not under our surveillance. ECM Italy is NOT responsible for the product, production, import, distribution, sale, advertising, technical assistance or consultancy, nor does it act as an agent of the manufacturer.\u201d<\/p>\n

\n<\/p>

\u201cFalsify Something that is at Least Legally Valid\u201d<\/h3>\n

ECM is not the only player in this gray market. Another well-known issuer of misleading documentation is ICR Polska, a Poland-based notified body approved to certify machinery and radio equipment, but not medical supplies or PPE. <\/p>\n

Despite this, reporters found ICR Polska has issued documents for imported PPE that say the company \u201cconfirms that the product meets the requirements\u201d of European standards.<\/p>\n

Further down the page, and in smaller writing, the certificates state that they do not confer a valid CE mark.<\/p>\n

Reporters were able to verify at least eight instances in which ICR Polska issued certificates for masks and other PPE that have been sold in countries including the United Kingdom, Austria, and Finland.<\/p>\n

The company declined to respond to written questions sent by OCCRP. But in late March, it publicly announced it would no longer issue certification<\/a> for goods related to COVID-19 and warned that its \u201cvoluntary\u201d certificates are not legally required and do not confer a CE mark. <\/p>\n

The company also said that all certificates it issued between March 1 and 26 have been withdrawn.<\/p>\n<\/div>\n\n\n\n

\"\"
ICR Polska posted this announcement on its website in March, disavowing certificates for PPE it issued amid the coronavirus pandemic.<\/figcaption><\/figure>\n\n\n\n
\n

Complicating the picture, there has also been a thriving trade in fake certificates for PPE falsely claiming to have been produced by ECM and ICR Polska.<\/p>\n

These certificates have \u201cbeen copied by people that don\u2019t realize that if you copy or if you falsify something, you better falsify something that is at least legally valid,\u201d said Vanhoutte, of the European Safety Federation.<\/p>\n

ICR Polska has announced that fake certificates bearing its name are being circulated. But confusingly, an online verification system used by the company does not distinguish between what it calls \u201cinvalid\u201d and \u201cfake\u201d certificates \u2014 making it difficult for the public to differentiate between the forgeries and the ones that were actually issued. <\/p>\n

In Lithuania, the port city of Klaipeda bought 30,000 respirator masks for doctors and public sector employees from a brand called \u201cLove Surprise,\u201d manufactured by a Chinese company established on February 26 this year. They came with certification supposedly issued by ICR Polska saying the masks had gone through rigorous testing. However, the documents turned out to be forged, and it\u2019s unclear whether the masks ever met quality standards. <\/p>\n

The municipal government told OCCRP that its procurement specialist had been misled by the documentation into feeling \u201ccertain that the merchandise is good and meets safety standards.\u201d But the Love Surprise masks were never sent out to nursing homes and hospitals as intended because another shipment arrived first, the government said. <\/p>\n

\n<\/p>

Law Enforcement Attention<\/h3>\n

The use of such fakes has led to law enforcement action. Dutch authorities arrested<\/a> a man in April for allegedly selling 15,000 defective masks to healthcare providers using forged ECM documents.<\/p>\n

OLAF, the European anti-fraud office, told OCCRP it opened its own investigation into both false and misleading documents for PPE in March, working alongside national customs and enforcement authorities in nearly every European country, as well as Interpol.<\/p>\n

The U.S. Food and Drug Administration has cautioned the public<\/a> that certificates from ICR Polska and ECM are not adequate for importing PPE into the U.S.. National bodies such as Sikkerhedsstyrelsen, Denmark\u2019s official body for overseeing product safety, also warned companies not to buy PPE with certificates from ICR Polska or ECM. <\/p>\n

Even Chinese authorities have taken notice. The Shanghai Municipal Administration for Market Regulation warned in April<\/a> that local companies and individuals were selling supposed \u201cfast-track CE certification services\u201d to would-be exporters for exorbitant fees. In fact, buyers simply received useless certificates from companies including ECM, which authorities singled out as a particular offender for having \u201cflooded the market\u201d with sham certificates. <\/p>\n

Reporters were also able to document several instances across Europe where buyers believed these certificates conferred a true CE mark.<\/p>\n

In Sweden, several regions and towns were sent certificates by ECM and other companies in files that were falsely labeled as \u201cCE\u201d or \u201cCE certificates.\u201d<\/p>\n

Sometimes it wasn\u2019t just the documents that were misleading. In an email to one Swedish town, a supplier wrote: \u201cHello, here is the CE certificate you requested\u201d. And after a hospital had asked for proper documents, a seller replied: \u201cI understand your concerns, I have read about masks with substandard quality\u2026 The CE mark and the test report is of course the ultimate assurance you can get that the product fulfils the requirements. I hereby vow to [you] that this is an FPP2 which fulfils all the requirements for an FFP2 mask \ud83d\ude00.\u201d <\/p>\n<\/div>\n\n\n