The case, explained

PNRR Fraud: Seizure for Non-Existent Credits and Corporate Liability

7 min read · Updated September 2026 · Editorial oversight: Avv. Federico Papa

Investigations into PNRR frauds mark a turning point in strategies for combating financial crimes related to the National Recovery and Resilience Plan. The progress of investigations into complex systems of fictitious tax credits has led to massive preventive seizures. Unlike previous cases involving the administrative revocation of funds for delays or environmental violations (DNSH), this intervention focuses on criminal liability and the administrative liability of the entities involved. The matter highlights the vulnerability of companies that, in their rush to access the benefits of the so-called Transition 4.0, fail to implement adequate internal control measures. Through the reconstruction of the real case and the support of a didactic twin case, we will analyze how the lack of organizational models under Legislative Decree 231/2001 can transform reckless corporate management into a judicial and financial catastrophe, involving imprisonment and disqualification from business activities.

In brief

This article analyzes a PNRR fraud concerning tax credits for Training 4.0. With a massive seizure and investigations for aggravated fraud, the focus shifts to the liability of entities under Legislative Decree 231/2001. Unlike administrative revocations for delays, here the criminal profile of creating false documents and the need for suitable organizational models to prevent financial and interdictory sanctions that can jeopardize business continuity emerges.

  1. The fact

    Investigating authorities executed a comprehensive preventive seizure decree aimed at confiscation. The operation targets a network of consulting firms and beneficiary companies that allegedly unduly utilized tax credits linked to Training 4.0 funded under the PNRR. The investigation points to the creation of a completely fictitious reporting system. The mechanism described by the prosecution involved preparing falsified attendance registers, pre-filled evaluation tests, and attendance certificates for courses never delivered, sometimes attributed to workers who were unaware or engaged in ordinary duties. Currently, the case is in the preliminary investigation phase, with the legal representatives and companies registered for corporate administrative liability. The presumption of innocence applies to all suspects until a final judgment is rendered.

  2. The rules at play

    The legal center of gravity of the matter lies in three regulatory pillars:

    1. Aggravated fraud to obtain public funds (Art. 640-bis of the Italian Criminal Code), which punishes with imprisonment from two to seven years anyone who unduly obtains contributions or financing from the State or the European Union through artifices or deceptions, such as false training documentation.
    2. Administrative liability of entities (Legislative Decree 231/2001), where Art. 24 provides for financial and interdictory sanctions for the company if the crime of fraud is committed in its interest or advantage by senior executives or subordinates.
    3. Organization and management models (Art. 6 of Legislative Decree 231/2001), under which the entity can be exempted from liability only if it demonstrates that it had adopted and effectively implemented a model suitable for preventing crimes of the same nature prior to the offense.
  3. What the case law says

    The case law of the Supreme Court has clarified that in cases involving PNRR contributions, fraud harms not only public financial interests but also the proper implementation of recovery plans agreed upon at the supranational level. Furthermore, judicial consensus has established that the profit from the crime confiscable from the entity pursuant to Legislative Decree 231/2001 coincides with the full amount of the tax credit unduly received and offset, as an economic advantage directly deriving from the offense. Regarding the suitability of models, the courts emphasize that the mere existence of a paper document is insufficient; the model must be operational, providing for information flows to the Supervisory Body and verification procedures on the actual execution of consultancy services. The so-called organizational fault is triggered precisely when the entity cannot demonstrate rigorous oversight over the truthfulness of certifications issued by external training providers.

  4. Analysis drafted and verified with edit.legal

    To verify the provisions cited in this article, we used edit.legal. Test our legal AI on official sources and apply it to your own matters.

    Try edit.legal AI
  5. What it teaches professionals

    1. Substance verification: formal compliance of documents (tests, registers, certificates) is insufficient without proof that training services were actually rendered.
    2. Consultant due diligence: companies must rigorously assess the reliability of external advisors offering turnkey PNRR credit schemes, continuously monitoring teaching activities.
    3. Implementation of the 231 Model: for SMEs, adopting a 231 Model tailored to offenses against the Public Administration is no longer an optional cost, but an essential defense to safeguard corporate assets against preventive seizures.
    4. Flow traceability: any tax credit offsetting stemming from subsidized finance must be supported by a robust evidentiary file readily accessible to auditing authorities.

References: Articolo 640-bis Codice PenaleD.Lgs. 231/2001Articolo 316-ter Codice Penale

Avv. Federico Papa
Editorial oversight: Avv. Federico Papa·ICAMContent drafted with AI support and subject to editorial source checks. Despite these controls, inaccuracies may remain: reports and rectification requests are welcome. Report a correction

Frequently asked questions

What does a company without a 231 Model risk if involved in PNRR fraud?

It risks preventive seizure of bank accounts up to the amount of the criminal profit, heavy financial penalties, and disqualification from obtaining further public grants or contracting with the Public Administration.

Is it possible to lift the seizure if the company proves good faith?

Individual good faith is insufficient if the entity derived a benefit from the crime; it is necessary to establish the suitability of the organizational model or the absence of a direct economic benefit for the entity.

Does 231 liability also apply to small and medium-sized enterprises?

Yes, Legislative Decree 231/2001 sets no size thresholds: even small enterprises incur administrative liability for crimes committed in their interest by corporate officers.

Verified legal research and drafting with edit.legal

Legal research and drafting with citations checked against official databases. edit.legal is free to try, no credit card.

Try edit.legal for free