George M.R. Zlati

Partner

Contact:

Phone:

+40 748 149 840

Email:

george.zlati@zic.legal

Social:

Biography George Zlati

Criminal-defence lawyer based in Cluj-Napoca, practising nationwide (including Bucharest), focused on white-collar (business) crime and cybercrime; holder of a PhD in law and author of Romania’s first treatise on cybercrime. I represent individuals and companies, including in cross-border cases, before the prosecution services (DNA, DIICOT, EPPO and non-specialised prosecutors) and the courts, up to the High Court of Cassation and Justice.

George Zlati is a criminal-defence lawyer with over 14 years at the Bar, specialising in white-collar (business) crime and cybercrime. He is based in Cluj-Napoca but practises throughout the country, including Bucharest, representing both individuals and companies in economic and financial crime cases (tax evasion, money laundering, abuse of office, embezzlement, corruption), in cybercrime (computer fraud, illegal access, computer forgery, fraudulent financial operations), and in disputes involving blockchain and crypto-assets (smart-contract manipulation, deception, fraudulent transactions). Many of his cases have a cross-border dimension.

He holds a PhD in cybercrime from Babeș-Bolyai University in Cluj-Napoca, with a thesis on illegal access to an information system, computer fraud and computer forgery. In 2020 he published Romania’s first Treatise on Cybercrime (Solomon), a work awarded the „Vintilă Dongoroz” prize by the Union of Romanian Jurists.

He lectures at the Faculty of Law and Social Sciences of „1 Decembrie 1918” University in Alba Iulia, teaching special criminal law (undergraduate) and cybercrime (master’s). Since 2023 he is an external trainer at the National Institute of Magistracy (INM), where he contributes to the continuing education of judges and prosecutors in cybercrime.

His work has been cited in several binding decisions of the High Court of Cassation and Justice (ÎCCJ), both in cybercrime matters (computer fraud, illegal access to information systems, computer searches, fake social-media accounts) and on general criminal-law questions, such as the notion of public official.

George is also the founder of Penalmente Relevant — an academic journal (indexed in international databases) and a YouTube channel for criminal-law education.

Recognition

  • „Vintilă Dongoroz” prize – Union of Romanian Jurists, criminal-law section (2020)
  • Work cited in nine binding decisions of the High Court of Cassation and Justice (ÎCCJ)
  • Drafted and raised the constitutional challenge upheld by Constitutional Court Decision no. 233/2021 – reasoning of criminal judgments at the time of pronouncement
  • Raised the constitutional challenge upheld by Constitutional Court Decision no. 87/2019 – incompatibility of the specialist who performs technical findings in criminal proceedings (art. 174 Criminal Procedure Code)
  • Trainer of magistrates at the INM, since 2023
  • Eurojust expert under the Euromed Justice Programme (2022)
  • Expert on the WiSKoS project – Max Planck Institute, Freiburg (2015)
  • About 270 academic citations – Google Scholar

Practice areas

Cybercrime

PhD in law with a thesis in cybercrime and author of Romania’s first treatise in the field. Defence in cases of illegal access to information systems, computer forgery, computer fraud, fraudulent financial operations, phishing and ransomware.

White-collar / business crime

Tax evasion (Law 241/2005), money laundering (art. 49 of Law 129/2019), abuse of office (art. 297 Criminal Code), embezzlement (art. 295 Criminal Code), corruption, fraud and deception. I act for both individuals and companies — the criminal liability of the legal person (art. 135 Criminal Code) does not replace the manager’s own. With 14 years in economic crime, including cross-border investigations and proceedings before the DNA, DIICOT, EPPO and non-specialised prosecutors, and before the courts up to the High Court of Cassation and Justice. Working daily with both financial and digital evidence, I also take the cases where financial crime is also a technical problem: money laundering through crypto-assets, online fraud.

Crypto & MiCA compliance

Criminal cases involving crypto fraud, unregulated trading platforms, crypto-asset Ponzi schemes and money laundering through crypto-assets. I also advise crypto-asset exchange operators and token issuers on MiCA compliance.

Cybersecurity & corporate compliance

Advice for companies on NIS2, GDPR and the criminal liability of legal persons for security incidents. I prepare incident-response procedures and assist with notifications to the Romanian authorities (ANSPDCP, DNSC) – before an investigation arises, not after.

Extradition & European Arrest Warrant

Extradition and European Arrest Warrant cases before the courts of appeal and the High Court. Beyond Romanian procedure, I know the mechanisms of international judicial cooperation. I file challenges, requests to replace the arrest measure and substantive defences: fundamental rights, the rule of specialty, double criminality. I have served as a national expert on extradition procedure from the United Kingdom.

AI & digital evidence

Defence in cases involving deepfakes, autonomous systems, AI-generated illegal content and the AI Act. I teach the same subjects – electronic evidence and artificial intelligence – to judges and prosecutors at the National Institute of Magistracy (INM) and the Academy of European Law (ERA).

Frequently asked questions

What should I do if I’m investigated for a cybercrime offence?

Do not give any statement before you speak to a lawyer — that is the first rule. The investigating authorities can question you, search your phone and laptop, and seize your devices. I assist you from the first questioning, challenge the measures taken, and make sure your procedural rights are observed throughout the case.

What penalties apply to cybercrime in Romania?

Illegal access to an information system (art. 360 Criminal Code) is punishable, in its basic form, by 3 months to 3 years’ imprisonment or a fine; in aggravated forms – access to obtain data, or to a system protected by security measures – the penalty reaches up to 5 and 7 years respectively. Computer fraud (art. 249) carries 2 to 7 years; computer forgery (art. 325), 1 to 5 years. If the act causes particularly serious consequences (damage over 2,000,000 lei), the special maximum increases by half.

What should I do if I’m summoned by DNA or DIICOT as a suspect or witness?

At DNA or DIICOT the rule is the same: not a word without a lawyer present. You have the right to silence, the right not to incriminate yourself, and the right to legal assistance from the first investigative act — questioning, confrontations, searches. I step in from the first stage, check the lawfulness of the investigative acts, and prepare the defence before your procedural position hardens.

What penalty do I risk for tax evasion?

Tax evasion (art. 9 of Law 241/2005) is punishable, following the amendment by Law 126/2024, by 3 to 10 years’ imprisonment in its basic form. The limits rise where the damage exceeds EUR 500,000 (6-13 years) or EUR 1,000,000 (8-15 years). Conversely, if the damage is fully repaid before the first court hearing, the penalty limits are halved, and below certain thresholds a fine may apply. The right strategy on the tax side and on repaying the damage can change the outcome entirely.

What is money laundering and what is the penalty?

Money laundering (art. 49 of Law 129/2019) is punishable by 3 to 10 years’ imprisonment. The law covers three forms: transferring or converting property to hide its illicit origin; concealing its true nature or source; and acquiring or using property knowing it derives from crime. In practice the laundering charge is often added on top of a predicate offence (tax evasion, fraud, corruption), so a defence on the autonomy of the act and on intent is essential.

Can the company be prosecuted, not only the manager?

Yes. A legal person is criminally liable (art. 135 Criminal Code) for offences committed in carrying out its activity or in its interest or on its behalf. This liability does not exclude that of the individual who contributed to the act, so in an economic case the company and the manager can be investigated at the same time. I assist both the company and the people involved, including on criminal compliance and internal investigations.

A freezing order (sechestru) has been placed on my accounts and assets. What can I do?

Interim measures (the freezing order under the Criminal Procedure Code) can be challenged before the court, and their scope must be proportionate to the alleged damage. Acting quickly matters, especially where extended confiscation is at stake (art. 112^1 Criminal Code), which allows the confiscation of assets beyond those directly linked to the offence on trial. I check the basis and proportionality of the measure and file a challenge wherever there is room.

When does the European Public Prosecutor’s Office (EPPO) investigate me?

The EPPO investigates offences affecting the European Union’s financial interests: EU-funds fraud, large-scale cross-border VAT fraud, and corruption linked to EU money. The procedure follows Romanian criminal-procedure rules, but with a supranational prosecutor. I have experience in cases with a cross-border dimension and in international judicial cooperation, including EPPO proceedings.

I was the victim of a crypto scam. Can I recover the money?

The first priority is filing the criminal complaint and requesting interim measures over the digital assets. The sooner you act, the better the chances of freezing them. On-chain traceability helps, but actual recovery depends on the platform used, the jurisdiction, and the cooperation of the authorities. I have handled cases of this kind and guide you through the whole process — from the complaint and interim measures to joining as a civil party. No lawyer can guarantee the recovery of funds, but the right procedural steps, taken early, maximise your chances.

What is a computer search and what are my rights?

A computer search means accessing and copying the data on your devices: phone, laptop, tablet. It requires a warrant issued by a judge. The ÎCCJ clarified the conditions for it in preliminary ruling no. 56/2023, in which my work was cited. You have the right to your lawyer’s presence, to challenge the warrant, and to verify the integrity of the forensic copies.

Someone accessed my phone or Facebook account without permission. What can I do?

Accessing a phone, social-media accounts or email without authorisation is the offence of illegal access to an information system (art. 360 Criminal Code), punishable in its basic form by 3 months to 3 years’ imprisonment or a fine, and more severely in aggravated forms (up to 5-7 years). File a criminal complaint as soon as possible. Digital evidence (access logs, login notifications, IP addresses) is essential and must be preserved immediately.

How much does a cybercrime lawyer cost?

The fee depends on the procedural stage (investigation, preliminary chamber, trial) and the workload. We set the cost from the first discussion, based on your specific situation. Write to george.zlati@zic.legal or call +40 748 149 840 and I will tell you directly what is involved.

Can I be convicted for using a VPN or Tor?

No. Using a VPN or the Tor network is not an offence. It becomes relevant only if these tools are used to commit an act punishable under criminal law. In practice prosecutors sometimes invoke VPN use as a sign of guilt, but mere use does not trigger criminal liability, and an experienced lawyer can counter that argument in court.

What is MiCA compliance and why does it matter for my business?

The MiCA Regulation (Markets in Crypto-Assets) sets EU rules for issuing and trading crypto-assets. If you operate an exchange, issue tokens or provide crypto-asset services, you must be MiCA-compliant to operate lawfully in the EU. I teach blockchain and crypto regulation at ERA and assist operators with licensing and compliance, so I can quickly assess your obligations.

Can I be held criminally liable for a fake social-media account?

Yes. The ÎCCJ held in preliminary ruling no. 4/2021 that opening and using a social-media account under another person’s identity may constitute computer forgery (art. 325 Criminal Code), punishable by 1 to 5 years’ imprisonment. My work was cited in that ruling.

Published books

Selected articles

Citations in binding ÎCCJ decisions

His work has also been cited by the courts of appeal of Cluj, Bucharest, Alba Iulia, Timișoara, Suceava, Iași and Craiova, and by several tribunals.

In the media

Cited as an expert

Interviews

Press mentions

Penalmente Relevant

Penalmente Relevant is a criminal-law education project founded by George Zlati: an academic journal indexed in international databases (HeinOnline, CEEOL, DOAJ — ISSN 2601-2863) and a YouTube channel with interviews, analyses and debates.

International conferences (selection)

National conferences (selection)

  • 27-28 October 2023 — “Risks in the use of blockchain technology”, International conference of the Bucharest Chamber of Notaries
  • 23 June 2023 — “Controversies in cybercrime”, Cyberlaw Conference 5th ed., Juridice.ro
  • 8 June 2023 — “Cybercrime in Romania. Past and future controversies”, Faculty of Law, West University of Timișoara
  • 29 October 2022 — “Seizing Crypto-assets in Criminal Proceedings”, Faculty of Law, Alexandru Ioan Cuza University of Iași
  • 2022 — “Blockchain identification”, Cyberlaw Conference 4th ed., Juridice.ro
  • February 2024 — “Cybercrime risks in the business environment”, Wolters Kluwer webinar
  • May 2022 — “Freezing virtual currencies in criminal proceedings”, Wolters Kluwer webinar
  • March 2021 — “Cybercrime. Controversial topics”, Wolters Kluwer webinar

Professional affiliations

Academic profile

Practice Areas:

Cybercrime

White-collar crime

Crypto & MiCA Compliance

Cybersecurity

Extraditions & EAW

Articles