The provenance of artwork remains a major challenge for the global art industry. Estimates suggest that up to half of artworks in circulation may involve misattribution or forgery, underscoring the scale of the problem, particularly within the Old Masters market, where incomplete historical records are common.

The Ruffini affair, arguably the most consequential Old Master forgery network in decades, exposed systemic vulnerabilities in art-market provenance checks. It is estimated that at least 25 artworks attributed to major artists, including Frans Hals, El Greco, and Lucas Cranach, circulated through respected dealers and auction houses. Many of these works had clear gaps in provenance, unverifiable documentation, and were supported by inconsistent scientific analysis. For decades, Giuliano Ruffini, a French art collector, successfully deceived prominent art market participants (AMPs), generating an estimated USD 220 million through the sale of forged Old Master paintings.

Beyond its financial scale, the Ruffini case is significant because it illustrates how sophisticated forgeries exploit the art market’s structural reliance on trust, reputation, and expert judgment. Despite the development of compliance-oriented frameworks, including the European Union’s Fifth Anti-Money Laundering Directive, the scandal demonstrates that regulatory progress has not resolved the fundamental weaknesses inherent in provenance assessment. Even established galleries specialising in Old Masters, including the Colnaghi gallery, were affected, underscoring that exposure to risk is not confined to inexperienced or marginal actors. From a due diligence perspective, the Ruffini affair demonstrates how fundamental failures arose from the normalisation of provenance gaps, an overreliance on fragmented and inconclusive expert opinion, and the treatment of red flags as isolated anomalies rather than interconnected indicators of systemic risk.

At the core of the Ruffini affair was the uncritical acceptance of undocumented or weakly substantiated provenance claims. Investigative journalist Vincent Noce, who examined the case in detail, observed that “the most surprising thing is the manner in which museums, gallerists, dealers didn’t try to discover the history of the canvases,” instead allowing themselves to be persuaded by stylistic quality and expert endorsement, emphasising the “great negligence” of AMPs that allowed these forgeries to enter and circulate within the art market. Ruffini’s assertions that certain artworks originated from a previously unknown private collection belonging to André Borie, the father of his former partner, or were previously unrecorded missing pieces, were accepted with minimal challenge despite the absence of any documentation supporting the existence of such a collection.

From a due diligence perspective, the failure was not merely the presence of provenance gaps, but the way in which such gaps were treated as inconveniences rather than indicators of heightened risk. The absence of ownership records, export documentation, or prior transaction history should have triggered enhanced scrutiny. Instead, gaps were normalised within a market accustomed to incomplete historical archives. This tolerance reflects a process of institutional risk desensitisation; when undocumented provenance becomes routine, it ceases to function as a warning signal, allowing forged works to be validated and monetised.

Compounding provenance weaknesses is the art market’s increasing dependence on expert opinion in an environment where experts are progressively unwilling to provide definitive assessments. Over the past two decades, litigation against authenticators has led many specialists to decline issuing opinions or to disband authentication committees entirely, citing legal and reputational risk. This reluctance has created an evidentiary vacuum that sophisticated forgers can exploit.

In the Ruffini affair, the problem was not the absence of expert involvement but the fragmentation and inconclusiveness of connoisseurship. Even where experts did provide assessments, the market’s reliance on their opinions, despite fragmentation and inconclusiveness, exacerbated the risk, as AMPs often treated these partial evaluations as definitive judgments. A prominent example is the Ruffini-linked painting titled ‘Venus with a Veil’, supposedly by Lucas Cranach, that was originally sold by the major auction house Sotheby’s in 2012 for USD 842,500. It was evaluated on seven occasions, two experts supported the attribution, four issued inconclusive findings, and one identified it as a forgery. Despite this inconsistency, the artwork continued to circulate within the market. Expert assessments were treated as definitive validations rather than probabilistic judgments requiring corroboration through documentation and scientific evidence.

This overconfidence in connoisseurship is particularly problematic when provenance documentation is weak or absent. Stylistic analysis, by its nature, involves subjective interpretation and cannot compensate for missing ownership records. Ruffini himself emphasised this ambiguity, stating “I am a collector, not an expert,” and attributing authenticity claims to third parties. Similar dynamics were exploited by the English forger Eric Hebborn, whose activities prompted Gareth Fletcher, Director of Art and Technology at Sotheby’s Institute of Art, to contend that Hebborn’s forgeries were “a reaction to the art world’s tendency to value expert opinion over scientific analysis.” The impact of attribution and provenance failures on the art market is reflected in Sotheby’s acquisition of Orion Analytical, a specialised materials analysis and consulting firm, as its in-house analysis provider, illustrating efforts to centralise scientific verification. However, the concentration of such capabilities within individual institutions also raises questions about access and standardisation across the market.

Another critical due diligence failure exposed by the Ruffini case was the siloed evaluation of red flags. Importantly, the verification of Ruffini-linked artworks was conducted by a multitude of different AMPs, each assessing different paintings at different times, meaning that no single participant had a complete view of the emerging pattern. Whilst scientific tests and art expert opinions identified anomalies such as modern materials and pigment inconsistencies, the lack of corroboration of scientific evidence, and the absence of a centralised forensic view, resulted in limited visibility and enabled ambiguity.

As a result, red flags were interpreted in isolation rather than as interlinked provenance vulnerabilities. It was only when several forgeries were connected to Ruffini did other collectors verify artworks linked to him and subject them to more rigorous provenance measures. For example, following announcements that a painting of Saint Jerome and a portrait thought to have been by Frans Hals were declared as fakes, other paintings, including ‘David with the Head of Goliath’ by Orazio Gentileschi, were subjected to further provenance evaluations. This sequence highlights a central lesson on due diligence, namely that red flags must be assessed collectively through cross-transactional risk mapping, and counterparty identity must be integrated into provenance assessments to enable effective pattern recognition.

The Ruffini affair demonstrates that the most significant vulnerabilities in the art market arise not from the technical sophistication of forgeries but from limitations in verification practices. These include the tolerance of provenance gaps, the overreliance on fragmented expert opinion, and the failure to assess red flags collectively across multiple works and transactions. Effective provenance due diligence must therefore be centralised, multidisciplinary, and analytically integrated.

Comprehensive approaches to mitigating these risks include tracing ownership chains to resolve gaps or inconsistencies, analysing prior auction and gallery transactions to detect patterns or anomalies, investigating potential links to known forgery networks, and screening artworks against stolen or looted art databases. By ensuring transparency through such rigorous provenance research, the integrity of art-market transactions is strengthened, providing greater confidence to both buyers and collectors. Equally important is the integration of counterparty analysis, ensuring that the history and reputation of collectors, dealers, and intermediaries inform provenance assessments. By treating expert opinions as probabilistic inputs rather than definitive conclusions, and by aggregating risk indicators across artworks and actors, AMPs can significantly reduce exposure to financial and reputational harm.

Ruffini currently awaits trial in France on several charges including organized fraud and money laundering. The consequences of the Ruffini scandal continue to shape market practice. As commentators have highlighted, the affair has contributed to a perception of auction houses as de facto arbiters of authenticity, highlighting the concentration of power and responsibility within a small number of institutions. More broadly, the case underscores that transparency, documentation, and analytical integration remain the most effective safeguards against forgery-related risk. For market participants, the Ruffini affair serves as a compelling reminder that provenance due diligence is not a formal exercise but a critical risk-management function essential to the integrity of art-market transactions.