On 29 January, it was reported that a further suspect, a man from Algeria, was arrested due to property offence and resistance against enforcement officers. Criminal investigations in Cologne were conducted against 44 people, North Africans by majority, ten of whom were in investigative custody as of 29 January.[117] The number of identified suspects in Cologne was 73 by 15 February, with 15 of them being in investigative custody.[4][37] A large majority of the suspects were from Algeria and Morocco. 30 Moroccans, 27 Algerians, and three Tunisians were among the suspects, along with a Libyan, an Iranian, four Iraqis, a Montenegrin, three Syrians, and three Germans.[4] By 17 March, the number of suspects had again risen to 120, 14 of whom were in investigative custody.[5] By 6 April, the number of suspects in Cologne was 153, 149 of whom were non-Germans; 103 of the 153 suspects were from Morocco or Algeria. Sixty-eight persons were asylum seekers; 18 were residing in Germany illegally, and the legal status of 47 persons was unclear. Four persons were underage, unaccompanied refugees.[7]
On 24 February, a first suspect, a 23-year-old Moroccan was sentenced to a penalty of six months on probation for stealing a cellphone from a woman as she was taking a picture of the Cologne Cathedral on New Year's Eve and also for carrying a small amount of drugs. Criminal proceedings were also taking place against two other men from Tunisia and Algeria.[118]
Another suspect in Cologne, identified only as Mehdi E.-B., a 19-year-old asylum seeker from Morocco, was recognized by victims, including a female student, in a TV report of Spiegel TV. Along with seven alleged accomplices, he was accused of sexual assaulting the victims out of a group. When the police attempted to detain the men, conducting raids in Cologne, Hamm, Troisdorf, and Bornheim on 18 February, they had already fled. Mehdi E.-B. was reported to have lived under a false identity at first, according to witnesses. The janitor of the migrant's residence said he had "stolen like a raven". In one residence, 20 cellphones were found, one of which had been stolen on New Year's Eve. Mehdi E.-B. was already sentenced for stealing a cellphone together with a man identified only as Otman K. in January 2016. Otman K. was suspected of being a member of the same group of accused sexual assailants as Mehdi E.-B.[119]
On 8 March, for the first time, Cologne police published photos of wanted men who are suspected in the New Year's Eve assaults. The photos were partly taken from victims who managed to take pictures of their assailants. In total, the police evaluated 1,100 hours of video footage taken from CCTV cameras and witnesses. A police spokesman explained that the sophisticated work that it took to link the men in the footage to specific crimes was a reason behind the late publishing. The next day, two of the wanted men were put under investigative custody. A 26-year-old man was arrested in Kerpen, while a 31-year-old man from Algeria turned himself in to the police in Hamm. On March 9, police released further photos, one showing a man firing a weapon into the air; officials clarified that no one was injured by the gunshot.[120]
On 28 April, a 19-year-old Moroccan and a 24-year-old person were arrested in northern Switzerland. The Moroccan was one of the suspects in the Cologne assaults, and had applied for asylum in Switzerland.[121][122]
On 25 November, it was reported that in 369 of the 509 crime cases, which were sexually motivated, no perpetrators could be identified. The prosecutor's office could initiate 58 criminal investigations against 83 persons. Only 6 were convicted so far. The highest sentence was 1 year and 9 month due to sexual assault and robbery. 52 of the accused men had to be acquitted due to lack of unanimous identification. The investigators failed to convict more of the perpetrators because the vicinity of the station was "dark and overcrowded" and the CCTV recordings were of "miserable" quality.[2]