Wine Theft Duo: Wigs, Coat & Fake Bottles in $40K Heist

Clarke County, Virginia – Authorities are continuing their investigation into a sophisticated wine theft at L’Auberge Provençale Inn & Restaurant, a renowned establishment located 60 miles west of Washington, D.C. While one suspect remains in custody, the other is believed to have fled the country.

The incident, which occurred on November 19, 2025, involved the theft of several bottles of Domaine de la Romanée-Conti, among the world’s most expensive and sought-after wines. The stolen bottles were reportedly replaced with fakes, discovered by the restaurant’s sommelier, Christian Borel, who noticed discrepancies in the bottle caps and overall quality.

Natali Ray, 56, of Kent, England, was apprehended at the scene after being detained by restaurant staff. She has been charged with conspiracy to commit grand larceny, grand larceny, and defrauding an innkeeper. Ray is scheduled to appear in Clarke County District Court on an unspecified date for a preliminary hearing on the original charges, but has reportedly not cooperated with investigators, according to the Clarke County Sheriff’s Office.

Her alleged accomplice, identified as Serbian national Nikola Krndija, 57, remains at large. Investigators believe Krndija departed the United States on November 20, 2025, flying from John F. Kennedy International Airport in New York City to Vienna, Austria. Authorities suspect the duo may be responsible for a series of similar wine thefts across the country.

The Clarke County Sheriff’s Office has issued three felony warrants for Krndija, including charges of felony defrauding an innkeeper, grand larceny, and conspiracy to commit grand larceny. Additional charges of conspiracy to possess burglary tools and possession of burglary tools have also been filed, according to Clarke County Commonwealth’s lawyer Matthew Bass.

What initially appeared as a straightforward theft has taken a peculiar turn with the classification of certain items as “burglarious tools” under Virginia law. These tools, according to Bass, include not only disguises – specifically wigs and fake facial hair worn by Krndija – but also the long coat used to conceal the stolen wine. Virginia code defines an “outfit” as potentially constituting part of burglarious tools if possessed with the intent to commit burglary, robbery, or larceny.

The investigation revealed that Krndija and Ray posed as event planners, gaining access to the wine cellar under the pretense of scouting a location for a gala dinner. While Ray engaged sommelier Borel in conversation, Krndija allegedly concealed six bottles of pinot noir, including one valued at approximately $40,000, within his coat.

Borel alerted staff after noticing the suspect’s actions, shouting “Stop them! They are stealing Romanée-Conti!” as the pair attempted to leave the restaurant. The swift response led to Ray’s immediate detention, while Krndija managed to escape in a rented SUV.

Prosecutors are also examining the decoy bottles Krndija allegedly brought into the restaurant, which Borel discovered after the theft. These bottles, featuring screw caps, thin walls, and counterfeit labels, were seemingly intended to delay the discovery of the missing, authentic bottles.

Bass indicated that these decoy bottles may also be included in the list of burglary tools presented as evidence. “The bottles, alongside the coat and disguises, will all be part of the commonwealth’s case against them,” he stated.

While authorities acknowledge the difficulty of extraditing Krndija from Serbia, the investigation remains ongoing. “It’s hard to believe a tactical team would track him down in Serbia,” Bass conceded, “but we’ll see.”

L’Auberge Provençale has since increased its security measures in response to the incident. Anyone with information regarding the whereabouts of Nikola Krndija is urged to contact the Clarke County Sheriff’s Office at 540-955-1234.