GENERAL     REPORT     ON     EUROPOL ACTIVITIES
© European Police Office, 2014
Reproduction is authorised provided the source is acknowledged.
This publication and more information on Europol are available on the Internet:
Website: www.europol.europa.eu
Facebook: www.facebook.com/Europol
Twitter: @Europol_EU
YouTube: www.youtube.com/EUROPOLtube
QL-AB-14-001-EN-N ISBN: 978-92-95078-92-5 ISSN: 1681-1569 DOI: 10.2813/15925
EUROPEAN   LAW  ENFORCEMENT AGENCY
REVIEW 2013
GENERAL     REPORT     ON     EUROPOL ACTIVITIES
4  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
CONTENTS
CONTENTS 5
6  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
FOREWORD
Y
ou have in your hands the Europol review 2013 which is an overview of Europol's work in the past year showing the main developments which have affected the agency1.
The year 2013 reflected a further steady increase in the number of tasks carried out by Europol. The European Cybercrime Centre at Europol was officially opened in January 2013 and fully assumed its expanded tasks, resulting immediately in a rapid growth of supported international investigations.
Altogether, Europol supported more than 18 000 cases. The main ones are presented in detail in this publication. This is 15% more than last year and an increase of 120% compared to 2005. Europol also increased the quality and quantity of the data stored in its databases. This has increased trust in Europol due to Europol's proven track record in adding value to national investigations. As a result, Europol analysts are capable of generating more links which in turn leads to more successes in dismantling organised criminal networks. Substantial growth in criminal data delivered to Europol over recent years, achieved by Europol offering modern automatic data loading solutions but also due to increased efforts on the part of Member States' services, is also demonstrated in this publication.
Not only the quantity of work but also the quality of services has increased significantly. In 2013 Europol produced a new EU serious and organised crime threat assessment (the SOCTA), the most detailed study of its kind ever
undertaken in the European law enforcement community. This flagship Europol product directly influences law enforcement priorities across the European Union which in turn increases the effectiveness of our common fight against organised crime.
Europol's effort to pool the crucial law enforcement expertise across Europe resulted in creating the experts' platforms which currently have more than 4000 users operating in 33 online communities. These experts use safe channels of communication created by Europol to exchange best practices, know how and other professional information.
Europol also stimulates the exchange of ideas at the highest levels by organising an annual meeting of European police chiefs attracting around 200 high level law enforcement officers every year. In 2013, with support from the Lithuanian Police, the participants proposed a series of solutions in four areas: modern technology, witness protection, police leadership and data protection.
Europol maintains its central role in European law enforcement cooperation. We focus our efforts on pioneering new ideas, offering unique networking possibilities, and providing cutting-edge technology and state-of-the-art capabilities and skills to the Member States' law enforcement services.
I encourage you to explore this report further and wish you an enjoyable read!
The presentation of the Europol review — General report on Europol activities is done in accordance with Article 37(10) c of the Europol Council Decision (Council Decision 2009/371/ JHA of 6 April 2009 establishing the European Police Office). The report is submitted to the Council of the European Union for endorsement and the Council forwards it to the European Parliament for information.
Rob Wainwright Director of Europol
1. MISSION AND GOALS
1. MISSION AND GOALS 9
MAKING EUROPE SAFER - MISSION
Large-scale criminal and terrorist networks pose a significant threat to the internal security of the European Union (EU) and to the safety and livelihood of its people. Europol helps to make Europe a safer place for the benefit of all EU citizens. As the European Union's law enforcement agency, its mission is to support the European Union Member States in preventing and combating all forms of serious international crime and terrorism.
HOW - VISION, OBJECTIVES, PRIORITIES
The Europol Strategy spells out its strategic objectives and way of achieving them. Europol's vision is to contribute to a safer Europe by providing the best possible support to law enforcement authorities in EU Member States.
Europol achieves this by delivering a unique set of operational services for the European Union, developing as the principal:
Europol is guided by the European Union Internal Security Strategy in which it plays a pivotal role. The document shapes the European Union's long-term policy in the field of law enforcement cooperation. It identifies five security-related objectives, three of which are covered by the mandate of Europol:
Disruption of criminal networks
Security of cyberspace
Prevention of terrorism
SUPPORT CENTRE FOR LAW
ENFORCEMENT OPERATIONS
CRIMINAL INFORMATION HUB
J
10  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
Furthermore, Europol promotes intelligence-led policing which is one of the key concepts of modern law enforcement. The concept lies at the heart of the EU policy cycle for organised and serious international crime. The policy cycle is anchored around EMPACT, which stands for the European Multidisciplinary Platform against Criminal Threats. There have been eight EMPACT projects in the first cycle. The primary premise behind the EMPACT is an international teamwork approach in responding to security threats in the European Union. The first two-year cycle was finalised in 2013. It established procedures, clarified roles and responsibilities and ensured coherence in EU law enforcement's efforts to combat serious and organised international crime. You can learn more about the eight EMPACT projects by using the QR code below.
In parallel with implementing the first cycle, the policy cycle for 2014-2017 was developed. Europol contributed significantly to this process, starting with the preparation of the 2013 European Union serious and organised crime threat assessment (SOCTA), the first of its kind.
Based on an in-depth analysis, the SOCTA 2013 identified a number of key areas which will require concerted action by EU Member States and others. The report informed discussions in the Council of Ministers of the European Union, which decided on a set of nine priorities for the fight against serious and organised crime during the period 2014-2017. These priorities are focused on the following crime areas:
The nine new priorities are the basis for prioritised operational coordination in the European Union. In 2013, to support the planning of operational action, a detailed assessment was drafted for each of the priorities.
Facilitation of illegal immigration
Trafficking in human beings
Excise fraud and missing trader intra community fraud
Cocaine and heroin trafficking
Organised property crime
Producing and distributing counterfeit goods with an impact on health and safety
Production and trafficking of synthetic drugs
Cybercrime
Illicit trafficking in firearms
RESOURCES AND VALUES
Europol uses its unique information capabilities and the expertise of approximately 850 personnel, including 100 analysts and 160 Europol liaison officers, to identify and track the most dangerous criminal and terrorist networks in Europe. Europol seeks to maintain a workforce that is made up of people who are highly qualified, motivated, committed to the vision and values of Europol, and reflecting the diversity of the European Union.
In line with its mission and vision, Europol staff attaches importance to the following five values which best characterise the culture of Europol and the work of its people:
Effectiveness
Accountability Teamwork
Europol is financed from the EU community budget. The Council of the European Union and the European Parliament decide Europol's budget, based on proposals from the European Commission and Europol's Management Board. In 2013 the Europol budget was EUR 82.5 million.
1. MISSION AND GOALS 11
HEADQUARTERS
The Hague, Netherlands
STAFF
850 personnel at headquarters Including 160 liaison officers
BUDGET
EUR 82.5 million
SERVICING
28 EU Member States
(through a network of dedicated Europol National Units)
503 million EU citizens
SUPPORTING
18 300 cross-border
law enforcement cases
2. HOW EUROPOL
WORKS
— -   —    HI -i!
2. HOW EUROPOL WORKS 13
s
upporting Member States' investigations, identifying, tracking down and disrupting international criminal networks and terrorist activities are the primary tasks of Europol.
Europol strives for the best operational results by providing a unique set of high quality services and products that respond to Member States' needs. The operational services and products are delivered in the three main areas, as defined by the needs of Europol's stakeholders and reiterated in the Europol Strategy:
EUROPOL
ORGANISATION CHART
Governance Department
¥
Capabilities Department
r
Operations Department
Corporate ® Affairs Bureau
k»—0 Security
© ICT
© Administration
Corporate Services
Managment Board Functions
0
Management Board Secretariat
'•; *y Data Protection j V Office
0
Internal Audit Function
r
© Info Hub
©
©
©
Serious
Organised Crime
European Cybercrime Centre
Counter Terrorism
Liaison Bureaux
14  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
SUPPORTING LAW ENFORCEMENT OPERATIONS
Europol supports European Union Member States' investigations and operational activities by means of: ■ Coordinating and financing operational meetings
■ Operational rooms at Europol headquarters are used for major cross-border investigations
■ In 2013, 100 law enforcement officers from more than 20 countries have coordinated major cross-border operations from there
Strategic analysis enabling informed decision-making at tactical and strategic levels concerning the combating and prevention of serious and organised crime and terrorism
■ Financing operational meetings Operational analysis
■ Possible thanks to a range of interoperable communications, information storage and analytical capabilities maintained at Europol
■ The Europol mobile office is a powerful and secure solution that allows Europol officers access to information retrieval and analysis tools from a remote location, using the highest security standards.
■ Last year Europol deployed the mobile office 90 times to support ongoing Member States' investigations on the spot
■ The European Union serious and organised crime threat assessment (SOCTA) is the most important strategic analysis document produced by Europol. On its basis, the Council of Ministers of the EU define their priorities and recommendations for the fight against organised crime in Europe. The SOCTA has taken on added significance since the creation and implementation of the EU policy cycle for serious international and organised crime. This policy cycle identifies the SOCTA as the basis for the identification of EU crime priorities and, thereafter, a coherent EU response to address those priorities.
■ In 2013, Europol produced its seventh annual EU terrorism situation and trend report (TE-SAT). Since 2007, the TE-SAT has been informing the European Parliament and the Council on the phenomenon of terrorism in the EU from a law enforcement perspective. The report aims to provide law enforcement and intelligence officials, the European Parliament, policymakers and the general public with facts and figures regarding terrorism in the EU, while also seeking to identify trends in the development of terrorism.
■ Europol's scanning, analysis, and notification (SCAN) team provides national competent authorities and policy-makers at national and EU level with early warning notifications on new organised crime threats. The team delivers intelligence-based SCAN threat notices and expertise-based SCAN early warning briefs on potential threats associated, for instance, with the use of new resources by organised crime groups. Following its recent reorganisation, the SCAN team now uses innovative tools and monitors all daily incoming intelligence for new threats.
• Within these activities, an Early Warning Community was created, comprised of over 80 strategic analysts and experts in environmental and open sources scanning. The community uses the Europol Platform for Experts and produces a joint scan report providing regular and coordinated early warnings about serious and organised crime threats.
• Additionally, an inter-agency report produced with Interpol is also envisaged to produce warnings on external threats.
2. HOW EUROPOL WORKS
INFORMATION EXCHANGE via SIENA in 2013
18 310 „
new cases were initiated of
(Increase of 15% compared to 2012)
9%
i by Europol and I 0% by third parties
11%
12% 16%
456 598
authorities
were configured in SIENA by t
41501
J
d to d
followed by fraud and swindling (16%) robbery (12%), money laundering (11%) and illegal immigration (9%)
exchanged Monthly average: 38 000 messages
crease of 10% compared to 20
">0 MEMBER
Zo STATES
A 1 thirds
H^parties
(13 third parties connected directly and 29 third parties connected indirectly)
16  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
SIENA - the secure and modern communication tool used for the exchange of operational and strategic information and intelligence among Member States, Europol and Third Parties - IN USE
Online DCA in Online Member State Third Parties
2. HOW EUROPOL WORKS 17
CRIMINAL INFORMATION HUB
Europol collects the most and best possible criminal information available from EU Member States and other partners, deriving maximum value from its analysis and exchange through Europol.
As the European Union's central hub for criminal information and intelligence, Europol operates state-of-the-art, dedicated and secure communication and information storage systems. This enables the exchange of operational information and other criminal data, as well as the storage, analysis and cross-checking of all available criminal intelligence by using:
■ 24/7 operational coordination centre which
■ Constantly handles data exchange between Europol, EU Member States and third parties. All information exchanged with third parties is processed here.
•   More than 300 operational messages a day
Assesses incoming data to be included in the Europol databases.
■ Runs a centralised cross-checking service consisting of a quick cross-check of all data against criminal intelligence gathered in Europol's databases. If there are common elements found (hits), an analytical report is produced, and rapid feedback, highlighting the links, is given to the providing party. This way, new trends and developments in the EU criminal landscape can be identified.
Operational and criminal information exchange by means of
■ Secure Information Exchange Network Application (SIENA) which is a new generation communication tool designed to enable swift, secure and user-friendly exchange of operational and strategic crime-related information and intelligence between Member States, Europol and third parties that have cooperation agreements with Europol.
■ SIENA is interoperable with other systems at Europol, in Member States and other international organisations.
■ Storing and cross-checking of all the pooled data and identification of links:
■ Member States' law enforcement agencies are increasingly interested in sharing data and having access to this Europol tool. The vast majority of data in the EIS is inserted by means of automated data loading systems.
■ The Europol Information System (EIS) stores information about offences, individuals involved and other related criminal data.
For example, in 2013 Finland implemented an automatic data loader solution which inserts objects from the Finnish national crime database. The solution has significantly increased the operational capabilities of the Finnish Police. Only the first upload immediately resulted in 17 cross-border crime checks (with Denmark, Sweden, Estonia and Germany) and 53 potential matches with criminal data available in the Europol databases.
18  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
CONTENTS OF THE EUROPOL INFORMATION SYSTEM, DECEMBER 2013
USAGE
PeLtea/LO
An increase of 47% I compared to 2012
9%
^29% m
10% ^^^^^^^^^
18%
Robbery
NUMBER OF OBJECTS IN E EUROPOL INFORMATION SYSTEM, 2005-2013
2. HOW EUROPOL WORKS 19
■ The Europol Information System can be cross-checked via the so-called Cross Border Crime Check (CBCC) that allows instant identification of possible links upon the uploading of new data into the EIS. All parties involved in such a check are automatically informed by system notifications about possible data synergies. Data from the EIS is also automatically cross-checked with all other Europol databases and open source intelligence.
■ Operation Bad Boys launched by Poland, the UK and Europol, targeting top criminals who pose a significant threat to EU citizens, is an excellent example to show the effectiveness of the EIS. 23 parties currently participate in the initiative and over 30 000 criminals have been prioritised and inserted into the EIS resulting in a large number of cross-matches. In 2013, the Dutch National Police uploaded their 17 000 suspects involved in extremely serious crimes. This immediately triggered over 600 hits with investigations in other EU Member States.
Production of tailored analytical reports and products
lEUR^POL
■ Analysis is the cornerstone of all modern intelligence-led law enforcement activities and is critical to all Europol activities.
The Europol Analysis System is an operational information system hosting data contributed by Europol's stakeholders. The system manages information as well as provides a series of analytical capabilities through a wide range of tools.
■ Analysts employed at Europol use the latest methodologies and techniques to identify missing links in cross-border EU investigations. They work with subject-focused projects and provide information to ongoing operations in EU Member States. This information can often provide a breakthrough for many international investigations.
SONS
000 I
NUMBER OF PERSONS IN THE EUROPOL INFORMATION SYSTEM, 2005-2013
20  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
LAW ENFORCEMENT EXPERTISE
Europol also pools specialised law enforcement expertise and enables the swift exchange of best practices and latest developments. This happens thanks to:
■ Expertise gathered at its headquarters
In all mandated areas
■ In 2013, additionally strengthened by the creation of the European Cybercrime Centre (EC3) at Europol
■ Forensic and technical expertise
■ Specialised laboratories, toolkits and databases are maintained and extended to the Member States to support live investigations
■ Specialised Europol Platform for Experts (EPE)
■ Secure environments for specialists from a variety of law enforcement areas, enabling them to share — within their respective communities — knowledge, best practices and non-personal data on crime
■ In 2013, 33 online communities were open to external users and the number of users doubled, reaching a total of 4,419
■ The EPE was accommodated to meet the requirements of the European Cybercrime Centre created at Europol. SPACE, the Secure Platform for Accredited Cybercrime Experts, was officially launched in 2013. In particular this platform facilitates the work of an expert community dealing with child sexual exploitation and payment card fraud.
■ Law enforcement training and capacity building
Europol provides, in close cooperation with CEPOL, specialised law enforcement training as part of its expertise sharing and capacity building in the EU Member States
Europol continuously hosts law enforcement interns from Member States which enables them to deepen their understanding of Europol's capabilities and international law enforcement cooperation.
HOW EUROPOL WORKS 21
SECURITY, DATA PROTECTION
AND TRANSPARENCY
All of Europol capabilities and services to support Member States' investigations are provided in a secure environment with the application of strict data protection rules, which promotes trust and information sharing between Member States and Europol's other partners.
Europol has one of the most robust data protection regimes in the area of law enforcement. Europol's Data Protection Officer (DPO) ensures compliance, in an independent manner, within the data protection framework. In 2013, the Data Protection Officer presented his annual report to the Management Board and the Joint Supervisory Body.
In line with the European Union's policy of transparency, Europol has created a public repository of documents which can be accessed by any interested parties2. Europol also responds to a number of requests for documents addressed either directly to Europol or coming via external institutions.
2   Available at www.europol.europa.eu/latest_publications/85
3. NETWORKING
POWER
3. NETWORKING POWER 23
o
ne of the key guiding principles of Europol is maintaining effective partnerships with its Member States, EU bodies, international organisations and non-EU countries, as well as private sector partners who work together with Europol to secure common goals.
To this end Europol maintains a comprehensive outreach function connecting relevant national law enforcement services, EU bodies and third parties, as well as the private sector, academia and other non-law enforcement partners.
EUROPOL LIAISON OFFICERS
Europol is constantly in touch with Member States' law enforcement agencies. Communication between Europol in The Hague and the Europol National Units in the Member States is facilitated by Europol liaison officers (ELOs). This connects Europol with approximately two million law enforcement officers employed in the European Union Member States and a big group of law enforcement officers outside of the EU.
Law enforcement agencies, currently represented by 160 Europol liaison officers, work in conjunction with Europol's 24/7 high-security operational service centre and its secure databases, and have been successful in disrupting many criminal and terrorist networks. This has resulted in arresting thousands of dangerous criminals, recovering millions of euros and rescuing hundreds of victims of crime, including trafficked and abused children.
JOINT INVESTIGATION TEAMS
Joint investigation teams (JITs) are an instrument for achieving closer cooperation between law enforcement and judicial authorities in two or more EU Member States which face complex cross-border investigations. The competent authorities of two or more EU Member States can set up a JIT for a fixed period
of time for a specific purpose. JITs are typically set up when the case necessitates coordinated action in other states. In addition to the competent authorities of the EU Member States setting up the JIT, members from other states, Europol, Eurojust and OLAF may also take part in a JIT and support the team.
NUMBER OF LAW ENFORCEMENT AGENTS EMPLOYED IN THE EU MEMBER STATES, 2013
□ Less than 10 000
□ Between 10 000 and 100 000
□ More than 100 000
The number does not include law enforcement officers from the HM Revenue & Customs and Home Office Immigration Enforcement.
26  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
In 2013 Europol supported 44 JITs. It also organised the ninth annual meeting of national JIT experts in conjunction with Eurojust and the JIT network secretariat. In addition, Europol continued to actively participate in training programmes and seminars raising awareness about JITs, in particular in CEPOL JIT-related training.
EUROPEAN UNION INSTITUTIONS
AND AGENCIES
Europol actively supports the strengthening of ties between Freedom, Security and Justice and Common Security and Defence Policy (CSDP) initiated by the European External Action Service. Mutual awareness raising, improved exchange of information on criminal and terrorist threats and enhanced cooperation between Europol and CSDP missions are issues of primary importance.
Europol cooperates closely with all European Union agencies whose mandates and mission are related or complementary to Europol's. Europol has cooperation agreements and close links to 10 such EU entities3.
Eurojust remains an important partner of Europol at a strategic and operational level. The mutual participation in operational meetings and the joint support to Member States' Joint Investigation Teams forms the basis for daily cooperation. Eurojust has been involved in the creation of the European Cybercrime Centre, located at Europol, whose work it has supported since the centre's inception.
Throughout 2013, Europol continued to cooperate with the European Police College (CEPOL) and the European Agency for the Management of Operational Cooperation at the External Borders of the Member States of the European Union (Frontex), supporting some of its operations.
CEPOL [European Police College], ECB [European Central Bank], ECDC [European Centre for Disease Prevention and Control], EMCDDA [European Monitoring Centre for Drugs and Drug Addiction], Eurojust, European Commission, Frontex [The European Agency for the Management of Operational Cooperation at the External Borders of the Member States of the European Union], INTCEN [EU Intelligence Analysis Centre], OHIM [Office for Harmonization in the Internal Market] and OLAF [European Anti-Fraud Office].
REACHING BEYOND THE EUROPEAN UNION
Apart from 28 EU Member States, Europol also reaches out to a number of other countries, international organisations and EU bodies via its cooperation agreements. Europol has cooperation agreements in force with 21 other parties: 18 non-EU countries4 and three international organisations5. There are two types of agreements Europol concludes with its partners. Strategic agreements make it possible for the two parties involved to exchange all information with the exception of personal data, while operational agreements also allow the exchange of personal data.
Europol and Interpol continued their close cooperation throughout 2013. A new Joint Annual Action Plan was concluded following the successful implementation of its predecessor. The partnership between Europol and Interpol is particularly valuable in relation to activities in countries outside the EU.
Following the opening of the European Cybercrime Centre in early 2013 and with a view to the opening of the Interpol Global Complex for Innovation in Singapore in 2014, Europol and Interpol convened several meetings to discuss synergies in the fight against cybercrime, including the Europol-Interpol Cybercrime Conference which will continue to be held annually in The Hague and Singapore.
3. NETWORKING POWER 27
EUROPEAN POLICE CHIEFS CONVENTION (EPCC)
In September 2013, Europol hosted the third European Police Chiefs Convention (EPCC) at its headquarters in The Hague. The event was co-organised by the Lithuanian National Police under the Lithuanian Presidency of the Council of the European Union. The convention drew together more than 200 chiefs of police, senior law enforcement officers and academics from 43 countries and nine EU bodies and international organisations. Participants debated issues in four main areas pertaining to modern law enforcement challenges: modern technology, witness protection, data protection, and police leadership.
The 2013 convention was the first one in a new format which resulted in more in-depth contributions from high-level law enforcement experts that had previously been elaborated throughout the year in expert working groups convening at Europol. As a result, the police chiefs could discuss and agree on a number of European law enforcement cooperation issues addressing wider policy and legislative developments at the European level.
This top forum has become a key annual conference in Europe and one of the most important events of its kind in the world. The convention's programme in 2013 was well received by the European Union law enforcement leadership who also appreciated meeting their colleagues in specially tailored bilateral and multilateral sessions.
Albania, Australia, Bosnia and Herzegovina, Canada, Colombia, former Yugoslav Republic of Macedonia, Iceland, Liechtenstein, Moldova, Monaco, Montenegro, Norway, Russian Federation, Republic of Serbia, Switzerland, Turkey, Ukraine and United States of America.
Interpol, UNODC (United Nations Office on Drugs and Crime) and WCO (World Customs Organization).
5
4. SUPPORTING CROSS-BORDER INVESTIGATIONS
4. SUPPORTING CROSS-BORDER INVESTIGATIONS 29
E
uropol's mandate covers a broad spectrum of crimes in the following main areas:
DRUGS
EURO
COUNTERFEITING
FACILITATION OF ILLEGAL
IMMIGRATION
VAT FRAUD
OUTLAW MOTORCYCLE GANGS
CYBERCRIME
TRAFFICKING IN HUMAN BEINGS
INTELLECTUAL
PROPERTY CRIME (PIRACY AND COUNTERFEITING)
MOBILE ORGANISED CRIME GROUPS
TERRORISM
MONEY LAUNDERING AND
ASSET TRACING
30  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
Annually, Europol coordinates and supports an impressive number of complex international investigations run by Member States' law enforcement services.
In 2013, more than 18 300 new cross-border cases — a 15 % increase compared to the previous year — were initiated by Member States, Europol and third parties.
Each month 38 000 operational messages in support of ongoing cases were exchanged.
Altogether 456 598 messages were exchanged during the year between 452 competent authorities in 28 Member States and 42 third partners.
2013 IN FIGURES
OPERATIONAL SUPPORT BY EUROPOL
To support Member States' investigations, Europol produced:
/
k.J.
\
1656 220 385
cross-match reports       operational analysis reports    other operational reports
& Operational support
O Operational coordination
O Exchange of criminal information via SIENA
O Operational analysis
4. SUPPORTING CROSS-BORDER INVESTIGATIONS 31
to its databases and sending its experts to the
This report presents seven major operations, to illustrate the range and scope of some of the international investigations supported by Europol. Each operation shows a mandated area under which Europol was working, a general overview of the crime(s) that were under investigation and the set of Europol's capabilities that were employed in support of the given operation:
& Networking power
Strategic analysis & Warning
O Financial support
Operation Police Ransomware
A major organised cybercriminal network based in Europe exploited a police ransomware malware worldwide. This international criminal gang used a type of malware which pretends to be a communication from a local law enforcement agency and blocks computers, accusing the victims of conducting illicit or malicious activities online and requesting the online payment of a fine (in this case EUR 100) to unblock it. The criminal network used a variant of malware from Russia and waged campaigns targeting France, Germany, Italy, Spain, and the UK. that tens of thousands of computers ed, bringing profits of more than a million Additionally, one of the criminal network's cells on the Costa del Sol, Spain, specialised proceeds of the crimes by employing both money laundering and other traditional
systems for
Participating countries and organisations:
Austria, Germany, Luxembourg, Netherlands, Spain, Interpol, Europol and Eurojust.
in a
nutshell
The first piece of ransomware malware appeared in 1989.
^^^^^^^^^^1 observed in Russia. ^^^^^^^^^H
Since then, the ransomware malware evolved and its tactics changed to include the police ransomware variant.
In spring 2011, the first cases of police ransomware in the ^1 EU were detected (first reported case in Germany). ■
By 2012, most EU Member States and other I countries worldwide were affected by this I ^^^^H type of malware attack. ^^^^H
Extensive investigation of over a year which led to two operations supported by Europol
©
Initiated by the Spanish Police
Europol initiated and facilitated international law enforcement cooperation and reached parties in the
EU and beyond via its network of Europol liaison officers
i information
Operational coordination Operational support Networking power ^    Exchange of criminal information - SIENA Operational analysis
Strategic analysis Mobile office Financial support Specialised and forensic expertise Warning
Infection Infrastructure
I_I User
Malicious I Domain
Vulnerable PC
I _ l| Domain
[—q-| Vulnerabilities
pBJBB] Scan pBfBBBBJ
Infection
Countries affected
The first operation in April I 2012 was supported by I H Germany, United Arab | Emirates, Spain and the FBI, ^1 Eurojust and Interpol ^1
Europol experts developed a barrier model for police ransomware and warned the EU public about the threat
©
Analysis of complex criminal intelligence from 27 states and organisations
©
T
©
200 operational messages exchanged via Europol's SIENA
NOV
E o
u O
i r
Europol provided operational       Mobile office support and coordination deployed during the raids on the spot
Provided expertise, technical advice
and forensic support, also on the spot
21k
compromised
servers
of companies
located
80
countries where
compromised companies' servers were located
200+
fraudulent credit cards seized
t:
50k
euros in cash confiscated
More than 30 analytical reports by Europol
5k 10k
in e-currency confiscated
euros processed
daily by the
sophisticated
money
laundering
facility
Coordinated by Romania and Europol ©
©
Involving 17 EU Member States, 5 third states and Europol
Operation initiated in December 2011 by the Romanian National Police Cybercrime Unit
Operation
Pandora-Storm
A powerful global organised crime network, consisting of 6 organised crime groups and 100 members, was involved in online and electronic payment fraud in Europe, both Americas and Asia from 2011 until 2013. It was engaged in the worldwide illegal compromise and dissemination of payment card data as well as skimming, fraudulent transactions and other related crimes. The criminal network is estimated to have made illegal profits of approximately 2 million euros. It has affected 36 000 bank and credit card holders in 16 European countries.
Participating countries and organisations:
Belgium, Denmark, Finland, France, Hungary, Ireland, Italy, Lithuania, Romania, Slovenia, Spain, United Australia, Colombia, Dominican Service (USSS), Europol.
100+ members
2 million euros illegal profits
36 000 affected card holders in 16 European countries
Europol mandate
Cybercrime: online payment and electronic payment fraud
Illegal dissemination of payment card data
Q$ Operational coordination ^ Strategic analysis
Operational support Mobile office
Networking power Financial support
>    Exchange of criminal information - SIENA (    Specialised and forensic expertise
Operational analysis Warning
Countries in which payment card data was compromised
I   I Countries in which illegal cash was withdrawn
|   | Countries in which payment card data was compromised and illegal cash was withdrawn
More than 400 police officers were involved
©
1
Europol provided operational support and coordination during the raids
Europol organised several operational meetings...
©
1
89 house searches took place in Romania and the UK
©
MAR
T
©
and financed two ground-breaking operational meetings in 2012
©
®
Europol pooled and analysed complex international criminal data contributions - almost 2500 intelligence exchanges
T
©
Final raids on 28 March 2013 in Romania and the UK
Europol provided more than
50 analytical products (reports, cross-matches, links to other investigations, etc.)
44
members arrested including their leaders
7
luxi
luxury cars and pistols as well as several properties seized
2
illegal workshops for manufacturing skimming devices were dismantled
200
pieces of communications and IT equipment were seized
Operation Casablanca
Members of the Hells Angels Motorcycle Club (HAMC) Nomads Luxembourg and Turkey, together with high-level executive members from the Hells Angels Motorcycle Club Germany, were suspected of running an international criminal organisation in Palma de Mallorca involved in a high number of various serious offences across a number of European countries - Spain, Germany, Netherlands, Switzerland and Bulgaria - as well as Turkey, South American and African countries. This international criminal gang was suspected of committing crimes including assault and attempted murder, trafficking in human beings for prostitution, kidnapping, threats, extortion, drugs trafficking, illegal possession of firearms, money laundering, fraud, forgery of documents and corruption.
Participating countries and organisations:
Germany, Luxembourg, Netherlands, Europol and Eurojust.
in a
nutshell
Outlaw motorcycle gangs are considered a national threat ■ and a national policing priority in 17 European Union ■ ■ Member States and in 6 Europol partner states. ■
There has been a steady expansion in the growth of the Hell ■I Angels Motorcycle Clubs worldwide since 2005. Their Bfl number more than doubled in Europe and more than tripled in Central and South America.
In 2013, there was a noticeable increase in members ■ffll of outlaw motorcycle gangs convicted for BSfl I criminal activities. This trend is likely to I ffl^fSfll continue in 2014. ffl^BfflH
©
Supported by Austria, Germany, Luxembourg, Netherlands and Interpol
Initiated by the Spanish National Police and the Spanish Guardia Civil
Coordinated by Europol and Eurojust
©
i information
, trafficking
Operational coordination Operational support Networking power ^    Exchange of criminal information - SIENA Operational analysis
Strategic analysis Mobile office Financial support Specialised and forensic expertise Warning
Operational meetings in
200+ law Exchange of operational Mallorca, Madrid and at
enforcement information via SIENA - Europol and Eurojust in The
officers involved 150 messages Hague either funded or
during the raid exchanged supported by Europol
© © ©
in 11
Phase 2 finalised in September 2013
Additional raids in
Mallorca in September 2013
©
Top targets arrested including a highly influential HAMC member
SEPT
E o
u *->
o
^ r
mm
42
arrests in total
31
Raids on 23 July 2013 in Palma de Mallorca
Confiscation of drugs (cocaine, marijuana, anabolic steroids), weapons
and a large quantity of electronic and IT equipment
simultaneous
house
searches
2.5m
€ worth
of real estate
seized
1m+
€ worth of jewellery, plus yachts, cars, motorcycles and other luxury items
50k
€ in cash and HAMC
paraphernalia confiscated
200
law
enforcement
officers
engaged
5
states whose police officers were engaged
counterfeit banknotes were found in circulation
in 2013 - an increase of almost 20% on the previous year. Out of this more than 73 000
pieces were seized before being put into circulation - an increase of 28% compared to
2012.
Austrian National Bank involved
©
Operation
Paradise City
An international criminal group was dismantled that was producing and distributing counterfeit 50 and 100 euro banknotes from their base in Vienna, Austria. Its members originated from the former Yugoslavia (mainly Serbia). The criminal network was active in Austria and Serbia but the counterfeit currency produced by it was detected in 12 European states. The organised crime group produced in total over 1 million in counterfeit euros (in 10, 50 and 100 denomination banknotes) and over 12 million Serbian dinar (1000, 2000 and 5000 denomination banknotes).
Participating countries and organisations:
(Austrian Police, Austrian National Bank), Slovenia, Europol.
Technical support and reporting
Initiated by the Austrian Police
I information
based in
active in counterfeit
produced and over
Operational coordination Operational support Networking power ^    Exchange of criminal information - SIENA Operational analysis
^) Strategic analysis
Mobile office Financial support Specialised and forensic expertise Warning
I   I Countries in which the
criminal network was based and active
Financing police measures against euro counterfeiting
©
Cooperation between Austria, Serbia and Slovenia
©
©
Technical report on €100 banknote counterfeits
|   | Countries in which the counterfeit currency was detected
Operational meeting organised and financed
©
©
Action plan set up for the final stage of the investigation
©
200+ law enforcement officers involved
|   | Countries in which the criminal network was ad
Analytical support and reporting
©
On-the-spot te Extracting and support in
alysing data from dismantling seized equipment illegal print
© ©
©
Mobile office, UFED and other forensic tools deployed on the spot
13
people arrested
16
house searches in Vienna
300k
€ worth of counterfeit banknotes
1.5m
Serbian dinar worth of counterfeit banknotes
Pieces of counterfeiting and IT equipment, fake IDs and other forged documents
Clandestine print shop
dismantled in Vienna
Europol coordinated multiple police enquiries and supported the operation from the beginning
©
15 European countries participated together with Eurojust and Interpol
Operation
Veto
1
An extensive international criminal network widespread football match-fixing. The took the form of a sophisticated organised which generated huge illicit profits estimated hundreds of millions by gambling on fixed Asian betting markets. Illegal operations Singapore with bribes of up to EUR 100 For the first time a joint investigation team fight this type of crime.
Participating countries: Austria, Bulgaria, Republic, Estonia, Finland, Germany, Greece, Moldova, Netherlands, Slovakia, Slovenia Kingdom.
Czech Italy,
JULY
Initiated by Finland, Germany and Hungary
i information
• involved
• illicit profits of millions by in the illegal
with bribes of
Operational coordination Operational support Networking power ^    Exchange of criminal information - SIENA Operational analysis
^) Strategic analysis
Mobile office Financial support Specialised and forensic expertise Warning
Eight operational meetings were organised, with 30 investigators from the participating countries
o
Europol supported seven other external meetings in Austria,
Finland, Germany and Hungary
©
Communication exchanges made via the network of Europol Liaison Officers and beyond involving sports organisations (FIFA, UEFA, FIFPRO) and Interpol
©
Finalised in January 2013
... and supported by investigators from eight other countries and Eurojust
Joint investigation team ran between July 2011 and January 2013 ...
337 messages of criminal data exchanged through SIENA
JAN
E o u
O
i r
14
©
Deployment of the mobile office in Hungary and in Bulgaria
... led by Europol, Austria, Finland,
Germany, Hungary and Slovenia ...
31 analytical reports produced
persons convicted and sentenced to a total of 39 years in prison in Germany
425
match officials, club officials, players, and serious criminals investigated
380
suspicious matches identified (World Cup, European Championship, European national leagues)
More than 13 000 email exchanges
and other
material
300
suspicious matches in Africa, Asia, South and Central America
rjn a Facilitated f nutshel1 Immigration
Facilitation of illegal immigration constitutes a significant threat to the European Union and is expected to further increase in scale. The criminal networks involved quickly adapt and exploit multiple opportunities to enable irregular migrants to enter, reside and work in the European Union.
The abuse of legal channels is an important modus operandi. The considerable profits involved have given rise to a small industry, with its own infrastructure of criminal specialists and apparently legitimate
Lprofessionals, such as legal advisors, who provide documents and materials or identify legal loopholes for criminal exploitation.
Coordinated by Austria, Hungary and Europol
©
Initiated by Austria and Hungary who launched a joint response to the significant increase in illegal immigration in their jurisdictions
More than 1200 law enforcement officers involved in one of the largest international actions against people smugglers in Europe
Operation
Fimathu
A major international people smuggling criminal network in Europe was involved in the clandestine smuggling of a large number of irregular migrants into and within the European Union mainly via Turkey and the Western Balkan region. The irregular migrants came from Afghanistan, Iraq, Pakistan, Syria and Turkey and the criminal network used various modi operandi to smuggle them into and within the EU. The migrants were often smuggled in inhumane and dangerous conditions in very small, hidden, compartments of buses or trucks, by freight trains or boats. In some cases falsified travel documents were used by the migrants. Marriages of < were also used as a status in the EU.
Participating countries and organisations:
Bosnia and Herzegovina, Bulgaria, Croatia, Czech Republic, Germany, Romania, Serbia, Slovakia, EULEX and Europol.
Crime Group information
smuggled a large number of irregular migrants into and within the European Union mainly via Turkey and the Western Balkan region
used various modi operandi to smuggle them into and within the EU (by freight, trains or boat; through falsified documents and marriages of convenience
Europol mandate
Facilitated illegal immigration Money laundering Tax evasion
Operational coordination Operational support Networking power I     Exchange of criminal information - SIENA y  Operational analysis
^) Strategic analysis
Mobile office Financial support ^    Specialised and forensic expertise Warning
I   I Countries where the irregular
migrants were originally recruited and through which were smuggled into and within the EU
Almost 100 participating investigators and officers from 14 states participated in 4 major operational meetings
©
I
1
|   | Countries through which
irregular migrants were mainly smuggled into and within the EU
|   | Countries where the irregular
migrants were originally recruited
Financial, technical and expert support
International Coordination Centre set up at Europol, staffed with senior investigators from participating countries
Reaching EU law enforcement and beyond via its network
Finalised in January 2013, Project Fimathu is ongoing
Operational meetings regarding individual, parallel or partially linked investigations
Identification of links between Austria, Hungary and the source and transit countries
More than 2500 operational exchanges via SIENA
©
Identification of participating criminal organisations
103
suspects arrested in Europe (Croatia, Czech Republic, France, Germany, Greece, Hungary, Poland, Slovakia, Turkey and Kosovo region)
117
searches of houses and other properties carried out in 14 European states
7.5k
irregular
migrants
identified
in the
Western
Balkans
891
smuggling incidents identified in Austria and
Hungary
370k+
€ seized in cash and in frozen assets
500
mobile
phones,
laptops, bank
statements,
weapon and
ammunition
seized
Operation
Ellenika
An international criminal network was trafficking large quantities of heroin to the illicit drug markets. The trafficking from Albania to Italy was taking place via Kosovo and Bosnia and Herzegovina. The apprehended criminals were accused of international drugs trafficking and other related crimes.
in a
nutshell
| The European Union is a significant market for opiates | including heroin. Increasingly, the organised crime groups
dealing with heroin trafficking collaborate across national, ■ ethnic and business boundaries. Heroin consignments I destined for the EU are often not controlled by a single
increasingly cooperative, organised crime groups. Virtually ■ all heroin encountered in the eu originates in Afghani- I PJJPJJ stan.To assist the EU Member States, Europol is pjjl I involved in a wide range of law enforcement I I operational support activities connected to I the trade.
Participating countries and organisations:
Albania, Austria, Bosnia and Herzegovina, Croatia, Kosovo, Slovenia, Turkey, EULEX, Europol, the Italian Carabinieri, the District Prosecutor's Office in L'Aquila, the Italian National Directorate against Drugs
Support and coordination I provided by Europol ... I
2009
MAR
trafficking large quantities of heroin to the illicit drug markets
trafficking from Albania to Italy was taking place via Kosovo and Bosnia and Herzegovina
accused of other crimes related to international drugs trafficking
Europol mandate Drugs trafficking
Operational coordination Operational support Networking power ^    Exchange of criminal information - SIENA Operational analysis
Strategic analysis Mobile office Financial support Specialised and forensic expertise Warning
I   I Balkan route for      Q Northern route for      Q Chinese route for
heroin trafficking
heroin trafficking
heroin trafficking
Two operational meetings at Europol
Expert assistance and coordination on the spot
More than 40 live data and analytical
contribution exchanges via SIENA
Assisting with
Finalised in cross-data checks
October 2013 during the final raids
© ©
OCT
E o
u O
i r
71
Final raids on 21 October 2013
suspects arrested in Albania, Bosnia and Herzegovina, Italy and Kosovo
1.1t
of trafficked drugs (600 kg of heroin, 500 kg of marijuana) as shown by evidence
Several hundred kilos of heroin seized
Analytical support provided by Europol
Numerous assets of significant value seized
5. CHALLENGES
AHEAD
5. CHALLENGES AHEAD 47
E
uropol has gained an improved position on the EU stage in the last couple of years, partly thanks to the Lisbon Treaty, its new legal status as an EU agency and Europol's own strategy and improved capabilities. These developments make Europol a unique cooperation partner for EU law enforcement agencies and also an important actor in the EU decision-making process.
As a leading EU law enforcement agency, Europol is always looking ahead for opportunities to streamline the fight against serious and organised crime and terrorism. Such new opportunities have been recently embodied by:
Or
Exploring, and including into Europol's work, better cooperation with the private sector, to make greater use of expertise on issues like cybercrime, money laundering and intellectual property crime;
Centralising resources in various fields of law enforcement expertise, already initiated in the area of cybercrime by creating the European Cybercrime Centre at Europol.
These aspirations are being vested upon Europol by European decision makers in recognition of Europol's unique capabilities and role in combating serious crime and terrorism. Europol's legal basis is currently being adjusted in accordance with the Treaty of the European Union6. The legal proposal was prepared by the European Commission in March 20137 and is now being debated following standard EU legal processes. The objective behind the Commission's proposal is to adjust the legal framework of Europol with the requirements of the Treaty of Lisbon, which will result in a strengthening of Europol's democratic legitimacy and accountability. The proposal also aims to further strengthen Europol's robust data protection regime and its operational capabilities. This will reinforce Europol's current tasks but also its future responsibilities in particular those relating to becoming a centre of specialised law enforcement expertise.
6 Article 88 of the Treaty of the European Union which stipulates that Europol shall be governed by a regulation to be adopted by the ordinary legislative procedure.
7 COM (2013) 173 final.
Having said this, Europol may face some limitations, especially in the area of capabilities and resources, in view of increasing ambitions and expectations from its stakeholders on the one hand, and the unfavourable economic situation and ensuing budgetary restrictions on the other.
Europol's primary purpose remains to support the EU law enforcement community to disrupt and dismantle serious organised crime and terrorist groups. The law enforcement community as a whole needs to continue innovating tools, tactics and policies to keep pace with global developments and stay ahead of the criminals.
In view of the ever-increasing sophistication of criminal activity, local or even national efforts to tackle international organised crime and terrorism alone can only enjoy limited success. However, together with EU Member States and partner organisations, Europol can play an increasingly prominent role in safeguarding EU internal security.
A stronger Europol means more successful investigations and better protection for EU citizens against the threats of serious international crime and terrorism.
ANNEX I 49
EMPACT PROJECTS
he eight EMPACT projects, based on priorities decided by the Council of the EU, address the criminal activities and mitigate the threats coming from:
(•) Organised crime groups active or based in West Africa, trafficking cocaine and heroin to and within the EU
(•) Organised crime groups, including Albanian-speaking organised crime
groups, using the Western Balkans as a key transit and storage zone for illicit commodities destined for the EU
(•) Organised crime groups facilitating illegal immigration to the EU, particularly via southern, south-eastern and eastern Europe and notably at the Greek-Turkish border and in crisis areas of the Mediterranean close to North Africa
(•) Production and distribution in the EU of synthetic drugs, including new psychoactive substances
(•) Trafficking to the EU of illicit commodities, including cocaine, heroin, cannabis, counterfeit goods and cigarettes
(•) All forms of trafficking in human beings and human smuggling, targeting the organised crime groups conducting such criminal activities in particular at the southern, south-western and south-eastern criminal hubs in the EU
(•) Mobile (itinerant) organised crime groups engaging in criminal activities
(•) Cybercrime and the criminal misuse of the Internet by organised crime groups.
ANNEX II
OVERVIEW OF EUROPOL'S MANDATED AREAS, 2013
ANNEX II 51
DRUGS
ighting drug-related crime has been a priority for Europol since its very beginning.
Cannabis
■ The cannabis market constitutes the largest portion of the illicit drugs industry. Cannabis is the most prevalent drug in terms of production, trafficking and consumption. It is also the most widely used illicit drug in the European Union whose annual consumption is currently estimated to be around 2500 tonnes, at an estimated market value of EUR 18-30 billion.
Europol initiates, supports and coordinates the intelligence aspects of cannabis investigations.
■ Specifically, Europol supports Member States investigators engaged in complex cross-border investigations and associated money laundering cases.
■ It also maintains the Europol Logo System on Cannabis (ELSC), used as a tool that contributes to the identification of potentially correlating investigations.
Cocaine
After cannabis, cocaine is the second most commonly used illicit substance in Europe. It is estimated that around 15.5 million adults (aged 15-64) have used cocaine in their
lifetime.
■ Next to the United States, the European Union remains the second largest consumer of cocaine in the world.
Europol collects and analyses intelligence associated with the activities of suspected criminal organisations and networks involved in the production, processing or trafficking of cocaine, including intelligence relating to precursor chemicals and cutting agents.
Europol also traces the money flows originating from cocaine trafficking and assists Member States in freezing and confiscating these illegal proceeds, helping to weaken the position of the criminal groups producing and trafficking
Europol experts provide on-the-spot support to investigations and expertise in dismantling cocaine conversion/extraction laboratories.
Europol runs the Europol Cocaine Logo System (ECLS) which consists of the Cocaine Logo, Cocaine Punch and Specific Means of Concealment databases. The ECLS collates information on modi operandi, photographic and basic forensic information on cocaine seizures, and on logos or markings on the drugs and their packaging.
52  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
Synthetic drugs
The European Union remains a significant region for the illicit production of synthetic drugs, particularly amphetamine and ecstasy. Each year around 60 to 90 large-scale production sites are identified and dismantled. Storage sites for potentially dangerous precursor chemicals used in the drug manufacturing process are also often discovered during the course of investigations in Member States.
■ Europol's operational support includes the coordination and initiation of criminal drugs investigations as well as providing on-the-spot assistance to EU law enforcement agencies during the secure dismantling of illicit drug production facilities and the collection of evidence
■ In 2013, 116 dump sites, 42 storage sites and 41 illegal laboratories were dismantled with Europol's assistance.
39 specialist reports were made which contributed to linking operations, supporting on-going investigations and some of them were also used for court testimonies.
Specialised technical assistance on the spot was provided four times.
■ The Europol Illicit Laboratory Comparison System (EILCS) comprises detailed photographic and technical information on synthetic drug production, storage and dump sites. This enables the identification of matches between seized equipment, materials and chemicals
Currently, more than 130 000 photos are stored in the system.
Heroin
The European Union is also a significant market for opiates. Although demand and supply of opiates, mainly heroin, is relatively small when compared to other illicit drugs like cannabis and synthetic drugs, the social, economic and health problems associated with its use are huge. It is therefore considered a major threat to the security and health of European society.
■ In recent years, organised crime engaged in the illicit heroin trade has been characterised by increasing collaboration across national, ethnic and business boundaries. Heroin consignments to the EU are not controlled by a single criminal organisation, but rather facilitated by several, increasingly cooperative organised crime groups.
ANNEX II 53
CYBERCRIME
■ The European Cybercrime Centre (EC3) was launched at Europol in January 2013 to strengthen the EU law enforcement response to cybercrime. The centre was tasked to focus on three areas:
Cybercrimes committed by organised groups, particularly those generating large criminal profits such as online fraud
Cybercrimes which cause serious harm to their victims, such as online child sexual exploitation
■ Cybercrimes (including cyber-attacks) affecting critical infrastructure and information systems in the European Union.
Since EC3's inception, the number of large-scale cross-border investigations supported by Europol has rapidly increased. It can be noted that the size of the operations has increased significantly as well, consequently leading to more follow-up actions and arrests.
■ In 2013, the forensic lab was developed to provide a professional and fully equipped environment for technical support in digital forensics.
■ Moreover, the Multi-Disciplinary Centre for Cyber Innovation was built, and provides a dedicated, technically suited environment for collaboration between law enforcement, the private sector and academia.
Several ICT tools and applications were delivered for the specialised processing of cybercrime related data.
In 2013, the first joint Europol-Interpol Cybercrime Conference was organised at Europol headquarters in The Hague. The conference gathered 260 high level practitioners from law enforcement and the private sector from 42 countries.
54  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
TRAFFICKING IN
HUMAN BEINGS
Trafficking in human beings (THB) remains a serious problem in the EU. The scale and nature of THB in the EU is not easy to define, not least because it is often hidden within other criminal activities, such as prostitution, illegal immigration and labour disputes.
Contributions from recent Member States' operations sent to Europol show the organised and transnational nature of human trafficking. Criminal networks operate in more than two Member States moving their victims from one country to another, not only with the aim of maximising the profits, but also with the aim of avoiding law enforcement detection. Trafficking networks take advantage of legal loopholes. In addition to traditional forms of exploitation (i.a. sexual and labour exploitation), the traffickers are more and more engaged in new and emerging forms of exploitation, such as forced begging and other criminal activities.
Europol supports counter-trafficking operations both in their preparatory phases, with the provision of operational analysis and facilitating information exchange, or by way of operational support including on the spot.
FACILITATION OF ILLEGAL IMMIGRATION
This term covers a number of different serious crimes, all aimed at facilitating, for financial gain, entry to or residence in a country, in violation of that country's laws. Facilitated illegal immigration thus covers the production and procurement of falsified travel documents or permits obtained under false pretences, and the provision of clandestine transport or other assistance, in order to obtain illegal entry or stay.
The facilitation of illegal immigration constitutes a significant threat to the European Union and is expected to further increase in scale. Irregular migrants increasingly use organise crime groups' support and guidance. The criminal networks involved are able to quickly adapt and exploit multiple opportunities to enable irregular migrants to illegally enter, reside and work in the European Union. The abuse of legal channels is an important modus operandi employed. The considerable profits involved have given rise
to a small industry, with its own infrastructure of criminal specialists and apparently legitimate professionals, such as legal advisors, who provide documents and materials or identify legal loopholes for criminal exploitation.
Europol provides operational and analytical support to EU Member States to combat facilitated illegal immigration. The criminal networks involved are sometimes also involved in other crime areas such as forgery of travel documents, drug trafficking, money laundering, trafficking in human beings and the like.
ANNEX II 55
EURO COUNTERFEITING
■ Europol has the mandate to prevent and combat the forgery of money, in particular the euro, and has been designated as the European Union's central office for combating euro counterfeiting. Thus, Europol acts as a worldwide contact point for combating counterfeiting of the euro.
■ To fulfil this function, Europol offers a wide range of products and services to its partners. Europol actively supports law enforcement authorities by gathering, analysing, disseminating and facilitating the exchange of criminal intelligence, as well as providing other expertise and knowledge to assist investigations.
■ Europol is also involved in all major euro counterfeiting investigations in the EU, including joint investigation teams. Financial support and on-the-spot assistance is also given when requested.
Europol provides forensic support to law enforcement agencies to determine the origin of materials and devices used for the manufacturing of counterfeits. Finally, Europol also provides technical support and training on tactical and technical issues related to protecting the euro from counterfeiting.
■ In 2013, more than 600 000 counterfeit euro banknotes were detected in circulation. The 20 and 50 euro notes were the leading denominations - each representing 40% of all the counterfeits seized.
■ Law enforcement agencies supported by Europol prevented more than 70 million worth of counterfeit euro banknotes from entering into circulation.
■ Europol financed 62 police measures in 11 countries which led to the arrest of 70 suspects and the dismantling of six print shops.
VAT FRAUD
Missing trader intra-community (MTIC) fraud is a form of organised, sophisticated tax fraud carried out by criminals attacking the value added tax (VAT) regimes of EU Member States.
The basic model of transnational intra-community VAT fraud involves at least two Member States, whereby the criminals put in place a structure of linked companies and individuals to exploit the differences in national VAT systems while disguising the real links between participants. The schemes may be based on real, or now more frequently virtual, 'carousel fraud' transactions, where the same 'goods' are sold and resold several times. Increasingly, fraudsters show interest in intangible items and have extended their criminal activities into the environmental and energy markets.
The precise level of value added tax fraud throughout the European Union is difficult to quantify, with the most up-to-date figures released by the European Commission stating that the VAT gap for 2011 was EUR 193 billion. The figure represents a loss of around 18% of the theoretically expected VAT take across the Member States, although it must be stressed that it includes losses not only due to fraud, but also due to bankruptcies, financial insolvencies as well as tax 'legally' avoided.
Europol maintains the only EU level database for storing criminal case material and intelligence on the phenomenon and this has become the principal source of reference for law enforcement operations. The knowledge and data stored within Europol enables the development of a solid picture of this crime area and identifies the most prominent criminal targets. Europol has become a centre of excellence for fighting cross-border MTIC fraud and related offences.
56  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
INTELLECTUAL PROPERTY CRIME
■ Intellectual property rights (IPR) infringement refers to the violation of two main categories of recognised and protected rights. The first one relates to industrial property covering fields such as trademarks, patents, designs and models (counterfeiting). The second refers to copyright of literary and artistic works such as film, musical work and software programmes (piracy). Counterfeiting is the offence linked to industrial property violation, while piracy is the offence connected to a violation of copyright.
Counterfeiting is a global problem, affecting all types of goods, which causes serious harm to the economy, consumers and society. Even more importantly, counterfeiting can pose a significant health and safety risk to consumers, particularly when counterfeited products include electronic equipment, beverages, cigarettes, food stuffs, medicines, pesticides, clothing and toys.
The economic impact of this crime is significant. The total value of counterfeit products worldwide is estimated to be as much as EUR 505 billion per year. The Frontier Economics and Business Action to Stop Counterfeiting and Piracy (BASCAP) have projected that the global value of counterfeiting and piracy will have risen by 2015 to EUR 1.4 trillion. These large-scale profits provide organised crime groups with resources to branch into other criminal markets, such as drugs and cigarette trafficking. The loss of revenue also affects legitimate businesses that lose money to counterfeiters. As a result, they face lower levels of resilience to the economic crisis and substantial losses in potential innovation and product development. It is estimated that G20 economies lose up to 2.5 million jobs due to counterfeiting and piracy.
■ In 2013, Europol supported seven major operations concerning counterfeit/substandard medicines.
MOBILE ORGANISED CRIME GROUPS
Mobile organised crime groups continue to be active throughout the European Union. They are mostly engaged in opportunistic crimes such as (armed) bank or jewellery store robberies, cash-in-transit and ATM physical attacks, cargo and metal theft, theft of luxury vehicles and highvolume crimes such as serial burglaries, organised shoplifting and pick pocketing.
Every EU Member State is affected by their offences to a greater or lesser extent. Although single offences committed by members of these groups do not fall into the category of serious organised crime, the accumulated offences have a significant impact on the security of EU citizens and legitimate business. Mobile organised crime groups increasingly pose an EU-wide threat owing to their international networks and involvement in cross-border criminal and serious organised crime activities.
The substantial illicit profits generated by these types of groups, as well as their increasing levels of sophistication and involvement in other forms of criminal activities, including drugs trafficking and trafficking in human beings, demands a targeted EU-level response. Mobile organised crime groups have been on Europol's radar since 2009 and investigations into their activities are supported by various dedicated analytical projects.
ANNEX II 57
OUTLAW
MOTORCYCLE GANGS
■ Outlaw motorcycle gangs are considered a national threat and a national policing priority in 17 of the EU Member States and in six Europol partner states.
■ Europol helps prevent and combat the criminal activities of outlaw motorcycle gangs such as the Hells Angels Motorcycle Club, Bandidos MC, Outlaws MC and their support motorcycle clubs. The dedicated Europol project follows a multi-disciplinary and horizontal approach, focusing on the organised crime groups rather than just on the crime phenomena inherent to outlaw motorcycle gangs.
■ To assist Member States more effectively, strategic and operational priorities have been identified including investigating the expansion of outlaw motorcycle groups into new areas of Europe, their recruitment from the right-wing hooligan scene and street gangs. Europol's support is resulting in significant successes in Member States and cooperating states. In 2013, there was a noticeable increase in members of outlaw motorcycle gangs convicted for criminal activities. This trend is likely to continue in 2014.
TERRORISM
Terrorism continues to pose a serious threat to the European Union. Extremist and terrorist groups, such as al-Qaeda affiliates and others, are active in the EU and impact the lives of its citizens. Thus, the fight against extremism and terrorism remains a priority for the EU and Europol.
■ Europol assists Member States (MS) to conduct successful investigations in fighting terrorism, extremism, and maritime piracy, by collating and analysing intelligence, preparing intelligence reports and threat assessments, coordinating and providing on-the-spot expertise, supporting other Member States' operations and producing the annual EU terrorism situation and trend report (TESAT) with facts, figures and main trends regarding terrorist attacks and arrests in the EU.
■ Europol also runs a secure web-based Experts Platform for Countering Violent Extremism which can be accessed by EU MS and US federal, state and local law enforcement officials for online collaboration in this area.
Moreover, Europol supports the MS with a number of specific counter terrorism projects and databases:
■ Check the Web Portal enables competent authorities of EU Member States to share information on Islamist terrorist activities on the Internet via the secure Europol network and the Europol national units. Its aim is to create synergies between the Member States in the analysis of online Islamist terrorist activities.
■ EU Bomb Data System provides a platform for the timely sharing of relevant information and intelligence on incidents involving explosives, incendiary and explosive devices as well as chemical, biological, radiological and nuclear (CBRN) materials. The EU Bomb Data System comprises incident databases for explosives and CBRN, as well as libraries and expert forums. Over 700 experts from almost all EU Member States, Europol, Norway and the United States are already connected and using the system.
58  EUROPOL REVIEW 2013 | GENERAL REPORT ON EUROPOL ACTIVITIES
MONEY LAUNDERING AND ASSET TRACING
■ European Explosive Ordnance Disposal Network is designed for EU explosives and chemical, biological, radiological and nuclear (CBRN) specialists whose main objective is to share information about recent incidents and developments in their area. The network facilitates cooperation among involved parties coming from police, government and military units and dealing with explosives. Specialists on explosives and CBRN meet twice a year to exchange latest information and receive training. This allows the experts to compare, and check for compatibility, their respective response protocols, which is important when responding to incidents with cross-border aspects.
■ Terrorist Finance Tracking Programme (TFTP) based on the 2010 EU-US ensures close cooperation with EU Member States and an integrated response between Europol, EU Member States, Eurojust and the US Treasury Department. Terrorist groups depend on regular cash flows which are used for, among others, travelling, training and recruitment of members, forging of documents, acquisition of weapons, and staging of attacks. The TFTP activities result in providing unique, highly accurate information that is of significant value in tracking terrorist support networks and identifying new methods of terrorist financing. In November 2013 the Joint Report from the Commission and the US Treasury Department regarding the value of TFTP-provided data was released. Since the entry into force of the TFTP agreement, more than 2000 leads have been disseminated by Europol to aid competent European authorities' fight against terrorism.
Europol financial intelligence experts detect international criminal flows, support the tracing, seizure and confiscation of criminal proceeds, and track criminals and terrorists through the analysis of financial information.
Europol has a broad mandate in the area of combating money laundering and supports Member States in preventing and combating international money laundering activities. The main aim behind tracing illegal assets and money laundering is to find the crime perpetrators, disrupt their associates and enable the potential confiscation of the crime proceeds. Europol also hosts the secretariat of the Anti-Money Laundering Operational Informal Network (AMON) set up in 2012 as a network for anti-money laundering investigators.
The Europol Criminal Assets Bureau (ECAB) assists Member States' financial investigators to trace the proceeds of crime worldwide, when assets have been concealed outside their jurisdictional boundaries.
■ The Europol Criminal Assets Bureau runs a project to link Member States' Asset Recovery Offices (AROs) to a secure, reliable and fast communication channel (SIENA). The main purpose of this project is to increase the efficiency of the asset tracing process within the EU. Currently, 21 AROs are linked to SIENA. As a result, in 2013 there was a very significant increase in information exchange - more than 2000 requests were exchanged to trace and identify criminal proceeds.
Europol also hosts the permanent secretariat of the Camden Assets Recovery Inter-Agency Network (CARIN), which is an informal network of judicial and law enforcement asset recovery experts. CARIN currently has 65 registered member jurisdictions, including all 28 EU Member States. Delegated law enforcement and judicial experts assist with general questions about asset recovery in their own jurisdictions, and also provide operational support via available legal channels.
PHOTO CREDITS
All images are © Europol
© Shutterstock: Cover, Pages 11, 13, 15, 16, 17, 20, 21, 22, 26, 27, 28, 29, 30, 31, 48, 51, 53, 54, 55 and 58. © Fotolia: Pages 9, 52 and 56.
Europol would like to thank the law enforcement photographers whose photographs feature in this publication.
QL-AB-14-001-EN-N ISBN: 978-92-95078-92-5 ISSN: 1681-1569 DOI: 10.2813/15925
Eisenhowerlaan 73 PO Box 90850
2517 KK The Hague 2509 LW The Hague
The Netherlands The Netherlands
Website: www.europol.europa.eu Facebook: www.facebook.com/Europol Twitter: @Europol_EU YouTube: www.youtube.com/EUROPOLtube