Legal businesses mask 85% of top EU gangs

Europol's latest threat mapping found that 85% of the EU's most dangerous criminal networks run legal business structures (Europol, European Sting). Not shell companies in offshore jurisdictions. Registered firms, moving goods through real ports, filing real invoices, inside the single market.

The agency counted 731 high-risk networks with more than 400,000 members from 118 nationalities (Europol, Euronews). That number dropped from 821 in the 2024 assessment, but the decline is misleading: targeted operations removed 76% of the earlier networks, and 533 new ones took their place (Europol, La Razón). Organised crime in Europe is not shrinking. It is regenerating.

Legal Channels, Criminal Cargo

The examples run across the continent. In Antwerp, customs seized several tonnes of hashish hidden in a container declared as calcium sulfate (Transport Online). In the Netherlands, directors of a legal transshipment terminal went on trial for allegedly making their port facility available for drug smuggling (NPO Radio 1). In Slovakia, prosecutors charged ten companies where firms registered through straw persons allegedly moved almost €20 million (Denník N).

The pattern is the same everywhere. Criminal networks don't build parallel infrastructure. They use the legal one. Italy's financial intelligence unit logged around 162,000 suspicious-operation reports in 2025, and those reports fed more than half of the seizures proposed by the country's anti-mafia directorate (Banca d'Italia). Legal money channels are where criminal infrastructure becomes visible. Germany's finance ministry called criminal assets and business structures the "lifeblood" of mafia networks (BMF).

Brussels Can Coordinate. It Cannot Arrest.

The European Commission proposed a reform package on 24 June to strengthen Europol (the EU's law-enforcement support agency) and Eurojust (its judicial-cooperation body), including a shared police data space, Europol offices inside member states and a proposed budget doubling to €3 billion for 2028–2034 (DG HOME, ECO).

The proposal runs into a basic legal limit. Under EU treaties, Europol supports national police but cannot itself arrest anyone or prosecute cases (Article 88 TFEU). The new EU Anti-Money Laundering Authority (AMLA), based in Frankfurt, won't begin direct supervision until 2028 and will initially oversee only a limited group of high-risk cross-border financial entities (AMLA). Company registries, port authorities, local prosecutors, customs offices: all remain national.

A single criminal network can use a Cypriot front company, a Belgian port, a Slovak bank account and an Italian invoice circuit. Investigating that requires cooperation across four jurisdictions, each with its own prosecutors, its own data-access rules and its own pace. Brussels can improve data-sharing and budgets. It cannot replace national enforcement. The real power sits with national police, prosecutors and customs officials, and they still need permission from each other to act across borders.

Expanding Europol's data powers also carries risk. The Commission's proposal, the third Europol mandate overhaul in six years, would broaden its data collection abilities. The campaign group Protect Not Surveil argued this would weaken oversight by the European Data Protection Supervisor (Protect Not Surveil). Faster police data-sharing and adequate safeguards pull in opposite directions when the legal framework expands this quickly.

The Gap That Matters

The Commission's package is a legislative proposal, not law. It still needs negotiation between the European Parliament and the Council (where member-state governments sit), a process that typically takes years. The 85% figure captures the scale of infiltration, but no public breakdown yet shows which sectors, countries or types of legal entities are most exploited.

Europe's single market was built for frictionless trade, easy company formation and cross-border finance. Criminal networks treat that openness as operating infrastructure. Goods, money and data move freely. Police, prosecutors and judges stop at national lines. The networks figured out how to work across borders as businesses. The investigators chasing them still work as 27 separate countries.