Europol flags 4,340 links but lacks removal power

Nine European countries, one coordinated operation, a list of about 4,340 URLs tied to violent extremist content. Europol's action against The Com network, announced this week, produced a clean headline: thousands of harmful sites disrupted. The public record does not support it. The figure refers to URLs referred for removal, not links confirmed deleted. No source identifies which platforms received the referrals, how many complied, or how fast they acted (SC World, Iefimerida).

That distinction defines the limits of EU digital enforcement.

Europol Can Flag. It Cannot Order.

Europol is a coordination agency. It brings investigators together, consolidates target lists, and produces analysis. It does not issue binding deletion orders to platforms. In this operation, its EU Internet Referral Unit worked with Spain's CITCO (the country's counter-terrorism and organised crime intelligence centre) to collect URL submissions from police in Belgium, Finland, Hungary, Ireland, Luxembourg, the Netherlands, Portugal, Spain and Sweden, deduplicate them, and send the consolidated list onward (Il Metropolitano, Origo).

Europol can flag. National authorities can order. Where content qualifies as terrorist material, governments can demand removal within one hour under the EU's Terrorist Content Online Regulation (TCO Regulation). Where it involves child exploitation or incitement, national criminal law applies. The Digital Services Act sets up notice-and-action systems for platforms operating in the EU (DSA). But the public record of this operation does not say which legal route applied to which URLs, or whether any binding orders were issued at all.

The Com itself is not a website or an organisation. It is a loose online ecosystem where violence, coercion and humiliation serve as social currency. The Guardian's investigation of the 764 network, one branch of The Com, describes a "gamification of harm" in which blackmail, abuse of minors, and violent instruction become status markers (The Guardian). Europol's 2026 Terrorism Situation and Trend Report classifies the network as nihilistic violent extremism: the techniques are digital, but the end state is exploitation and sometimes physical violence (Europol TE-SAT 2026).

The referred material included content promoting self-harm and suicide, child sexual exploitation, explosives manuals and harassment instructions. The severity is not in question. Whether anything was enforced is.

The Difference Between a Notice and a Seizure

The Dutch record exposes the gap most clearly. Alongside the Europol referral operation, Dutch police in Zeeland-West-Brabant ran a separate criminal investigation. On 21 July, they searched locations in Steenbergen, Rotterdam and Amsterdam and physically seized servers used by the pornographic site Motherless over suspected child sexual abuse material. Police took control of infrastructure, not just links (Politie, NU.nl). Separately, Dutch authorities disclosed a 764/Com criminal case with a suspect detained, confirming police are pursuing cases against the network, not only sending notices (Politie).

That contrast matters across borders because enforcement capacity is uneven. Some participating countries have named investigators and active prosecutions. Others appear on Europol's press release without any visible national follow-up. The cost of that unevenness falls first on the children and victims inside the network, then on the national police forces with fewer resources, and then on the public, which cannot tell where the EU's enforcement power actually bites.

The Missing Removal Count

A Cambridge European Law Open study argues the EU increasingly relies on platforms to carry out enforcement, raising fundamental-rights questions when private actors do the work of public authorities. Opacity is the stronger critique here. The referred material is severe. The question is whether this operation produced measurable results or a press release.

Europol's real value is friction: forcing a decentralised network to reorganise, exposing where it migrates after links are flagged, generating investigative leads. That is worth doing. But Europol, the participating countries and the platforms that received 4,340 referrals owe the public a basic accounting: how many URLs were removed, under what authority, and what happened to the children caught inside the network. Until someone publishes those numbers, Europol has shown activity, not impact.