Insights from the First WG2 Policy Scoping Brief on Criminal Networks and Financial Crime

Written by Privanova

The first Policy Scoping Brief of the LEA Projects Cluster Working Group on Criminal Networks and Financial Crime examines the operational challenges facing investigations of increasingly complex and interconnected criminal networks. It draws on initial contributions from participating EU-funded security projects and experts working on financial investigations, criminal network analysis, identity and document fraud, trafficking networks, digital evidence and related analytical capabilities.

The document examines an operational environment in which financial transactions, identities, behavioural patterns, relationships between individuals, digital evidence and cross-border activities increasingly need to be analysed together. A central finding is that no single source of information provides a complete picture of a complex criminal network. Financial, behavioural, relational, identity and digital signals may each reveal only part of a wider structure. Effective investigation increasingly depends on the ability to connect these different forms of information and transform them into a coherent investigative picture.

The Brief identifies fragmented information as one of the main operational barriers in investigations of criminal networks and financial crime. Relevant intelligence may be distributed across different systems, organisations and jurisdictions, making it difficult to identify connections, understand roles within criminal structures and recognise wider patterns of activity. The challenge is therefore not simply access to more data. LEAs need the analytical capacity to assess the significance of different signals and understand how financial flows, identities, relationships, behavioural indicators and digital information interact within the same investigation.

Another key finding is that interoperability cannot be reduced to technical compatibility between systems. Effective cooperation also depends on compatible procedures, legal processes, information exchange practices and organisational workflows. The Brief also highlights a semantic and professional dimension of interoperability. Differences in terminology, communication practices and approaches to digital evidence can create additional barriers when information moves between investigative teams, forensic specialists, criminal justice actors and authorities across jurisdictions.

The consultation also identified technological developments that are reshaping both criminal methods and investigative requirements. Cryptocurrencies create new demands for tracing and analysing illicit financial flows. AI-supported fraud, morphing attacks and other forms of identity manipulation can make fraudulent activity increasingly difficult to detect through conventional methods. At the same time, the growing use of online environments by criminal networks expands the range of multilingual, multimedia and behavioural information that investigators may need to assess. These developments increase the importance of analytical capabilities, operational validation and practitioner understanding of how new tools should be used and interpreted.

On this basis, the Brief identifies five initial areas for EU-level action: improving data integration and interoperability; strengthening analytical and investigative capabilities; enhancing training and capacity building; developing common approaches for digital evidence and communication; and supporting stronger cross-border understanding of criminal networks.

The common thread across these priorities is the need to connect information, capabilities and organisations more effectively. Addressing criminal networks requires more than individual tools or isolated datasets. It requires the conditions that allow different forms of intelligence to be combined, interpreted and used consistently across operational and jurisdictional boundaries.

The next phase will validate these findings with law enforcement practitioners and institutional stakeholders. This process will examine where fragmentation creates the greatest operational impact, which interoperability barriers are most difficult to overcome and where EU-level support could provide the greatest practical value.

The findings will then be developed further through expert consultation and translated into more concrete policy recommendations. The central question for WG2 is increasingly clear: how can Europe move from fragmented investigative information towards a more connected and actionable understanding of criminal networks?

Would your organisation like to contribute to future Cluster activities? Organisations coordinating or participating in EU-funded security research projects are invited to learn more about the LEA Projects Cluster and explore opportunities for collaboration.

For further information, please contact Kristina Isakzay, Cluster Coordinator at Privanova – kristina.isakzay@privanova.com.