Organized Crime Doesn’t Look Like It Used To

Organised crime in Europe is not simply “surging” in numbers; it is entrenching itself as a parallel system of power that regenerates faster than authorities can dismantle it, blurring the line between traditional gangs, corporate structures, and high-tech criminal enterprises.

Key Points

Europol now assesses 731 of the EU’s most threatening criminal networks, with an estimated 400,000 members drawn from 118 nationalities, but the jump from 25,000 to 400,000 reflects a shift in methodology as much as any raw explosion in gang size.^[1]^[6]^[13]
Law enforcement has neutralised or downgraded roughly three-quarters of the networks identified in 2024, yet more than 500 new networks have emerged in their place, indicating rapid regeneration rather than simple growth.^[1]^[7]^[8]
Around 85% of the most threatening networks now use legitimate businesses as covers or operational platforms, embedding organised crime inside the legal economy.^[1]^[2]^[12]^[17]
Drug trafficking remains the dominant criminal market, with cocaine and synthetic drugs at the core and one in five top networks linked directly to Latin America, but arms trafficking, cybercrime, and corruption tie these markets into a broader security challenge.^[1]^[4]^[7]^[16]
The evidence supports a picture of organised crime that is expanding, adapting, and embedding itself—yet the headline claim of a “surge of 400,000 gangsters” overstates what current data can reliably quantify.

From 25,000 to 400,000: What Changed, and What Did Not

Any serious look at Europol’s new figures has to start with the apparent leap: from about 25,000 members across 821 “most threatening” networks in the 2024 blueprint report, to roughly 400,000 individuals linked to 731 networks in the 2026 assessment.^[5]^[6]^[13] On its face, that suggests a sixteen-fold increase in membership in just two years. No responsible analyst should take that number at face value without asking how Europol counts.

The 2024 report explicitly described a relatively narrow universe: 821 networks, selected as “most threatening” by national authorities using their own criteria, with “total membership … exceeding 25,000 individuals.”^[5]^[6]^[15] These actors were treated almost like a top tier—networks whose reach, violence, or economic impact set them apart from the broader organised crime landscape. The 2026 figure of 400,000, by contrast, captures a wider perimeter: all members in networks that qualify under refreshed assessment criteria, plus associates and enablers active in the EU’s criminal ecosystem.^[1]^[6]^[7]

Europol itself signals that the decline from 821 networks to 731 “should not be read as a simple reduction in risk,” stressing that the change reflects “evolving assessment criteria” rather than a neat drop in organised crime.^[6] In other words, the denominator—the set of networks counted—has moved, and the definition of who counts as a “member” appears to have broadened from core network actors to the much larger universe of people who participate in or support organised crime.^[6]^[13]

This does not make the 400,000 figure meaningless; it does make it method-dependent. Without a fully published methodology showing how analysts extrapolated from case files, national intelligence, and investigative data, it is impossible for outsiders to verify whether the number captures a genuine escalation in criminal manpower or a reclassification of existing actors.^[5]^[6]^[12] That is the core of the counter-argument: the 400,000 appears plausible given the scale of drug markets, fraud, and corruption, but it cannot yet be treated as a precise census of “gangsters.”

Regeneration, Not Simple Growth: The Shape-Shifting Networks

Where the Europol data is more robust—and more alarming—is in what it says about turnover and resilience. Of the 821 most threatening networks identified in 2024, about 76–80% are no longer considered among the top tier today; many have been disrupted, dismantled, or lost capacity.^[1]^[6]^[7]^[12] On paper that looks like success: nearly four out of five of the most dangerous groups downgraded in just two years.

Yet Europol pairs that statistic with another: 533 new networks have emerged into the top-threat category in the same period.^[1]^[4]^[8] That means that while authorities are removing or weakening known groups, new configurations of criminals—often with different national mixes, tactics, and technological sophistication—are constantly taking their place. A “core group” of 198 networks has persisted, generally the most long-standing and hierarchically structured organisations.^[7] Around those hard cores, however, the landscape churns.

That churn is not random. The latest report and independent coverage by outlets such as OCCRP emphasise that the new networks are often more agile, exploit new technologies, and crowd into the same profitable markets—drugs, cyber-enabled fraud, migrant smuggling, and corruption—where predecessors were active.^[4]^[7]^[16] This is why Europol and watchdogs talk less about absolute numbers and more about “criminal opportunism”: the capacity of networks to reconfigure quickly when law enforcement pressure or market conditions change.^[6]^[7]

From an enforcement perspective, this regeneration matters more than whether the raw count sits at 731 or 821. It implies that success against one configuration does not reduce demand or criminal opportunities; it simply creates space for new networks to move in. The ecosystem adapts, often faster than legal frameworks and policing models can keep up.

Corporate Crime: How Legitimate Business Became the New Gang Territory

Perhaps the most consequential finding in the Europol reports is not the headcount but the extent to which serious organised crime has embedded itself inside the legal economy. In 2024, Europol estimated that 86% of the most threatening networks used legal business structures to disguise activities and launder profits.^[5]^[6] In the 2026 assessment, that figure sits at roughly 85%—essentially unchanged.^[1]^[2]^[4]^[12]

The stability of that percentage has prompted some commentators to argue that nothing much is changing; yet the persistence of such a high ratio is itself revealing. It tells us that for top-tier networks, operating through companies, trusts, and professional intermediaries is now normal practice, not a niche tactic. Evidence from broader EU strategy documents and research projects such as MORE confirms this picture: criminal groups invest in logistics firms, hospitality, construction, waste management, and other sectors where complex supply chains or cash flows can conceal illicit activity.^[14]^[17]

These structures perform several functions. They enable large-scale money laundering, often through layered invoicing, trade mispricing, or bogus consulting arrangements.^[17] They provide procurement channels for precursor chemicals, firearms, or other goods that can be diverted from legitimate trade into criminal markets.^[4]^[8]^[17] And they give criminals a façade of legitimacy that buys social capital and reduces scrutiny. It is no accident that many of the most longstanding networks, including mafia-type organisations, now resemble multinational corporations more than street gangs.^[1]^[11]^[18]

From the perspective of citizens and policymakers, this embeddedness is at least as dangerous as headline violence. It erodes the rule of law by normalising corruption, undermines tax bases, and distorts competition as criminal-backed firms undercut legitimate businesses. The EU’s own Strategy to tackle Organised Crime notes that criminal revenues in nine major markets reached about €139 billion in 2019—around 1% of EU GDP—highlighting the macroeconomic scale of the issue.^[14]

Drugs, Violence, and Hybrid Threats: Why Gangs Are Now a Security Issue

Drug trafficking remains the central pillar of organised crime in Europe. Both the 2024 and 2026 Europol assessments point to drug markets—particularly cocaine and synthetic drugs—as the primary activity of top networks.^[5]^[6]^[7] In the earlier report, half of the most threatening networks were involved in drug trafficking, with roughly 36% focused exclusively on that market.^[5]^[6]^[15] The newer assessment suggests that drug trafficking now accounts for around 36% of all most threatening networks’ main activities, with one in five of these networks directly linked to Latin America.^[1]^[4]^[7]

On the ground, video investigations and national case work show how this plays out. The “Cartel War” documentary on Latin American cartels in Europe describes Mexican and Colombian organisations leveraging European ports, pharmaceutical supply chains, and local mafias under a partnership model: Latin American cartels supply product and know-how; European gangs supply infrastructure, corruption, and local enforcement.^[16] Operations such as Fabrica—multinational raids uncovering dozens of industrial-scale drug labs—illustrate how Europe has shifted from a mere consumer market to a significant production hub for synthetic drugs and cocaine cutting facilities.

This drug economy drives a parallel arms market. Balkan-origin firearms, diverted from war stockpiles or poorly controlled arsenals, feed into gang conflicts in Western Europe, with police in cities like London now seizing guns daily.^[16] Meanwhile, cyber-dependent crime—ransomware, online fraud, crypto laundering—has become a profit centre for many networks, using the same corporate and technological infrastructure.^[4]^[7]^[19]

Overlaying all this is a growing concern about hybrid threats: the intersection between organised crime and state-linked actors. Research cited by European security think tanks and the Cartel War investigation suggests that Russian organised crime controls a significant share of heroin flows into Europe and participates in weapons trafficking; some of these actors are allegedly recruited or tolerated as proxies in broader efforts to destabilise EU and NATO states.^[16]^[19] The boundary between counter-organised crime and counter-terrorism becomes increasingly blurred when criminal networks provide logistics, finance, or deniable manpower for hostile intelligence services.

Technology, AI, and the Professionalisation of Crime

Europol’s latest assessment, and parallel cybersecurity reporting, underscore how rapidly organised crime is absorbing digital tools. The report stresses the “growing role of online platforms, encrypted communications, artificial intelligence, cryptocurrencies and professional enablers” in network operations.^[4]^[7] Criminal entrepreneurs now routinely use end-to-end encrypted messaging, dark web marketplaces, and crypto mixers to coordinate, trade, and launder money.

AI is not just a buzzword in this context. It amplifies capabilities in several ways: automated targeting of victims (for phishing or fraud), data-mining of leaked credentials, synthetic identity generation, and optimisation of smuggling routes based on surveillance of enforcement patterns. The Europol-coordinated takedown of services like Audi A6—a crypto laundering platform processing hundreds of millions of euros for ransomware gangs—shows how law enforcement is trying to match that sophistication, combining financial forensics with international cooperation.[N2K summary, Audi A6]

Professional enablers—lawyers, accountants, notaries, company service providers—form another layer of this professionalisation. While only a minority actively collude with criminals, their services are indispensable for building complex corporate structures, trusts, and cross-border vehicles that obscure beneficial ownership.^[17]^[18] As a result, tackling organised crime increasingly looks like a regulatory and compliance challenge as much as a street-policing problem.

Is Europe Facing a “Surge” of Gangsters—or a Deepening of an Existing Threat?

So does the evidence justify the headline that Europe now faces an “army of 400,000 gangsters”? On the one hand, long-term assessments from the EU’s Serious and Organised Crime Threat Assessment and the Global Organized Crime Index show that organised crime in Europe is broad, profitable, and persistent; criminal markets such as financial fraud, cocaine, and cybercrime have expanded or intensified in recent years, even as resilience measures improve.^[14]^[16]^[19] The combination of entrenched drug markets, corporate infiltration, corruption, and hybrid threats clearly marks a serious and evolving menace.

On the other hand, the specific “400,000” figure rests on internal Europol modelling that has not yet been fully opened to independent scrutiny. The contrast with the earlier 25,000-member estimate, and Europol’s own admission that changes in assessment criteria drive some of the numerical shifts, mean that the headline can easily be misread as a literal surge in headcount rather than a recalibration of who is counted.^[5]^[6]^[13] Critics, including some media and academic commentators, reasonably caution against treating the number as a hard census until the methodology is transparent enough to audit.

The more defensible reading is this: Europe is not suddenly overrun by brand-new gangs; instead, a vast and complex organised crime ecosystem—long underestimated in raw numbers—is being re-mapped in a way that better accounts for its true scale, connections, and embeddedness. In that ecosystem, the most threatening networks regenerate rapidly, exploit legitimate businesses, integrate advanced technology, and intersect with geopolitical tensions. Whether one calls that a “surge” or a “regeneration” is secondary. The underlying threat is structural, not episodic.

Where Evidence Is Thin—and What Needs to Happen Next

The Europol reports and independent research leave several gaps. There is still no public itemised list of the 731 most threatening networks, their leadership, and specific criminal portfolios; that makes external validation of both network counts and membership numbers difficult.^[1]^[5]^[12] Nor is there detailed breakdown of the 400,000 individuals by crime type, geography, or role—core member, associate, facilitator.^[1]^[6] Without such granularity, policymakers and citizens cannot easily weigh risks across markets (e.g., drugs versus fraud) or regions.

Financial data is also underdeveloped. While the EU has headline estimates of criminal revenues and occasional case-specific figures, there is no consistent, network-level quantification of how much money flows through the 85% of networks that exploit legitimate business fronts.^[14]^[17] For a threat so deeply tied to economic infiltration, this is a significant blind spot.

These gaps point toward obvious priorities: independent academic audits of Europol’s methodology; greater transparency about network typologies and geographic distribution; and richer financial intelligence on criminal proceeds and laundering routes. None of these undermine Europol’s work; they would strengthen it by making threat assessments more credible, comparable across time, and less vulnerable to politicised narratives about “surges.”