Criminal Association — The Structure

Criminal networks are groups of people connected with criminal networks. … Criminal networks have the following features: the nucleus that coordinates the activity of the network; key players making up the nucleus of the network; subgroups carrying out different tasks; members on the intermediate level carrying out the daily work (Pullat, Criminal hierarchical structures. Models of organized crime in the Baltic Sea Region, SIAK-Journal, Austrian Federal Ministry of the Interior, 2009)

The danger lies not in isolated acts but in the structure: in the ability of networks to reproduce patterns, replicate harm, and survive beyond individual participants (OSCE, Transnational Threats Department – Organized Crime Report, 2020)

Their strength lies in the systematic distribution of roles, continuity of action, and ability to corrupt, infiltrate, or coerce (Europol, Serious and Organised Crime Threat Assessment (SOCTA), 2017)

In this article, we analyze the internal architecture of criminal associations, drawing on reports from Europol, the OSCE, GIJN, OCCRP, Amnesty International, and other official public sources.

We examine the distribution of roles, institutional complicity, strategies of invisibility, and the long-term dynamics that ensure the survival and impunity of such associations.

Our aim is to take the reader from abstract concepts to an overview of the architecture of a criminal association, translated into concrete roles and actors.

A criminal association can arise for various reasons. Criminology identifies recurring patterns such as the need to cover up a crime, the attempt to silence a victim in advance by falsifying the victim–aggressor narrative, or the elimination of those who reported the crime.

Within a criminal association, every measure taken to shield the original crime inevitably creates new vulnerabilities:

• the need to control the target through spying and harassment;
• to coordinate smear campaigns aimed at discrediting the target;
• to steal personal information to exploit;
• to falsify procedural notifications in order to obstruct participation and obtain judgments in absentia (as investigative projects such as those by OCCRP, GIJN, or reports by Amnesty International have reported in cases of procedural irregularities);
• to falsify narratives;
• to manipulate or corrupt institutions;
• to control witnesses;
• to prevent the target from accessing documents;
• to silence journalists;
• to corrupt officials;
• and to falsify statements and records.

As the network grows, the association is compelled to protect both the original perpetrators and the very structure that was created to shield them, a structure now composed of every past and current affiliate.

The direct interest of the original perpetrator must be considered: building a widening network of protection — voluntary or induced — that makes each member jointly responsible and motivated to safeguard both their own and the association’s impunity.

Such a structure can be maintained only as a collective mechanism of defense and survival: each new affiliate expands the protection network, making the fall of a single member a threat to the entire system.

The Internal Architecture – Stratification of Roles in Criminal Associations

Core Thinkers and Founders

Consistent with Europol’s analyses of networked criminal ecosystems, key actors can operate openly within legitimate spheres and may hold social or institutional legitimacy. Their strength often lies in deflecting suspicion through plausible roles in lawful domains.

At the foundation of criminal associations are individuals who conceptualize the criminal project, set strategic direction, and define internal structure. These are the Core Thinkers and Founders, whose primary function is to initiate, not necessarily to execute.

• The Mastermind typically serves as the ideological and strategic brain of the network. Involvement may be direct or indirect, but influence is constant: targets, goals, and long-term methods are usually defined here. In contexts of abuse-related silencing, such actors often design strategies to discredit victims, manipulate narratives, and coordinate institutional obstacles. Consistent with UNODC analysis on the use of professional and institutional cover, pivotal figures can also appear socially legitimate and integrated into professional environments — making them difficult to identify as criminal.
• The Founders act as structural engineers: they determine roles, select key actors, and shape operational logic. Their role is to ensure functional continuity, not necessarily to remain in the background.

In this layer, actors support and operationalize the strategic plan. They may not commit core offenses but enable the system’s survivability and impunity. Europol and EU partners describe these figures under labels such as enablers, facilitators, or criminal service providers. According to multiple reports (SOCTA and follow-ups), these roles may not coincide with the direct perpetrators but ensure continuity and protection.

• Institutional Contacts: officials within public administrations or municipal offices; in some documented cases, interactions also occur in judicial or diplomatic/consular contexts. Investigative projects such as Shadow Diplomats (ICIJ / ProPublica, 2022) and reports on corruption in public administration and bribery laws (OECD, GRECO, 2022–2023) have highlighted how even judicial or honorary consular positions have been misused in certain episodes for shielding suspects, facilitating trafficking, or obstructing accountability.
• Financial Shield: nominees/frontmen, accountants, or entrepreneurs who manage resource flows and legal business structures.
• Legal Shield: lawyers, notaries, or administrative professionals who can weaponize legal tools — through abusive litigation (e.g., SLAPPs) or even procedural frauds (such as falsification, concealment, or manipulation of procedural acts) — to frustrate investigations or shield members.

Strategic Enablers: Sustaining Operations Behind the Scenes

In this layer, we identify what can be described as Persistent Coordinators, digital surveillance specialists, or serial stalkers — analytical categories that capture recurring roles noted more broadly in reports under the labels of facilitators/enablers that exercise control through indirect, often non-violent means.

Their strategies include digital monitoring tools, intimidation, defamation campaigns, and systematic harassment.

• Cover-Up Specialists intervene post-action to conceal traces and preserve opacity and continuity.
• Peripheral Participants play occasional or one-time roles yet remain integral to functioning.
• Unwitting Contributors include manipulated informants and passive enablers — individuals who may not realize they are reinforcing the system through silence, normalization, or loyalty.
• Institutional Infrastructure may include the misuse of municipal offices, judicial channels, or — in isolated documented cases — diplomatic structures. Investigative reporting has shown instances where such structures were exploited for illicit activities (e.g., trafficking or corruption), obstructing investigations, delaying procedures, restricting victims’ rights, or shielding suspects — illustrating how even formal state institutions can be strategically instrumentalized.

Multiple investigations and reports — from Europol, OSCE, GIJN, OCCRP, Amnesty International, among others — describe how bureaucratic obstacles can be used strategically to suppress mobility, evidence, and legal protections.

Sustained Structural Dynamics — decentralization, invisibility, institutional leverage, and plausible deniability — make these associations resilient and difficult to detect.

Why Mapping Roles Matters

Because Sustained Structural Dynamics — decentralization, invisibility, institutional leverage, and plausible deniability — make these associations resilient and difficult to prosecute, mapping roles is essential to reveal how accountability is hidden, complicity normalized, and systemic patterns reproduced beyond single acts.

Mapping roles is essential to understand that criminal associations are not defined by single acts but by systemic patterns and the calculated distribution of responsibility. Recognizing repetition, coordination, and shared accountability within structures allows justice systems to confront the complexity.