EUROPOL SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS · 2018-07-19 · INTRODUCTION TO EUROPOL OUR...

EUROPOL SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

Romain de Beausse – O50 Financial Intelligence Unit

EU Anti-Corruption sharing programme – June 25th 2018

Europol Unclassified - Basic Protection Level

INTRODUCTION TO EUROPOL

OUR MISSION

Europol’s mission is to support its MS in preventing and combating all forms of serious international and organised crime and terrorism.

• EUROPOL serves the Member States • EUROPOL does not have Enforcement

Powers or proper competencies for investigation.

• EUROPOL provides support to operational activities.

• EUROPOL can be involved in a Joint Investigation Team (JIT) and can provide operational support on the field.

• EUROPOL serves the Member States • EUROPOL does not have Enforcement

Powers or proper competencies for investigation.

• EUROPOL provides support to operational activities.

• EUROPOL can be involved in a Joint Investigation Team (JIT) and can provide operational support on the field.

Europol Unclassified - Basic Protection Level

Liaison Bureaux

Valuable concept of Liaison Officers network Operational & Strategic agreements

28 EU Member States Operational agreements: Albania, Australia,

Bosnia and Herzegovina, Canada, Colombia, Eurojust,

former Yugoslav Republic of Macedonia, Frontex, Georgia, Moldova, Montenegro, Iceland, Interpol, Liechtenstein, Monaco, Norway, Serbia, Switzerland, USA, Ukraine

Strategic agreements: CEPOL, ECB, ECDC,

EMCDDA, ENISA, EU-LISA, EUIPO, European Commission, OHIM, OLAF, China, United Arab Emirates, Russia, Turkey, UNODC, World Customs Organisation

INTRODUCTION TO EUROPOL

Europol Unclassified - Basic Protection Level

Data Exchange

Secure Information Exchange Network Application (SIENA)

SIENA is Europol's secure information exchange system. It is a new generation communication tool designed to enable swift, secure and user-friendly exchange of operational and strategic crime-related information and intelligence between the Member States, Europol and other law

enforcement cooperation partners.

INTRODUCTION TO EUROPOL

Europol Unclassified - Basic Protection Level

Operation Department The Analysis projects

AP – ANALYSIS PROJECT • Databases (AWF SOC – CT) + teams and software dedicated

to criminal analysis

• Processing and storage of mass data related to on-going cases.

• Databases that can be consulted only by Europol authorized user staff – Information broadcasted through reports or during operational/coordination meeting.

• Handling code system (Each information provider remains as owner of its data and can protect it)

INTRODUCTION TO EUROPOL

Data Exchange

Europol Unclassified - Basic Protection Level

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

Europol Unclassified - Basic Protection Level

Support to the

investigation

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

What are the issues ? What are the needs ?

Investigators’ issues ?

• International framework of Anti-Corruption investigations • Large amount of data to gather and analyze • Sensitivity of the investigation

Needs ?

• Regular contacts and cooperation with countries involved • Specific knowledge and tools to gather and analyze financial and

personal data • Cross-checks with financial intelligence data • Sharing information with third party being sure that data provided

will not be disseminated

Europol Unclassified - Basic Protection Level

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

International framework of Anti-Corruption investigations

• Secure communication between Member States (MS) and Third parties (TP)

• Real time exchanges thanks to our Liaison officers network

• Data protection thanks to “Handling Code”

• Operational meetings in our HQ in The Hague (NL) or on the field

Europol Unclassified - Basic Protection Level

What can we provide ?

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

Our Databases

Data from anti-corruption cases will be handled and processed in our databases. Then, it will be crosschecked against the following: • Other worldwide cases whose data have been

provided to Europol • Suspicious transactions reports (Provided by MS) • Cash declarations (Provided by MS)

What can we provide ?

Analysis Reports

Europol Unclassified - Basic Protection Level

SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

Knowledge and tools Documents analysis Financial information Analysis Support to interview preparations Forensic analysis (Phones – computers) House searches support

Assets identification Facilitation (CARIN

Network) Support to Asset recovery Office ARO Request

What can we provide ?

Europol Unclassified - Basic Protection Level

Ufed Cellebrite

Ufed Cellebrite

CASE STUDY

Example

Case Example From the theory to the practice

March 2018 : Europol support requested for a large Bribery case involving several MS (Europol Mandate).

Their Needs : 50688 documents to analyze. (Word processing files, Spreadsheets, emails, calendars) First Europol proposition step by step : 1. Sharing of Data 2. Defining a way to analyze the files 3. Defining a way and a schedule to release our analysis

Europol Unclassified - Basic Protection Level

CASE STUDY

Example

Case Example From the theory to the practice

1st Step : Collect data from the MS Because data are too heavy to be transferred through our SIENA Interface (50Mb Max), Anti-Corruption Unit used the Europol Large-File-Exchange Platform to drop their data (Web access or SSH access)

MS dropped 13.8 Gb on

Europol Servers

Europol Unclassified - Basic Protection Level

CASE STUDY

Example

Case Example From the theory to the practice

• 2nd Step : Light analysis of data provided and operational meeting 15 days after the reception of the data MS Investigators and Europol Specialists/Analysts met together to define how to coordinate action.

• 3rd Step : In-depth analysis and release of Europol productions MS NEEDS : During this first stage of investigation, MS investigators plan interviews and requested Europol Support to analyze and find any evidence related to each suspects/witnesses interview that can be found out in the data collected. EUROPOL PROPOSAL : Triage of documents (thanks to forensics software) by suspects/witness –Analysis of these docs by summarizing every relevant findings – Crosschecks of evidence gathered against Europol databases. Schedule : Europol reports have to be provided around 15 days before each interview.

Europol Unclassified - Basic Protection Level

CASE STUDY

Example

Case Example From theory to practice

4th Step : Interviews made by MS are processed by Europol After each interview, MS provide us thanks to SIENA with a copy of their interview. Evidence gathered are then crosschecks against Europol databases – STR – Cash declarations… Investigation are made thanks to our network to identify Assets. Analysts release an analysis report after each interview.

Analysis Reports

Europol Unclassified - Basic Protection Level

For more information follow us on:

@Europol_EU @EC3Europol

www.facebook.com/Europol

www.youtube.com/EuropolTube

www.europol.europa.eu