French and Spanish authorities took down an online marketplace selling fake identity documents to migrant smuggling rings operating within the European Union.
On May 27, law enforcement officers arrested one suspect in Alicante, Spain, and seized document-production equipment and approximately 800 counterfeit European identity documents from an apartment rented under a false name.
This investigation began after French authorities identified a website advertising counterfeit identity documents and traced the suspect to Alicante, where he had lived since 2024.
“The suspect is believed to have administered an online marketplace offering forged identity and administrative documents, in both physical and digital formats, to customers across Europe,” Europol said on Thursday.
“The platform allegedly facilitated migrant smuggling operations by supplying criminal networks with fraudulent documents used to evade border controls, fraudulently obtain residence rights and facilitate secondary movements within the European Union.”
Europol expanded its capacity to combat migrant smuggling in March 2026 after a new EU regulation adopted in December 2025 established the European Centre Against Migrant Smuggling (ECAMS).
ECAMS is tasked with strengthening intelligence sharing, financial investigations, and coordination among Frontex, Eurojust, and member state law enforcement agencies.
Europol’s 2025 EU Serious and Organised Crime Threat Assessment (EU-SOCTA) flagged document fraud as one of the main enablers of fraudulent legalization of residency and migrant smuggling within the EU, noting that criminal networks rely on counterfeit and forged IDs to sustain operations across the Schengen Area.
“By providing access to fraudulent identity and residence documents, criminal networks generate significant illicit profits while enabling a wide range of criminal activities,” Europol added. “The dismantled facility in Alicante demonstrates the critical role that document fraud infrastructure plays in sustaining migrant smuggling networks operating across Europe.”
On Wednesday, Europol also announced that European and international law enforcement agencies from 13 countries dismantled nine organized crime groups and arrested 29 suspects in a major crackdown on illegal streaming operations.
Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.
Get the whitepaper
