An investigation coordinated under a Europol taskforce led to the dismantlement of a migrant smuggling network active across the Balkan route. The Serbian authorities arrested several suspects, including two police officers in an investigation involving Bulgarian law enforcement. The criminal network allegedly smuggled a large number of migrants between January and July 2026 alone, transporting them via Bulgaria, through Serbia and towards Western European countries.
The action day led to:
- 5 arrests (1 High Value Target, 2 police officers and 2 associates)
- 5 locations searched;
- Seizures include: 3 vehicles used for migrant smuggling activities, firearms and ammunitions, a radio station, mobile devices and cash (EUR 5 700 and RSD 40 000)
About EUR 1 300 per person to cross Serbia
Active since 2025, the criminal network is suspected of smuggling migrants from Türkiye via Bulgaria and Serbia into Western Europe. The core members are Serbian nationals based in Pirot, Serbia, and the network is allegedly involved in smuggling large groups of Afghan nationals.
Migrants arriving from Türkiye were transported through Bulgaria, where they were dropped off near the Bulgarian-Serbian green border. From there, they crossed independently to pre-arranged GPS coordinates, where they were picked up by network members. The network provided temporary accommodation and arranged onward transportation across Serbia toward Western Europe. Migrants paid about EUR 1 000 per person for transport from the Bulgarian-Serbian border to Belgrade. They paid around EUR 300 per person for the next leg of the smuggling route, Belgrade to the Serbian-Hungarian border. Most payments were made using the Hawala money transfer system.
Europol’s dedicated Operational Taskforce
Europol organised and coordinated multiple operational meetings between stakeholders, facilitating the exchange of operational data. Additionally, four Bulgarian investigators were deployed to Serbia, with Europol’s financial support, to assist Serbian authorities. On the action day, Europol also deployed an expert to Serbia, conducting real-time cross-checks against its databases to support national law enforcement.
This action was conducted under a dedicated Europol regional taskforce, established in September 2023. A dedicated officer was deployed to Sofia, Bulgaria to support national authorities in tackling migrant smuggling networks active across the Balkan route. Most recently, Serbia joined the taskforce.
New Europol centre reinforces support against migrant smuggling
Migrant smuggling remains a key criminal threat for the EU, requiring coordinated action across the entire criminal chain - from recruitment and transit, to the financial flows that sustain it. Europol supports investigations through a data-driven approach, enhancing cases provided by national authorities with operational analysis and expertise. Europol also facilitates information exchange and coordinates joint operations to disrupt criminal networks.
To strengthen Europol’s efforts to combat migrant smuggling, Regulation (EU) 2025/2611 was adopted in December 2025. This new EU legislation underscores the importance of addressing migrant smuggling at the EU level through enhanced cooperation, including the establishment of Europol’s European Centre Against Migrant Smuggling (ECAMS) in March 2026.
ECAMS ensures better systematic exchange of information and coordination of efforts. This includes strengthening expertise in OSINT and financial investigations, as well as enhancing the operational impact of the network of liaison officers from Frontex, Eurojust, and the Member States.
The following authorities took part in this action:
- Bulgaria: General Director for Combating Organised Crime (Главна дирекция Борба с организираната пресъпност)
- Serbia: Serbian Criminal Investigation Directorate, Service for Combating Organised Crime, (Управа криминалистичке полиције, Служба за борбу против организованог криминала).
Facts Only
* An investigation coordinated under a Europol taskforce led to the dismantlement of a migrant smuggling network across the Balkan route.
* Serbian authorities arrested several suspects, including two police officers in an investigation involving Bulgarian law enforcement.
* The criminal network allegedly smuggled migrants between January and July 2026.
* The smuggling route involved transport via Bulgaria, Serbia, and towards Western European countries.
* Five arrests were made: one High Value Target, two police officers, and two associates.
* Five locations were searched.
* Seizures included three vehicles used for smuggling activities, firearms and ammunitions, a radio station, mobile devices, and cash (EUR 5,700 and RSD 40,000).
* The cost to cross Serbia was approximately EUR 1,300 per person.
* The network is suspected of smuggling migrants from Türkiye via Bulgaria and Serbia into Western Europe.
* Core members are Serbian nationals based in Pirot, Serbia.
* The network allegedly smuggled large groups of Afghan nationals.
* Migrants were transported through Bulgaria to the Bulgarian-Serbian border, then crossed independently to GPS coordinates for pickup by network members.
* Payments for transport from the Bulgarian-Serbian border to Belgrade were about EUR 1,000 per person, and subsequent transport to the Serbian-Hungarian border was about EUR 300 per person.
* Most payments were made using the Hawala money transfer system.
* The criminal network is suspected of being active since 2025.
* Europol organized operational meetings and deployed four Bulgarian investigators to Serbia with financial support.
* Regulation (EU) 2025/2611 was adopted in December 2025, leading to the establishment of Europol’s European Centre Against Migrant Smuggling (ECAMS) in March 2026.
Executive Summary
An investigation coordinated by Europol led to the dismantling of a migrant smuggling network operating across the Balkan route. Serbian authorities arrested several suspects, including two police officers involved in an investigation with Bulgarian law enforcement. Between January and July 2026, this network allegedly smuggled a large number of migrants through Bulgaria, Serbia, and towards Western European countries.
The criminal network is suspected of smuggling migrants from Türkiye via Bulgaria and Serbia into Western Europe, with core members being Serbian nationals based in Pirot. The network allegedly smuggled large groups of Afghan nationals. Migrants were transported through Bulgaria, dropped off near the Bulgarian-Serbian green border, and then moved to pre-arranged GPS coordinates where they were picked up by network members. The group provided temporary accommodation and arranged onward transport across Serbia toward Western Europe. Payments for this transport ranged from approximately EUR 1,000 per person from the Bulgarian-Serbian border to Belgrade, and around EUR 300 per person for the next leg to the Serbian-Hungarian border, with most transactions using the Hawala system.
Europol facilitated the investigation by organizing operational meetings and deploying four Bulgarian investigators to Serbia with financial support. Europol also deployed an expert to Serbia to conduct real-time database checks. The network has been active since 2025.
Full Take
The structure of this operation reveals a deeply entrenched criminal architecture that exploits jurisdictional gaps and established transit corridors within the Balkan region. The involvement of law enforcement officers, including police from Bulgaria, suggests a severe compromise of internal security mechanisms, indicating that transnational organized crime is not just an external threat but one capable of internal corruption and infiltration. The network's reliance on Hawala transfers highlights a sophisticated mechanism for obscuring financial flows, placing the onus of detection squarely on state-level capacity rather than transactional tracing alone.
The operational reality—migrants moving across borders via pre-arranged GPS coordinates followed by organized local transport—demonstrates that smuggling is not random border crossing but a tightly managed logistical operation relying on specific nodes and infrastructure. The fact that core members are Serbian nationals based in Pirot points to the localization of criminal leadership, creating an internal vulnerability within the region's security framework.
The subsequent EU response, through Europol’s coordinated taskforce and the creation of ECAMS, signifies a shift toward addressing smuggling as a systemic issue requiring integrated intelligence-led action rather than isolated border control. The pattern suggests that successful disruption requires linking financial investigation (Hawala analysis) with operational coordination (Europol/Frontex synergy), recognizing that the human cost is inseparable from the logistical mechanism and the corruptional elements embedded within state structures.
Bridge Questions: How does the reliance on Hawala payments affect future efforts to track illicit finance across EU member states? What are the systemic vulnerabilities in Balkan transit infrastructure that allow such tightly coordinated, low-friction migration flows? What alternative models for regional security cooperation could bypass reliance on immediate law enforcement arrests to tackle long-term network resilience?