An international investigation led by Europol uncovered a global organised crime network after investigators analysed data from two mobile phones seized in rural Sweden. The case, known as Operation Candy, expanded from a local arrest into a multinational operation targeting drug trafficking and money laundering networks.
The investigation began in 2023 when Swedish authorities confiscated two phones from a suspected drug trafficker in a small town. Forensic analysis of the devices revealed encrypted communications, international contacts, and operational information linked to criminal activity far beyond Sweden. Investigators found evidence pointing to multiple interconnected networks operating across several continents.
According to Europol, the data extracted from the phones showed that the individuals involved were coordinating large-scale drug trafficking and financial crimes through a complex international structure. Communications uncovered on the devices indicated links between groups engaged in the distribution of synthetic drugs and the laundering of illicit proceeds through various corporate entities.
The discovery led investigators to widen the scope of the operation and coordinate with law enforcement agencies in multiple countries. Over the following two years, authorities used the information obtained from the phones to map connections between suspects and identify key figures in the criminal network. Europol said the case demonstrated how fragments of digital evidence can reveal broader criminal activity when analysed across jurisdictions.
On March 4, authorities carried out coordinated enforcement actions targeting suspected members of the network. Approximately 20 simultaneous house searches were conducted across several countries. Law enforcement agencies arrested at least 15 individuals in Sweden, Spain, Thailand, and Australia during the operation.
Officials said the arrests disrupted several parts of the organisation responsible for coordinating logistics and financial flows related to the drug trade. Investigators believe the network used corporate structures and international contacts to conceal ownership, manage supply routes, and move illicit funds between jurisdictions.
Europol officials said the investigation highlights the importance of digital forensic analysis in modern criminal investigations. According to Andy Kraag, head of Europol’s European Serious and Organised Crime Centre, investigators spent more than two years following leads obtained from the phones and transforming isolated pieces of intelligence into coordinated law enforcement action.
The case also illustrates the role of encrypted communications in organised crime operations. Investigators noted that the networks relied heavily on digital messaging systems and online marketplaces to coordinate activities and communicate with associates in different countries.
Authorities have not disclosed all technical details about how investigators accessed the contents of the devices. Europol said the evidence obtained from the phones played a central role in identifying the structure of the criminal networks and the individuals involved.
Investigations connected to Operation Candy remain ongoing as law enforcement agencies continue to analyse seized evidence and pursue additional suspects linked to the network.