Annual Report Fedpol 2015

annual report fedpol 2015

fedpol 1

Together against terrorism

2015 was an exceptional year: a fraught Border Guard, the Federal Department of and so too is crime. In this context fedpol geopolitical situation, thousands of Foreign Affairs, the cantonal police corps has to look ahead and anticipate future people forced to flee their country and and the Police Management Support Staff. risks and challenges. The tasks of fedpol step into the unknown, and of course They all joined fedpol that day to analyse are like our environment: complex and terrorism, which struck time and again. the threat faced by Switzerland and to interconnected. In light of this, we have As Paris found itself in the grip of terror implement initial measures. This is the to remain dynamic, flexible and profes- attacks for the second time that year, 2015 image from 2015 that will stay with me: sional. And we are fully committed to ended as it had begun. But fedpol had all partners, from the cantons and federal achieving this goal, day after day. come a long way between the two terror government, coming together around This idea of a world on the move is attacks. The hard work of the TETRA Task a table to seek common solutions. reflected in our annual report, which has Force is paying off, with more than 70 cases In our complex and interconnected world, been given an overhaul and is now more handled by fedpol and the Federal Intelli- co-operation and co-ordination are essen- concise, easier to read and looks different – gence Service by the end of 2015, including tial, and this is a principle that also guides with an aesthetically pleasing central theme. some 50 cases in which the Office of the the work of fedpol. As a police service, we Attorney General of Switzerland opened are no longer able to act alone; we are only Wishing you an interesting criminal proceedings. In order to respond effective if all partners in Switzerland and and enjoyable read, to the threat, the authorities involved in the abroad join forces and take joint action. This fight against terrorism worked tirelessly will become clear as you read through our Nicoletta della Valle, Director under the influence of the task force to add annual report. Whether the arrest of a jewel to and strengthen the measures in place. thief, the conviction of three Iraqi jihadi On the morning of 14 November, the terrorism sympathisers or the extradition of day after the Paris attacks, fedpol took suspected mafia members to Italy, our work part in a round-table discussion with its always has an international dimension and partners: the Federal Intelligence Service, is based on co-ordination and co-operation. the Attorney General’s Office, the Swiss The world is moving and developing,

Contents 6 26

Carte blanche for Aurel Märki In the year of Charlie Hebdo, we 6 8 12 16 18 decided to give illustrator Aurel Märki #jesuischarlie Fighting terrorism successfully Committed to a common Stopping the flow of terrorist Islamic State funding a kind of carte blanche to illustrate 2015 begins with a hashtag – A suspected terrorist attack and cause funds Understanding where Islamic State fedpol’s annual report. The only Switzerland’s security services unite thousands of hours of investigations fedpol Director, Nicoletta della Valle, Combating terrorism by tackling funding comes from and where the specification given to the artist was the against terrorism. lead to charges against three Iraqis. and Attorney General of Switzerland, terrorist funding. money goes. obvious theme: terrorism. The result Michael Lauber, on co-operation and is a series of powerful yet sensitive lovely shoes. illustrations to accompany the text and encourage readers to engage with the topics. 20 22 26 28 32 Complex cases and greater Millions in payoffs Mafia and co. Race against time Cyber criminals become more reporting Corruption scandals pose significant Human trafficking, drug trafficking, Thanks to close national and professional The number of money laundering challenges to investigators. arms trafficking and fraud - Fighting international police co-operation, Whether data theft or e-mail attacks – reports rises – Proof that the system organised crime through mutual legal fedpol can track criminals within hours. Cybercrime becomes more professional works. assistance. in 2015.

38 40 42 46 48 People for sale A multi-billion business Selfie with François Hollande Explosives in terrorist hands At the centre of policing in International police co-operation Thousands of refugees are at the A visit by President Hollande triggers an Innocuous substances as the basis for Switzerland is essential to combating human mercy of unscrupulous smugglers – immense security operation. explosives. fedpol is at the heart of police work and trafficking. A lucrative business. the link to Switzerland’s international partners – A portrait. A year of Charlie 2015 started with bewilderment and a hashtag that in the space of a few hours became a symbol of solidarity and freedom of expression. Paris, Copenhagen, Sanaa, Jakarta, Sinai, Istanbul – the list is long for 2015, a year marked by terrorist attacks.

#jesuischarlie

When the editorial office of Charlie Hebdo Efficient co-ordination and co-operation improving the fast exchange of informa- was attacked in January 2015, the TETRA within the task force has strengthened tion between the federal government and Task Force had already existed for several and simplified the investigation work. cantons in suspected terrorist-related months. It is led by fedpol and allows the Information is rapidly shared between cases. The growing number of reports in federal government and cantons to work the partners involved and the cases are this respect shows that this aware- closely together to co-ordinate, evaluate handled swiftly. Combating jihadi terrorism ness-raising work is paying off. and optimise the necessary measures is a particular challenge for fedpol (see p.8). Missing person reports are a good to fight terrorism in Switzerland. This is why a rapid and reliable exchange example of this. Most of the time, the In autumn 2015, the Federal Council of information between the authorities is police learn about new cases of individuals approved a national strategy to combat crucial to the work of the investigators. travelling to conflict regions to fight jihad terrorism. This serves as a guideline for when their relatives report them as the work of the TETRA Task Force. The Identifying potential jihadis missing. If these reports are processed aims of the task force are clear: to prevent To stop the export of terrorism from without delay and the information is imme- terrorist attacks in Switzerland, to prevent Switzerland to other countries, jihad-moti- diately passed on to fedpol, the law the export of terrorism and to ensure that vated trips to conflict regions must be enforcement services can act quickly. For Switzerland is not used as a logistical prevented. The law enforcement services example, in early 2016, the parents of a base by terrorists. In 2015, the TETRA Task have a range of tools at their disposal to Swiss girl living abroad contacted the Force published two reports explaining detect the travel plans of suspects (see cantonal police to report their daughter as its activities and the measures taken. p. 10 and p. 31). Sharing information is missing. According to the parents, the essential to ensure a co-ordinated young woman wanted to travel to Syria Ongoing investigations approach. To this end, major efforts were with her child to join the terrorist organisa- The figures speak for themselves: in made in 2015 to raise awareness among tion, Islamic State. The cantonal police collaboration with the Federal Intelligence police services and the Swiss Border Guard immediately informed fedpol. In collabora- Service, fedpol handled more than 70 cases of jihad-motivated travel. Efforts focused tion with the Attorney General’s Office, the of suspected sympathisers and supporters on establishing standardised, internation- Federal Intelligence Service and the of jihadi terrorism, and in some 50 cases the ally proven indicators to help identify Federal Department of Foreign Affairs, Office of the Attorney General conducted would-be terrorist fighters travelling to fedpol initiated all the necessary meas- criminal proceedings assisted by fedpol. conflict regions. A further focus was on ures. The woman was arrested before she

8 fedpol After 13 November It is late evening on 13 November 2015. The death toll of the attacks carried out

7 January 2015: Following the attack on the offices a few hours earlier in Paris is rising by of Charlie Hebdo, people throughout the world the minute. fedpol decides to send two come together to show their solidarity with the members of staff to Paris to support the Paris victims. work of the Swiss embassy. The following morning, the Security Core Group, in which fedpol is represented, calls a crisis reached Syria and the child was placed in as it promotes the sharing of information meeting with all the authorities involved. the care of the father. On her return to and experience with European partners. The Federal Intelligence Service, fedpol, Switzerland, the Attorney General’s Office The aim of the working groups is to define the Attorney General’s Office, the Federal initiated criminal proceedings against the common strategic axes. Everyone must Department of Foreign Affairs, the Swiss woman. pull in the same direction. Such co-op- Border Guard and the cantonal police On the one hand, therefore, the export of eration is extremely valuable to fedpol services therefore sit together round a terrorism from Switzerland to other because fighting terrorism only makes table to decide on initial measures and countries needs to be prevented. On the sense at an international level. Whether to support French investigations in Swit- other hand, potential terrorists must be combating the funding of terror (see zerland. A few hours later, the president stopped from entering Switzerland. In 2015, p.16), regulating the handling of firearms of the Swiss Confederation, Simonetta fedpol issued 15 entry bans to jihadis. This or managing airline passenger data – the Sommaruga, gives a statement to the brings the total number of entry bans list of issues requiring global solutions is media on behalf of Switzerland. The next issued since the beginning of 2012 to 30. long. fedpol is heavily involved in these few days are non-stop: fedpol and its issues to ensure that Switzerland can play partners continually assess the situa- An international fight its part in effective counter-terrorism. tion, evaluating the fitness for purpose A defining image of 2015 was the solidarity of the existing measures and adapting march involving heads of state from all Raised terror threat – in Switzerland too them where necessary. In addition, over the world amid huge crowds in Paris. The Federal Intelligence Service reiter- all information that may be related to Since then, fighting terrorism has featured ated in 2015 that the terrorist threat to the Paris attacks has to be verified in at the top of the international agenda Switzerland is still high and raised the level order to identify any potential clues or and numerous initiatives have been again in November. Intelligence sources tip-offs that may be useful to the French implemented to improve international suggested that IS had sent people to authorities. In the weeks following the co-operation. One example is Europol’s Europe to plan and carry out attacks. The attacks, fedpol follows up on some 290 European Counter Terrorism Centre, which Paris attacks committed on 13 November reports on persons and objects, verifies identifies terrorist and violent extremist 2015 (see box) unfortunately substantiated 400 tip-offs and implements operation- web content. Switzerland is represented such fears. The long list of terror attacks al or co-ordinating measures in over in the Europol working groups by fedpol. committed in 2015 is a reminder that the 100 cases. Switzerland’s participation is important fight against terror is far from over.

fedpol 9 Counter-terrorism investigations On 21 March 2014, the police arrested three Iraqi nationals as they were leaving their flat in Beringen in the canton of Schaffhausen. They were suspected of planning a terror attack. The complex investigations came to an end in early 2016 when the three Iraqis were convicted by the Federal Criminal Court. Fighting terrorism successfully

On 14 March 2014, the Federal Intelli- the job done.” The day after he returned Combing through vast amounts of data gence Service informed fedpol about a to Switzerland, he met up with his two The electronic data discovered at the person residing in Switzerland who was accomplices in Beringen. The investigators protagonists’ property was extremely allegedly involved in planning a terrorist from fedpol hesitated and consulted with valuable. IT forensics experts at fedpol attack. According to the service, the the Attorney General’s Office. What should combed through seized computers and individual was in touch with a suspected they do? Arrest the trio and risk intervening mobile phones. In the case described leading member of the Islamic State of too soon? Or wait and therefore put public above, two terabytes of data were seized. Iraq and the Levant in Syria. A meeting security at risk? The safety aspect prevailed Information from social media chats was had allegedly taken place with another and, after a long week of intensive moni- essential to the investigations. The sheer protagonist to plan the attack. toring, the three suspects were arrested. volume of data involved posed major The Office of the Attorney General of challenges to the investigators: in the Switzerland acted immediately: a criminal The search for sources case described, 30,000 lines of Facebook investigation was launched and a whole What applies to many investigations also chats were transcribed and analysed. catalogue of measures was put in place. applies in the field of terrorism: they almost Whole teams were mobilised to analyse The transmitted information was checked, always have an international dimension. the material. The operational analysts the suspects located and put under surveil- However, the exchange of police informa- processed the data supplied by providers lance, and telephone calls monitored. tion with countries such as Syria and Iraq into a format that could be used for Suspicions mounted against two Iraqi is practically impossible due to limited further processing. Next, it was the turn citizens and an unidentified person. The legal frameworks. It is difficult to estab- of the translators to transform the chats phone taps suggested contact with ISIL. lish what is happening on the ground and conducted in Arabic into German, not an One of the suspects travelled to Turkey. to compile substantial evidence. Even easy task given that the content contained According to the monitored phone conver- if the investigating authorities obtain numerous abbreviations and coded sation, he allegedly obtained information information, it cannot always be used in expressions. The operational analysts there which “would be useful in getting court for reasons of source protection. then worked with the investigators to

10 fedpol 29 February 2016: The defence counsel on the first day of proceedings at the Federal Criminal Court in Bellinzona against four alleged IS members charged with planning a terror attack in Switzerland.

Verdict of the Federal Criminal Court In March 2016, the Federal Criminal Court found two of the defendants guilty and sentenced them to four years and eight months’ imprisonment for involvement in a criminal organisation. The third defendant was sentenced to three years and six months’ imprisonment for supporting a Fighting terrorism criminal organisation. The fourth defendant was acquitted.

successfully called for. In the case of the three Iraqis, the incriminating evidence was stacking up. comb through the data for incriminating as Co-operation with US law enforcement Custody was therefore extended until the well as exculpatory elements, to verify the Early on in the investigations, links to the trial. “We can’t afford to get lost in details information and search for helpful clues. United States became evident. As part and have to focus on what’s important”, the of the Operative Working Agreement leading investigator explained. “We could Understanding correlations concluded with the US, a joint investiga- make countless speculations and follow To make this possible, the context, cultural tion team was deployed. This helped the up every lead. But we have to set priorities, background and history of ISIL have to be investigations move forward more quickly: take the right action and be determined understood. This is where the strategic proceedings were accelerated and FBI about staying on track.” And that paid off. analysts step in to analyse and interpret agents could request data from suspi- At the end of 2015, following several thou- the content. On the basis of this work, the cious chats directly from the Facebook sand hours of analysis and investigation, the investigators search for clues and prom- operators and share relevant information suspects were charged. Thanks to the anal- ising leads. Drawing on the chronology of with fedpol. Such co-operation bene- ysis of the data and the interrogation of the events that led to the founding of Islamic fits both sides, since the incriminating defendants, the federal prosecutor was able State, the analysts traced the history of evidence can be used by fedpol and the to charge another individual. The defend- the three Iraqis. Various allusions made US law enforcement agencies alike. ants were accused of being members of to specific events in the chats revealed and supporting a criminal organisation, and that they had subscribed to jihadi ideology Staying focused smuggling other IS followers into Europe. for a number of years. The vocabulary The important thing is not to waste any “The job is done”, said the leading investi- they used also pointed to the activities time. As the leading investigator stressed: gator. “The main goal of any investigation is of IS. The analysts also investigated the “We mustn’t forget that these individuals to find out the truth. This involves searching suspects’ chat contacts and traced them. are being remanded in custody because for incriminating and exculpatory evidence. The information gleaned in this case they are suspects. If this suspicion does The final verdict is secondary – although of revealed that the three Iraqi nationals not prove true, they will have been deprived course a conviction also provides a certain had smuggled jihadis into Europe. of their freedom for nothing.” Efficiency is degree of recognition of the work done.”

fedpol 11 Law enforcement The work of the law enforcement services is subject to strict statutory provisions. The stronger the suspicion, the tougher the coercive measures. The chart provides a simple overview of the various phases of law enforcement in Switzerland.

Vague suspicion Growing suspicion Suspicion

Information, leads or suspicion by the public

Information from the Federal Intelligence Service

Stages

Prevention: Preliminary inquiries: Police investigation: Criminal proceedings: Hazard control and intelligence fedpol gathers information on sus- fedpol identifies a crime and informs Attorney General opens an investiga- There is sufficient evidence to bring a Court reaches a verdict on the charg- gathering by the Federal Intelligence pect(s) from various sources the Attorney General’s Office tion and fedpol continues gathering charge against the suspect es brought by the Attorney General’s Service evidence Office

Possible measures (not exhaustive)

ɳɳSurveillance in publicly accessible ɳɳEvaluate open sources ɳɳSecure traces and evidence ɳɳHouse searches ɳɳPre-trial detention places ɳɳGather information ɳɳTake person(s) in for questioning ɳɳSeize evidence ɳɳIntercept telephone calls ɳɳIdentify suspect’s movements and ɳɳConsult official files ɳɳSurveillance ɳɳAlerts ɳɳFreeze/seize identity documents contacts ɳɳUndercover investigation ɳɳDuty to report

Statutory provisions

Internal Security Act Central Offices Act Criminal Procedure Code Civilian Intelligence Act

12 fedpol Reasonable suspicion Strong suspicion Legal proceedings

Stages

Prevention: Preliminary inquiries: Police investigation: Investigative proceedings by the Attorney General’s Office: Criminal proceedings: Hazard control and intelligence fedpol gathers information on sus- fedpol identifies a crime and informs Attorney General opens an investiga- There is sufficient evidence to bring a Court reaches a verdict on the charg- gathering by the Federal Intelligence pect(s) from various sources the Attorney General’s Office tion and fedpol continues gathering charge against the suspect es brought by the Attorney General’s Service evidence Office

Possible measures (not exhaustive)

Statutory provisions

Internal Security Act Central Offices Act Criminal Procedure Code Civilian Intelligence Act

fedpol 13 “Good co-operation requires everyone involved to feel that they are working towards the same goals.” Michael Lauber

They work together around the clock. fedpol and the Office of the Attorney General. Police officers and federal prosecutors. This partnership must work if investigations into serious crime are to be successful. We spoke to the two key players.

Committed to a common cause

Let’s start with a look back at the to face future challenges. Secondly, many The current context is not the same as past year. What particularly stands staffing decisions were made. It was also it was before. Has anything changed out in your minds about 2015? a year of high-profile cases: I’m thinking of regarding law enforcement over the years? Nicoletta della Valle, Director of fedpol Petrobas, the football corruption scandals, M. Lauber : I don’t think law enforcement For me 2015 was my first full year as data theft at HSBC, as well as the numerous has changed much over the years; however, director of fedpol. It was a year when proceedings related to jihadi terrorism. society’s expectations of it have changed. we reflected on our organisation and Nowadays, people sometimes expect law how we can improve and optimise our Do you see the many attacks in enforcement to provide solutions to society’s resources to meet future challenges. 2015 Europe in 2015 as a turning point problems – beyond the scope of criminal law. was also shaped by terrorism; Charlie in the fight against terrorism? But this is not the role of law enforcement. Hebdo, the Bataclan, Tunis, Copen- M. Lauber : The terror attacks in 2015 once This is why communication is important, so hagen. These attacks not only kept us again brought home the fact that the that we don’t create false expectations and busy with investigations on behalf of the threat is real and can also affect Swit- to ensure that our role and mission are clear. Attorney General’s Office, they were also zerland. But I don’t see 2015 as a turning N. della Valle : It’s true that sometimes formative for police co-operation with point. For me, there’s no doubt about it: people expect law enforcement to solve our partners in Switzerland and abroad. the turning point was 11 September 2001. all of society’s problems. This can be seen The work of the TETRA Task Force was N. della Valle : I remember 11 September at the moment in the case of terrorism, intensive and productive. 2015 showed 2001 very vividly; the images were truly but the phenomenon of radicalisation us that nothing works without effective shocking. Perhaps the difference between goes far beyond the work of the security national and international co-operation. then and now is that we perceived the services. We are only a part of the solu- Michael Lauber, Attorney General 9/11 attacks to be happening a long tion, but this is a wider social problem. 2015 was an important year for the Attorney way away, committed by terrorists from Finding an answer is a challenge for all General’s Office. Firstly, we took some far-off places. Now the attacks are taking of society, not just law enforcement. fundamental decisions about the structure place on our doorstep and the poten- M. Lauber : There have also been a number of the office in order to be better equipped tial terrorists are here among us. of positive developments, such as the way

14 fedpol co-operation, we already have a very good basis for successful co-operation. Nicoletta della Valle and I believe in this. In the framework of our investigations, listening to and respecting police officers has proven essential. This is a commitment that is very important to me. N. della Valle : I like to compare the division of roles between the federal prosecutors and the we work with our else that has fundamentally transformed police with those in a hospital, where the partners, which police work are the new communications doctors and nursing staff work hand in has been stepped technologies that play a key role in all hand in their respective areas of respon- up and has signif- investigations. The internet in general, social sibility and nothing works without the icantly improved. media, mobile devices and computers are other. They complement each other and And this applies to changing the nature of police work. These both are indispensable. Our co-operation our co-operation technologies are a challenge, and every works when everyone is aware of their role, with fedpol, the Federal Intelligence Service, police officer these days needs to have basic whether police officer or federal prosecutor, FINMA, the cantons and our international IT skills. It also means we need what we call and when everyone respects the work partners. Co-operation is a top priority as forensic IT experts, i.e. proven experts with and the expertise of others. It shouldn’t nowadays we can only fight crime if we sound specialist knowledge in the field. be about power, or about squabbling over work together. International exchange is M. Lauber : Indeed, and in this sphere responsibility, but about our shared and of fundamental importance. All the major everything moves so fast; transmitting complementary commitment to the same cases involving money laundering, such as information via social networks is enabling cause. We have a good rapport and work the Petrobas affair, have an international a completely new type of interaction. This well together. This doesn’t mean that we dimension and we rely on efficient co-opera- is why the revision of the Federal Act on the always agree, but we respect each other’s tion at operational and strategic level. In the Surveillance of Postal and Telecommunica- opinions and move forward together. investigation involving four Iraqi nationals, tions Traffic is so important to our work. the Operative Working Agreement with And finally: can you describe the the United States was extremely useful fedpol and the Attorney General’s attorney general in two words? to us. We need to contemplate whether Office work together: fedpol inves- N. della Valle : That’s an easy one – agreements of this type could also be tigates on behalf of the Attorney nice shoes! No, I’m just joking … concluded in cases of white-collar crime. General’s Office which in turn leads intelligent and tenacious. N. della Valle : Without international co-op- the proceedings. How does this divi- And fedpol’s director? eration, we can’t do our job successfully. sion of roles affect co-operation? M. Lauber: Modern and complex! fedpol is the single point of contact for M. Lauber : Good co-operation requires What do you admire most international police co-operation and is fully everyone involved to feel that they are about each other? committed to national co-operation and working towards the same goals, both N. della Valle co-ordination. A key element of interna- in their individual roles and in a comple- He’s always friendly and never tional police co-operation are our police mentary manner. And it has to be clear seems to get annoyed. Some- attachés. For example, our liaison officer that both partners are needed to make times I wonder how he does it. was actively involved in the Petrobas affair progress. If we firmly believe in the benefits M. Lauber on the ground in Brazil. And something of this complementarity and the need for Her energy!

“Without international co-operation, we can’t do our job successfully.” Nicoletta della Valle

fedpol 15

Financing of terrorism The events in Paris showed that terrorists require enormous financial resources to carry out such devastating attacks. But where does their funding come from? And how can the financing of terrorist attacks and organisations be prevented?

Stopping the flow of terrorist funds The terror organisation Islamic State is SARs involving terrorist financing mediaries with regard to terrorist financing financed primarily through protection on the rise undoubtedly also contributed to higher money (taxes) and other revenue collected The two main issues in Switzerland with reporting volume. The asset value of SARs under coercion in the IS-seized territories. regard to the financing of terrorism are the involving terrorist financing also rose: at Sources of revenue from abroad play a procurement of funds from people residing CHF 32 million it is at its highest level to date. less important role (see page 18). IS uses in the country and the misuse of the finan- MROS prioritises cases involving the the funds for building up the organisa- cial sector to bring together assets from financing of terrorism. If an initial analysis tion, administering the territory under various sources abroad and transfer them finds there is sufficient evidence of terrorist its occupation and paying its fighters. back abroad to finance terrorist activities. financing, MROS forwards the SAR to the Switzerland, too, could become a target of The financial sectors mainly affected are appropriate law enforcement service in attack or be used as a support base for plan- banks, service providers, such as money Switzerland or abroad. Sometimes these ning and carrying out attacks. According transmitters, and credit institutions. SARs play an important part in international to the Coordination Group to Combat In 2015, the Money Laundering investigations or criminal proceedings. Money Laundering and the Financing of Reporting Office Switzerland at fedpol The following example illustrates the Terrorism, of which fedpol38 is a member, received 38 Suspicious Activity Reports importance of international co-operation and the risk of Switzerland being misused by concerning the financing of terrorism. fast action: A concerned father contacted criminal and terrorist organisations is fairly This was a marked increase over the 9 his underage son’s bank because the latter low. However, combating the financing of SARs in 2014. The reports were mainly had gone missing. The father asked the terrorism is becoming an increasing priority triggered by articles in the press. The bank for information on his son’s spending; at both national and international level. heightened awareness of financial inter- apparently his son had been acting out of

18 fedpol 32 SARs concerning the financing of terrorism

character recently. The bank followed up on the world, which makes it attractive assets and curbing the illegal trade in the enquiry and established various cash to use in the financing of terrorism. cultural objects. Further measures include withdrawals abroad. It reported its findings granting Financial Intelligence Units to MROS, who forwarded the information Fighting terrorist financing such as MROS better access to centrally to the authorities of a number of countries through co-operation stored bank data, and tightening controls that the suspected jihadist traveller had In 2015, the first National Risk Assessment with respect to anonymous payment visited. Thanks to this exchange of infor- on Money Laundering and the Financing of methods. Switzerland welcomes these mation, the young man was arrested three Terrorism was published in collaboration discussions and has a keen interest in days after his disappearance and 24 hours with fedpol. The NRA report contains the effective and practicable measures to after fedpol had received the bank report. first comprehensive assessment of the combat the financing of terrorism. To this Alternative money transfer systems risks of money laundering and the financing end it is actively involved in several Euro- such as the Hawala (an informal transfer of terrorism in Switzerland. It reveals that pean and international working groups. system that functions worldwide) are financial crime in Switzerland is a reality also used to finance terrorist activities. and that the proceeds from crime (mostly 38However, it is not clear what part these committed abroad) are laundered here. transfer systems play in Switzerland. In The financing of terrorism is a topic of a few recent cases, money transactions intensive debate throughout Europe too. have also been made using pre-paid credit Besides closer national and international cards. This method of payment is anon- co-operation, greater weight is to be given ymous and can be used easily around to blocking or freezing terrorist-related

million francs – total asset value of SARs involving terrorist financing 32 fedpol 19 Islamic State funding

Islamic State is a terrorist organisation that has state-like control of wide areas of territory and for whom funding is, accordingly, of even greater significance than for conventional organisations. The diagram below is based on hypotheses and illustrates how IS is funded and what it in all probability uses the money for.

TURKEY

CYPRUS

SYRIA ISRAEL 5 Support from foreign terrorist fighters

Foreign terrorist fighters support IS not just by joining the organisation to fight. They also finance their own travel and part of their own equipment.

Where does the money go to?

The majority of the money is spent on building and con- solidating the organisation’s administrative structures in IS-controlled territory, and on wages for its fighters. Presumably some money also flows abroad to finance terror attacks, although terrorists finance their violent crimes to a great extent themselves.

JORDAN SAUDI ARABIA

ISRAEL 20 fedpol 4

Where does the money come from?

1 Exploitation of occupied territory

IS imposes taxes on millions of people living in IS-controlled territory. Other sources of funding include bank raids, armed robberies and expropriation. Further revenue comes from agriculture, the control and trade of raw materials, and trafficking in stolen antiques.

2 Kidnappings

In the last few years IS has kidnapped hundreds of people, particularly inhabitants of IS-controlled regions in Syria and Iraq. Kidnapping is not only a means of generating funds through ransoms, but also serves propaganda purposes.

IRAN

3 Donations

Donations account for a lower proportion of revenue. However, occasionally IS receives generous donations from wealthy, private financiers from the Arab world. Fundraising through non-profit organisations is becoming an increasingly important source of revenue.

IRAQ

4 Crowdfunding 3 Like donations, fundraising through modern communication networks such as Twitter or its own social platforms is becoming an increasingly significant source of income for IS.

fedpol 21 Money laundering The dramatic increase in Suspicious Activity Reports involving money laundering and the financing of terrorism proves that tighter legislation, better information systems and greater awareness on the part of the banks are effective. The exchange of information with partners abroad is also increasingly important.

Complex cases and greater reporting

In 2015, fedpol’s Money Laundering Money laundering and money mules Greater international co-operation Reporting Office Switzerland received 2,367 ’Phishing’ is the attempt to steal a person’s In the fight against money laundering SARs in connection with money laundering. identity by accessing the personal data of and the financing of terrorism, MROS can This was 35% more than the previous year. an internet user by means of fake websites, exchange information with partner Finan- The increase was due both to the e-mails or text messages. The aim of this cial Intelligence Units abroad. The number scandal surrounding the Brazilian state oil type of fraud is to use the data to plunder of inquiries MROS made to its foreign coun- company Petrobras and three other major the victim’s account. To launder the money, terparts in 2015 rose significantly. One of cases, and to the heightened awareness fraudsters use financial agents known as the reasons for this was the growing inter- of financial intermediaries. MROS, as the money mules. The racket works as follows: national entanglement of financial flows. central reporting office for cases involving The money mule responds to an adver- In 2015, MROS sent 579 inquiries on suspected money laundering and terrorist tisement or is contacted by a third person 2,144 natural persons and legal entities financing, acts as a liaison and filter and asked to make his bank account to 95 foreign FIUs. Where SARs involve between financial intermediaries and the available for the transfer of money (often people or legal entities from abroad, prosecution authorities. One of its tasks is a four-digit amount) that orginates from MROS can request information that may to raise awareness among financial inter- hacking an account. The money mule be important for its analysis from its mediaries of money laundering and terrorist is then directed to withdraw the sum in counterpart in the appropriate country. financing. Hence, in 2015 more than 90% cash and forwarded it either by post or of SARs came from the banking sector. through a money transmitter to a person Tighter anti-money laundering laws in Total asset value rose by 44.5% to over abroad who is not personally known to Switzerland CHF 4.8 billion. In contrast to previous him. In return, the money mule receives With the entry into force of the Federal years, bribery rather than fraud was the a commission and may keep any leftover Act on Implementation of the Revised most frequently reported predicate offence change. By receiving and passing on the FATF Recommendations of 2012, MROS’s to money laundering. This is a continuing money, the mule is liable to prosecution if mandate has been expanded to cover addi- trend from 2014, when the number of cases it can be proven that he knew that money tional predicate offences to money laun- involving bribery rose twofold. MROS was being laundered. Money mules are dering as from 2016. For example, under the also received more SARs involving phish- often people that are in a difficult financial new provisions, traders such as jewellers ing-related fraud: 142 in 2015 as opposed situation. It is not easy to prove how much are obliged to carry out certain due to 104 in 2014, an increase of 38 reports. they actually know about the whole thing. diligence tasks if they accept more than

22 fedpol Reporting volume

2015 2014 2015 2014

Total number of SARs received Total asset value CHF

2,367 1,753 4,828,311,280 3,340,784,056

Number of SARs forwarded to the Asset value of prosecution authorities forwarded SARs

1,675 1,298 3,337,667,524 2,862,395,437

Asset value of non- Not forwarded forwarded SARs

692 455 1,490,643,756 478,388,619

In 2015 MROS received 2,367 SARs on money laundering (+35%) The total asset value of submitted SARs rose by 44.5% to more than CHF 4.8 billion (2014: CHF 3.3 billion)

CHF 100,000 in cash. If there is evidence that PEPs – also now include Swiss members dering established by the G7 in 1990. The the money comes from a crime or from tax of parliament besides foreign potentates. FATF sets standards for combating money fraud, the trader must verify the background Through these legal amendments, the laundering and the financing of terrorism, facts and submit a report to MROS if his Federal Council and the Swiss parliament and evaluates their implementation by its suspicion is substantiated. Also, tax fraud seek to bring anti-money laundering member states. As Switzerland is to be is now classed as a predicate offence to legislation into line with current inter- evaluated in 2016, fedpol made intensive money laundering if the evaded tax amounts national standards. The measures were preparations throughout 2015, since MROS to at least CHF 300,000 for each taxation recommended by the Financial Action Task will play a pivotal role in the evaluation. period. And politically exposed persons – Force, an expert group on anti-money laun-

A typical case of money laundering ysis by MROS revealed that one of the people in a neighbouring country of Switzerland. All A client called his bank because he had holding power of signature over the reported the reported accounts were ultimately being purchased airline tickets via SMS at a cost account was already known to the authorities used to transfer money abroad for laundering. of CHF 2,000 but subsequently received from a previous case. MROS discovered a Since MROS had reasonable grounds to sus- falsified tickets. The bank, which maintained connection to another bank, which disclosed pect that the assets in the various accounts a business connection with the company further business connections on request. were derived from fraudulent activities, it that issued the tickets and the travel agency The contracting partners of the reported forwarded the information to the prosecution involved, reported the case to MROS. An anal- accounts were mostly travel agencies based authorities.

fedpol 23 Corruption Switzerland is actively involved in the fight against corruption and economic crime. Major corruption scandals, such as that concerning the Brazilian oil firm Petrobas or the former Greek defence minister, pose huge investigative challenges for fedpol.

Millions in payoffs

11 April 2012: Akis Tsochatzopoulos accompanied by a police officer whose face is covered. For the last five years, the former defence minister has been the subject of criminal proceedings involving bribery and money laundering, also in Switzerland.

24 fedpol New platform for reporting corruption Switzerland is actively involved in fighting ingly taken part in transactions to In 2015, the federal prosecution author- corruption and has signed international exchange bribes with Greek officials. ities launched a new instrument in the agreements with the UN, the Council fight against corruption. Members of the of Europe and the Organisation for Difficult to prove public who have information on suspected Economic Co-operation and Develop- Complex cases such as the corruption acts of corruption can now report these ment to this end. The aim is to protect scandal surrounding the former Greek to the police on the web-based platform Switzerland’s financial centre, rooting defence minister highlight the challenges www.korruptionsbekaempfung.ch. As the out corruption and protecting witnesses of investigative work. To prove a case reporting platform guarantees anonymity, and whistleblowers to greater effect. of money laundering, three elements there is greater protection from reprisal, for In 2015, corruption was a widespread must be present: proof that the assets example by an employer, and insiders are topic in the media and the public domain. originate from a felony; proof of an act less likely to feel inhibited about making a Thanks to several cases with a high media that is aimed at frustrating the identi- report. The prosecution authorities hope impact, 2015 was the first year in which fication of the origin, the tracing or the that this will provide a new approach to the the Money Laundering Reporting Office forfeiture of assets; and proof that the investigative process in the national and Switzerland at fedpol received more person committing the act knows or international fight against corruption. The Suspicious Activity Reports concerning must assume that the assets originate corruption reporting platform is operated bribery than involving fraud as a pred- from a felony. The first two criteria are by fedpol on behalf of the Office of the icate offence to money laundering. objective elements and concern acts. Attorney General. The third – the subjective element – Complex case of corruption concerning concerns knowledge and intention. former Greek defence minister ’Intention’, i.e. what the person commit- Flood of information and problems of In 2015, fedpol assisted the Office of the ting the act wanted to achieve, is diffi- understanding Attorney General’s investigations relating cult to prove. Firstly, the person must In this case, fedpol questioned numerous to Greece’s search for money originating know or assume that they are dealing people, requested to see bank state- from corruption and other criminal activi- with assets that are of criminal origin. ments and evaluated the finance flows ties that had found its way into Swiss bank Secondly, they must intentionally thwart involved. Information from files and accounts. The case demonstrates the kind the efforts of the prosecution authori- electronic data, requests for legal assis- of challenges faced by fedpol in large- ties to establish the origin and location tance, guarantees, bank statements scale international corruption scandals. of the assets and to confiscate them. and witness questioning from a wide For at least five years, the Greek prose- Whereas it is usually possible to range of sources had to be analysed and cution authorities have been conducting establish the objective facts, in this reviewed as part of the criminal proceed- criminal proceedings against a former particular case it must be proven that the ings relating to a suspected act of money Greek minister and other suspects from Swiss bank employee knew or must have laundering and abetting corruption political circles and the army. The charges assumed that the assets he was managing committed in Switzerland. There were tens include bribery, embezzlement, abuse of stemmed from criminal activities, and that of thousands of pages of information. office, document forgery and money laun- he intended to prevent the prosecution The investigation was impeded further dering. The case involves arms contracts authorities from accessing the assets. by the fact that the information was to worth several billion US dollars that were Correspondence, memos and minutes a large extent in Greek. All documents awarded by the former Greek defence provide the authorities with information had to be translated from Greek into minister to international consortia. about a case, and thus about a person’s German or vice versa. This slowed up the Fedpol’s enquiries were focussed on wilful intention to act. Thus, if the accused investigation and made it more difficult the criminal investigation by the Office bank employee passes on money to third to compile the evidence. This is essen- of the Attorney General into an employee parties, he commits an objective act of tially a problem encountered in criminal of a bank in Switzerland. The employee money laundering. If he is also aware of investigations at international level; was responsible for bank accounts the criminal origin of this money or if it investigations are impeded and made through which millions of dollars of can be proven that he must have known more expensive owing to the language alleged bribe money was transferred. about it, he is also guilty of committing barrier particularly in countries with a The employee is believed to have know- a subjective act of money laundering. language not widely spoken in Switzerland.

fedpol 25

Organised crime One of fedpol’s strategic focuses is criminal organisations and groups; these pose a considerable threat to Switzerland. The criminal activities in which these groups engage include human trafficking, drug trafficking, arms trafficking, fraud, corruption, robbery and burglary.

Mafia and co.

fedpol has a number of approaches in the authorities try to bring charges against them Switzerland. The two men were accused of fight against criminal organisations. It for individual offences. For example, in late having founded and led a so-called locale supports the cantons by providing anal- 2014 and in September 2015, several people in Frauenfeld. This locale has existed since ysis and co-ordination services, and in its suspected by fedpol of being associated 1970 and is involved, in particular, in drug role as federal police service it conducts with the ’Ndrangheta were convicted of trafficking. fedpol believes that there are investigations in proceedings against drug trafficking and arms smuggling. fedpol further ’Ndrangheta structures in Switzer- people involved in criminal organisations also conducts investigations into criminal land. The locali are directed from different under the direction of the Office of the organisations for the Attorney General’s regions in Italy, but there are also indications Attorney General. Prosecuting criminal Office in cases involving money laundering that they co-operate or compete with each organisations is one of the strategic and corruption (see p.20 and p.22). other. The persons active in Switzerland act priorities of the Attorney General’s Office. extremely discreetly. As a rule they are well In its efforts to prosecute criminal Criminal organisations from Italy integrated into society and have ordinary organisations from Italy, the strategy of the Of all the Italian mafia organisations, the jobs. The offences committed by the sus- Attorney General’s Office is co-operate with ’Ndrangheta has the strongest presence pected members include drug trafficking, the Italian authorities and provide mutual in Switzerland. This was confirmed in 2015 robbery, theft, fraud, human trafficking, legal assistance. Thanks to fedpol’s investi- when, on 22 October, a court in Reggio counterfeiting money, and illegal betting and gations, two people resident in Switzerland Calabria sentenced two Italians resident gambling. Time and again, weapons used were sentenced in October 2015 in the in the canton of Thurgau to 12 and 14 years in ’Ndrangheta feuds in Italy are found to lower courts in Italy for belonging to the in prison for being members of a mafia originate from Switzerland. Presumably, they ’Ndrangheta. If there is not enough evidence organisation. This is the first conviction are being smuggled in small numbers into to sentence a suspect for belonging to a (although not yet legally binding) to confirm Italy, while drugs are smuggled from Italy criminal organisation, the Swiss prosecution the existence of a ’Ndrangheta cell in into Switzerland.

28 fedpol 6 October 2005: Interrogation in mafia proceedings in Italy. In 2015, verdicts were reached in Italy on ’Ndrangheta members living in Switzerland.

What is a criminal organisation? tions is a federal task; investigations are The term ’organised crime’ denotes all types complex and involve working with the of criminal activity pursued by groups. The authorities abroad. degree to which a group is organised plays an important role in the prosecution process. If a group is not sufficiently organised to be Under Swiss law, a criminal organisation is a denoted as a criminal organisation, it is classi- group of more than three persons pursuing a fied as a criminal association or gang. criminal aim, the structure and composition Examples of this are child pornography rings, of which are kept secret. Any person who organised drug dealers or burglary gangs. participates in or supports a criminal Under the Swiss Criminal Code, certain organisation is liable to prosecution. crimes carry stricter penalties when they are Examples of such organisations are the committed by a group. The cantons are ’Ndrangheta (Italian mafia) or Al Qaida responsible for prosecuting criminal (terrorism). Prosecuting criminal organisa- associations and gangs.

fedpol analyses and co-ordinates to obtain their haul. These cases attract a uanians are planned and co-ordinated The cantons rather than the federal lot of media attention. However, compared at international level. Dealing with such prosecution authorities are responsible with the total number of robberies in well-structured organisations requires for prosecuting gang crime, and in this Switzerland, the number committed by close and efficient co-operation with police fedpol provides them with co-ordina- criminal groups from Lithuania is very authorities in other countries and with tion and analysis support. In the Armed small. Because of the degree of violence Europol, Eurojust and INTERPOL. fedpol Jewel Robbery AJR project, for example, involved, attacks by these groups some- has been registering attacks on jewel- the cantons and fedpol exchange leads, times result in fatalities. Between 2005 lery stores since October 2013. While the intelligence and analyses. Thanks to this and 2015, a dozen people were injured, cantons are responsible for prosecuting project, fedpol is able to launch initial some of them badly, in 25 recorded cases. in such cases, fedpol takes on the co-or- inquiries on receiving information from And two attacks, in Glarus in 2005 and dination and analysis at national level. abroad that suspects are making their way in Zurich in 2007, involved fatalities. The Europol also provides valuable intelli- to Switzerland or have already crossed total value of the goods stolen was esti- gence from investigations and analyses the border. When it becomes clear where mated to be around CHF 10 million. from other European countries, which the suspects are or where they want to The perpetrators of such attacks are allow a picture to form of the criminal strike, fedpol passes this information on not usually resident in Switzerland. fedpol operations in an international context. to the cantonal authorities concerned. believes that Lithuanian gangs have been In 2015, there were several attacks on operating in Switzerland since the begin- jewellery stores suspected to have been ning of 2000. The exact nature of their carried out by criminal groups operating organisational structure is uncertain. from Lithuania. In most cases, the perpe- Police investigations show, however, that trators employ extreme violence in order the attacks on jewellery stores by Lith-

fedpol 29 Tracking criminals fedpol can pinpoint and identify criminals within a matter of hours thanks to the efficiency of international police co-operation. This co-operation is made possible by Switzerland’s membership of Schengen and its access to the Schengen Information System, a database that allows the rapid exchange of information. Race against time

“An offence committed locally may nonethe- police), a database containing informa- • assist the search for vehicles, weapons less have a national or international connection on offenders, weapons, vehicles or identity documents tion. International police co-operation is the and stolen objects. Besides fedpol, the In turn, fedpol receives and checks appropriate response to this.” This is the cantons, the Attorney General’s Office, the information from European states. For principle on which the fedpol investigators Federal Office of Justice and the Swiss example, it compares fingerprints or DNA operate. No matter where an offence is Border Guard can enter an alert in RIPOL. profiles from abroad with those in the committed, the clues often lead somewhere Swiss database and shares these find- abroad. Once the crime is committed, the Efficient thanks to Schengen ings with its partners, requesting further race against time begins, and a smooth Thanks to Switzerland’s membership information where necessary. Since 2009, exchange of information is vital. fedpol, the of Schengen, fedpol has access to the there has been a considerable increase cantonal police forces, the Swiss Border Schengen Information System. This Euro- in the number of hits in the SIS data- Guard, the cantonal prosecution author- pean database contains alerts on persons base between Swiss and foreign alerts: ities, the Office of the Attorney General, and objects, and allows Schengen member from 8,632 in 2009 to 12,194 in 2015. the Federal Office of Justice and the police states and other countries to exchange Access to the SIS database was granted and judicial authorities abroad all work very information efficiently. fedpol is also to the United Kingdom in 2015, which closely together. They have one common Switzerland’s main point of contact for SIS means the search area has now become goal: to identify and catch the criminal. information exchange and is responsible for greater and SIS alerts are therefore likely fedpol has a number of resources to aid entering Swiss alerts in the database. Any to lead to even more hits in future. its investigations, for example databases information entered in the SIS is usually of fingerprints and DNA profiles, or alert based on a RIPOL search alert. Alerts are Europol – exchange of information systems via which information is exchanged entered into the system in order to: A further important channel of information (see graph opposite). The Operations Centre • assist the search for persons wanted for for fedpol is Europol. The Europol communi- at fedpol is the single point of contact for deportation or to prevent cation platform SIENA (Secure Information all its partners. It collects and transmits via non-Schengen nationals subject to an Exchange Network Application) allows secure information channels vital informa- entry ban from entering the country Schengen member states and others to tion such as personal data, identification • assist the search for missing persons exchange information in particular on data and trace evidence from crime scenes. • assist the search for persons on behalf the way criminals operate. This detailed When a crime is committed in a specific of a judicial authority information provides very useful intelli- place, the local cantonal police consult • conduct discreet surveillance or gence. In 2015, fedpol provided evidence the federal computerised search system targeted controls of persons and that led to the arrest of two Lithuanian RIPOL (Recherches informatisées de vehicles offenders. They were arrested thanks to

30 fedpol Number of SIS hits for Switzerland and other countries

2010 2011 2012 2013 2014 2015

8,687 9,791 11,595 10,898 12,075 12,194

Switzerland • Other countries • Total Since 2010 the number of hits in the SIS database relating to Switzerland and other countries has risen significantly. In 2015, one-third of all hits concerned other countries.

international police co-operation, which Bureau in Switzerland, fedpol exchanges The illustration on pages 30-31 of the facilitates the comparison of DNA profiles, information with other member states, case involving a thief who was handed personal data and photos (see box below). for example on wanted persons, criminal over to Switzerland shortly after commit- activity or materials and objects that pose ting an offence shows the efficiency INTERPOL – essential a threat to national security. INTERPOL of the automated search system. INTERPOL, an international criminal police continuously updates its databases with organisation with 190 member states, is information, for example, on stolen or lost one of fedpol’s main partners at interna- identity documents, stolen vehicles and tional level. As INTERPOL’s National Central weapons, child abuse, DNA and fingerprints.

Suspected murderer arrested within suspect. The biometric traces left at the scene ny. fedpol compared this information with hours of alert of the crime matched with an asylum seeker that in the migration database, which holds Thanks to close co-operation with the Austri- from Gambia who was also suspected of information on foreigners in Switzerland. an police, fedpol was able to catch a fugitive having sexually abused a ten-year-old child in The digital fingerprints of the wanted person asylum seeker suspected of murdering a Germany. were registered in the system, as he had young American woman in Vienna. This case Once the suspect had been identified, the previously applied for asylum. The database demonstrates the efficiency of channels such Austrian authorities launched an SIS alert. At indicated that the person had arrived at an as the SIS or INTERPOL information systems. the same time, they sent an INTERPOL notice asylum centre in Kreuzlingen on the day the The man was arrested in Kreuzlingen in the directly to fedpol’s Operations Centre, and this Austrian authorities launched the alert. fedpol canton of Thurgau shortly after the Austrian was immediately communicated throughout contacted its Austrian counterparts and a authorities posted the alert. Switzerland. The alert contained the suspect’s few hours after the alert the Thurgau cantonal Last January the body of a young American name and date of birth, a description of the police were able to arrest the murder suspect woman was found in Vienna. The Austrian crime, and information that the suspect was in Kreuzlingen. police were soon able to identify the main fleeing towards Switzerland, Italy or Germa-

fedpol 31 Jewel thief caught within hours Thanks to fast action by fedpol and close co-operation with its international partners, law enforcement services were able to track down a thief within hours of his commiting a jewellery theft. An alert in the Schengen Information System led to the wanted man’s arrest in Hungary and his subsequent extradition to Switzerland.

1 A robbery takes place at 9:45 at 2 In the afternoon, the investigating 3 Around 17:00, the Public Prosecu- a jewellery shop in the canton of Ge- authority identifies the thief’s face and tor’s Office of Geneva issues a warrant neva. The thief steals a ring valued at vehicle registration number from CCTV for the suspect’s arrest and requests several thousands of Swiss francs. footage. The cantonal police of Geneva fedpol to enter an alert in the SIS confirm the suspect’s name and date database. The Federal Office of Justice of birth. The man is already known to authorises the measure, and fedpol’s the police and registered in the RIPOL SIRENE Office issues the alert. database.

MON TUE WED THU FRI SAT SUN MON

1 2 3 4 5

Number of person-related entries in RIPOL

2015 2014

Arrest warrants 59,623 59,106 Residency inquiries 45,264 38,771 Entry bans 4,870 4,402

Taken into custody 10,672 10,196

Execution of sentences and measures 414 433

Missing persons 3,571 5,142

Prevention of child abduction 126 76

Exit restrictions (HOOGAN) 33 21

Discreet surveillance 80 140

32 fedpol 4 Half an hour later, the suspect’s 5 The thief is arrested the following 6 Three days after the robbery, the photo is sent to various police services day at the Hungarian-Ukrainian border. prosecution authorities agree to an throughout Europe. The Swiss Border extradition request. The suspect is Guard is also informed. Around 19:00, extradited to Switzerland some weeks the search for the suspect is extended later. The stolen ring is not recovered. to all countries.

TUE WED THU FRI SAT SUN MON TUE

Number of SIS hits 2015 No. of hits in Switzerland from foreign alerts No. of hits in other countries from Swiss alerts Total

Wanted by Objects (vehicles, Arrest for Missing judiciary (e.g. Discreet sur- ID documents, extradition Entry ban persons witnesses) veillance weapons) Total

274 1,498 314 1,490 1,815 2,239 7630 228 3,360 86 92 147 651 4564 502 4,858 400 1,582 1,962 2,890 12 194

The chart shows the number of exact hits in the SIS database according to category

fedpol 33 Cybercrime Whether e-mail attacks or data theft, acts of cybercrime are becoming increasingly sophisticated. In combating crime on the internet, fedpol is able to rely on the public’s help: in 2015, it received a record 11,575 «8,242 …» reports of suspicious internet content.

Cyber criminals become more 2012 professional

An e-mail attachment that contains a the advent of the web, such as extor- tend to process payments using money further hidden attachment. Or a few tion and the theft of personal data. transfer services. Furthermore, they often mouse clicks and an e-mail turns into operate with fictitious delivery companies. a trap to steal personal data. In 2015, Four clear trends The victim finds an article they want to fedpol compiled a long list of different Among the types of crime reported, phishing buy at a knock-down price on an appar- cybercrime phenomena. Phishing was the was the most widespread phenomenon, ently genuine online sales platform, but in most frequently reported type of cyber- with 1,253 cases in total. Phishing is the act return for their payment they receive either crime, but there were also many reports of trying to steal confidential data, such as a counterfeit product or nothing at all. of child pornography on the internet and usernames and passwords for using online fedpol investigators have also observed websites selling counterfeit goods. The services or accessing e-banking accounts a third trend: cybercriminals are using number of cases reported by the public or credit card numbers. To do this, criminals increasingly professional methods. For rose sharply. About 82 per cent of the send potential victims an e-mail containing example, fraudulent e-mails are now of a 11,575 reports received in 2015 concerned the fake logo of a reliable entity, such as a very high quality and the words used are illegal activities. This high level indicates police authority or bank. The victim then more carefully selected. In fraud cases the growing public awareness of cyber- replies directly to the e-mail or clicks on a involving fake payment orders, the fraud- crime. However, from the figures it is not link, thereby giving the criminals access sters even imitate the writing style of possible to draw conclusions about how to their computer in the belief that their the director of the alleged company. widespread cybercrime actually is. information is going to a reliable entity. In The experts at fedpol have also noticed fedpol is confronted with two types actual fact, the criminals are able to access that the criminal activities are increasingly of cybercrime. Firstly, there are offences the victim’s e-mail and e-banking accounts well organised: “Two or three people get committed using technical means: for or use their bank card to make purchases. together; they may never have seen each example, the criminals exploit weaknesses A second trend is the growing number other before, and come from different coun- in information technology in order to of online websites over which counterfeit tries. They share the tasks out among them- hack into systems or infect them with goods are sold at low prices. The majority selves: one might create the fake websites, malware. Secondly, the internet is used of fraudsters are based abroad. It is diffi- while the other phishes for the personal to commit crimes that existed before cult to check their personal data and they data of potential victims on the internet. If

34 fedpol «6,181 …» Reporting volume

«5,330 …» 2010 «8,242 …»

2011 «9,208 …»

«10,214 …»

2013 more needs to be done to also to demand ransoms. The use of virtual carry out the fraud, currencies increases the risk of money the services of a third laundering. For cyber criminals it is easy party might be brought in”, to swap illicitly earned profit in the form of explains a fedpol analyst. bitcoins for an official currency and to then Criminals meet on forums in release this into the regular money flow. the darknet or on the internet. 2014 Like at any market, they swap, Tracking paedophile sell and buy each other’s criminals services for the purpose of In 2015, fedpol committing cybercrime. received 1,193 The fourth trend is the reports on increasing use of virtual websites payment methods. containing child Cybercrime has become «11,575 …» pornography. The a service market. There fight against the are currently around 2,000 sexual exploita- virtual currencies on the tion of children internet, with bitcoin by far can also only be the most frequently used digital successful if conducted monetary unit. By using bitcoin one at an international level. can remain anonymous, as transactions fedpol works closely with cannot be traced. Virtual currencies are not Europol (see box on cybercrime) and only used to purchase malicious software the INTERPOL Specialists Group on Crimes or to pay hackers for their services, but against Children on this issue. According

2015

The number of CySARs has risen in the last few years, However, the figures do not reflect the true extent of cybercrime. More than 80% of CySARs were of criminal relevance.

fedpol 35 to Europol, there is a growing number of darknet platforms containing child pornog- National Strategy on Protecting Switzer- Cybercrime must be tackled at internation- raphy. Images and videos are posted on land from Cyber Threat al level these exchange platforms on a daily basis. Under the National Strategy on Protecting “Nowadays a lot of crime can be committed Behind each image and each video is a new Switzerland from Cyber Threat, endorsed by over the internet, and we are seeing a huge victim. Co-operation between countries the Federal Council on 27 June 2012, fedpol increase in this type of crime. Criminals are is essential in combating this crime. The is working with the cantons to draw up a always one step ahead of the prosecution object of each action is to identify and shut concept to categorise types and instances authorities. What is more, cybercrime does down the forums, and find the victims. of cybercrime in Switzerland. Cybercrime not recognise borders and so it is difficult investigations require a very high level for individual states to address the problem. Access to a private exchange platform of expertise. The cantons are therefore The servers used to commit a crime are In 2015, fedpol carried out undercover developing a police training programme to often located on different sovereign territo- investigations on private exchange plat- impart basic and specialist knowledge of ries”, explains the head of the Swiss Liaison forms. This allowed investigators to identify cybercrime and digital forensics. Office at Europol. The Europol Internet a German paedophile offender. fedpol was Organised Crime Threat Assessment report able to prove that the German had sexually suggests that cyber criminals are using abused two victims, a girl and a boy, living in increasingly aggressive methods and now Switzerland. seek active confrontation with their vic- In another case, INTERPOL had been directly to a webcam in Switzerland. This tims. Cybercrime can only be successfully trying since 2013 with the help of police in enabled the investigators to trace the vic- addressed at an international level. To this several countries to identify a person who tims, who were recognisable on the images end fedpol works together with Europol, had been sharing child pornographic imag- published by the suspect. The victims were more precisely with the European Cyber- es on the internet. The person claimed to a brother and sister, both of whom had crime Center, in which it is represented in have taken the images showing an uniden- been abused by the suspect who turned three analysis groups on payment fraud, tified victim themselves. The images were out to be a family member. protection of infrastructures and informa- shared on a private peer-to-peer platform, fedpol was able to prove the connection tion systems, and child sexual exploitation. which connects users’ computers directly between the suspect and the victims, and via a secure interface. co-ordinated the co-operation between INTERPOL knew that fedpol investigators the German judicial authorities and the had considerable experience in detecting cantonal police in Switzerland. In early paedophile criminals and so asked fedpol 2015, the suspect’s house was searched; he for help. Just a few days later, a fedpol inves- was found to be in possession of child por- tigator managed to track down the suspect nographic material and was subsequently in Germany and he was promptly put under arrested. He was charged in Frankfurt am surveillance. It turned out that the internet Main for the abuse of the two children connection he was using did not belong to during the years 2008 to 2013. At the time him, but to his neighbour, and the suspect the abuse began, the children were six and had been using the internet connection eight years old. Further investigations led without his neighbour’s knowledge. More to the arrest of more people in the man’s over, the suspect already had a conviction virtual circle of friends, including a Swiss for child sex abuse. The investigations person who had also shared child por- showed that the suspect had logged in nographic material on the internet.

36 fedpol Smartphone footprints

When the contents of a computer or mobile tele- can detect the activities of crime suspects. During phone require analysis, fedpol’s forensic IT special- their in-depth examination, they often come across ists come into play. No other device is quite as traces that are not directly accessible. Sometimes, popular or versatile as a smartphone. It can be used they have to request mutual legal assistance from as a telephone, satnav device, gaming console, another country. And forensic IT specialists are means of payment and much more. However, a faced with ever-developing technology. Below you smartphone leaves traces. By accessing the data can see the variety of traces a smartphone leaves stored on a smartphone, forensic IT specialists behind.

Telephone calls Wireless technology and control The caller list is a veritable gold mine of information. It reveals when and with whom Since a smartphone is always connected a conversation has taken place. However, it to Wi-Fi, 3G or Bluetooth and therefore is not possible to determine the content of a online, it leaves behind traces that pro- conversation from a caller list. vide information on what infrastructures have been used (e.g. Wi-Fi hotspots) and on the various connected devices (via Bluetooth, IR, NFC, etc.).

Games and photos

Games, photos or other programs leave behind traces that may indicate the viewing or distribution of illegal material. E-mail and e-banking

E-mail or e-banking data can reveal useful information on users and their habits.

Internet Geolocation People’s behaviour on the internet or on Geolocation using GPS or Wi-Fi networks is a social networks reveals information about standard feature of many devices and leaves their contacts and sometimes even about behind traces, for example through naviga- the content of what is exchanged. tion, maps, photos or a browser.

fedpol 37

Unfair trade Across the world, men, women and children can find themselves in the clutches of human traffickers who rob them of their basic human rights. This treacherous crime is also happening in Switzerland. To combat it, international police co-operation is essential, as this example of Switzerland’s co-operation with Romania shows.

People for sale

Clara1, a young Romanian woman from a happy was not true love, but an insidious perpetrators were mostly from the same humble background, was persuaded by ploy. Her ‘boyfriend’ abused her feelings country. A small number of cases also her boyfriend to work as a prostitute in and trust to force her into dependency involved suspected labour exploitation. Switzerland. Earning 1,000 Swiss francs a and to exploit her sexually and physically. Most of the alleged victims were young day, she hoped it would allow her to finally The ‘loverboy tactic’ is common, also in women. Occasionally the victims were realise her dream of buying a house, getting Switzerland, which has been a destination minors. No cases of organ trading have married and starting a family. So Clara and transit country for Romanian victims been confirmed in Switzerland to date. travelled to Lugano. There, she was taken of human trafficking for some years. The in by a woman who found her clients, set case described above also shows that Co-operation with Romania rules and dictated her working schedule. women are often among the perpetrators. Romania has been one of the main coun- Clara entrusted her earnings to the woman, The International Labour Organisation tries of origin of sex workers and potential believing that she would pay it into the reckons that some 21 million people world- victims of human trafficking for years. bank for her. Instead, it was lining the wide are victims of human trafficking for Back in 2012, Federal Councillor, Simonetta woman’s own pockets. The woman turned the purpose of sexual exploitation, forced Sommaruga, pointed out that Switzerland out to be the ‘real’ girlfriend of Clara’s labour or for the removal of their organs. and Romania had a common problem that Romanian lover and the couple controlled More than half of them are women and they needed to solve together. In 2015, the the young Romanian woman both phys- around a quarter are children. Human traf- Swiss-Romanian working group initiated ically and mentally. But she managed to fickers do not always operate in the same and implemented by the federal councillor escape and pressed charges in Switzerland way. However, central to all cases is the led to a two-year police co-operation headed and in Romania. With the help of an NGO exploitation of people’s distress or desper- by fedpol to specifically tackle the problem. she managed to return to Romania and ation, or encouraging such predicaments. The co-operation involved improving received professional help for victims of In 2015, the Swiss law enforcement knowledge management, enhancing human trafficking. As the national central services, in some cases in collaboration information sharing, and procuring logis- office, fedpol was in charge of co-ordinating with fedpol, investigated human traf- tics and IT for the Romanian authorities. the investigations with the Romanian ficking cases mainly for the purpose of As part of the police co-operation, authorities in the case described above. sexual exploitation. In more than half of experts from the police and NGOs from Clara realised too late that the relation- all pending cases, the victims hailed from Switzerland and Romania met in 2015 to ship that had started as romantic and Romania, Hungary or Bulgaria, while the share information and analyse the situ-

1 Name has been changed

40 fedpol 18 October 2012: Federal Coun- cillor, Simonetta Sommaruga, in front of the press on EU Anti-Trafficking Day. Combating human trafficking is one of the FDJP strategic priorities in fighting crime. ation. Specialists from several cantons already working with cantons and towns handle cases of human trafficking. The and the federal government visited the to plan the scope and focus of future co-operation between law enforcement regions of origin of the Romanian victims, police co-operation action weeks. services, migration authorities, special- learned about Romanian, and particularly ised victim support and other cantonal Roma, culture, and established important fedpol – a key partner authorities is discussed and defined at contacts with the local authorities. The prosecution of human traffickers falls regular meetings. In addition, fedpol has In the summer of 2015, an initial delega- under cantonal jurisdiction. fedpol assists developed a national action plan to combat tion of Romanian experts arrived in Switzer- the law enforcement services in Switzer- human trafficking. In autumn 2015, the land for study purposes, and a Romanian land and abroad by co-ordinating proceed- Council of Europe’s Group of Experts on investigator was permanently stationed with ings, maintaining an international network Action against Trafficking in Human Beings the cantonal police of Geneva. An action of partners and ensuring the exchange of (GRETA) published its first evaluation report week was also carried out in Switzerland in information with Europol and INTERPOL. on Switzerland. The report recognises November during which teams of Romanian The Swiss Coordination Unit against the Switzerland’s efforts and measures to fight and Swiss investigators and individuals Trafficking in Persons and Smuggling human trafficking and contains 25 recom- from NGOs spoke to Romanian sex workers. of Migrants at fedpol promotes training mendations. These include, for example, These conversations revealed important and awareness-raising of the responsible better identifying cases of exploitation, information about potential exploitation, bodies, as well as the work of the cantonal stepping up the fight against labour and a Romanian investigator was able to round tables. These sessions define the exploitation and paying greater attention identify a suspect from Romania. fedpol is processes according to which the cantons to underage victims and their needs.

Human trafficking – A priority purpose of sexual exploitation’ was published Since 1 January 2016, women from non-EU Combating human trafficking is one of the by fedpol on 5 June 2015. It was compiled countries are no longer allowed to legally trav- priorities of the Federal Council’s crime with the help of experts from the federal el to Switzerland to dance in cabaret clubs. prevention strategy for the legislative period government, and draws on national studies, The Federal Council lifted the dancer status 2015 – 2019. such as the Hilber Report for the attention as it was failing to fulfil its protective function. The National Council mandated the Federal of the Federal Council, and country-specific As an accompanying measure to the lifting of Council in four postulates from 2012 and 2013 opinions and studies. The report states that the status, the Federal Council adopted a reg- to look more closely at fighting human traffick- prostitution should not be banned, promotes ulation that allows fedpol to provide financial ing for sexual exploitation and improving the a co-ordinated approach by all authorities support to crime prevention measures imple- protection of prostitutes. Consequently, the involved, and highlights possible measures mented by public and private organisations to Federal Department of Justice and Police was to combat and prevent sexual exploitation. protect women in the sex trade. commissioned to draft a report. The report Implementation of these measures falls under ‘Prostitution and human trafficking for the the jurisdiction of the cantons.

fedpol 41 Migrant smuggling More than a million people headed for Europe via various migrant and refugee routes last year. They paid large sums of money to flee, often risking their lives in the process. The lucrative people smuggling business is booming. Up to now, Switzerland has been only marginally affected by the phenomenon.

A multi-billion business

Europe is currently experiencing the largest Switzerland – a destination suspended sentence. They were all working refugee and migrant crisis since the Second and transit country for an Eritrean mastermind based in Milan World War. According to the United Nations Migrant smugglers also organise journeys to who was arrested in Italy in February 2015. High Commissioner for Refugees, war and and through Switzerland. Until September He was released from detention in October poverty drove more than a million refugees 2015, the central Mediterranean passage last year and is awaiting judgment. In the and migrants to Europe in 2015 alone. Just was the main smuggling route to Switzer- scope of the investigations, fedpol was under half of these were from Syria. But land’s southern canton of Ticino. It was responsible for co-ordinating and sharing many people are also fleeing from Afghan- primarily used by people from Eritrea, Syria information with Europol and INTERPOL. istan, Iraq, Eritrea, Pakistan, Nigeria, Iran and Somalia, where the smuggler mafia In order to effectively combat trafficker and Somalia. In recent years, the central turned people’s misery into big business. groups on the Mediterranean route, fedpol Mediterranean route has been the most At the end of December 2014, two Tuni- works closely with its partner authorities important route for migrants and refugees sian nationals were sentenced in Ticino in Italy. In addition to the co-operation travelling to Europe. It goes from North to three years’ and two-and-a-half years’ platforms already established via INTERPOL Africa, via the Italian islands of Pantelleria, imprisonment for commercial people and Europol, the ‘Gruppo Interforze’ was set Lampedusa and Sicily, and onwards to smuggling and commercial racketeering. up in 2015. This task force, headed by the western and northern Europe. In summer They had been stationed in Como to cantonal police of Ticino, brings together 2015, it was replaced by the Balkan route: smuggle some 200 Eritreans arriving from experts from the cantonal police and the from Turkey, via Greece, Macedonia, Serbia, Milan over the Swiss border to Balerna public prosecutor’s office of Ticino, the Croatia and Slovenia to the heart of Europe. for a cost of up to EUR 300 per person. In Swiss Border Guard, fedpol and the Italian Almost 850,000 people opted for the Balkan Balerna, underage ‘pedestrian smugglers’ and German border control authorities. route in 2015. This route is constantly were waiting to accompany the migrants From autumn onwards, the smugglers’ being adapted in line with the changing to Lugano for a fee of EUR 40. The gang of route to Switzerland from the south shifted political and border control measures of smugglers earned at least EUR 50,000 in east, with most people, primarily Syrians but the transit and destination countries, as less than a month from 200 people. The also Afghans, opting for the Balkan route borders are closed and fences erected. two minors were given a three-month and the route via Austria into Switzerland.

42 fedpol 27 August 2015: Austrian forensic experts examine a lorry containing the bodies of dozens of smuggled migrants. Switzerland, as a target and transit country, is committed to the fight against people smuggling.

fedpol’s role in the prosecution through efficient international co-operation Cargo ships setting sail with no crew of migrant smugglers and a joint approach. The Swiss Coordina- Professional migrant smuggling knows no The cantons are primarily responsible for tion Unit against the Trafficking in Persons borders as the perpetrators have extensive prosecuting migrant smugglers, while fedpol and Smuggling of Migrants at fedpol devel- international networks. The smugglers co-ordinates, analyses and supports inves- ops measures and tools to fight this form organise the transport, travel documents, tigations between the cantons and other of crime more effectively, and promotes the such as falsified or stolen passports or authorities in Switzerland and abroad, and training, information and networking of the fraudulently obtained visas, and often the ensures police authorities share informa- responsible actors. It is made up of federal associated pretexts for travel for refugees tion. fedpol is actively involved in Europol and cantonal authorities and agencies as or migrants. According to the UNHCR, most and INTERPOL expert groups, as complex well as non-governmental and intergovern- refugees and migrants rely on the services cases of people smuggling that span mental organisations. of smugglers for at least part of their journey international borders can only be uncovered to Europe. The smuggler networks exploit these people’s hope for a better future for pure financial gain and charge high prices Mediterranean in 2015 trying to make it to ised. In this context, fedpol’s activities in for the services they offer. the shores of Europe, and that globally that 2015 included organising its first national In January 2016, German and Turkish figure was around 5,350 people. conference on combating migrant smug- investigators uncovered one of their most gling. The event brought together over 80 extensive cases of organised migrant National action plan to combat experts from cantonal and municipal crimi- smuggling. The traffickers had crammed a people smuggling nal investigation services, the Swiss Border total of 1,766 people into the cargo hold of In 2014, the Federal Council approved Guard, the State Secretariat for Migration battered, scrap cargo ships. They cast the Integrated Border Management, a national and Europol. Participants shared informa- ships off without a crew as so-called ‘ghost strategy and related action plan to fight tion about ongoing cantonal investigations, ships.’ It is thought that each refugee had commercial migrant smuggling, cross-bor- discussed the possibilities of fedpol support paid between USD 4,500 and USD 6,000, der crime and illegal migration. The action for the cantons and were introduced to which means the operation grossed USD plan is being implemented between 2014 Europol’s strategy and specific measures. 9.5 million. Cases involving ghost ships have and 2017, and is being overseen by the State An additional measure under the action been known about for a number of years Secretariat for Migration. The action plan plan involves extending the initial asylum and many similar examples made headlines aims to identify potential cases of migrant interviews conducted by the State Secretar- in 2015. The International Organization for smuggling early on and to take the relevant iat for Migration with the aim of obtaining Migration raised the alarm in 2015, stating measures. To do this, the players involved information about migrant smugglers and that at least 3,770 refugees had died in the must be trained, made aware and special- how they operate.

fedpol 43 Security service An impending visit by President Hollande or Chancellor Merkel sets an immense security operation in motion at fedpol, which includes risk assessments, situation reports and specific security measures. The ultimate goal is to ensure that President Hollande or Chancellor Merkel’s visit to Switzerland goes smoothly. Selfie with François Hollande

A vacuum cleans the red carpet right up to When a statesman such as François Hollande visited Switzerland only three the last minute. The guard of honour stands Hollande announces a visit to Switzerland, months after the terror attack on the to attention. On 15 April, François Hollande, the detailed planning of security arrange- offices of Charlie Hebdo. The world was President of the Republic of France, paid ments begins months in advance. Whether still in shock and France was considered a an official visit to Switzerland. The pres- a train journey with the Swiss Federal potential target of further attack because ident enjoyed a walkabout in the square Railway, a visit with hundreds of students of its participation in the military coali- around Bern’s cathedral and had selfies in Zurich or Lausanne, or a walk with the tion against Islamic State. Because of the taken with half a dozen well-wishers. The Swiss president through the historical potential threat, security was tightened in Swiss president, Simonetta Sommaruga, centre of Bern, the security arrangements general for diplomatic missions and visitors welcomed the prominent guest to music by vary depending on the agenda and must from anti-IS coalition countries. Interna- the military band. Afterwards, Mr. Hollande be constantly adapted to the respective tional organisations such as the United enjoyed a plate of traditional Alpen situation. fedpol defines and adapts its Nations or the World Trade Organization macaroni at the Bernerhof before retiring security concept for people and facilities were also subject to greater security, as to the French ambassador’s residence. On afforded protection under federal law were international conferences, which fed- the second day of his visit, Mr. Hollande according to an ongoing threat analysis. pol identified as possible targets of attack accompanied Ms. Sommaruga to the Specific measures are implemented in by Islamic extremists due to their symbolic Zurich University of the Arts. For the next collaboration with the cantonal police. importance. Hence, tighter security meas- stage of the visit, the French delegation ures and greater close protection were travelled to Lausanne by public transport Potential terrorist threat necessary at the World Economic Forum in and visited the Ecole polytechnique de The visit by François Hollande was clas- Davos, the Iran nuclear talks in Montreux Lausanne. After a visit to the Olympic sified by fedpol as a high-risk occasion, a and Lausanne, and at the Geneva peace Museum, Mr. Hollande took his leave. logical assessment considering that Mr. talks on Syria.

44 fedpol 15 April 2015: Visit by the French president, François Hollande, to Switzerland. Mr. Hollande’s visit was classified as ‘high risk’ and therefore accompanied by appropriate security measures.

Threats classified by fedpol to contain an explicit In 2015, fedpol registered 1,063 threats by threat. Although the number of reports rose letter, e-mail or telephone. This figure is sig- considerably, the tone of the threats has not nificantly higher than in previous years. The changed significantly over previous years. increase was a result not only of the height- There was greater differentiation in regis- ened awareness of those entitled to close tering reports. Up to this point, all incoming protection, but also of a single incident in reports were generally registered as ’threats’ which a person received around 500 threats. even though not all the messages contained The 1,063 threats were made by 123 people the elements of a threat. In 2015, the incom- and directed at 89 individuals under federal ing reports were classified according to the protection. The messages mainly contained type of threat made. expressions of annoyance; only 10% were

President Sommaruga in the spotlight government and judiciary who feel or are Also in the centre of opposing interests was indeed threatened can report to fedpol. The the Swiss president, Simonetta Sommaruga. incidents are registered, and fedpol evalua- Switzerland’s asylum policy triggered widely tes all threats made to people entitled to differing reactions, and the president was close protection under federal law, adapting subject to a growing number of threats. security arrangements for individuals as Federal councillors, parliamentarians, necessary. federal officials and senior members of the

fedpol 45

Precursors and weapons The use of firearms and homemade explosives in terrorist attacks cost numerous lives in 2015, not only in Europe. Switzerland is in the process of regulating the use of substances that can be misused to manufacture explosives. Explosives in the hands of terrorists

Oslo, 22 July 2011, 15.25: of several bombings and shootings facture explosives. Manufacturing instruc- In the government district of the that night. In a series of co-ordinated tions are easily obtainable on the internet. Norwegian capital a van filled with attacks, several men kill 130 people homemade explosives manufactured in cafés, restaurants and a concert Switzerland to regulate precursors from fertilizers explodes. Eight people hall. The victims are either shot or die Triggered by the attacks in Oslo, the are killed, numerous others are injured. through the impact of suicide bombs. European Union decided in 2013 to The explosion also causes immense These two incidents are the most regulate the marketing and use of damage to property. The terror attack is devastating examples of terrorist explosives precursors. Since 2014, the a diversionary tactic by the right-wing attacks using firearms and homemade relevant EU regulation is applicable extremist, Anders Breivik. Following the explosives. According to Europol, the in the member states. It restricts and attack, Breivik proceeds to a lake near combined use of firearms and suicide controls the access to several dangerous the capital where a summer camp by the bomb belts as in the Paris attacks is a chemicals used to make explosives. To Workers’ Youth League is taking place on novelty in Europe. It is likely that terror- implement the regulation EU member the island of Utøya. During the 90 minutes ists will continue to use a combination states have various options: they can that follow, Breivik shoots 67 people. of these two types of weapon in future. prohibit access to certain substances, Two more people die while fleeing. Explosives are relatively simple introduce a permit system or require to manufacture with the necessary the reporting of suspicious transac- Paris, 13 November 2015, 21.20: know-how. Products readily available tions involving certain substances. An explosion outside the Stade de on the market, such as bleaching agent, Various EU member states, including France football stadium is the beginning solvents, disinfectants and fertilizers, Austria and the United Kingdom, have of one of the bloodiest Jihadi terrorist contain chemicals that in certain levels of already implemented the regulation. In attacks in Europe. It is to be the first concentration can be misused to manu- other countries implementation is in the

10 July 2003: An unclaimed suitcase at Cologne station triggers a major evacuation. Terrorists used home-made explosives in the Paris attacks of 2015.

48 fedpol planning. If Switzerland does not intro- The report by the group of experts will duce regulation, precursors will remain form the basis for recommendations to freely available on the Swiss market. This the Federal Council, which will make its means that criminals will be able to fall decision at the end of 2016. The group’s back on Switzerland and acquire – unim- main consideration is safety. But it also peded and unnoticed – the necessary seeks to propose a pragmatic solution substances for manufacturing explosives. because any measures that are introduced The Federal Council has recognised the will result in additional responsibilities danger and appointed the Federal Depart- and expense for retailers such as phar- ment of Justice and Police to set a group macies, drugstores or DIY shops. Some of experts under fedpol’s lead to examine sectors are therefore understandably various options for regulating precursors. critical with regard to regulation. For this reason, representatives of the economic Private sector involved from the outset sectors affected by the changes have been Switzerland has various options for involved in the process from an early stage. regulating precursors. For example, it can prohibit certain substances completely or above a certain concentration, introduce a permit system whereby private individuals have to apply for authorisation Weapons Act: better exchange However, they agreed to measures to improve to purchase designated substances, or of information set up a system of registration by which the exchange of information between the the seller must register the personal data The National Council and Council of States various Swiss authorities. This means that of the person buying the substances. revised the Weapons Act in 2015. The amend- the authorities can now consult all cantonal Regulation will not prevent the misuse ments serve to facilitate the exchange of weapons registers and fedpol’s ARMADA da- of precursors completely, but it will information between the various authorities. tabase by means of a single request instead of make it more difficult for criminals or Weapons bought after 12 December 2008 multiple requests to various cantonal registers, terrorists to obtain the substances must be registered with the cantons. The Fed- as was the case in the past. required for manufacturing explosives. eral Council wanted to extend this provision At international level, Switzerland supports to weapons bought before this date, but both measures to combat terrorism and is engaged councils rejected this proposal in the 2015 in the discussions for a possible amendment spring and summer sessions of parliament. to the EU weapons directive.

fedpol 49 50 fedpol

INVESTIGATING SERIOUS CRIME On behalf of the Office of the Attorney General, fedpol conducts investigations into complex cases of serious international crime. If there is sufficient indica- tion that a crime has been committed, the Attorney General’s Office launches a criminal investigation (see p.10). These investigations usually concern economic MANAGING POLICE CO-OPERATION AT crime such money laundering or corrup- NATIONAL AND INTERNATIONAL LEVEL tion, offences2 again the state such as At the centre terrorism or espionage, or activities Crime does not stop at national borders. involving criminal mafia-like organisations. That is why combating crime is an inter- fedpol compiles strategic analyses on national concern. fedpol is Switzerland’s criminal phenomena and threat assess- of policing in contact point for foreign police services. ments for the Attorney General’s Office Every day, fedpol sends and receives and the cantons. It also co-ordinates hundreds of communications to and intercantonal investigations or those from its international partners. The infor- with an international connection. Switzerland mation contained in each message is triaged, processed and check before being The strategic priorities of the Federal fedpol in focus In our globalised world, crime does not forwarded for follow-up action to the appro- Department of Justice and Police for the priate authority in the cantons or abroad. years 2015–2019 focus on four main areas stop at borders. It is becoming increasingly complex, of crime: often affecting several cantons simultaneously, and International police co-opera- regularly having an international dimension. tion is based on three pillars: Criminal mafia organisations Crime by mafia-like organisations and In Switzerland, security is primarily the responsibility Bilateral co-operation other offences committed for monetary of the cantons. fedpol is Switzerland’s national Switzerland has concluded numerous bilat- gain pose a significant threat to Switzer- eral agreements regulating in detail co-op- land. Fraud, which is often committed from police office and as such provides the cantons eration with the police services of other abroad but is reported in Switzerland on with certain services and infrastructures. It also countries. These countries include Austria, account of its link to criminal organisa- plays a central role in co-ordinating, analysing and France, Germany, Liechtenstein and Italy. tions, is one of the five greatest money Various police attachés stationed laundering threats to Switzerland. investigating complex cases of serious crime. Hence, in key countries facilitate co-opera- fedpol is at the heart of policing in Switzerland and tion. The attachés have a local network Criminal terrorist organisations is the nexus to the country’s international partners. of reliable partners, provide on-site Switzerland’s strategy for combating support, and ensure a fast and safe terrorism, approved by the Federal Council A portrait.

exchange of information between in 2015, pursues clear objectives: to prevent fedpol and its international partners. terrorist attacks in Switzerland, to stop 1fedpol also operates the Police and the export of terrorism and to make every Customs Co-operation Centres in Geneva effort to prevent Switzerland from being and Chiasso. The centres facilitate misused as a logistical and organisational cross-border co-operation in police and base for terrorist activity. In its capacity as customs matters with France and Italy. Switzerland’s national police service, fedpol conducts inquiries on behalf of the Attorney European co-operation General’s Office. It monitors potential fedpol works closely with its European terrorist financing (see p. 16), heads the partners. Thanks to the Schengen Associ- TETRA Task Force on Combating Terrorism ation Agreement, Switzerland has access and functions as national co-ordination unit to the Schengen Information System, a for all terrorism-related matters. The office is European database on wanted or missing involved in planning measures to be imple- persons and objects (see p.31). Switzerland mented in the event of a terrorist attack also co-operates closely with Europol: three in Switzerland (see p.6), and is responsible liaison officers from fedpol are currently for providing structures and resources in a stationed at the Europol headquarters in crisis situation, such as a terrorist attack or The Hague and are involved in numerous the kidnapping of Swiss citizens abroad. working groups, especially on anti-terrorism, cybercrime and human trafficking. Cybercrime Cross-border police co-operation in Any person who wishes to report illegal Europe has been strengthened in the last matter on the internet or other comput- few years through the Prüm Convention. er-related offences can submit a suspi- Police services across Europe are now cious activity report to fedpol. Following exchanging more information on DNA analysis of the report, fedpol stores the profiles, fingerprints, vehicles and vehicle data and forwards the information to the owners. This closer co-operation facilitates appropriate prosecution authorities in their work by saving them time and allowing Switzerland or abroad. Until a few years ago, greater efficiency in identifying suspects nearly all the reports concerned paedo- or pursuing leads. Switzerland is not yet phile crime. These days, however, more and party to the Prüm Convention, but the more reports concern economic crime. Federal Council has commissioned fedpol fedpol also compiles situation reports and to negotiate Switzerland’s membership. In case studies on cybercrime (see p.32). a next step, the EU is expected to approve the commencement of negotiations. The Human trafficking and people smuggling cantonal police services in particular Given the current geopolitical situation, would benefit from Prüm membership. human trafficking-related crime is not likely to abate. fedpol co-ordinates anti-trafficking Global co-operation activities and assists the cantonal law At global level, fedpol co-operates enforcement services in fighting human primarily with INTERPOL and the trafficking and people smuggling. The office United Nations Organization. fedpol implements measures to raise awareness of has access to INTERPOL’s crime the problem in society and, in collaboration databases, mainly for the purpose of with the Swiss Police Institute, co-ordinates tracing people and stolen property. the training of specialists in this field. INVESTIGATING SERIOUS CRIME On behalf of the Office of the Attorney General, fedpol conducts investigations into complex cases of serious international crime. If there is sufficient indica- tion that a crime has been committed, the Attorney General’s Office launches a criminal investigation (see p.10). These investigations usually concern economic MANAGING POLICE CO-OPERATION AT crime such money laundering or corrup- NATIONAL AND INTERNATIONAL LEVEL tion, offences again the state such as terrorism or espionage, or activities Crime does not stop at national borders. involving criminal mafia-like organisations. That is why combating crime is an inter- fedpol compiles strategic analyses on national concern. fedpol is Switzerland’s criminal phenomena and threat assess- contact point for foreign police services. ments for the Attorney General’s Office Every day, fedpol sends and receives and the cantons. It also co-ordinates hundreds of communications to and intercantonal investigations or those from its international partners. The infor- with an international connection. mation contained in each message is triaged, processed and check before being The strategic priorities of the Federal fedpol in focus In our globalised world, crime does not forwarded for follow-up action to the appro- Department of Justice and Police for the priate authority in the cantons or abroad. years 2015–2019 focus on four main areas stop at borders. It is becoming increasingly complex, of crime: often affecting several cantons simultaneously, and International police co-opera- regularly having an international dimension. tion is based on three pillars: Criminal mafia organisations Crime by mafia-like organisations and In Switzerland, security is primarily the responsibility Bilateral co-operation other offences committed for monetary of the cantons. fedpol is Switzerland’s national Switzerland has concluded numerous bilat- gain pose a significant threat to Switzer- eral agreements regulating in detail co-op- land. Fraud, which is often committed from police office and as such provides the cantons eration with the police services of other abroad but is reported in Switzerland on with certain services and infrastructures. It also countries. These countries include Austria, account of its link to criminal organisa- plays a central role in co-ordinating, analysing and France, Germany, Liechtenstein and Italy. tions, is one of the five greatest money Various police attachés stationed laundering threats to Switzerland. investigating complex cases of serious crime. Hence, in key countries facilitate co-opera- fedpol is at the heart of policing in Switzerland and tion. The attachés have a local network Criminal terrorist organisations is the nexus to the country’s international partners. of reliable partners, provide on-site Switzerland’s strategy for combating support, and ensure a fast and safe terrorism, approved by the Federal Council A portrait.

exchange of information between in 2015, pursues clear objectives: to prevent fedpol and its international partners. terrorist attacks in Switzerland, to stop 1fedpol also operates the Police and the export of terrorism and to make every Customs Co-operation Centres in Geneva effort to prevent Switzerland from being and Chiasso. The centres facilitate misused as a logistical and organisational cross-border co-operation in police and base for terrorist activity. In its capacity as customs matters with France and Italy. Switzerland’s national police service, fedpol conducts inquiries on behalf of the Attorney European co-operation General’s Office. It monitors potential fedpol works closely with its European terrorist financing (see p. 16), heads the partners. Thanks to the Schengen Associ- TETRA Task Force on Combating Terrorism ation Agreement, Switzerland has access and functions as national co-ordination unit to the Schengen Information System, a for all terrorism-related matters. The office is European database on wanted or missing involved in planning measures to be imple- persons and objects (see p.31). Switzerland mented in the event of a terrorist attack also co-operates closely with Europol: three in Switzerland (see p.6), and is responsible liaison officers from fedpol are currently for providing structures and resources in a stationed at the Europol headquarters in crisis situation, such as a terrorist attack or The Hague and are involved in numerous the kidnapping of Swiss citizens abroad. working groups, especially on anti-terrorism, cybercrime and human trafficking. Cybercrime Cross-border police co-operation in Any person who wishes to report illegal Europe has been strengthened in the last matter on the internet or other comput- few years through the Prüm Convention. er-related offences can submit a suspi- Police services across Europe are now cious activity report to fedpol. Following exchanging more information on DNA analysis of the report, fedpol stores the profiles, fingerprints, vehicles and vehicle data and forwards the information to the owners. This closer co-operation facilitates appropriate prosecution authorities in OPERATING NATIONAL DATABASES ENSURING THE SAFETY OF PEOPLE AND their work by saving them time and allowing Switzerland or abroad. Until a few years ago, AND COMPETENCE CENTRES FACILITIES UNDER FEDERAL PROTECTION greater efficiency in identifying suspects nearly all the reports concerned paedo- or pursuing leads. Switzerland is not yet phile crime. These days, however, more and Exchanging information and identifying fedpol defines the measures required to party to the Prüm Convention, but the more reports concern economic crime. wanted persons or missing objects is of key protect federal officials, such as federal Federal Council has commissioned fedpol fedpol also compiles situation reports and importance in fighting crime. To this end, councillors, or people subject to protection to negotiate Switzerland’s membership. In case studies on cybercrime (see p.32). the cantonal police use numerous channels under international law, such as foreign a next step, the EU is expected to approve and databases3 developed by fedpol, such as ministers4 on state visits to Switzerland. To the commencement of negotiations. The Human trafficking and people smuggling the RIPOL search system or the AFIS finger- this end, fedpol compiles threat assess- cantonal police services in particular Given the current geopolitical situation, print database (see p.28). With an expend- ments and determines specific security would benefit from Prüm membership. human trafficking-related crime is not likely iture of approximately CHF 49 million measures, which are implemented by to abate. fedpol co-ordinates anti-trafficking - one-fifth of its total budget - fedpol oper- the cantonal police. It is also responsible Global co-operation activities and assists the cantonal law ates around 50 IT applications. All Swiss for the security of federal buildings and At global level, fedpol co-operates enforcement services in fighting human citizens benefit directly from at least one of foreign diplomatic missions accredited primarily with INTERPOL and the trafficking and people smuggling. The office these: the information system for collecting to Switzerland. A further task includes United Nations Organization. fedpol implements measures to raise awareness of data to produce the Swiss passport and guaranteeing safety and security on has access to INTERPOL’s crime the problem in society and, in collaboration identity card. In 2015, data from this appli- board Swiss commercial aircraft and databases, mainly for the purpose of with the Swiss Police Institute, co-ordinates cation was used to manufacture 760,515 at selected airports abroad according tracing people and stolen property. the training of specialists in this field. passports and 1,039,399 identity cards. to an ongoing situation assessment. 51 fedpol

full-time positions full-time 837 926 employees comprising employees 926 salary category 24 – 29: 21.7% salary category 30 – 38: 15.4% job-sharing also for people in managerial positions, and positions, people in managerial job-sharing also for young foster To positions. key to women promoting program. a mentoring has also introduced fedpol talent, parent-child- policy is fedpol’s this personnel of A symbol at the office come to to who have parents where room, bring can an emergency of or in the event short notice them. alongside temporarily and work their children Proportion of women in management: management: in women of Proportion -

room child- - 1 parent 65.7 % male 34.3 % female Gender balance: balance: Gender A further example is the internal self-evaluation project project self-evaluation is the internal example A further a modern and competitive remain aims to fedpol ’Improve fedpol.’ The aim of this project was to ascertain ascertain to was this project The aim of fedpol.’ ’Improve of a culture foster and to and weaknesses, strengths fedpol’s yielded a catalogue The process self-improvement. continual currently are that measures improvement comprehensive of is the measures these of One example being implemented. communication. and external internal of improvement a has adopted the directorate is why That employer. between the compatibility improve to measures of series wher include promoting, Examples life. and family work and work part-time home, from work possible, ever -

Italian 8.3 % 19.2 % French 72.1 % German Language distribution: distribution: Language The security landscape is in a constant state of flux: crime of state is in a constant landscape The security occur can events all the time and unforeseen is evolving - envi succeed in this ever-changing To moment. any at its resources manage priorities, set must fedpol ronment, - target-ori efficient, and implement and develop effectively, fedpol of the director goals, these attain To processes. ented in 2015, such as the reorganisation projects several initiated the foster to and a project Criminal Police the Federal of evalua a better through staff fedpol of development career tion of their professional skills. One of the aims of this latter this latter the aims of skills. One of their professional tion of remain competitive staff fedpol that ensure is to project life. their working throughout market on the employment 926 employees, employees, 926 fedpol: CHF 250 million budget and a parent-child-room Analysis categories salary of

100 % 60.7 % 23 % 10 % 3 % 1.8 % 1.5 % 0.6% 4 % 5 % 20.2 % 31.6 % 38.6 %

100 % Salary category Salary category 01 – 11 12 – 17 18 – 23 24 – 29 30 – 38 Other 2015 326 women Number of men 600 Number of Analysis categories salary of

fedpol 53 Concept Federal Office of Police fedpol Editing Federal Office of Police fedpol Design concept 2. stock süd nethoevel & gaberthüel, Biel Illustrations Aurel Märki, Bern Photos S. 4 : Keystone/Luz Photo/Simone Percolari Keystone/AP/Luz Photo/Alessandra Tarantino Fotolia/aalutcenko Keystone/AP/Image-Broker/Jochen Tack p. 6/7 : Keystone/Agence Vue/JR p. 8/9 : Keystone/TI-Press/Samuel Golay p. 12/13 : Gaëtan Bally p. 22 : Keystone/EPA/Simela Pantzartzi p. 26 : Keystone/AP/Alessandra Tarantino p. 38 : Keystone/Peter Schneider p. 41 : Keystone/EPA AP/Roland Schlager p. 42/43 : Keystone/Thomas Hodel p. 46 : Keystone/AP/Jens Hartmann Typeface Adelle (Veronika Burian/José Scaglione) Print Vogt-Schild Druck AG, Derendingen Paper Fischer Papier: Lessebo 1.3 Rough White (100gm2/300 gm2) Distribution Federal Office for Buildings and Logistics FOBL, Federal Publications Shop CH-3003 Bern www.bundespublikationen.admin.ch Copyright fedpol 2015 Other information www.fedpol.admin.ch

54 fedpol fedpol 55