Europol’s IOCTA 2026: new threats and increasing sophistication of cybercrime

Europol has published the 2026 edition of the Internet Organised Crime Threat Assessment (IOCTA), one of the key reports on the evolution of cybercrime in Europe. The document, titled «How encryption, proxies, and AI are expanding cybercrime», analyses how emerging technologies—especially artificial intelligence, end-to-end encryption, and cryptocurrencies—are transforming the landscape of digital threats.

The report highlights that cybercrime is becoming increasingly sophisticated, decentralised, and professionalised. According to Europol, criminal groups swiftly exploit any technological advancement to enhance their operations, hinder investigations, and expand the scope of their attacks. This situation compels law enforcement agencies and public and private organisations to strengthen their technical capabilities and international cooperation.

One of the highlights of the IOCTA 2026 is the role of the dark web as an essential infrastructure of cybercrime. Despite police operations in recent years, illegal markets and criminal forums continue to show a great capacity for recovery. When a platform is dismantled, more fragmented, specialised, and secure alternatives quickly emerge. Moreover, the combination of anonymised services and platforms with end-to-end encryption is blurring the line between the surface web and the dark web, further complicating investigative tasks.

Cryptocurrencies remain a key element in the digital criminal ecosystem. The report particularly highlights the growing use of so-called «privacy coins» and offshore exchange services to launder money derived from ransomware and other illicit activities. These tools greatly hinder the traceability of transactions and pose a significant challenge for the authorities. Europol also warns about the increase in the indirect involvement of minors and young adults in money laundering activities related to cryptocurrencies, often without being fully aware of the legal implications.

Artificial intelligence emerges as one of the main accelerators of online fraud. Cybercriminals use generative AI tools to create more convincing messages, personalise social engineering techniques, and automate large-scale fraudulent campaigns. These technologies allow for the production of e-mails, SMS messages, or fake content with a very high level of realism. This is supplemented by techniques such as caller ID spoofing, which allows for the falsification of the identity of phone calls, and SIM farms, capable of sending thousands of messages and simultaneous communications.

Regarding cyberattacks, ransomware remains one of the main threats. The IOCTA 2026 highlights that, during 2025, numerous variants and active groups were detected, many of which have evolved into double extortion models: they not only encrypt the victims’ information but also threaten to publish the stolen data if the ransom is not paid. This strategy increases the pressure on businesses and public institutions and makes data protection a critical security factor.

The report also warns about the growing connection between criminal actors and state-sponsored hybrid threats. Some cybercrime groups act as intermediaries or proxies in political destabilisation or espionage operations. This convergence between organised crime and geopolitical interests represents a new risk scenario for critical infrastructure, public administrations, and large technology companies.

Another of the most concerning points is the increase in onlinechild sexual exploitation. Europol reports an increase in cases of sexual extortion, as well as the commercialisation of child sexual abuse material for economic purposes. There is also concern about the growth of synthetic content generated with artificial intelligence, which creates new technical and legal challenges for identifying victims and pursuing those responsible. Encrypted messaging platforms have become a common space for this type of criminal activity.

In this context, the report particularly mentions The Com, a network of online criminal communities linked to extremely violent activities. According to Europol, these environments combine online child sexual exploitation, extortion, cyberattacks, and other forms of serious violence, creating highly dangerous and difficult-to-infiltrate criminal ecosystems.

Finally, the IOCTA 2026 emphasises the need for a coordinated response among governments, law enforcement, technology companies, and international organisations. Europol insists that the fight against cybercrime will require greater technical capabilities, regulation adapted to new digital challenges, and much closer global cooperation. The report thus consolidates itself as an essential strategic guide for understanding how digital threats are evolving and how to prepare for an increasingly complex and hostile environment.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Several call centres dismantled in a 50-million-euro online fraud case

The recent dismantling of a criminal network dedicated to online fraud highlights how much these scams have evolved into highly professional and difficult-to-detect structures. The operation, coordinated by Europol and Eurojust together with the authorities of Austria and Albania, led to the arrest of ten individuals, the dismantling of several call centres, and the confiscation of nearly 900,000 euros in cash, as well as a large amount of computer equipment.

The core of the criminal activity was located in several call centresin Tirana, from which an organisation operated with a surprisingly similar structure to that of a legitimate business. With up to 450 employees distributed across departments such as human resources, finance, IT, and customer service, the group operated with clear hierarchies, specialised teams, and defined business objectives. This level of organisation explains the enormous scope of the scam, which is believed to have caused losses exceeding 50 million euros to victims around the world.

The mechanism used was based on fake investment platforms that appeared to be legitimate opportunities. Victims were lured through misleading advertisements on social media or web search engines, where they were promised high returns with little risk. Once registered, they were contacted by agents posing as financial advisors. These «professionals» established a continuous relationship with the victims, gaining their trust and encouraging them to invest increasingly larger amounts.

One of the key elements of the deception was the use of psychological manipulation techniques combined with technological tools. In many cases, fraudsters asked victims to install remote access software, which allowed them to control devices and simulate seemingly real investment operations. This reinforced the illusion of credibility and made it easier for victims to continue transferring money, convinced that they were obtaining benefits.

In reality, the money was never invested. They were diverted through a complex international money laundering network until they disappeared into the hands of the criminal organisation. Moreover, the criminals were not limited to a single scam: in many cases, they would re-contact the same victims offering fake services to recover the lost money. This type of «double scam» exploits the vulnerability of the victims and can generate significant additional losses.

Another determining factor in the success of the organisation was its capacity for linguistic and cultural adaptation. The teams were made up of groups of six to eight people specialised in different languages, such as German, English, Italian, Greek, or Spanish, which allowed them to address victims from various countries with a high degree of proximity and trust. This seemingly minor detail is actually one of the keys to the efficacy of this type of fraud.

The investigation was initiated in Austria in 2023, following the detection of a high number of victims in Vienna. Subsequently, thanks to international cooperation and the exchange of information, the activity could be traced to Albania. The creation of a joint investigation and operational coordination team culminated in a police action on 17 April 2026, with raids on workplaces and private homes, as well as the confiscation of hundreds of electronic devices that are now being analysed.

This case highlights the importance of international cooperation in the fight against cybercrime, especially when it comes to transnational organisations operating from multiple jurisdictions. It also highlights the need to strengthen user awareness regarding investment promises that seem too good to be true.

From the perspective of security, there are several key indicators that can help identify potential scams: offers with guaranteed or excessively high returns, pressure to invest immediately, requests to install remote access software, or unsolicited contacts through digital channels. Similarly, one should be wary of any service that promises to recover lost money in exchange for an upfront payment.

Ultimately, this operation has not only dismantled a large-scale criminal network but also provides a clear picture of how modern investment scams operate. The combination of technology, business organisation, and emotional manipulation makes them a growing threat that requires both coordinated police action and an informed and critical citizenry.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Digital scammers are becoming increasingly organised and sophisticated

Digital scams have become one of the main global threats in recent years, with a level of sophistication and organisation that continues to grow. The case of Kirsty, a British woman deceived through a romantic scam, exemplifies how these criminal networks operate today: with credible false identities, advanced technologies, and an international infrastructure that greatly hinders their detection and prosecution.

In this case, the fraudster impersonated a businessman with a comfortable life, using attractive photographs and even a fake banking website to gain the victim’s trust. After weeks of emotional involvement, he faked an emergency to get money. The result was devastating: the victim transferred tens of thousands of pounds, many of which were requested from family members, believing that they were helping a loved one. In reality, the money was distributed through an international network with connections to several countries.

This type of scam is not an isolated case. According to recent data, fraud accounts for more than 40% of crimes against individuals in some countries, and global losses exceed half a trillion dollars annually. Romance scams, in particular, have experienced a strong increase, driven by the massive use of digital platforms and social networks.

One of the key factors in this growth has been the COVID-19 pandemic. During the lockdowns, millions of people increased their online presence, both to socialise and to shop or work. This created an ideal environment for fraudsters, who took advantage of the situation to perfect their techniques. At the same time, technological advancement has facilitated the creation of very realistic fake content, such as synthesized voices, manipulated videos, or websites that are almost indistinguishable from real ones.

Current scams are often transnational operations, with infrastructures spread across the globe. In many cases, these activities are carried out from regions with little capacity for control by the authorities, such as conflict zones or areas with weak governments. Myanmar, for example, has become one of the epicentres of these fraud centres, where buildings that once housed illegal casinos now serve as bases for criminal operations.

An especially concerning aspect is that not all fraudsters act voluntarily. Many people are lured by false job offers and end up being victims of human trafficking. Once they arrive at these centres, their passports are confiscated and they are forced to work in extreme conditions, under threats and violence, with very demanding economic targets. This creates a double layer of victimhood: that of the one who loses money and that of the one who is forced to participate in the fraud.

In light of this reality, the fight against scams requires a global and coordinated response. Recently, important steps have been taken in this direction, such as the signing of international agreements to strengthen cooperation between countries, technology companies, and security forces. However, this cooperation is still limited and unequal. Many of the countries where these activities are concentrated do not have the resources or the technical capabilities necessary to combat them effectively.

Experts highlight the need to share knowledge, technology, and resources between developed and developing countries. The investigation of modern fraud requires specialised profiles, such as data analysts, cryptocurrency experts, or digital investigators, which are not always available everywhere.

The role of large technology companies is also key. Platforms such as social media, messaging applications, or dating sites are often the entry point for scams. Some companies have begun to implement stricter measures, such as the detection and mass removal of fake accounts or the prevention of downloads of malicious applications. However, many experts believe that a deeper and more operational involvement is still necessary.

Despite the complexity of the problem, there are success stories that demonstrate that cooperation can work. What is more, in some cases, rapid communication between authorities from different countries has allowed for the blocking of transfers and the recovery of money before it completely disappeared.

In conclusion, modern scams are a global, dynamic, and highly sophisticated phenomenon that combines technology, psychology, and international criminal networks. Combating them requires not only police action but also citizen education, corporate responsibility, and much closer international cooperation. Meanwhile, the best defence is still prevention: to be wary of suspicious situations, verify identities, and avoid making economic decisions under emotional pressure.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Use of AI to identify victims of child sexual abuse 

The Metropolitan Police of London (MET) is exploring the use of artificial intelligence (AI) as a key tool to combat child sexual abuse, especially in the digital realm, where this type of crime is growing rapidly. The main objective is to improve the ability to identify victims more quickly and efficiently, while reducing the emotional impact that manually reviewing large volumes of highly traumatic material has on investigators. 

Traditionally, officers have had to spend many hours examining seized images and videos to determine whether they are linked to known cases or if they point to new victims. This process is not only slow but also psychologically very demanding. With the introduction of AI, MET aims to automate part of this task through systems capable of analysing large amounts of content in a short time, identifying patterns, classifications, and possible indications of unidentified victims. This would allow to prioritise cases with higher risk and accelerate protection interventions. 

According to recent data, the MET investigated over 5,400 child sexual abuse crimes in a year, with more than 1,300 children needing protection in cases related to online sexual exploitation. This phenomenon, known as OCSAE (Online Child Sexual Abuse and Exploitation), has increased by 25% year-on-year and represents a significant part of the national police burden. In this context, the need for new technological tools becomes critical for managing the volume and complexity of cases. 

AI could also help classify material according to its severity (categories A, B, and C), highlighting the most urgent cases—especially those in category A, which include more severe cases of abuse—for immediate intervention. In addition, the MET is testing other technologies capable of reviewing hundreds of thousands of messages in a matter of minutes, a task that would manually require days or weeks. 

Despite the potential benefits, the MET has emphasised that any use of AI will be conducted within strict legal and ethical frameworks, with constant human oversight. Specialised officers will continue to be responsible for decision-making, ensuring that the technology is used as support and not as a substitute for professional judgement. 

Alongside technological innovation, the MET is also investing 10 million pounds in improving interview spaces for child victims. These rooms, known as VRI (Visual Recorded Interviews), are designed to provide safe, comfortable environments tailored to the needs of children, including those with disabilities or neurodiversity. The objective is to reduce the trauma associated with the statement and improve the quality of witnesses, as it has been shown that children provide clearer accounts when they feel safe and supported. 

The new facilities include adjustable furniture, spaces for play and drawing, and educational resources adapted to different ages. This child-centred approach is part of a broader strategy that also includes training thousands of agents in trauma-sensitive communication and expanding specialised teams in child exploitation. 

Despite these advances, experts and officials in the field of victims remind us that the improvement of infrastructure and technologies is only part of the solution. One of the major challenges is still ensuring that victims receive ongoing support and are treated with dignity throughout the judicial process, as many abandon before legal decisions are made. 

In conclusion, the combination of artificial intelligence and investment in more human environments represents a significant shift in the way law enforcement addresses child sexual abuse. This integrated approach not only seeks to increase operational efficiency but also to place the well-being of victims and professionals at the centre of the police response. 

_____

Aquest apunt en català / Esta entrada en español / Post en français

Reduction of knife crime in the United Kingdom: measures, results, and challenges

The UK government has announced a significant reduction in knife crime, highlighting that homicides of this type have decreased by 27% in the same period during which more than 63,000 knives have been removed from the streets. This data is part of a broader strategy aimed at combating violent crime and improving public safety, especially in urban environments affected by youth crime.

The withdrawal of these weapons has occurred through various means. On one hand, voluntary surrender programmes have allowed for the collection of nearly 58,000 knives, enabling citizens to dispose of them without legal consequences. On the other hand, border authorities have seized thousands of additional weapons, while the police have intensified operations against criminal networks, especially under the well-known «County Lines Programme», focused on drug trafficking and the exploitation of young people.

Beyond the decrease in homicides, other indicators show a downward trend: knife robberies have decreased by 10% and hospitalisations due to stabbings by 11%. All of this suggests a positive impact of the measures adopted, although it is necessary to analyse these figures with caution to understand to what extent this is a consolidated trend.

One of the pillars of the new government strategy, entitled «Protecting Lives, Building Hope», is prevention. In a decade, the goal is to halve knife crime, not only through law enforcement but also by addressing the social causes behind it. This includes support programmes for at-risk youth, investments in education, and community initiatives to prevent adolescents from entering criminal dynamics.

In the legislative field, stricter measures have been introduced to limit access to dangerous weapons. Among them, the prohibition of certain types of knives, such as the so-called «zombie knives», as well as new regulations on online sales, stands out. In this context, the well-known «Ronan’s Law» establishes a two-phase age verification system for the purchase of bladed weapons online, both at the time of purchase and at delivery. It also obliges sellers to report bulk purchases that may appear suspicious.

This law is named after a young person who was killed with a weapon purchased online, a case that highlighted the shortcomings in the regulation of the sale of such products. The involvement of their family in promoting legislative changes has been key to accelerating reforms aimed at preventing similar tragedies in the future.

At the same time, the government has introduced a new crime: the possession of a bladed weapon with the intent to commit violence, even in private spaces. This measure expands police powers, allowing intervention before a violent act occurs, although it has also sparked debate about the balance between security and civil rights.

Despite the positive results, several experts point out that the relationship between the withdrawal of weapons and the decrease in violence is not necessarily direct. Factors such as socioeconomic conditions, educational policies, or changes in criminal dynamics can also influence the evolution of the figures. Additionally, some of the knives removed may not be linked to criminal activities, making it difficult to evaluate the real impact of the measures.

In conclusion, the decline in knife homicides in the United Kingdom represents a significant advancement in terms of safety, but it cannot be attributed to a single cause. The adopted strategy combines police actions, legal reforms, and preventive initiatives, shaping a comprehensive approach that could serve as a reference for other countries. However, the long-term challenge remains to address the social roots of violence to ensure sustained and lasting reduction.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Data-driven strategies to combat knife crime

The UK government has announced a new set of measures aimed at combating knife crime, focusing particularly on those areas where this type of crime is repeatedly concentrated. According to official data, most knife incidents occur in a very small number of streets and specific areas, which has led to the adoption of a highly focused and data-driven strategy.

One of the main novelties is the investment of more than £26 million through the so-called Knife Crime Concentrations Fund. This fund will be allocated to 27 police forces in England and Wales, responsible for nearly 90% of knife crime cases. The aim is to intensify police presence and surveillance measures in the most conflictive areas to prevent crimes and apprehend offenders more effectively.

To make this possible, the Home Office has developed a new mapping technology that allows for the identification of «hot spots» of criminality with very high precision, down to areas of just 0.1 km². This microgeography approach not only allows for knowing where crimes occur, but also at what times of the day they are most likely to happen. Thus, security forces can deploy resources much more efficiently and strategically.

Among the measures to be deployed in these areas are the increase of police patrols, the installation of new CCTV cameras, the use of real-time facial recognition technology, and the placement of knife detection arches. This set of actions aims to act both as a deterrent and as a tool to identify and apprehend individuals involved in criminal activities.

This plan is part of a broader strategy of the British government, presented under the title «Protecting Lives, Building Hope», which aims to halve knife crime within a decade. Beyond police measures, the plan places special emphasis on prevention, especially among young people, who are considered a key group both for the risk of victimisation and for their involvement in these crimes.

In this sense, the creation of 50 centres called «Young Futures Hubs» is expected before the end of the legislative term, located in areas particularly affected. These centres will provide comprehensive support to young people, with educational, social, and accompaniment services, in order to reduce the risk factors associated with violence. At the same time, 50 «Young Futures Panels» will be deployed, multidisciplinary teams responsible for early identification of vulnerable minors and providing them with coordinated support.

The government will also continue to fund existing programmes, such as the Violence Reduction Unit, with an investment of over £66 million, as well as educational initiatives like the Safety In & Around Schools Partnership program, which will reach up to 250 schools in at-risk areas. This programme offers specialised training to improve student safety, especially during commutes to school.

Other measures include strengthening the fight against the distribution of weapons over the Internet, with funding for the Knife Crime Coordination Centre, as well as investments in the County Lines programme, aimed at combating drug trafficking networks that are often linked to knife violence. Resources are also allocated to the Turnaround programme of the Ministry of Justice, which works with at-risk youth who are on the verge of entering the judicial system.

Experts and representatives of social organisations have positively assessed this data-driven and localised intervention approach. They highlight that knife crime not only generates direct victims but also creates a climate of fear that profoundly affects the daily lives of young people and the cohesion of communities. Therefore, they consider it essential to act on the structural causes and not just on the consequences.

Together, this strategy combines technology, intensive police action, and social intervention with the aim of reducing violence, improving public safety, and providing real opportunities for at-risk youth. Despite the initial indicators pointing to a slight reduction in cases, the challenge remains to consolidate this long-term trend and ensure that the measures taken have a sustainable impact.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Minors and online coded language: a growing challenge for digital security

In recent years, the presence of children and adolescents on the internet has increased exponentially, especially on platforms such as TikTok, Instagram, YouTube, and Discord. This increase in digital activity has been accompanied by a worrying phenomenon: the dissemination of coded language used by adults with potentially dangerous intentions, often before the parents themselves are aware.

A revealing case is that of a 10-year-old girl who, in a conversation on TikTok, responded to a stranger by saying, «I am not a MAP». This term, unknown to many adults, means «a person attracted to minors». This type of language is part of a system of codes and euphemisms that allows certain individuals to communicate while avoiding detection by the moderation systems of the platforms.

The term «MAP» is not an isolated case. There is a complete ecosystem of words and codes that can appear in forums, social networks, or online communities. Examples include «NOMAP» (people who claim not to act on their attractions), «764» (a numerical code associated with these interests), or expressions such as «AOA» (age of attraction) and «AMSC» (adult-minor sexual contact). These seemingly innocent or technical expressions can conceal discourses or intentions that pose a risk to minors.

One of the reasons why children detect and understand this language before adults is their constant immersion in digital environments. Recent studies indicate that a significant proportion of adolescents spend a large part of their time online, even almost constantly. This continued exposure allows them to capture meanings from the context, even if they do not know their exact origin.

This phenomenon falls within what is known as «algospeak»: a form of communication adapted to evade automatic moderation systems. Users replace explicit words with codes, numbers, or memes, making the content more difficult to detect. This creates a gap between the control capacity of the platforms and the evolution of online language.

Potentially harmful contact processes often follow similar patterns. First, ambiguous or coded language is used to avoid suspicion. Then, an apparently innocent relationship can be established through comments or shared content. Gradually, the conversation shifts to private channels such as direct messages where oversight is less. In some cases, users create alternative accounts to avoid restrictions or bans.

In this scenario, the response cannot be solely reactive. That is, it is not enough to act only when a problem has already arisen. Research in digital security and education indicates that prevention is key. This involves training both adults and minors in digital skills that enable them to understand how platforms and their algorithms work.

For example, it is important that young people understand that the content they see is not always the result of an active search but is often recommended by systems that prioritise interaction and viewing time. This knowledge can help them better interpret why certain content appears and develop a more critical attitude.

It is also advisable to introduce conversations about coded language from an early age, especially at the end of primary school or the beginning of secondary school. Explaining why some people use euphemisms or codes can help minors identify suspicious situations and react appropriately.

Another effective strategy is to practice responses to uncomfortable situations. Phrases like «I don’t want to talk about this», «I’ll block you», or «I’m leaving the conversation» can provide security to minors and reduce the pressure to respond. Furthermore, it is fundamental to ensure that they understand that they have no obligation to be educated with strangers online or to share personal information.

The role of parents and guardians is also essential. Beyond controlling or limiting the use of devices, it is important to support minors in their digital experience. This involves taking an interest in what they do online, openly discussing the risks, and fostering a trusting environment where they feel comfortable sharing any strange or uncomfortable situations.

Ultimately, the digital security of minors requires a combination of knowledge, prevention, and communication. Encoded language is just one of the many ways in which online risks can manifest, but its subtle nature makes it especially difficult to detect. Therefore, awareness and ongoing education are fundamental tools to protect the younger generation in an increasingly complex digital environment.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Increased police pressure in areas with a high incidence of knife crime

The Home Office, through its MP Sarah Jones, has announced a new strategy to combat the high incidence of knife crime in England and Wales, based on a key idea: most of these crimes are concentrated in very specific areas and occur repeatedly on the same streets and at the same times. This reality has led the UK government to adopt a much more precise, intensive, and data-driven approach to reducing this type of violence.

The plan introduces a new mapping technology capable of identifying areas with a high incidence of crime with an accuracy of up to 0.1 square kilometres. This approach, known as microgeography, allows law enforcement agencies to accurately detect not only where crimes occur, but also when they take place most frequently.

Based on this information, the police will be able to deploy resources in a much more efficient manner, focusing on those areas where the risk is higher. The objective is to move away from generalist strategies and focus on specific and targeted interventions.

The areas identified as hot spots will experience a notable increase in police activity. Among the proposed measures are:

  • Increase in police patrols
  • Installation of new video surveillance cameras (CCTV)
  • Use of live facial recognition
  • Implementation of knife detection arches

This set of actions aims to deter the commission of crimes, facilitate the identification of perpetrators, and improve the immediate response capacity to incidents.

The UK Government has allocated over £26 million to the Knife Crime Concentrations Fund. This funding will be distributed among 27 police forces that account for approximately 90% of knife crimes in the country.

This investment is part of a broader plan that aims to halve crime with these weapons within a decade. According to the Crime and Policing Minister, Sarah Jones, this strategy will save lives and strengthen the security of communities.

Beyond the increase in police pressure, the plan also includes measures aimed at prevention. The government recognises that knife crime is often related to social and economic factors, especially among young people.

Therefore, it is planned to:

  • Create 50 youth centres («Young Futures Hubs») in affected areas
  • Implement panels to detect young people in at-risk situations at an early stage
  • Support programmes for schools in vulnerable areas
  • Invest in violence reduction programmes and community intervention.

This approach seeks to act before a crime occurs, offering alternatives and support to the most vulnerable groups.

The strategy presents several advantages. Firstly, it allows for the optimisation of police resources, placing them where they are most needed. Secondly, it can generate faster results in reducing crime in specific areas.

However, it also poses some significant challenges. The use of live facial recognition may raise concerns regarding privacy and civil rights. Moreover, the concentration of police activity in certain neighbourhoods could lead to perceptions of excessive police presence.

Ultimately, the effectiveness of the model will largely depend on the quality of the data and the coordination among the different stakeholders involved.

The new strategy of the United Kingdom represents a significant shift in the way knife crime is addressed. By opting for technology, data analysis, and targeted intervention, the government seeks to act with greater precision and effectiveness.

At the same time, the combination of police measures and social prevention initiatives reflects a more comprehensive approach to the problem. While the results are yet to be seen, this strategy could pave the way for other countries facing similar challenges in urban security.

_____

Aquest apunt en català / Esta entrada en español / Post en français

Two new studies reveal how artificial intelligence can be used to promote gender-based violence and sexual abuse

Researcher Clare McGlynn, an expert in violence against women and girls, warns that the latest generation of artificial intelligence chatbots is facilitating new forms of abuse with concerning scale and intensity. Although the relationship between technology and gender-based violence is not new—including sexual deepfakes or image-based abuse—McGlynn believes that chatbots represent a qualitative change. Her research documents how these tools, often available for free, allow users to simulate scenarios of rape, incest, and child sexual abuse, as well as other forms of gender-based violence.

As reported by Patricia Clarke on observer.co.uk, this report coincides with an investigation by the Internet Watch Foundation (IWF), which highlights a rapid increase in child sexual abuse material generated by AI. The data is particularly alarming: in 2025, thousands of AI-generated videos were identified, with an exponential increase compared to the previous year. In addition, a significant proportion of this content is classified at the highest levels of severity. Girls represent the vast majority of victims in this type of material, which evidences a clear gender bias in the harm caused.

Reports agree that the problem is not only the misuse of technology but also the design decisions of the platforms. When companies prioritise growth and user acquisition over security, they create environments that facilitate abuse. In particular, open-source AI models are highlighted as a risk factor, as any user can download them, modify them, and remove their safeguards. This accessibility has been celebrated in dark web forums, where some users see AI as a tool to materialise illegal fantasies with a high degree of realism.

One of the most concerning areas is that of role-playing applications and companies, where chatbots act as fictional interlocutors. Platforms with millions of users allow for the creation of characters that can represent abusive or sexualised situations, including minors. The lack of effective control over this content and the ease of access to it amplify the risks, especially for young users.

McGlynn defines this phenomenon as «chatbot-simulated violence» and emphasises that it is a problem that is still very scarcely visible in academic research. Despite the abundance of studies on AI security, there is a significant lack of analysis focused on gender impact. This invisibility may contribute to perpetuating systemic risks as technology evolves.

In terms of regulation, experts believe that the current response is insufficient and fragmented. Some measures, such as restricting access to certain applications or prohibiting them in certain countries, are seen as limited steps that do not address the structural problem: the very design of the platforms. In this context, McGlynn proposes the creation of a new criminal offence for the «dangerous deployment of AI chatbots», which would hold companies accountable for not implementing adequate harm prevention measures.

At the same time, the IWF demands that security by design become a mandatory standard, including pre-launch testing and independent audit mechanisms. Political movements are also taking place: in the United Kingdom, the House of Lords has proposed introducing criminal liabilities for providers of unsafe chatbots, and there are plans to include these services within online safety legislation. However, critics point out that there is still a lack of a specific regulator and clear obligations to ensure safety before products reach the public.

Ultimately, the reports reveal a growing tension between technological innovation and the protection of fundamental rights. Without more forceful interventions, there is a risk that AI will not only reflect but also amplify existing forms of violence, especially against women and girls. For security professionals, this implies the need to adopt a proactive approach based on prevention, responsibility, and the ethical design of emerging technologies.

_____

Aquest apunt en català / Esta entrada en español / Post en français

NIST drives fingerprint analysis with new data and open-source software

The analysis of fingerprints continues to be one of the most relevant tools in criminal investigations, but it is also a complex process that requires great precision and expertise. In this context, the National Institute of Standards and Technology (NIST) in the United States has taken an important step to modernise this field with the launch of new resources that combine big data and open-source technology.

NIST has recently completed its Special Database 302 (SD 302), a set that includes approximately 10,000 fingerprints collected in controlled environments from 200 volunteers. Although this database has existed since 2019, until now only a portion of the images had detailed annotations. With this new update, all fingerprints have been completely annotated, significantly increasing their value for research and training.

These annotations are especially relevant because they indicate the quality of different areas of each imprint using colour codes. In practice, this allows for easier identification of which parts of a fingerprint contain useful information for identification and which may be less reliable. This distinction is fundamental for both human examiners and automated systems, as the fingerprints collected at crime scenes are often incomplete, blurred, or partially deteriorated.

From the perspective of security and forensic investigation, the availability of a fully annotated dataset represents a key advancement. It not only facilitates the training of new professionals, but also allows for the development and validation of artificial intelligence algorithms with a solid empirical foundation. At a time when AI plays an increasing role in the analysis of digital evidence, having quality data is essential to ensure reliable and reproducible results.

At the same time, NIST has released a new open-source software called OpenLQM, an evolution of a tool previously used by law enforcement in the United States. This software is designed to automatically assess the quality of fingerprints. Its operation is relatively simple: it analyses an image and assigns a score between 0 and 100 that reflects the level of detail and usefulness of the imprint.

This functionality has very important practical implications. In a real investigation, analysts may encounter hundreds of fingerprints collected at the same scene. Automatically classifying them according to their quality allows to prioritise those that are more likely to lead to a positive identification, thus reducing the time and resources required. Moreover, the use of an objective metric helps improve consistency among different examiners, a critical aspect in judicial processes.

Another notable element is that OpenLQM is open-source and compatible with multiple operating systems, including Windows, Mac, and Linux. This facilitates its global adoption by both law enforcement agencies and research centres and universities. This openness also fosters transparency and collaboration, two values that are becoming increasingly important in the development of technologies applied to security.

Overall, the combination of the fully annotated SD 302 dataset and the Open LQM software provides a powerful platform for advancing the science of fingerprint identification. These resources not only enhance the tools currently available, but also lay the groundwork for future innovations in the field of digital forensics and security.

Ultimately, the NIST initiative exemplifies how the integration of quality data, open tools, and artificial intelligence can transform traditional processes and enhance their efficiency and reliability. For security professionals, these advancements represent a clear opportunity to enhance analytical capabilities and adapt to an increasingly technological and demanding environment.

_____

Aquest apunt en català / Esta entrada en español / Post en français