Abstract
Contract killings, human trafficking, drug trafficking, extortion, corruption, and the infiltration of legitimate businesses are often treated as separate forms of criminality. In the operations of sophisticated criminal networks, however, these activities can be mutually reinforcing. A killing may remove an opponent, silence a witness, intimidate a community, protect an illicit market, or preserve access to a corrupt relationship. Trafficking may generate revenue that can be recycled into bribery and protection. Corruption may reduce the likelihood of detection, provide privileged information, manipulate administrative processes, obstruct investigations, or give criminal actors access to legitimate businesses and public resources. Violence can in turn reinforce corruption by intimidating officials, witnesses, journalists, competitors, and community members. The resulting structure is not necessarily a conventional hierarchy. Contemporary organized-crime research increasingly describes flexible, networked arrangements in which individuals and businesses perform different functions and maintain relationships across legal and illegal markets. Contract killings can form one component of this structure; trafficking, narcotics, extortion, and financial crime can supply revenue; corruption can provide protection and influence; and legitimate businesses or public institutions can become points of access (de Korte & Kleemans, 2022; Europol, 2024, 2025, 2026; Organisation for Economic Co-operation and Development [OECD], 2026; United Nations Office on Drugs and Crime [UNODC], 2025). The term ancillary benefits is therefore useful because the immediate economic payment for a criminal act may not represent the full value generated by that act. The broader benefit can be organizational: greater territorial control, reduced opposition, increased intimidation, protection of revenue streams, access to information, corruption leverage, political influence, or preservation of an illicit business environment. These mechanisms are documented in different forms across organized-crime research, although their presence, intensity, and relationship to one another vary substantially between criminal organizations.
1. Crime, Contract Killings, and Organizational Benefits
A criminal act can have both a direct payoff and a set of secondary or ancillary effects. The direct payoff is relatively straightforward: payment for a killing, proceeds from drug sales, money extracted through extortion, income from trafficking, or profit from fraud or illicit procurement. The ancillary effects are broader and may include removal of a competitor, intimidation of other actors, protection of a market, preservation of an existing criminal relationship, increased reputation for violence, greater bargaining power, reduced risk of intervention, improved access to officials or businesses, and increased willingness of others to cooperate.
Contract-killing research is particularly useful because it demonstrates that the killing itself may constitute only one step in a wider criminal process. de Korte and Kleemans’ crime-script analysis of six Dutch police investigations identified principals, hitmen, and other facilitators and showed that contract killings involve multiple preparatory and logistical requirements. The study identified principals in all six investigations and clearly documented financial rewards in two investigations. Its findings are important because they demonstrate that the immediate shooter is not necessarily the only economically relevant actor: intermediaries and facilitators can occupy distinct positions between the person ordering a killing and the person carrying it out (de Korte & Kleemans, 2022).
The direct participant therefore may receive more than one form of benefit. The most firmly established direct benefit in the contract-killing literature is financial remuneration, while status, reputation, access to future criminal work, or stronger relationships within the criminal network are plausible additional benefits depending upon the surrounding criminal environment. It is important not to convert these possibilities into universal characteristics: the empirical evidence does not establish that every contract killer receives enhanced status or future work. Rather, these effects are consistent with the broader literature on criminal organizations in which favors, gifts, rewards, social position, and reciprocal obligations can reinforce relationships. Bar-Lev and Morag’s research shows that gift-giving among criminal actors can simultaneously serve social and operational purposes, generate influence and status, and create systems of obligation, credit, and debt (Bar-Lev & Morag, 2023).
Intermediaries can consequently have their own ancillary interests. A broker, facilitator, spotter, driver, or other logistical participant may receive a commission, direct payment, favor, reciprocal assistance, or enhanced access to the network. In the contract-killing research, facilitators and logistical actors are not merely incidental figures; the crime-script approach treats preparation, equipment, transportation, communication, and coordination as components of the wider event (de Korte & Kleemans, 2022). The significance is that a criminal act can distribute benefits among several participants even when only one individual ultimately carries out the violent act.
A criminal organization may also gain a benefit that is not easily measured as cash. Removing a competitor can preserve market access; eliminating an opponent can alter a dispute; silencing a witness can reduce evidentiary risk; attacking a person capable of exposing criminal conduct can protect an existing operation; and a publicized act of violence can communicate capacity and create fear among people who were never themselves the immediate targets. Research on organized-crime assassinations similarly examines killings in relation to criminal markets, governance, security, justice, politics, media, communities, and the private sector, thereby demonstrating that the organizational significance of a killing can extend beyond the death of the immediate victim (Global Initiative Against Transnational Organized Crime [GI-TOC], n.d.).
Violence can therefore create economic value indirectly. Where a criminal organization spends money to eliminate a person interfering with its activities, the resulting benefits may exceed the immediate cost of the killing because the organization may obtain continued access to a market, preserve illicit revenue, reduce resistance, increase fear among competitors, reduce the likelihood that witnesses cooperate, obtain greater compliance from employees or associates, or deter future opposition. In this sense, violence can function as an investment in coercive capacity. This is an analytical description rather than a claim that every violent act is strategically planned or economically rational. The organized-crime literature nevertheless demonstrates that violence may serve purposes beyond the immediate physical harm inflicted upon the victim (de Korte & Kleemans, 2022; GI-TOC, n.d.).
2. Trafficking, Illicit Revenue, and Corruption
Human trafficking introduces another dimension because it can generate sustained revenue rather than a one-time transaction. UNODC’s 2025 study of corruption and trafficking analyzed more than 120 cases involving almost 80 countries and concluded that corruption can facilitate trafficking throughout the process. The study describes corruption during recruitment and transport, including provision of documentation, overlooking irregularities, and collusion involving recruitment agencies and organized criminal groups. It further identifies corruption during exploitation and during police, prosecutorial, and judicial responses (UNODC, 2025).
The relationship can be represented as follows:
| Criminal activity or condition | Potential organizational benefit |
|---|---|
| Human trafficking | Sustained illicit revenue |
| Illicit revenue | Financial capacity to support other criminal activities |
| Corruption | Reduced enforcement and regulatory risk |
| Protection of exploitative operations | Continued revenue generation |
| Intimidation or threats | Reduced reporting and resistance |
| Legitimate business access | Greater legitimacy and economic reach |
UNODC explicitly describes a mutually reinforcing relationship in which corruption facilitates trafficking while profits from trafficking can fuel further corruption. The organization therefore describes not merely two crimes occurring together but a potentially self-perpetuating relationship in which illicit profits can be reinvested into mechanisms that shield the underlying exploitation (UNODC, 2025).
The same study identifies a broad range of potentially involved actors, including immigration and border officials, consular staff and diplomats, labour inspectors, medical professionals, law-enforcement officers, prosecutors and judges, prison staff, politicians, recruitment agencies, transport operators, and employers in high-risk industries. Its findings are particularly important because they demonstrate that corruption can occur not only at the point of physical movement but also at recruitment, exploitation, and enforcement stages. UNODC further reports that traffickers, public officials, and private-sector actors can collude as part of organized criminal networks and that some public officials may abuse their positions to participate directly in trafficking (UNODC, 2025).
The existence of such mechanisms does not mean that every trafficking organization contains corrupt officials, nor that every public official who interacts with a trafficking victim is compromised. The UNODC evidence is derived from documented cases and demonstrates mechanisms that occur in practice; it does not create a presumption applicable to an individual case.
3. Criminal Networks, Public Institutions, and Institutional Infiltration
Corruption is not always purely transactional. The OECD’s 2026 Anti-Corruption and Integrity Outlook reports that 71% of organized crime groups reported to Europol in 2024 engaged in corruption, compared with 60% in 2021. The statistic concerns organized-crime groups reported to Europol rather than all criminal organizations worldwide, but it provides a current quantitative indication of how frequently corruption appears within this particular population of identified criminal networks (OECD, 2026).
The OECD further states that organized criminals use corruption, coercion, and legitimate business and government structures to increase their influence across the private and public sectors and wider society. It identifies corruption as particularly significant in high-profit illicit markets such as drugs, trafficking, and prostitution and notes that criminal groups may target customs, borders, logistics, local government, and law enforcement. It also states that corruption can be reinforced by threats, intimidation, and violence and that criminal actors may ultimately attempt to influence political systems or capture political office holders, particularly at the local level (OECD, 2026).
There is a material difference between one corrupt official and systematic criminal penetration of an institution. UNODC and OECD materials support the broader concept of criminal penetration of government and public institutions, while OECD describes organized criminals manipulating procurement, defrauding the state, obstructing justice, and establishing informal systems of service provision and governance (OECD, 2026; UNODC, n.d.).
An analytical continuum can be represented as:
| Level | Description |
|---|---|
| Transactional corruption | Criminal actor pays an official for a particular favor |
| Repeated corruption | Official becomes a recurring point of access |
| Organizational influence | Criminal actors influence decisions, personnel, procedures, or information |
| Institutional compromise | Institutional effectiveness is materially weakened in areas relevant to criminal interests |
| Political or state capture | Criminal interests obtain substantial influence over policy, law-making, enforcement, or other governmental functions |
This sequence is an analytical framework rather than a formal international legal classification.
A criminal organization may benefit from access to public institutions without controlling them. A corrupt or compromised relationship can potentially provide confidential information, advance knowledge of enforcement activity, intervention in administrative processes, assistance with licensing or permits, reduced inspection, interference with investigations, access to records, assistance in procurement, or introductions to other officials. The OECD’s 2026 analysis specifically states that organized criminals increasingly use corruption to infiltrate the legal economy and public services and that corruption can help capture public-service provision, defraud the state, obstruct justice, and unduly influence the policy cycle, particularly at the local level (OECD, 2026).
The resulting institutional benefits can therefore include:
| Institutional access | Potential criminal advantage |
|---|---|
| Information about investigations | Ability to anticipate enforcement |
| Administrative access | Ability to influence decisions |
| Licensing access | Ability to facilitate commercial activity |
| Procurement access | Ability to obtain or influence contracts |
| Regulatory relationships | Reduced oversight |
| Investigative access | Ability to obstruct or redirect inquiries |
| Political access | Greater influence over decisions |
The most sophisticated criminal organizations may seek not merely to evade government but to convert government capacity into an advantage. The OECD describes a modern organized-crime environment characterized by less centralization, more networking, and “crime-as-a-service” arrangements, in which criminals can operate within or provide services to several different networks at different points in the criminal process. It further warns that public officials, legitimate businesses, and civilians may become enlisted or corrupted into organized criminal activity, extending criminal influence into the private sector and wider society (OECD, 2026).
4. Legal Businesses, Procurement, and Criminal Diversification
Criminal organizations do not necessarily maintain a strict separation between illegal and legal economic activity. Europol’s 2024 report Leveraging Legitimacy examined how the EU’s most threatening criminal networks exploit and infiltrate legitimate business structures and specifically analyzed how those structures can be used to deepen criminal influence in local communities. The report examined which legitimate businesses are prone to criminal abuse or infiltration, which organized-crime activities are enabled by legal businesses, and how such businesses enable criminal activity (Europol, 2024).
A legitimate business can provide reputation, premises, employees, contracts, banking relationships, transportation, access to influential people, and an apparently lawful commercial identity. The ancillary benefit is therefore not necessarily direct criminal income. A lawful-looking commercial structure may simultaneously function as an economic asset, a relationship platform, and a source of legitimacy.
| Legitimate-business asset | Possible criminal value |
|---|---|
| Premises | Operational base |
| Employees | Labour and logistical capacity |
| Contracts | Revenue and legitimacy |
| Banking relationships | Financial infrastructure |
| Transport capacity | Movement and logistics |
| Commercial reputation | Apparent legitimacy |
| Access to officials | Institutional leverage |
| Corporate structure | Concealment or financial integration |
The term “cartel” is often used broadly in public discussion. In criminological analysis, it is more precise to distinguish drug-trafficking organizations and other organized-crime groups according to their actual structure and functions. One important economic characteristic is diversification. A criminal organization with access to substantial illicit revenue can expand into narcotics, human trafficking, extortion, smuggling, illegal gambling, fraud, illicit procurement, money laundering, and legitimate businesses. Europol’s serious-and-organized-crime assessments identify illicit drug markets as major criminal markets and describe the frequent coexistence of violence, corruption, and abuse of legitimate business structures (Europol, 2021, 2025).
Drug-focused criminal organizations can therefore generate ancillary benefits through:
| Criminal-market activity | Potential ancillary benefit |
|---|---|
| Drug trafficking | Market revenue |
| Territorial control | Reduced competition |
| Violence | Intimidation and deterrence |
| Corruption | Reduced enforcement risk |
| Legitimate-business infiltration | Legitimacy and financial access |
| Political access | Influence over decisions |
| Money laundering | Integration of illicit proceeds |
| Recruitment of facilitators | Expanded organizational capacity |
The existence of two illicit markets in the same area does not prove that the same criminal organization controls both. Nevertheless, UNODC’s trafficking-corruption research identifies trafficking, drugs, and other organized criminal activities as contexts in which corruption can facilitate criminal conduct (UNODC, 2025). This demonstrates a potential cross-crime infrastructure effect. The common asset may be an official relationship, access to information, a compromised business, a shared financial channel, a transportation network, an accommodation network, or a social relationship. The common asset, rather than the particular criminal market, may provide the connection among otherwise distinct activities. Common infrastructure can therefore be evidence of possible coordination, but not proof of common ownership or command.
5. Social Networks, Neighbourhoods, and Ancillary Benefits
In networked organized crime, one participant may occupy several roles. A person may be a legitimate business owner, intermediary, financial facilitator, recruiter, social connector, source of information, or corrupt intermediary. That does not mean that all such people are criminal participants. Europol’s research stresses the use of legitimate business structures by criminal networks, while von Lampe’s work on associational criminal structures emphasizes the importance of family, friendship, neighbourhood, and other social relationships in the formation and maintenance of criminal associations (Europol, 2024; von Lampe, 2016).
The benefits generated by organized crime can extend beyond senior leadership. Lower-level participants may receive wages, commissions, gifts, loans, employment, protection, social status, access to other criminal opportunities, assistance in personal disputes, and access to social networks. Bar-Lev and Morag’s research indicates that gifts and favors can have both social and operational functions and can reinforce relationships through obligation, credit, debt, influence, and status (Bar-Lev & Morag, 2023).
Family and social-network benefits can also be important. Von Lampe’s analysis of associational criminal structures identifies forms of mutual support extending to fugitive and incarcerated members and their families, including financial assistance for legal costs and other forms of communal or informal support. At the same time, the literature cautions against treating these arrangements as universal characteristics of organized crime. Such support varies by group, relationship, culture, and circumstances (von Lampe, 2016).
Criminal organizations can become socially embedded through family relationships, friendships, employment, neighbourhood ties, political connections, and local business relationships. Some people may receive money, jobs, protection, loans, or assistance, while others may experience intimidation, violence, extortion, displacement, fear, or loss of legitimate economic opportunities. Ayling’s analysis describes the capacity of criminal organizations to develop relationships with communities that can provide resources and social resilience to criminal groups. In this literature, the relationship between some gangs and communities has been described as a “working relationship” or “social contract,” although the precise nature of such relationships varies considerably between communities (Ayling, 2009).
The neighbourhood should therefore not be conceptualized as a criminal organization. It may contain criminals, family members, employees, business operators, public officials, intermediaries, victims, witnesses, and ordinary residents. Some may actively cooperate, some may benefit, some may be afraid, some may know something but remain silent, and some may have no connection whatsoever. Physical proximity alone is weak evidence; repeated, independently corroborated relationships are stronger.
| Relationship to criminal activity | Possible situation |
|---|---|
| Direct participant | Recruits, transports, exploits, finances, or orders criminal conduct |
| Knowing facilitator | Knowingly provides assistance or infrastructure |
| Social associate | Knows or interacts with participants without participating |
| Beneficiary | Receives some advantage without necessarily participating |
| Coerced person | Assists under threats, pressure, or dependency |
| Unconnected person | No meaningful relationship beyond proximity |
The literature therefore permits discussion of neighbourhood-level benefits without creating an assumption of community-wide complicity. The distinction is central because criminal organizations may derive resilience from a surrounding social environment while many people within that environment remain ordinary residents, employees, relatives, service providers, or unwilling witnesses.
6. Violence, Corruption, Information, and Silence
The relationship between violence and corruption can operate in both directions. Corruption may protect criminal actors from enforcement, while violence can protect a corrupt relationship from exposure. The OECD’s current analysis explicitly states that organized criminal actors may use corruption together with threats, intimidation, and violence and that this combination can increase targets’ susceptibility and hinder detection and enforcement. It identifies drugs, trafficking, and prostitution among the high-profit markets where such combinations can be particularly relevant (OECD, 2026).
Where an official, journalist, witness, investigator, competitor, or community member possesses information capable of exposing a criminal arrangement, intimidation may have value to the network even where the person is not an economic competitor. GI-TOC’s assassination research examines the relationship among organized crime, governance, public integrity, and violence. This permits a potential reinforcing structure in which corruption protects the criminal enterprise and violence can protect the corruption. This is a documented mechanism in some criminal environments, not a universal explanation for every homicide or corruption case.
Information itself can be an ancillary benefit. A criminal contact inside an institution may potentially provide knowledge of investigations, information about planned enforcement, information about competitors, awareness of administrative decisions, or access to confidential records. The OECD identifies criminal use of information and influence within public institutions as part of the broader corruption threat, while UNODC documents situations in which officials use their positions to facilitate criminal activity or obstruct enforcement (OECD, 2026; UNODC, 2025).
Silence can similarly have economic value. If witnesses do not report crimes, investigative risk may decline; if officials do not intervene, operational risk may decline; if employees fear retaliation, organizational secrecy increases; and if communities believe reporting is futile, criminal actors may face less resistance. UNODC’s 2025 trafficking study identifies the perception of corruption as a low-risk, high-reward phenomenon and specifically identifies acts and threats of violence as tools used to secure the silence of public officials, victims, witnesses, and journalists. It further reports that perceptions that officials cannot be trusted can deter victims from reporting and cooperating with investigations (UNODC, 2025).
Violent reputations can also have instrumental value. A group believed capable of serious violence may not need to use violence constantly because the reputation itself can induce compliance, silence, withdrawal from competition, payment of extortion, acceptance of adverse agreements, and reluctance to testify. This provides one mechanism through which violence can influence behaviour beyond the immediate victim. The proposition remains a criminological mechanism rather than proof that any particular violent reputation was deliberately cultivated.
7. Contract Killing, Trafficking, and Other Criminal Markets as Interlocking Systems
An especially important phenomenon occurs when different activities reinforce one another. The following table presents the relationships as a conceptual model:
| Primary activity | Direct output | Possible ancillary benefit |
|---|---|---|
| Contract killing | Target removed | Market protection, intimidation, silence, deterrence |
| Human trafficking | Exploitation revenue | Recruitment infrastructure, corruption resources, business access |
| Drug trafficking | Illicit revenue | Territorial influence, corruption, diversification |
| Extortion | Direct payment | Compliance, reputation, territorial control |
| Corruption | Improper benefit | Information, protection, institutional access |
| Legitimate-business infiltration | Commercial revenue | Legitimacy, contracts, premises, access |
| Intimidation | Immediate compliance | Lower reporting and enforcement risk |
| Public-procurement influence | Contract or advantage | Legitimate revenue and institutional leverage |
The relationships may form a system in which illicit revenue supports corruption, corruption reduces enforcement risk, reduced enforcement facilitates continued criminal activity, violence generates intimidation, intimidation reduces resistance, legitimate businesses create legitimacy and access, and institutional relationships provide information and protection. The OECD’s 2026 description of modern organized crime is particularly relevant here because it emphasizes less centralization, more networking, and “crime-as-a-service” arrangements, in which criminal actors may perform or obtain specialized functions through relationships extending across different criminal activities (OECD, 2026).
The deeper network benefit can therefore be understood as the accumulation of organizational capacity. A criminal organization that can recruit, move people or goods, obtain information, secure accommodation, access legal businesses, corrupt public officials, intimidate witnesses, and protect revenue streams is more resilient than an organization that depends upon one isolated criminal activity.
8. Public Procurement and Institutional Advantage
Public procurement is particularly important because criminal influence can generate benefits without an obviously criminal transaction. The OECD’s 2025 updated guidelines on fighting bid rigging explain that bid rigging can be associated with corruption and fraud and emphasize cooperation among competition, procurement, anti-corruption, audit, and law-enforcement authorities. The Guidelines also provide warning signs and methods for detecting collusion and recommend reporting suspected bid rigging to the appropriate authorities (OECD, 2025).
Organized criminal influence can potentially seek advantage through control of contractors, manipulated competition, conflicts of interest, corrupt decision-making, privileged access to information, fictitious or inflated transactions, and laundering through legitimate companies. The broader benefit can be substantial because public procurement can convert illicit influence into apparently legitimate revenue.
| Procurement mechanism | Potential benefit |
|---|---|
| Collusive bidding | Reduced competition |
| Preferential information | Competitive advantage |
| Corrupt decision-making | Contract access |
| Controlled contractor | Revenue and influence |
| Inflated transactions | Additional illicit proceeds |
| Legitimate-company involvement | Appearance of lawful revenue |
| Repeated contracts | Continuing economic and institutional access |
A criminal group that acquires or infiltrates a legitimate company gains more than a legal business. It may obtain public reputation, contractual relationships, access to officials, banking relationships, employees, property, invoices and commercial records, and opportunities to move or disguise funds. Europol’s Leveraging Legitimacy report examines this phenomenon and shows that legitimate business structures can serve as multipurpose platforms through which criminal networks increase influence and facilitate multiple forms of criminal activity (Europol, 2024).
9. Criminal Governance and the Benefit Perimeter
The ultimate ancillary benefit can therefore be governance. A criminal organization may begin as a profit-seeking enterprise, but if it gains sufficient money, coercive capacity, social capital, and institutional relationships, it may begin influencing who can operate, who receives contracts, who is protected, which businesses survive, which disputes are resolved, who is afraid to report, and which activities are tolerated. At that point the organization is not merely committing crimes; it may be exercising a form of informal governance through money, relationships, and coercion. The OECD identifies informal service provision and governance, particularly where organized crime undermines legitimate public institutions, among the broader societal effects of criminal influence (OECD, 2026).
The benefits do not always remain inside the organization. A compromised network can produce secondary beneficiaries such as subcontractors, legitimate businesses, intermediaries, relatives, employees, corrupt professionals, political allies, and other criminal groups. Some benefits may be direct; others may be indirect. This creates what can be described as a benefit perimeter around the core criminal organization. The perimeter should not be confused with the organization itself. A person within that perimeter may know the source of the benefit, suspect it, have been coerced into accepting it, or have no knowledge at all.
The same distinction applies to the community. A criminal group may provide money, employment, protection, dispute resolution, or other assistance to people in an area while simultaneously creating fear, violence, corruption, reduced competition, distorted public services, lower investment, witness intimidation, and displacement. OECD’s 2026 analysis emphasizes the wider social and institutional costs created when organized crime undermines public institutions and trust (OECD, 2026). Thus private benefit can coexist with public harm. (oecd.org)
The final issue is evidentiary. The existence of documented criminal ecosystems does not establish that a particular person, neighbourhood, business, official, or institution belongs to one. A person may live near criminals, work for a connected company, receive an ordinary benefit, know a public official, or maintain a social relationship with an offender without participating in criminal activity. Conversely, a person who appears socially ordinary may knowingly perform a specialized facilitating function. The relevant question is therefore not merely who is near whom, but what function was performed, what the person knew, what benefit was obtained, what was expected in return, whether the relationship recurred, and what independent evidence corroborates it.
10. Evidence of an Ancillary-Benefit Network
The existence of an ancillary-benefit network is best investigated through convergence rather than assumption. Potentially relevant evidence can include financial records such as payments, unexplained transfers, recurring commissions, loans, gifts, property purchases, or unusual cash flows; communications such as recurring calls, messages, instructions, warnings, introductions, or communications before and after criminal events; corporate records such as shared directors, shareholders, addresses, beneficial ownership, or procurement relationships; institutional records such as repeated official interventions, unexplained administrative decisions, selective enforcement, or confidential information reaching criminal actors; violent incidents such as threats, attacks, contract killings, attempted killings, or intimidation of witnesses or officials; geographic evidence such as repeated use of the same premises, vehicles, workplaces, accommodation, or meeting locations; and temporal evidence linking a criminal act to a subsequent benefit or institutional intervention.
The evidentiary value is strongest where independent categories reinforce the same proposition. This principle is especially important in criminal-network analysis because a single association can have numerous innocent explanations, whereas recurring relationships across communications, financial records, physical locations, and institutional decisions can establish a much stronger basis for an inference of coordination.
A particularly useful question is: What happened immediately before and after the criminal event? A person may threaten interference, the person may subsequently be attacked, and the business may continue normally; a trafficking investigation may begin, an official may intervene, the investigation may weaken, and exploitation may continue; or a criminal group may acquire a legitimate business, after which the company may receive repeated contracts and illicit proceeds may enter commercial accounts. These sequences do not prove causation by themselves, but they can identify hypotheses worthy of investigation. Their evidentiary strength increases where independent records demonstrate the same temporal sequence.
11. The Benefit-to-Actor Framework
An effective way to analyze a suspected network is to map actors against conduct, immediate benefits, ancillary benefits, and available evidence.
| Actor | Conduct | Immediate benefit | Possible ancillary benefit | Potential evidence |
|---|---|---|---|---|
| Principal | Orders killing | Target removed | Market protection or intimidation | Communications |
| Facilitator | Arranges logistics | Payment | Future access or influence | Calls, payments |
| Recruiter | Supplies victims | Commission | Relationship capital | Records |
| Employer | Exploits labour | Cheap labour or revenue | Market advantage | Payroll, employment records |
| Official | Misuses authority | Improper benefit | Reduced enforcement risk | Financial/administrative records |
| Business intermediary | Provides services | Fee | Continuing contracts or access | Corporate records |
| Local associate | Provides access or assistance | Fee, favor, or other benefit | Social or economic integration | Communications, payments, witness evidence |
This framework is analytical rather than a presumption that any particular actor occupies any particular role. The same individual can occupy several roles over time, while several apparently connected people may in fact have very different levels of knowledge and participation.
The distinction between benefit and participation is therefore fundamental. A person can receive a benefit without knowingly joining a criminal organization; a person can knowingly facilitate activity without receiving a conventional salary; and a person can be coerced into providing assistance. The factual and legal analysis must therefore consider conduct, knowledge, purpose, coercion, and evidence rather than relying solely on the existence of a benefit.
12. A Critical Distinction: Criminal Gain Versus Community Benefit
The term “community benefit” can be misleading. A criminal group may provide money, employment, protection, or dispute resolution to people in an area. That does not necessarily mean the community is benefiting in net terms. The same organization may simultaneously produce fear, violence, corruption, reduced competition, distorted public services, lower investment, witness intimidation, and displacement. OECD’s 2026 analysis emphasizes the wider social and institutional costs created when organized crime undermines public institutions and trust (OECD, 2026). Thus private benefit can coexist with public harm. (oecd.org)
This dual character is particularly important when considering the literature on gangs and communities. Ayling’s work emphasizes that relationships between criminal groups and communities can sometimes provide criminals with resources, sanctuary, social resilience, and a degree of accommodation, but such relationships are shaped by multiple factors and should not be interpreted as uniform community approval (Ayling, 2009). The surrounding population can therefore occupy very different positions: some may receive benefits, some may cooperate voluntarily, some may cooperate under pressure, some may simply tolerate criminal activity because resistance is perceived as dangerous, and others may actively oppose it.
The same principle applies to families and social networks. Assistance to an imprisoned or deceased member’s family can strengthen loyalty and organizational resilience, but receipt of such assistance does not itself prove that family members participate in criminal activity. Conversely, family relationships can become channels through which information, money, employment, or protection move through a network. The relevant distinction remains between social connection and criminal function.
13. Final Synthesis
The research supports a broader understanding of organized criminal activity in which contract killings, trafficking, drug markets, corruption, legitimate businesses, and public-sector influence can function as mutually reinforcing components of a criminal ecosystem. The direct payment for a killing may be only one element of its value. The more consequential benefit may be the removal of opposition, deterrence of competitors, intimidation of witnesses, protection of an illicit market, or preservation of a corrupt relationship. Contract-killing research identifies principals, hitmen, facilitators, logistical requirements, and preparatory stages within a broader criminal process (de Korte & Kleemans, 2022).
The wider social network can also have material importance. Criminal organizations may use family relationships, friendship networks, neighbourhood associations, legitimate businesses, gifts, favors, reciprocal obligations, and community relationships to create resilience. Bar-Lev and Morag demonstrate how gifts and favors may simultaneously create social bonds and operational relationships, while von Lampe’s analysis shows how associational criminal structures can depend on mutual support and social embeddedness. Ayling’s work further demonstrates how community relationships can provide resources and resilience to criminal groups (Ayling, 2009; Bar-Lev & Morag, 2023; von Lampe, 2016).
Human trafficking can similarly function as both an exploitation system and a revenue-generating component of organized crime. UNODC’s 2025 analysis found corruption operating throughout documented trafficking processes and describes trafficking and corruption as interdependent phenomena in which trafficking profits can fuel further corruption and corrupt relationships can shield exploitation from effective enforcement (UNODC, 2025).
Drug-trafficking organizations and other criminal networks can similarly use violence, corruption, legitimate business structures, and institutional relationships to increase their influence. Europol and OECD assessments show that criminal networks increasingly exploit legal businesses, public services, procurement systems, and vulnerable institutional sectors to gain advantage, conceal assets, obstruct enforcement, and consolidate influence. The OECD’s 2026 assessment, in particular, describes organized crime as increasingly networked and identifies the use of corruption, coercion, legitimate business structures, and public-sector influence as mechanisms for strengthening criminal activity and gaining competitive advantage (Europol, 2024, 2025; OECD, 2026).
The deepest ancillary benefit is consequently not necessarily money. It can be capacity: the capacity to intimidate, the capacity to recruit, the capacity to move people and goods, the capacity to obtain information, the capacity to corrupt, the capacity to survive investigation, the capacity to influence legitimate businesses, and, at the most serious end of the spectrum, the capacity to shape the environment in which government, commerce, and ordinary social relations operate. That is the point at which organized crime can move beyond a collection of offences and begin to resemble an alternative system of economic and social power.
Yet the evidentiary boundary remains essential. A person who lives near criminals, works for a company connected to them, receives an ordinary benefit, knows a public official, or appears socially associated with offenders cannot be classified as a criminal participant on that basis alone. Equally, the existence of a documented relationship between contract killing, trafficking, corruption, or organized crime cannot establish that a particular killing, trafficking allegation, business relationship, or institutional decision belongs to such a network without independent evidence. The proper inquiry is whether conduct, knowledge, benefit, relationship, repetition, chronology, and independent corroborating evidence converge sufficiently to establish the proposition being alleged.
In that sense, ancillary benefits are best understood not as a presumption about individual actors but as an analytical concept for examining how criminal systems reproduce themselves. A payment can create loyalty; loyalty can create access; access can create information; information can reduce risk; reduced risk can preserve revenue; revenue can finance corruption; corruption can weaken enforcement; violence can reinforce silence; and legitimate business relationships can provide economic and institutional legitimacy. Whether those relationships exist in any particular case, however, must be determined from evidence rather than inferred from proximity alone.
References
Ayling, J. (2009). Criminal organizations and resilience. International Journal of Law, Crime and Justice, 37(4), 182–196. https://doi.org/10.1016/j.ijlcj.2009.10.003
Bar-Lev, S., & Morag, M. (2023). Can’t buy me love: Gift-giving among members of criminal organizations. Symbolic Interaction, 46(4), 393–416. https://doi.org/10.1002/symb.661
de Korte, L. R., & Kleemans, E. R. (2022). Contract killings: A crime script analysis. Trends in Organized Crime, 25, 130–143. https://doi.org/10.1007/s12117-021-09411-4
European Union Agency for Law Enforcement Cooperation [Europol]. (2021). European Union serious and organised crime threat assessment 2021. Publications Office of the European Union.
Europol. (2024). Leveraging legitimacy: How the EU’s most threatening criminal networks abuse legal business structures. Publications Office of the European Union.
Europol. (2025). European Union serious and organised crime threat assessment 2025: The changing DNA of serious and organised crime. Publications Office of the European Union.
Europol. (2026). Blueprint of criminal opportunism: Decoding the EU’s most threatening criminal networks. Publications Office of the European Union.
Global Initiative Against Transnational Organized Crime. (n.d.). Global Assassination Monitor. GI-TOC.
Organisation for Economic Co-operation and Development. (2025). OECD guidelines for fighting bid rigging in public procurement (2025 update). OECD Publishing. https://doi.org/10.1787/cbe05a56-en
Organisation for Economic Co-operation and Development. (2026). Anti-corruption and integrity outlook 2026: Harnessing the integrity advantage. OECD Publishing. https://doi.org/10.1787/16708b78-en
United Nations Office on Drugs and Crime. (2025). Corruption and trafficking in persons. United Nations.
United Nations Office on Drugs and Crime. (n.d.). Links to corruption. SHERLOC.
von Lampe, K. (2016). The ties that bind: A taxonomy of associational criminal structures. In Illegal entrepreneurship, organized crime and social control (pp. 19–35). Springer. https://doi.org/10.1007/978-3-319-31608-6_2