"Matrix" network dismantled: DIICOT seizes 1.7 tonnes of drugs worth €25 million
DIICOT dismantled an international drug trafficking network headed by Cristian Măhălean, known as "Matrix", designated as an HVT by Europol. Approximately 1.7 tonnes of narcotics were confiscated.
How "Matrix's" group operated, Europe's most wanted drug transporter
Prosecutors at DIICOT dismantled, as part of an international investigation conducted between 2023 and 2026, one of the most sophisticated drug trafficking networks identified in Romania, according to Google News RO — Crime. At the centre of the group was Gheorghe Cristian Măhălean, known as "Matrix", classified in December 2025 by Europol as a High Value Target (HVT) — one of the most wanted figures in organised crime on the continent.
The group operated continuously from September 2023 until August 2026, providing logistical services for the transport of drugs on behalf of Albanian mafia organisations. Under the cover of legitimate freight transport companies with proper documentation, the suspects moved hundreds of kilograms of cocaine, cannabis and hashish along the Spain–Western Europe route, using lorries modified in clandestine workshops in Maramureș County.
A fleet of lorries modified in Maramureș
Logistical preparation began on Romanian territory. Ioan Vasile Ionce fitted secret compartments in vehicles — in the floor of semi-trailers or in cabin ceilings, by adapting air conditioning installations — in a warehouse in Rușor village, Maramureș County. Vilhelm Stocsek, known as "Vili", coordinated the acquisition and modification of large-capacity road vehicle units.
To maintain an appearance of legality, the network used a commercial front consisting of transport companies from the counties of Satu Mare, Bihor, Mehedinți and Timiș: Trial Expres Transport, GFB Transport, TPM Mar Transport, NKS Boom Trans and Kevin Ideal Trans. Hired drivers picked up shipments directly from Spain and delivered them to various European destinations, concealing narcotics among legitimate cargo.
Măhălean coordinated the entire operation from the shadows, without appearing in the company documents or vehicle registrations, according to sources cited by Adevărul. He established routes, recruited drivers and made modified vehicles available to them. When shipments were intercepted, the group's leadership intervened quickly and provided legal assistance to arrested drivers, monitoring the progress of criminal cases to prevent information leaks.
Structure of the criminal pyramid
The investigation outlined an organisation on two distinct levels. At the top of the pyramid were Gheorghe Cristian Măhălean ("Matrix"), the initiator and coordinator of the illegal enterprise; Vilhelm Stocsek ("Vili"), responsible for logistics; Ioan Vasile Ionce, the technician who modified vehicles; and Gheorghe Pintea, known as "Moșul" or "Bătrânul", who completed the leadership core.
The financial and support tier included the leader's partner, Valentina Ondina Mănescu, accused of complicity and money laundering. Three other suspects — Alexandru-Ionuț Mihăesc, Tiberiu Marian Bîzu and Mihaly Attila Tolvaj — are under investigation for joining and complicity in drug trafficking.
International cooperation and 1.7 tonnes of drugs seized
The investigation involved extensive judicial and police cooperation, with investigators from France, Spain, Italy and Germany, along with Eurojust and Europol. Information transmitted by Romanian law enforcement authorities enabled foreign authorities to intercept four large-capacity road transport shipments.
As a result of these operations, approximately 1.7 tonnes of drugs were seized: 114 kilograms of cocaine, 228.2 kilograms of cannabis and 1,376.9 kilograms of hashish (cannabis resin). The total value of the captured goods is estimated at €9.6 million on the wholesale market and exceeds €25 million at retail sale.
Encrypted messages on SKY ECC used as evidence
Investigators used conversations conducted by suspects on the encrypted SKY ECC application as evidence. Access to these messages became possible following one of the most complex judicial operations in recent European history: the neutralisation of the SKY ECC platform.
The application had been for years the preferred communication channel of organised crime groups, guaranteeing anonymity through unique user codes (PINs). The vulnerabilisation of the system in 2021 by European authorities triggered a chain reaction worldwide.
The wave of operations began in February 2021 with large-scale raids across Western Europe. The turning point came on 9 March 2021 in Belgium, where police carried out over 200 searches following the decryption of over one billion confidential messages. In parallel, the United States Department of Justice charged the company's chief executive with facilitating drug trafficking. On 19 March 2021, SKY ECC operations ceased definitively after BlackBerry discontinued its services, and the website was seized by the FBI.
Once the network was broken, the anonymity provided by PINs disappeared, and the vast majority of users were identified. Data decryption generated hundreds of criminal cases and a massive number of convictions, particularly in Western Europe — including now, in the case of the "Matrix" group from Romania.
Source: Google News RO — Crime (ro)