'Matrix' network dismantled: 1.7 tonnes of drugs seized, Romanian leader on Europol list
DIICOT dismantled the international drug trafficking network run by Cristian Măhălean, known as "Matrix", classified by Europol as a High Value Target. The investigation led to the seizure of 1.7 tonnes of narcotics, valued at over 25 million euros.
How the "Matrix" drug trafficking network was dismantled, Europe's most wanted Romanian
Prosecutors at DIICOT dismantled an international drug trafficking network coordinated by Gheorghe Cristian Măhălean, known as "Matrix", whom Europol had classified as a High Value Target (HVT) since December 2025, according to Google News RO — Crime (ro). The investigation, conducted between 2023 and 2026, involved authorities from France, Spain, Italy and Germany, alongside Eurojust and Europol.
Four roadside interceptions, 1.7 tonnes of drugs seized
Strategic information provided by Romanian investigators allowed foreign authorities to intercept four large-scale road transports. As a result of these operations, approximately 1.7 tonnes of narcotics were seized: 114 kilograms of cocaine, 228.2 kilograms of cannabis and 1,376.9 kilograms of hashish (cannabis resin). The total value of the seized goods is estimated at 9.6 million euros at wholesale price and exceeds 25 million euros at retail sale.
The criminal group operated continuously from September 2023 until August 2026, providing logistical services for major drug trafficking networks across Europe, particularly for the Albanian mafia.
HGVs modified in Maramureş, Spain to Western Europe route
The network provided a fleet of articulated lorries modified in clandestine workshops in Maramureş County, used as a front for transporting prohibited substances on the Spain to Western Europe route. According to sources cited by "Adevărul", Ioan Vasile Ionce constructed secret compartments directly in the floor of semi-trailers or in cab ceilings, by adapting air-conditioning systems, in a warehouse in Rușor village, Maramureş County.
To create an appearance of legitimacy, the network operated under the cover of freight transport companies registered in Satu Mare, Bihor, Mehedinți and Timiș counties — including Trial Expres Transport, GFB Transport, TPM Mar Transport, NKS Boom Trans and Kevin Ideal Trans. Recruited drivers collected drug shipments directly from Spain and delivered them to various locations across Europe, concealing the narcotics among legally transported goods.
Network structure: two levels, an invisible leader
The investigation revealed an organisation structured on two distinct levels. Măhălean coordinated all activity from Romania without appearing in the documents or vehicle registrations used by the network, according to the same sources. He determined routes, recruited drivers and made modified vehicles available to them. When transports were intercepted, the group's leaders would intervene promptly and provide legal assistance to arrested drivers, in order to monitor the progress of criminal cases and prevent information leaks.
The command core was completed by Vilhelm Stocsek, known as "Vili", responsible for logistical coordination, and Gheorghe Pintea, known as "Moșul" or "Bătrânul". The financial and support tier included the leader's partner, Valentina Ondina Mănescu, accused of complicity and money laundering, as well as three other suspects — Alexandru-Ionuț Mihăesc, Tiberiu Marian Bîzu and Mihaly Attila Tolvaj — investigated for association with and complicity in drug trafficking.
Encrypted SKY ECC messages, key evidence in the case
Investigators used conversations conducted by network members on the encrypted SKY ECC application as evidence. The use of these conversations is a result of one of the most extensive judicial operations in recent European history.
The SKY ECC application had been, for years, the preferred communication channel for organised crime groups, guaranteeing anonymity through the assignment of unique user codes. The vulnerability of the system in 2021 by European authorities triggered a chain reaction globally. In February 2021, large-scale raids took place in Western Europe, and the turning point came on 9 March 2021 in Belgium, when police conducted over 200 searches after decrypting over one billion confidential messages.
In parallel, the US Department of Justice charged the company's chief executive with facilitating drug trafficking. On 19 March 2021, SKY ECC operations ceased permanently after BlackBerry suspended its services, and the website was seized by the FBI. Once the network was broken, the anonymity offered by unique codes disappeared, most users were identified, and data decryption generated hundreds of criminal cases and a massive number of convictions, particularly in Western Europe.
The breaking of the SKY ECC platform thus created the necessary conditions for Romanian investigators to gain access to the internal communications of the "Matrix" network and to build the criminal case against it.
Source: Google News RO — Crime (ro)