Europol's takedown of The Com exposes gaps in Europe's threat categories

On 24 July 2026, investigators from nine European countries swept through more than 4,300 web addresses linked to an online network called The Com. The operation, coordinated through Europol, was presented as a strike against nihilistic violent extremist content. The scale was notable. The implications are more unsettling than the numbers suggest.

What The Com actually is

The Com, short for The Community, is not a group in the way European security agencies are accustomed to thinking about groups. It has no charter, no leadership hierarchy, no manifesto. Europol describes it as a loose constellation of online communities bound together by a shared hostility toward other people rather than a shared vision for society. Its members gravitate toward cruelty, humiliation and violence not as instruments of political change but as sources of social currency within the network. Status comes from what you do, not what you believe.

This matters because the entire architecture of European counter-terrorism is built around ideological motivation. Europol's annual threat assessments sort violent extremism into familiar columns: jihadist, right-wing, left-wing and anarchist, ethno-nationalist and separatist. These categories are not arbitrary. They reflect genuine differences in tactics, targets and objectives. A jihadist network seeking to impose religious governance requires different investigative tools than a separatist cell bombing infrastructure in pursuit of regional autonomy. The categories exist for operational reasons, not merely bureaucratic convenience.

The Com sits uneasily within this framework. Some of its factions have absorbed accelerationist or right-wing extremist ideas. Others have not. The connective tissue is not ideology but disposition: a shared appetite for destruction and a shared contempt for the people they destroy. When violence becomes identity rather than instrument, the investigative logic that starts with asking "what do they want?" produces incomplete answers.

When the victim is also the perpetrator

One of the more disturbing features of The Com, according to Europol's reporting, is its recruitment pipeline. The network draws young people in through mainstream digital platforms: social media feeds, messaging applications, online gaming environments. These are not obscure forums tucked into dark corners of the internet. They are the places where millions of teenagers spend their afternoons.

A minor who enters one of these spaces may first be groomed, coerced or exploited. That same minor can then be encouraged to participate in harmful activity directed at others. The boundary between the person being victimised and the person being radicalised into victimising someone else dissolves. This is not a theoretical concern. Europol and national authorities have repeatedly flagged the growing involvement of minors in extremist environments, and The Com appears to exemplify the pattern.

For institutions organised around distinct mandates, this convergence is deeply awkward. A child-protection agency sees a vulnerable young person. A counter-terrorism unit sees a potential extremist. A cybercrime division sees illegal online conduct. Each assessment is correct. None is sufficient on its own.

Institutional silos meet converged threats

European security policy is compartmentalised by design. Counter-terrorism frameworks focus on ideological motivation, organisational structure and political intent. Cybercrime units track criminal conduct, technical infrastructure and online offending. Child-protection services prioritise safeguarding and vulnerability. Platform regulators address content moderation and systemic risk under legislation such as the Digital Services Act. Each institutional actor operates within its own legal basis, its own budget lines, its own professional culture.

The Com does not respect these boundaries. It moves across them. The same individual, the same online space, the same set of interactions can fall within the remit of four or five different authorities, each of which sees only the slice that corresponds to its mandate. The result is a patchwork of partial interventions where a coordinated response is needed.

This is not a new observation. Security officials and academic researchers have been warning for years that digital radicalisation blurs traditional categories. But The Com operation makes the point with unusual clarity. More than 4,300 addresses were identified. Nine countries were involved. The infrastructure was real, the threat was tangible, and yet the network's organising logic does not fit the boxes on any single agency's forms.

Why the Digital Services Act is necessary but not sufficient

The European Union has not been idle on digital regulation. The Digital Services Act, which came into full application in early 2024, imposed new obligations on very large online platforms to assess and mitigate systemic risks, including the amplification of harmful content. It represents a genuine shift: platforms are no longer passive intermediaries but active participants in content governance, with transparency requirements and enforcement mechanisms to match.

The Com, however, illustrates the limits of a content-removal strategy. Networks like this do not depend on a single platform. They migrate between services. They exploit mainstream infrastructure for recruitment and then move conversations into encrypted or closed spaces where moderation cannot reach. Taking down 4,300 addresses is a substantial operational achievement. It is also, by its nature, a rear-guard action against a phenomenon that will simply relocate.

The deeper question is not whether platforms can remove harmful content faster, though that matters. It is whether the ecosystems that produce this content can be identified and disrupted before they harden into something more dangerous. That requires understanding how loneliness, humiliation, isolation and the search for recognition create entry points for manipulation. It requires looking at the conditions that make a young person receptive, not only at the content that reaches them.

What a networked response would look like

If the threat is networked, the response has to be networked too. Law-enforcement cooperation across borders and across specialist units is a start. But it is not only police and intelligence agencies that need to talk to each other. Schools need better tools to recognise online grooming and behavioural shifts. Mental-health professionals need to understand how digital manipulation works. Platform trust-and-safety teams need to identify patterns across services rather than treating each piece of content in isolation.

Digital literacy programmes, meanwhile, tend to focus on misinformation: how to spot false claims, how to evaluate sources. These are valuable skills. They do not address the darker mechanics of online manipulation: peer pressure, coercion, the gradual normalisation of cruelty within a closed community. A teenager who can identify a fabricated news story may still be vulnerable to a group that offers belonging in exchange for complicity.

None of this requires abandoning the existing counter-terrorism categories. Jihadist violence, right-wing extremism, separatist militancy: these remain distinct threats demanding distinct expertise. The point is that Europe's security architecture also needs capacity to address phenomena that do not slot neatly into any one column. The Com is unlikely to be the last network that defies classification.

The architecture built for a different era

European security institutions were designed to confront organised groups with identifiable ideologies and stable objectives. That design reflected the threats of the late twentieth and early twenty-first centuries: paramilitary campaigns, jihadist networks, neo-Nazi cells. These threats have not disappeared. But digital communication has created space for something different: subcultures in which violence is not a means to an end but an end in itself, in which belonging is earned through degradation, in which ideology is optional rather than essential.

The July 2026 operation against The Com demonstrated that European authorities can act at scale when they coordinate. It also revealed the conceptual gap between the threat they found and the categories they use to understand it. Closing that gap will require more than operational cooperation. It will require institutional imagination.