Human Trafficking: Mission Domain Intelligence Guide

Very few trafficking victims arrive at a police station and describe themselves as trafficked. What arrives first is a wage query, a housing complaint, an immigration case or a hospital presentation, and the trafficking is visible only if someone was looking.

What Human Trafficking covers as a mission domain

Human trafficking intelligence supports the identification, protection and recovery of victims and the prosecution of those who exploit them. The offence combines an act, a means such as force, fraud, deception, abuse of a position of vulnerability or debt bondage, and a purpose of exploitation. Practice covers sexual exploitation, forced labour, domestic servitude, forced criminality, forced begging, illegal adoption and organ removal. Analysts map recruitment, transport, harbouring and control mechanisms, and identify the businesses, landlords, recruiters and financial channels that sustain them.

It is essential to distinguish trafficking from migrant smuggling: smuggling is a crime against a state involving facilitated border crossing, trafficking is a crime against a person involving exploitation, and neither movement nor a border is required. Networks range from family-based groups to labour supply chains embedded in legitimate industries such as agriculture, care, construction, hospitality, fishing and nail bars. Control is more often debt, document retention and coercion than physical confinement.

Why it matters

The International Labour Organization estimates tens of millions of people in forced labour and forced marriage worldwide, with the majority never identified. Victims lose years of earnings and, frequently, physical and mental health permanently. Misidentification compounds harm: people exploited into criminality are prosecuted rather than protected, and victims removed as immigration offenders are often re-trafficked. Businesses carry supply chain and reporting obligations that make this an operational risk as well as a moral one.

What analysts actually look for

These are the concrete, observable signals that carry weight in this area of work:

• Job advertisements offering high pay for unskilled work with accommodation, transport and documents arranged by the same third party
• Multiple workers registered to a single residential address, or wages for several people paid into one bank account
• Wage deductions for accommodation, transport, equipment or a recruitment fee that leave little or no take-home pay
• Identity documents held by an employer, agent or landlord, with workers unable to produce their own passport or biometric residence permit
• Adult services advertisements sharing duplicated text, rotating contact numbers and images geolocated to short-term rented properties
• Individuals attending appointments, banks or medical services accompanied by a person who answers for them and holds their paperwork
• Frequent short-notice relocation between addresses or worksites, breaking any continuity of local support relationships
• Referrals from healthcare, housing or debt advice services describing control, restricted movement or fear of a named third party

Where the data comes from

Authoritative and openly available collection points. Always confirm licensing and terms before operational or commercial use:

• UNODC Global Report on Trafficking in Persons and the SHERLOC case law database — Global victim profile data, prosecution trends and searchable adjudicated case law by jurisdiction
• ILO global estimates of modern slavery — Prevalence estimates for forced labour and forced marriage with sector and regional breakdowns
• IOM Counter Trafficking Data Collaborative — Anonymised case-level victim data on recruitment, control means and exploitation types
• US State Department Trafficking in Persons Report — Country-by-country assessment of anti-trafficking legislation, enforcement capacity, victim protection provision and government compliance tiers
• GRETA country evaluation reports — Independent European monitoring of state compliance with anti-trafficking obligations and identification failures
• National referral mechanisms and helplines — Formal identification and protection pathways plus aggregate referral statistics by exploitation type
• Polaris Project and equivalent national NGO datasets — Helpline-derived typologies of recruitment tactics, control methods and industry-specific exploitation patterns in consumer-facing sectors
• Europol and INTERPOL trafficking assessments — Network structures, route analysis, facilitator roles and cross-border operational typologies drawn from joint investigations

A working method

A repeatable sequence beats ad-hoc searching. This is a practical starting workflow:

1. Triage the referral on safety first — Assess immediate risk to the individual and any dependants before any investigative step. Safeguarding decisions take precedence over evidence gathering.
2. Corroborate through lawful records — Check employment, payroll, tenancy, company and advertising records to establish the control mechanism without approaching the potential victim repeatedly.
3. Map the chain — Reconstruct recruitment, transport, accommodation and exploitation, identifying recruiters, transporters, landlords, gangmasters and the client-facing business.
4. Follow the money — Analyse wage payments, rent flows, remittances and debt records, which frequently evidence coercion more clearly than any statement.
5. Refer into the protection system — Route the individual into the national referral mechanism or equivalent with informed consent, and secure interpretation, legal advice and accommodation.
6. Build the prosecution package — Assemble corroborative evidence that does not depend solely on victim testimony, and plan special measures and support for any witness who does testify.

How this connects across the intelligence taxonomy

Intelligence work does not respect neat boundaries. The mission domain you are working, the disciplines you practise, and the data points you pivot on are one connected system. These are the direct relationships for this entry — every link is also a tag, so you can follow any thread across the whole library.

Practised with these disciplines

• Criminal Intelligence — Intelligence Supporting Criminal Investigation
• Human Intelligence — Information from People, Ethically Obtained
• Social Media Intelligence — Intelligence from Social Platforms and Networks
• Financial Intelligence — Following Value Through the Financial System
• Geospatial Intelligence — Intelligence Derived from Place
• Legal Intelligence — Law, Litigation, and Regulatory Intelligence
• Identity Intelligence — Resolving and Verifying Who Someone Is

Worked in these data points

• Person / Name — A named individual — the subject of identity resolution and profiling.
• Phone Number — Telephone number for voice, SMS, or messaging identification.
• Social Profile — A social media profile or online account page tied to a persona or identity.
• Location / Coordinates — A geographic point, place, or region — the basis of GEOINT analysis.
• Messaging Handle — An identity on a messaging platform (Telegram, Signal, Discord) used for coordination and sales.
• Event / Incident — A discrete real-world occurrence — protest, strike, breach, seizure — with time, place, and actors.
• Court Case / Docket — A filed legal proceeding — the authoritative record of disputes, judgments, and enforcement.

Adjacent mission domains

• Forced Labour & Modern Slavery
• Child Protection
• Border Security & Migration
• Organized Crime
• Gangs & Street Crime
• Anti-Money Laundering

Inside the platform: where Human Trafficking lives

The Quantus platform is 204 pages behind a 147-item sidebar organised into six working groups: Command (24 items), Dashboards (15), Threat Theaters (14), Intelligence Domains (15), Investigate (34), and Administration (45). This entry is not a page in isolation — it is a thread running through several of them.

The modules that matter most here:

• human-trafficking.php — Human Trafficking dashboard
• domain.php?d=ht — Mission domain hub
• theater.php?d=ht — Threat theater view
• search.php — Person / Name profile
• phone-profile.php — Phone Number profile
• correlate.php — Correlation graph
• cases.php — Case management

Each dashboard is local-first: it renders from the platform’s own database rather than depending on a live third-party call, so it still works when an upstream API is unreachable or rate-limited. Heavy aggregates are cached with a hard query time cap and degrade to the last good value instead of hanging the page.

Automation, playbooks and AI skills

Analysis that only happens when someone remembers to run it is not a capability. The platform ships a 30-step automation pipeline (cron.php) that collects, ingests, resolves, enriches, correlates and scores on a schedule — 25 seeders, 11 resolvers and 7 enrichment runners, all idempotent and cursor-based so a run can be interrupted and resumed without duplicating or losing work.

Relevant playbooks

Of the 14 incident playbooks in playbooks.php, these apply directly to Human Trafficking:

• Human Trafficking Triage — a step-checked workflow with the pivots, sources and handling rules already wired in.
• Cryptocurrency Tracing — a step-checked workflow with the pivots, sources and handling rules already wired in.

AI skills that apply

The 16 one-click operations in ai-skills.php are deterministic jobs, not free-text generation. The ones that matter here:

• Threat Hunt
• Correlate Infrastructure
• Run Alert Rules
• Export STIX/MISP
• Summarise (Copilot)
• Generate Report

Alerting closes the loop: rules in alerts.php fire on new indicators matching a saved query, so a first sighting in this area raises a notification rather than waiting to be noticed at the next review.

Feeds, data sources and the API

The collection layer runs a feed registry of free, machine-readable sources — bulk blocklists and trackers (Maltrail, IPsum, FireHOL, the full abuse.ch corpora, phishing databases, Emerging Threats, Spamhaus, DigitalSide, ThreatView), authoritative government feeds (CISA KEV, OFAC, UN and EU sanctions lists), and reference datasets (RIR allocations, ip-to-ASN and geolocation tables, MITRE ATT&CK, EPSS). collect.php pulls them server-side on a schedule; feeds.php and source-catalog.php show what is registered, what it covers and when it last ran.

Anything the platform holds is reachable programmatically. The REST API in api.php exposes 11 endpoints — status, stats, search, lookup, recent, export, bulk_check, top_threats, by_category, categories, check — and export.php streams 18 formats in bounded chunks, so a million-row export neither exhausts memory nor times out:

STIX 2.1, MISP, OpenIOC 1.1, CEF (ArcSight), LEEF 2.0 (QRadar), Zeek/Bro intel, Snort/Suricata rules, Palo Alto EDL, BIND RPZ, hosts blackhole, iptables, CSV, JSON, NDJSON/JSONL, XML.

That covers the CTI standards (STIX 2.1, MISP, OpenIOC), SIEM ingestion (CEF, LEEF, Zeek), detection engines (Snort/Suricata), and direct enforcement (Palo Alto EDL, BIND RPZ, hosts, iptables) — so intelligence developed here can be actioned in the tools you already run, without a manual reformatting step. A TAXII 2.1 server and a MISP/RSS feed are also served for pull-based sharing.

Use cases

Three ways this entry earns its keep in day-to-day work:

1. Triage under time pressure. An artifact or report lands and you need a defensible read in minutes, not days. Triage the referral on safety first is the first move; the platform pre-computes the enrichment so the analyst spends the time on judgement rather than lookups.
2. Building the picture. A single indicator is rarely the story. Map the chain turns one artifact into a network — shared infrastructure, repeated selectors, the same operator behind different names — via the correlation graph and the cross-entity link engine.
3. Producing something actionable. Analysis that ends in a document nobody can use is wasted. Build the prosecution package feeds the case file, the detection rule, the block list or the referral — with sourcing attached so the recipient can verify it.

Case management (cases.php), watchlists, saved searches and scheduled reports mean the work persists between sessions and survives an analyst leaving the team.

How each sector uses Human Trafficking

The same entry is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The underlying artifacts are shared — the constraints, outputs and thresholds are not.

🎖 Military and defence

Defence organisations engage with trafficking through conduct and vetting obligations rather than investigation. Forces and their contractors must not create demand, and procurement in operational theatres carries a real risk of forced labour in the supply chain for construction, catering and logistics. Analysts support screening of local suppliers, training on identification and referral, and assessment of trafficking as a conflict economy that funds armed groups. Constraints are clear: military personnel have no protective jurisdiction over civilians in most settings, and any suspected case must be routed to the competent civilian authority and to protection actors rather than handled internally.

🕵 National intelligence

National services address trafficking as organised crime with a human cost, focusing on the networks, the movement of money and the corruption that enables it. Requirements centre on structure, routes and facilitators rather than on individual victims, whose identification and protection belong to specialist units and protection agencies. Fusion of financial intelligence, travel data held lawfully, corporate records and human reporting is the method. Handling is unusually sensitive because material identifying victims requires protection beyond ordinary classification, and because disclosure can put people and their families in immediate danger in origin countries.

👮 Law enforcement

Investigations must be victim centred and evidence led, and increasingly are built to succeed without requiring a victim to testify. Evidence comes from financial records, accommodation and employment documentation, communications data obtained under proper authority, travel and transport records, and digital devices. Chain of custody and lawful acquisition are essential. Victims are referred into the national mechanism for support and are not treated as immigration offenders or as complicit in offences committed under compulsion. Charging decisions should account for statutory defences for compelled offending, and prosecutors need evidence of the act, means and purpose elements separately.

🔍 Private investigation and corporate security

Corporate teams meet this as forced labour in supply chains, exploitation in recruitment channels and modern slavery reporting obligations. Diligence covers recruitment fee practices, retention of identity documents, wage deductions, accommodation tied to employment and the use of unregulated labour intermediaries. A private actor must not interview suspected victims investigatively, promise outcomes it cannot deliver, or handle a disclosure alone: the correct step is referral to the designated national mechanism or helpline and to the police. Audits arranged with notice routinely miss exploitation, so worker voice channels and unannounced verification carry far more weight than certificates.

📰 Journalism and OSINT media

Reporting requires consent that is genuinely informed, understanding that survivors may not grasp the reach of publication or the risk of retaliation against family in an origin country. Identifying detail includes far more than a name: a village, a factory, a route or a distinctive circumstance can identify someone locally. Payment for interviews creates pressure and should be handled through an established ethical framework. Verification means corroborating accounts through documents, other witnesses and expert assessment rather than relying on a single testimony. Trauma informed interviewing avoids repeated retelling, which harms the person and degrades the account's reliability.

🌍 NGO, humanitarian and human rights

This is the sector's core work: identification, support, accommodation, legal advice and long term recovery. Practice is survivor led, with informed consent, the right to decline cooperation with police, and no conditioning of support on giving evidence. Documentation for accountability must be handled so that it does not create risk, with strict data minimisation and secure storage, because case records identify people who remain at risk. Duty of care extends to staff, who face vicarious trauma and sometimes direct threat. Referrals go through the national mechanism, and organisations should know precisely what happens after a referral before making one.

🎓 University and research

Prevalence estimation is the hardest methodological problem in the field, and published global figures rest on modelling assumptions that must be stated rather than repeated as fact. Multiple systems estimation, survey work and administrative data each carry known biases. Ethics approval is mandatory and should address re-traumatisation, consent capacity, confidentiality against legal compulsion and safe storage of identifying data. Researchers should not interview people in active exploitation without a safety and referral plan agreed with a support provider. Publish instruments and analysis code, share data only through controlled access, and avoid case detail that could identify participants.

Playbook: working Human Trafficking end to end

A repeatable sequence, from the moment the requirement lands to the moment a product is delivered and the case is closed out. Each phase states what you are trying to establish, not merely what to click — the point is a defensible chain of reasoning, not a checklist.

Phase 1 — Ground the work in the legal definition

Trafficking requires an act, a means and a purpose of exploitation, with the means element not required where the person is a child. Working from this structure prevents the common errors of treating smuggling as trafficking or of dismissing a case because the person consented initially, which is irrelevant where deception or abuse of vulnerability was used. A good output is an assessment that addresses each element separately with the evidence for it.

Phase 2 — Put safeguarding first

Before any analytical step, establish whether anyone is in immediate danger. If so, the response is emergency services and the designated protection authority, not further investigation. Safety of the person outranks the completeness of the intelligence picture in every case, without exception. The output at this stage is a referral made and recorded, with the analyst clear that they have handed responsibility to the body with the power and duty to act.

Phase 3 — Understand the control mechanism

Exploitation is sustained by specific mechanisms: debt presented as owed for transport or accommodation, retention of identity documents, threats to family in the origin country, isolation through language and lack of status, and dependency on the exploiter for housing and wages. Identify which apply, because they determine both the indicators to look for and what support the person will need. A good output names the control mechanism rather than describing the situation generically.

Phase 4 — Look at the systems, not the individual

Analytical work should focus on employers, labour intermediaries, accommodation, transport, recruitment channels and payments, because these leave records and do not depend on victim testimony. Multiple workers paid into one bank account, many people registered at one address, and repeated use of the same recruitment agent are documentary signals. The output is a systems picture that identifies exploitation patterns without requiring any individual to disclose.

Phase 5 — Screen and refer correctly

Where indicators are present, refer through the designated national mechanism, in the United Kingdom the National Referral Mechanism, and to the relevant helpline or specialist authority in other jurisdictions. Understand consent requirements for adults and the duty to refer for children. Know what happens after referral so you can explain it honestly. A good output is a referral that includes the safeguarding detail needed without requiring the person to repeat their account unnecessarily.

Phase 6 — Interview only if trained and authorised

Trauma informed interviewing is a specialist skill and repeated questioning damages both the person and the reliability of their account. Analysts and corporate investigators should not interview suspected victims; that belongs to trained specialists working with an interpreter and, where relevant, an independent advocate. The output for non specialists is a clear handover, with anything the person volunteered recorded accurately and without pressing for more.

Phase 7 — Build the case without dependence on testimony

Assemble financial records showing wage deduction and control, accommodation and tenancy documents, employment and payroll data, communications data obtained under proper authority, travel and transport records, and digital device evidence. Victim testimony strengthens a case but should never be the foundation, because survivors may be unable or unwilling to testify and are entitled to that choice. A good output is a case that stands if the person declines to give evidence.

Phase 8 — Trace the money and the assets

Follow recruitment fees, wage retention, accommodation charges, and the movement of profits into property, vehicles and remittances. Financial evidence reaches the organisers rather than the front line supervisor and supports confiscation that can fund compensation. Identify assets early, before the investigation becomes visible. The output is an asset picture ready for restraint at the point of arrest. Compensation for survivors should be part of the asset plan from the start.

Phase 9 — Address the supply chain and demand side

Where exploitation sits within a legitimate business, examine the contracting structure: who recruited, who paid, who benefited and who chose not to look. Corporate liability regimes increasingly reach up the chain. In sexual exploitation cases, analysis of demand side platforms and payment methods is often more productive and less intrusive than surveillance of the exploited. A good output identifies the commercial decisions that made exploitation profitable.

Phase 10 — Protect identity throughout

Victim identity is protected by law in most jurisdictions and by necessity everywhere. Strip identifying detail from analytical products, restrict access to case material, and consider that location, employer, nationality and route combined can identify someone even without a name. Assess risk to family in origin countries before any disclosure. The output is a product that is useful operationally and cannot be used to locate a person.

Phase 11 — Support recovery and prevent re-trafficking

Recovery is long and re-trafficking is common where people lack status, income or housing. Analytical work should feed prevention: identifying the recruitment channels that keep reappearing, the employers who repeatedly host exploitation, and the gaps in support that push people back. A good output is a set of recommendations aimed at those structural factors rather than at individual vigilance. Test recommendations against what a survivor would actually be able to access.

Phase 12 — Coordinate multi agency and cross border

Work with labour inspectorates, immigration authorities, health services, local government and support providers, and use established international channels for cross border cases. Agree information sharing that protects the person, since immigration enforcement involvement can deter disclosure entirely. The output is a coordinated plan where each agency knows its role and the survivor is not passed repeatedly between organisations telling their story again.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

Source register: what to collect from, and how

Sources are listed with their access model so you can plan around cost and licensing before you build a dependency on them. Open means no account required; registration means a free account or API key; licensed means paid or institutional access. Always confirm current terms — licensing changes, and a source that was free for research may not be free for commercial or evidential use.

Source	Access	What it gives you	How it is used here
UNODC Global Report on Trafficking in Persons	Open	Global analysis of detected trafficking cases, victim profiles, forms of exploitation and criminal justice response.	Authoritative baseline on detected patterns and on the limits of detection based data.
ILO forced labour research and standards	Open	Global estimates of forced labour and the indicator framework used to identify it in workplaces.	Operational indicator set for labour exploitation assessment in supply chains. The indicator framework is the recognised operational standard.
IOM Counter Trafficking Data Collaborative	Open	Anonymised case level data on trafficking victims assisted by participating organisations worldwide.	Route, demographic and exploitation type analysis grounded in assisted case data. Data is anonymised and covers only cases where assistance was provided.
US State Department Trafficking in Persons Report	Open	Annual country by country assessment of government efforts on prevention, protection and prosecution.	Country context on legal frameworks, referral systems and enforcement capacity. Tier rankings are political as well as technical, so read the narrative.
National Referral Mechanism statistics	Open	United Kingdom data on referrals, nationalities, exploitation types and decision outcomes. Published quarterly and annually with breakdowns by age and exploitation type.	Understanding referral volumes and outcomes and the operation of the mechanism itself.
Polaris and national trafficking helplines	Open	Helpline data and typology research on recruitment methods, control mechanisms and exploitation settings.	Practical typologies and the correct reporting route for the public and for businesses.
Walk Free Global Slavery Index	Open	Modelled national prevalence estimates of modern slavery with methodology documentation. Estimates rest on survey extrapolation and should be quoted with method.	Comparative prevalence framing, used with explicit acknowledgement of modelling assumptions. Never present the headline figure as a measured count.
GRETA country evaluation reports	Open	Council of Europe expert monitoring of state compliance with the anti trafficking convention.	Detailed assessment of national identification, protection and prosecution practice. Reports identify specific gaps in national referral practice.
Anti-Slavery International research	Open	Field research and policy analysis on forced labour, debt bondage and supply chain exploitation.	Survivor centred practice guidance and documented case patterns for specific sectors. Particularly strong on debt bondage and recruitment fee practice.
Unseen and national helpline services	Open	Confidential reporting services with published data on cases and sectors reported. Operates a business portal alongside the public helpline route.	The correct referral channel for suspicions arising in business or community settings.
Corporate registries and labour intermediary licensing	Registration	Company records and licensing registers for labour providers and gangmasters in regulated sectors.	Checking whether a labour intermediary is licensed and identifying repeat corporate structures.
OSCE anti trafficking resources	Open	Practice guidance on identification, referral and prosecution across participating states. Includes guidance on non punishment of victims for compelled offences.	Cross border referral practice and guidance on non punishment of victims for compelled offences.
Financial red flag guidance from FATF and Egmont	Open	Typologies and indicators for detecting human trafficking through financial transaction patterns. Developed with financial institutions and financial intelligence units.	Practical indicators for financial institutions and for financial investigation of networks. Indicators are designed to be implemented as monitoring rules.
Academic prevalence estimation literature	Licensed	Peer reviewed work on multiple systems estimation and survey methods for hidden populations.	Understanding why prevalence figures vary so widely and how to use them responsibly.

Prefer sources that publish a methodology and a revision history. A dataset that changes silently is a liability in any product that has to survive challenge.

Tooling

Tools commonly used against Human Trafficking. None of these replace judgement, and each carries its own failure modes — know what a tool infers versus what it observes.

• Indicator based screening frameworks — Structured checklists derived from ILO and national guidance for identifying exploitation. Limitation: indicators overlap with ordinary precarious work, so they guide referral rather than determine status.
• Financial transaction monitoring rules — Detect wage retention, shared accounts and remittance patterns associated with exploitation. Limitation: high false positive rates and dependence on the institution understanding the typology.
• Multi agency case conferencing systems — Coordinate safeguarding, health, housing and enforcement around an individual. Limitation: only effective where immigration enforcement involvement does not deter disclosure.
• Worker voice and grievance platforms — Allow workers to report conditions confidentially in their own language. Limitation: uptake depends on trust and on visible action following reports.
• Supply chain mapping tools — Trace suppliers, subcontractors and labour intermediaries beyond the first tier. Limitation: data usually thins out precisely at the tiers where exploitation concentrates.
• Secure case management with restricted access — Protects identifying victim data with audited access. Limitation: value depends on data minimisation discipline as much as on technical controls.
• Interpreting and cultural mediation services — Enable communication without relying on someone connected to the exploiter. Limitation: interpreter selection is itself a safeguarding decision in small language communities.
• Job advertisement and recruitment monitoring — Identifies deceptive recruitment offers and repeated intermediary patterns. Limitation: advertisements are transient and much recruitment now happens in closed messaging groups.

AI skills and automation in detail

These are deterministic jobs with defined inputs and outputs, not open-ended prompting. Each is idempotent and cursor-based: interrupt one and it resumes where it stopped rather than duplicating work or losing progress.

• Threat Hunt — Runs saved hypotheses against the corpus and surfaces what matches, with the query preserved as a versioned artifact.
• Correlate Infrastructure — Builds the cross-entity link graph: shared hosting, reused certificates, overlapping registrants, repeated selectors.
• Run Alert Rules — Evaluates saved rules against new data so a first sighting raises a notification rather than waiting for review.
• Export STIX/MISP — Streams the selection in CTI standard formats for sharing with partners and ISACs.
• Summarise (Copilot) — Produces a narrative summary beside the underlying records. It explains; it never creates indicators or assigns attribution.
• Generate Report — Assembles a sourced product from the current case or query, with provenance attached to each element.

A note on the boundary: the only skill that involves a language model is Summarise (Copilot), and it writes prose about records that already exist. Nothing else on this list involves generation of any kind. No indicator, relationship or attribution in the platform originates from a model. See the full skill list.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

• Consent at the outset is legally irrelevant where deception, coercion or abuse of vulnerability was used. Investigators who ask why someone stayed have misunderstood the offence and will misread the evidence in front of them.
• Build cases that do not require testimony. Financial records, accommodation documents, payroll data and communications evidence reach the organisers and let a survivor choose whether to participate rather than carrying the prosecution alone.
• Announced audits do not find forced labour. Workers are coached or removed, so worker voice channels, unannounced verification and analysis of recruitment fee practices carry far more evidentiary weight than a certificate.
• The control mechanism is the analytical key. Debt, document retention, threats to family and tied accommodation each generate different records and different indicators, so naming the mechanism directs the whole investigation.
• Identity leaks through circumstance, not just names. Nationality, employer, route and a distinctive detail can identify a person to the people who exploited them, so redaction must be tested against what an insider would recognise.
• Immigration enforcement involvement suppresses disclosure. Where victims fear detention or removal, they will not come forward, and any protocol that does not separate protection from immigration action will fail on its own terms.
• Prevalence figures are models, not counts. Quote them with their method and their uncertainty, because presenting a modelled global estimate as a measurement undermines credibility with the audiences who most need to act.

Measuring whether it is working

Capability claims should be falsifiable. These are the measures that show whether work on Human Trafficking is producing anything, and they are worth baselining before you change process or tooling.

• Number of potential victims identified and referred into the national mechanism who then accessed support, rather than referrals made.
• Proportion of prosecutions built on evidence that did not require the survivor to testify. This is the clearest indicator that case building is genuinely survivor centred.
• Rate of re-trafficking or return to exploitation among people who received support, tracked over at least twelve months.
• Time from first indicator being observed to a safeguarding referral being completed. Measured in hours, since delay compounds risk to the person.
• Share of supply chain sites where worker voice channels produced reports, compared with sites relying on audit alone.
• Assets restrained and compensation actually paid to survivors, rather than confiscation orders granted. Compensation paid is the outcome measure; orders granted are only an input.
• Proportion of frontline staff trained in identification and referral who correctly identify indicators in periodic exercises.

Beware of measuring volume alone. Indicator counts and report counts rise easily and say little; time-to-attribution, proportion of findings that survive review, and how often a product changed a decision say a great deal.

Common pitfalls

• Expecting victims to self-identify or disclose immediately, when trauma, debt, fear and distrust of authority all suppress disclosure
• Misclassifying trafficking as smuggling or as an immigration offence, which routes a victim into removal instead of protection
• Over-indexing on cross-border movement, when a large share of exploitation is domestic and involves no border at all
• Repeated uncoordinated interviews that retraumatise the person and degrade the evidential value of their account
• Prosecuting victims of forced criminality for offences committed under coercion, contrary to the non-punishment principle
• Publishing case detail, imagery or locations that identifies a victim to the network that exploited them

Legal and ethical considerations

Victim data is special category personal data requiring a clear lawful basis, strict access control and short retention. The non-punishment principle protects victims compelled into offending and should be raised early with prosecutors. Children are automatically treated as victims regardless of apparent consent, and safeguarding duties attach immediately. Reflection and recovery periods, anonymity protections and reporting restrictions vary by jurisdiction but generally prohibit publishing identifying detail. Consent for referral should be informed and revocable, except where a child or an immediate risk to life is involved.

Data integrity: no fabrication, no drift, no hallucination

Intelligence that cannot be traced back to a source is not intelligence, it is assertion. Everything in this entry — and everything in the platform behind it — is built on a small number of non-negotiable rules.

Provenance on every record

Every indicator carries the source that supplied it, a first-seen and last-seen timestamp, and a sighting count. Where several feeds report the same artifact, each contribution is recorded separately rather than collapsed, so you can see whether a finding rests on one source or twelve. Source attribution travels with the data into every export, so a recipient can audit a claim without asking you for the working.

Nothing is invented to fill a gap

If the platform has no data for Human Trafficking, it says so. Empty is displayed as empty — never padded with plausible-looking placeholder values, sample records or illustrative examples that a reader might mistake for observations. A dashboard with no rows is a true statement about collection coverage, and it is treated as a gap to close, not a blemish to hide.

Scoring is deterministic and reproducible

Threat scores, reputation grades and risk tiers are computed from stated inputs with fixed weights, not estimated. The same inputs always produce the same output, and the formula is visible rather than a black box. Aggregates are cached with an explicit time-to-live so a figure on screen is never silently stale — and when a heavy query exceeds its time budget the platform serves the last known-good value and labels it, rather than inventing a fresh number or hanging.

Where AI is used, and where it is not

Language models summarise and explain. They do not create indicators, assign attribution or manufacture relationships. No IP address, wallet, hash or identity in the platform originates from a model — every one is ingested from a named feed, resolved from a reference dataset, or entered by an analyst with a source recorded. Copilot output is presented as narrative alongside the underlying records, never in place of them, so a reader can always check the summary against the evidence.

Guarding against drift

Enrichment is additive and timestamped rather than overwriting. Reference data — sanctions lists, allocations, taxonomies — is re-synchronised from the authority on a schedule instead of being edited in place, so local copies cannot quietly diverge from the source of truth. Attribution is recorded with a confidence level and the reporting it rests on, and inferred relationships are labelled as inferred. When a source retracts or corrects, the correction propagates rather than leaving a stale assertion behind.

What this means for you

You can put a finding from this platform in front of a regulator, a court, a board or a partner agency and show where each element came from. That is the standard the tooling is built to — because in this work, being confidently wrong is more damaging than being usefully uncertain.

By the numbers

The taxonomy this entry belongs to is not a marketing list — it is the actual structure of the platform: 52 mission domains, 52 intelligence disciplines and 65 data points, each with a live dashboard behind it. Supporting that: 18 indicator types, 14 playbooks, 16 AI skills, 18 export formats and a 30-step automated pipeline.

This particular entry connects directly to 7 intelligence disciplines, 7 data points, 6 closely related entries — every one of them a tag you can follow, and a dashboard you can open.

Questions analysts actually ask

What is the difference between trafficking and smuggling?

Smuggling is a crime against a state: facilitating illegal entry, normally with the person's agreement, and the relationship typically ends on arrival. Trafficking is a crime against a person: an act carried out through coercion, deception or abuse of vulnerability for the purpose of exploitation, and it can occur entirely within one country with no border crossing at all. People who were smuggled are frequently trafficked afterwards when debts are used to compel work. Getting this distinction right matters because it determines whether someone is treated as an offender or as a person entitled to protection.

Someone at a supplier site shows possible indicators. What should a company actually do?

Do not investigate or interview. Record what was observed factually, escalate immediately through the internal safeguarding route, and report to the designated national channel, such as the modern slavery helpline or the police, and to the labour regulator where one exists. If anyone appears to be in immediate danger, call emergency services first. Do not confront the employer or intermediary, which can lead to workers being moved or harmed. Preserve any relevant documentation. Then review the commercial relationship, since terminating a contract abruptly can leave workers worse off and should be handled with advice.

Why do victims sometimes decline help or return to exploiters?

Because the alternatives are often worse. People may have debts they believe are owed, family in origin countries under threat, no immigration status, no housing or income, and prior experience of authorities that was punitive rather than protective. Trauma bonding and dependence on the exploiter for everything from wages to language mediation are common. This is why support cannot be conditioned on cooperation with police, and why re-trafficking rates are the honest measure of whether a response works. Judging the decision as irrational usually means the risk assessment has missed something real.

How should analysts handle data about identified victims?

With minimisation and strict access control. Hold only what is necessary for the specific purpose, restrict access to named individuals, and remove identifying detail from any product that circulates. Remember that combinations of nationality, employer, route and circumstance identify people to those who exploited them even without names. Assess risk to family in origin countries before any disclosure. Retention periods should be defined and enforced. Statutory anonymity protections apply in many jurisdictions, and breaching them can endanger someone as well as breaking the law.

Can a trafficking victim be prosecuted for offences they committed?

Many jurisdictions provide a non punishment principle or a statutory defence where offences were committed as a direct consequence of trafficking, covering cannabis cultivation, benefit fraud, document offences and drug supply among others. The practical failure is that indicators are not identified early, so a person is charged before anyone screens them. Investigators and prosecutors should screen for exploitation at first contact, refer through the national mechanism, and ensure independent legal advice. Convictions obtained without that screening have been overturned repeatedly and cause serious additional harm.

Are supply chain certifications any evidence of absence of forced labour?

Very weak evidence. Announced social audits are routinely circumvented through coaching, document falsification and temporary removal of vulnerable workers, and audit failure to detect known cases is well documented. Stronger indicators are recruitment fee policy and whether workers actually paid fees, whether identity documents are retained, wage payment records against hours worked, accommodation arrangements, and confidential worker voice channels with evidence that reports lead to action. Treat certification as a hygiene factor and build assurance on evidence that comes from workers rather than from suppliers.

Standards, frameworks and further reading

Work that references a recognised framework is easier to defend, easier to hand over, and easier for a partner to consume:

• UN Palermo Protocol to Prevent, Suppress and Punish Trafficking in Persons, defining the act, means and purpose structure of the offence.
• Council of Europe Convention on Action against Trafficking in Human Beings, with GRETA monitoring of state compliance.
• ILO Forced Labour Convention and Protocol, and the ILO indicators of forced labour used for identification.
• National referral mechanisms, including the UK National Referral Mechanism, governing identification and support of potential victims.
• UK Modern Slavery Act and equivalent legislation, covering offences, transparency in supply chains and statutory defences.
• UN Guiding Principles on Business and Human Rights, framing corporate due diligence obligations in supply chains.
• Non punishment principle for victims compelled to commit offences, reflected in OSCE and Council of Europe guidance.
• WHO ethical and safety recommendations for interviewing trafficked persons, governing research and interview practice.

References

Primary sources and authoritative references for this entry. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

1. Global Report on Trafficking in Persons — UN Office on Drugs and Crime. Global analysis of detected cases, victim profiles and criminal justice response.
2. Global Estimates of Modern Slavery — International Labour Organization. Modelled global estimates of forced labour and forced marriage with methodology.
3. Counter Trafficking Data Collaborative — International Organization for Migration. Anonymised case level dataset on assisted trafficking victims.
4. Trafficking in Persons Report — US Department of State. Annual country assessments of anti trafficking efforts.
5. GRETA evaluation reports — Council of Europe. Expert monitoring of implementation of the anti trafficking convention.
6. National Referral Mechanism guidance and statistics — UK Home Office. Official guidance and data on the UK identification and support mechanism.
7. Human trafficking typology research — Polaris Project. Typologies of trafficking based on helpline and case data.
8. Financial flows from human trafficking — Financial Action Task Force. Typologies and red flag indicators for detecting trafficking through financial data.

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this entry: surfaces exploitation and control indicators across adverts, payroll and tenancy data while protecting victim identity. Explore the platform, or browse the rest of the library by following any tag above.