Wildlife Trafficking: Mission Domain Intelligence Guide

A container declared as plastic scrap weighing four tonnes more than plastic scrap should weigh is the whole case. The pangolin scales inside are the confirmation, not the discovery.

What Wildlife Trafficking covers as a mission domain

Wildlife trafficking intelligence covers the illegal take, transport and trade of protected species and their derivatives, along with illegal logging and illegal, unreported and unregulated fishing. Analytical practice combines commodity knowledge, permit and documentation verification, freight and routing analysis, online marketplace monitoring, and forensic techniques such as DNA and stable isotope analysis that establish geographic origin. Because much of the trade moves alongside legal commerce, the analytic problem is usually distinguishing a lawful consignment from an unlawful one rather than finding a hidden shipment.

The domain covers high-value commodities such as ivory, rhino horn, pangolin scales, tiger and big cat parts and totoaba swim bladders, the live exotic pet and reptile trade, timber species listed under international convention, glass eel and other fisheries trafficking, and traditional medicine derivatives. Convergence is routine: the same freight networks, corruption and laundering channels carry wildlife alongside narcotics and counterfeits.

Why it matters

Trafficking drives species toward extinction and destroys the ecosystem services and tourism economies dependent on them. It funds armed groups and corrupt officials, undermines rural livelihoods and conservation enforcement, and introduces zoonotic disease risk through unregulated live animal movement. Illegal fishing depletes food security in coastal states and typically coincides with forced labour aboard vessels, making it a human rights issue as much as an environmental one.

What analysts actually look for

These are the concrete, observable signals that carry weight in this area of work:

• Container weight, density or declared commodity inconsistent with the manifest, particularly bulk goods used as concealment cover
• International convention permits reused, altered, issued retrospectively or referencing a management authority stamp with known irregularities
• Captive-bred declarations for species with no viable captive breeding at the volumes claimed, or for source countries with no registered facilities
• Social media and marketplace listings using coded terminology, emoji substitutes or closed groups to advertise protected species
• Freight routings via transit hubs with no commercial rationale, with documentation changing at the transhipment point
• Forensic mismatch between claimed origin and DNA, isotope or timber species analysis of the seized material
• Fishing vessels going dark over marine protected areas or engaging in at-sea transhipment with reefers linked to prior violations
• Antique or pre-convention ivory offered without provenance documentation, or with certificates that postdate the claimed acquisition

Where the data comes from

Authoritative and openly available collection points. Always confirm licensing and terms before operational or commercial use:

• CITES Trade Database and national management authorities — Permit-level records of declared international trade in listed species by taxon, purpose and source
• TRAFFIC — Detailed market analysis, seizure aggregation and species-specific trade dynamics reporting
• UNODC World Wildlife Crime Report — Global seizure analysis, trafficking route mapping and convergence with other criminal markets
• INTERPOL Environmental Security Programme — Operational coordination, alerts and cross-border case typologies for wildlife and forestry crime
• Global Fishing Watch — Open vessel activity data revealing dark periods, transhipment and fishing effort in protected waters
• Environmental Investigation Agency and Wildlife Justice Commission — Field-documented investigations into specific trafficking networks with named routes and methods
• IUCN Red List — Authoritative conservation status and range data for assessing the significance of a given seizure
• EU-TWIX and regional seizure databases — Enforcement-shared seizure records enabling pattern analysis across member state borders

A working method

A repeatable sequence beats ad-hoc searching. This is a practical starting workflow:

1. Establish the legal baseline — Determine the species listing, source country protections and importing country rules, since legality varies by taxon, source and jurisdiction.
2. Verify documentation — Check permit numbers, issuing authority, validity dates and quantities against the trade database and the management authority directly.
3. Analyse the logistics — Examine consignor, consignee, freight forwarder, routing and prior shipping history for reuse across other suspect consignments.
4. Monitor demand-side markets — Track online listings, physical markets and traditional medicine retail for the commodity, recording seller identifiers and pricing.
5. Commission forensic verification — Use DNA, isotope or timber anatomy analysis to test claimed species and geographic origin against the declaration.
6. Refer and support prosecution — Provide findings to the convention management authority, customs and police, with specimen handling and continuity documented throughout.

How this connects across the intelligence taxonomy

Intelligence work does not respect neat boundaries. The mission domain you are working, the disciplines you practise, and the data points you pivot on are one connected system. These are the direct relationships for this entry — every link is also a tag, so you can follow any thread across the whole library.

Practised with these disciplines

• Environmental Intelligence — Environmental Conditions, Damage, and Crime
• Criminal Intelligence — Intelligence Supporting Criminal Investigation
• Logistics Intelligence — Cargo, Freight, and Physical Movement
• Geospatial Intelligence — Intelligence Derived from Place
• Social Media Intelligence — Intelligence from Social Platforms and Networks
• Legal Intelligence — Law, Litigation, and Regulatory Intelligence

Worked in these data points

• Shipment / Bill of Lading — A consignment record linking shipper, consignee, goods, and route.
• HS Commodity Code — The Harmonized System code classifying a traded good — the key to trade-flow analysis.
• Location / Coordinates — A geographic point, place, or region — the basis of GEOINT analysis.
• Social Profile — A social media profile or online account page tied to a persona or identity.
• Company / Organization — A legal entity — corporation, LLC, NGO, or business.
• Event / Incident — A discrete real-world occurrence — protest, strike, breach, seizure — with time, place, and actors.
• Image / Photograph — A still image — carries EXIF metadata and is the primary artifact for visual verification.

Adjacent mission domains

• Environmental Crime
• Organized Crime
• Border Security & Migration
• Maritime Security
• Corruption & Governance

Inside the platform: where Wildlife Trafficking lives

The Quantus platform is 204 pages behind a 147-item sidebar organised into six working groups: Command (24 items), Dashboards (15), Threat Theaters (14), Intelligence Domains (15), Investigate (34), and Administration (45). This entry is not a page in isolation — it is a thread running through several of them.

The modules that matter most here:

• domain.php?d=wildlife — Wildlife Trafficking dashboard
• theater.php?d=wildlife — Threat theater view
• search.php — Company / Organization profile
• correlate.php — Correlation graph
• cases.php — Case management

Each dashboard is local-first: it renders from the platform’s own database rather than depending on a live third-party call, so it still works when an upstream API is unreachable or rate-limited. Heavy aggregates are cached with a hard query time cap and degrade to the last good value instead of hanging the page.

Automation, playbooks and AI skills

Analysis that only happens when someone remembers to run it is not a capability. The platform ships a 30-step automation pipeline (cron.php) that collects, ingests, resolves, enriches, correlates and scores on a schedule — 25 seeders, 11 resolvers and 7 enrichment runners, all idempotent and cursor-based so a run can be interrupted and resumed without duplicating or losing work.

Relevant playbooks

Of the 14 incident playbooks in playbooks.php, these apply directly to Wildlife Trafficking:

• Human Trafficking Triage — a step-checked workflow with the pivots, sources and handling rules already wired in.
• Sanctions Screening & Escalation — a step-checked workflow with the pivots, sources and handling rules already wired in.

AI skills that apply

The 16 one-click operations in ai-skills.php are deterministic jobs, not free-text generation. The ones that matter here:

• Threat Hunt
• Correlate Infrastructure
• Run Alert Rules
• Summarise (Copilot)
• Generate Report

Alerting closes the loop: rules in alerts.php fire on new indicators matching a saved query, so a first sighting in this area raises a notification rather than waiting to be noticed at the next review.

Feeds, data sources and the API

The collection layer runs a feed registry of free, machine-readable sources — bulk blocklists and trackers (Maltrail, IPsum, FireHOL, the full abuse.ch corpora, phishing databases, Emerging Threats, Spamhaus, DigitalSide, ThreatView), authoritative government feeds (CISA KEV, OFAC, UN and EU sanctions lists), and reference datasets (RIR allocations, ip-to-ASN and geolocation tables, MITRE ATT&CK, EPSS). collect.php pulls them server-side on a schedule; feeds.php and source-catalog.php show what is registered, what it covers and when it last ran.

Anything the platform holds is reachable programmatically. The REST API in api.php exposes 11 endpoints — status, stats, search, lookup, recent, export, bulk_check, top_threats, by_category, categories, check — and export.php streams 18 formats in bounded chunks, so a million-row export neither exhausts memory nor times out:

STIX 2.1, MISP, OpenIOC 1.1, CEF (ArcSight), LEEF 2.0 (QRadar), Zeek/Bro intel, Snort/Suricata rules, Palo Alto EDL, BIND RPZ, hosts blackhole, iptables, CSV, JSON, NDJSON/JSONL, XML.

That covers the CTI standards (STIX 2.1, MISP, OpenIOC), SIEM ingestion (CEF, LEEF, Zeek), detection engines (Snort/Suricata), and direct enforcement (Palo Alto EDL, BIND RPZ, hosts, iptables) — so intelligence developed here can be actioned in the tools you already run, without a manual reformatting step. A TAXII 2.1 server and a MISP/RSS feed are also served for pull-based sharing.

Use cases

Three ways this entry earns its keep in day-to-day work:

1. Triage under time pressure. An artifact or report lands and you need a defensible read in minutes, not days. Establish the legal baseline is the first move; the platform pre-computes the enrichment so the analyst spends the time on judgement rather than lookups.
2. Building the picture. A single indicator is rarely the story. Analyse the logistics turns one artifact into a network — shared infrastructure, repeated selectors, the same operator behind different names — via the correlation graph and the cross-entity link engine.
3. Producing something actionable. Analysis that ends in a document nobody can use is wasted. Refer and support prosecution feeds the case file, the detection rule, the block list or the referral — with sourcing attached so the recipient can verify it.

Case management (cases.php), watchlists, saved searches and scheduled reports mean the work persists between sessions and survives an analyst leaving the team.

How each sector uses Wildlife Trafficking

The same entry is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The underlying artifacts are shared — the constraints, outputs and thresholds are not.

🎖 Military and defence

Defence involvement is normally support to civil authorities or partner states: aerial and maritime surveillance over protected areas and fishing grounds, ranger capacity building, and logistics for anti poaching operations. Analysts assess the convergence of wildlife crime with armed groups, corruption and other trafficking flows, which matters for stabilisation missions and for partner assessment. Products feed patrol tasking, partner nation evaluation and threat finance work. Constraints include the absence of arrest powers, the requirement that any evidence gathered can be used in a civil court, and human rights vetting of partner ranger forces given documented abuses in some protected area operations.

🕵 National intelligence

National services track wildlife trafficking as transnational organised crime with laundering, corruption and convergence dimensions. Requirements focus on the networks, the corrupt permitting officials and the logistics and financial architecture rather than on individual seizures. Fusion of trade permit data, shipping records, financial intelligence, forensic origin evidence and human reporting produces the picture. Handling is less classified than in other domains, which creates an opportunity: much of the strongest evidence is open, so products can often be shared with regulators, enforcement and NGO partners who are positioned to act. Value is measured in disrupted routes, not in seizure totals.

👮 Law enforcement

Investigators handle offences under wildlife protection and trade legislation, plus the fraud, money laundering and corruption offences that usually accompany them. Evidential requirements include species identification by a competent expert, forensic origin determination where available, permit authenticity examination, and continuity of specimens which may be perishable or require specialist storage. Cross border tracing depends on convention management authorities and mutual legal assistance. Prosecutors frequently achieve better outcomes charging financial and documentary offences alongside wildlife charges, because penalties are higher and the evidence is documentary rather than dependent on species expertise.

🔍 Private investigation and corporate security

Corporate work concerns supply chain legality for timber, fish, leather, traditional medicine ingredients and pets, and compliance with import regulations requiring proof of legal harvest. Diligence covers permit authenticity, species declaration accuracy, chain of custody documentation and the credibility of certification schemes. A private actor may not conduct covert operations, purchase specimens to test a supplier, or investigate suspected traffickers. Suspicion should go to the national convention management authority, customs or police. Reports should be built for regulatory audit, since import regulations on timber and fish carry due diligence obligations that are enforced.

📰 Journalism and OSINT media

Reporting should avoid detail that functions as a market signal or a sourcing guide, since coverage of high prices and scarcity has been shown to stimulate demand. Never publish precise locations of individual animals or nests of threatened species, which has directly enabled poaching. Verification requires species identification by a specialist rather than by the reporter, and care with seizure statistics, which measure enforcement. Source protection matters because rangers, port officials and community informants face lethal risk. Right of reply should extend to companies, certification schemes and governments named, and to communities characterised as poaching sources.

🌍 NGO, humanitarian and human rights

Conservation and human rights organisations do much of the investigative and monitoring work in this domain, and the tension between them is real: enforcement led conservation has produced documented abuses against indigenous and local communities. Practice should be rights based, with community consent, benefit sharing and accountability for ranger conduct treated as core rather than as reputational management. Documentation for accountability should follow evidential standards so it can support prosecution. Duty of care covers field staff facing armed poachers and the local informants who bear the highest risk and the least protection.

🎓 University and research

Research spans population monitoring, trade dynamics, forensic species identification and enforcement evaluation. Methodological care is required because trade data is patchy and seizure records reflect enforcement, so demand estimates built on them are unreliable. Genetic and isotopic origin methods need documented reference collections, and their statistical strength must be reported honestly. Ethics approval applies to research involving communities and to fieldwork risk. Never publish precise coordinates for threatened species populations, an established norm in the field. Share reference data and analysis code, and archive trade records, which are revised and withdrawn more often than expected.

Playbook: working Wildlife Trafficking end to end

A repeatable sequence, from the moment the requirement lands to the moment a product is delivered and the case is closed out. Each phase states what you are trying to establish, not merely what to click — the point is a defensible chain of reasoning, not a checklist.

Phase 1 — Establish the commodity and its legal status

Determine the species, its listing under the trade convention and under national law, and what documentation a lawful shipment would require in each country involved. Legality is jurisdiction specific and changes with listing decisions. A good output states precisely what would make this consignment lawful, because that defines the documentary evidence to examine and the specific point where the chain must break for the trade to be illicit.

Phase 2 — Verify species identification properly

Identification determines the offence and the penalty, and morphological identification of processed products is frequently impossible. Use a competent expert and, where required, genetic or isotopic analysis from an accredited laboratory. Record the method and its limits. The output is an identification that will survive challenge, since a case built on a confident but unqualified identification of a worked product will usually fail.

Phase 3 — Examine permits and declarations

Check convention permits and customs declarations for authenticity and internal consistency: issuing authority, quota availability, species and quantity, source codes claiming captive breeding, and re-export documentation. Fraudulent claims of captive bred origin and recycled permits are recurring methods. A good output identifies the specific documentary anomaly with reference to what a valid document should show, which is what a regulator or prosecutor needs.

Phase 4 — Reconstruct the route

Map harvest area, consolidation point, export port, transhipment and destination market, using shipping records, customs data, transport documents and where relevant vessel movement. Identify the jurisdictions repeatedly used for transhipment or document laundering. The output is a route with the specific handoffs identified, which supports both enforcement and engagement with the transit state whose controls are being exploited. Note where documentation was reissued, since that is usually where the laundering occurred.

Phase 5 — Use forensic origin evidence

Genetic assignment, stable isotope analysis and, for timber, anatomical and chemical methods can indicate geographic origin and contradict declared harvest locations. These require reference collections and produce probabilistic results. Ensure accredited laboratories and documented continuity. A good output states the strength of the origin determination in terms a court can weigh rather than as an assertion of certainty. Record the reference collection used, because its coverage determines the strength of the result.

Phase 6 — Follow the money and the corporate structures

Trace payments, exporters, importers and the corporate entities involved, which are often shared with other commodity trades. Wildlife trafficking is usually accompanied by fraud, tax offences and laundering, which carry higher penalties and rest on documentary evidence. Identify assets early. The output identifies the commercial actors who profit rather than only the couriers who are caught with the goods. Check whether the same corporate entities appear in other commodity trades.

Phase 7 — Address corruption directly

Permit issuance, veterinary certification, customs clearance and enforcement itself are recurring corruption points, and no route analysis is complete without assessing which officials enabled it. Handle this with compartmentation, because operational security failures here endanger informants. A good output states which institutions can be relied upon in an operation and which cannot, with evidence, so plans are built on reality.

Phase 8 — Monitor online and physical marketplaces

Track listings on trading platforms, social media groups and physical markets for species, volumes, pricing and vendor persistence, working within platform terms and the law. Never purchase specimens to test a seller. Coordinate with platform trust and safety teams, which can act faster than enforcement. The output is evidence of trade patterns and a referral package, preserved to an evidential standard before listings are removed.

Phase 9 — Work with source communities, not against them

Local people are simultaneously the most affected by poaching and the most exposed to enforcement abuses. Analysis should distinguish subsistence and coerced participation from organised commercial poaching, since conflating them produces both injustice and bad intelligence. Where a community is a source of information, protection matters more than attribution. A good output identifies the organisers and the enablers rather than the people at the bottom of the chain.

Phase 10 — Preserve and hand over evidence properly

Specimens may be perishable, dangerous, or subject to welfare requirements if live. Establish handling, storage and disposal arrangements with the competent authority before seizure where possible. Document continuity throughout. The output is an exhibit set that survives to trial, which in this domain frequently fails because nobody planned where a container of frozen product or a hundred live animals would go.

Phase 11 — Support prosecution and sentencing

Provide the court with species status, conservation impact, market value and the organised nature of the offending, since sentencing frequently underestimates seriousness without it. Combine wildlife charges with financial and documentary offences where available. A good output is a case file that explains to a non specialist judge why the offending matters, in terms of harm rather than of species rarity alone.

Phase 12 — Evaluate the intervention

Measure whether poaching pressure, trade volume or price changed, and whether the route displaced. Set a baseline first using population monitoring, seizure adjusted trade indicators and market surveys. A good output is an evaluation willing to report that an operation moved the trade elsewhere, because this domain has a long history of expensive interventions with unmeasured effect. Report displacement honestly, since it is the most common actual outcome.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

Source register: what to collect from, and how

Sources are listed with their access model so you can plan around cost and licensing before you build a dependency on them. Open means no account required; registration means a free account or API key; licensed means paid or institutional access. Always confirm current terms — licensing changes, and a source that was free for research may not be free for commercial or evidential use.

Source	Access	What it gives you	How it is used here
CITES and the CITES Trade Database	Open	Convention listings, permit requirements and reported international trade in listed species by country and year.	Establishing legal status and comparing reported trade against observed shipments for anomalies.
TRAFFIC research and Wildlife Trade Portal	Open	Analysis of wildlife trade dynamics, seizure data compilations and market surveys across regions.	Market context, seizure trend analysis and species specific trade route documentation. Seizure compilations should be read as enforcement rather than trade data.
UNODC World Wildlife Crime Report	Open	Global assessment of wildlife trafficking flows, markets, actors and criminal justice responses.	Authoritative strategic framing and comparative data on trafficking routes and commodities. Also documents the convergence with other criminal markets.
IUCN Red List	Open	Assessment of conservation status, population trends and threats for species worldwide. Assessments are periodically revised, so cite the version used.	Establishing conservation impact for sentencing and prioritisation of enforcement effort. Courts rely on this status when assessing harm at sentencing.
Environmental Investigation Agency reports	Open	Undercover and documentary investigations into timber, ivory, pangolin and other illicit wildlife trades.	Documented network and method evidence, and a model for evidential investigative practice.
Wildlife Justice Commission	Open	Investigations building case files on transnational wildlife trafficking networks for handover to authorities.	Case documentation on specific networks and practice guidance on evidential standards. Case files are built to a standard authorities can act on.
Global Fishing Watch	Open	Vessel activity data derived from satellite tracking, showing fishing effort, transhipment and port visits.	Detecting illegal, unreported and unregulated fishing patterns and at sea transhipment. Dark vessel gaps are frequently the most useful signal.
Regional fisheries management organisation records	Open	Vessel authorisation lists, illegal fishing vessel listings and catch documentation schemes by region.	Checking whether a vessel is authorised and whether catch documentation is credible.
Timber legality frameworks and due diligence guidance	Open	EU and other import regulations requiring proof of legal harvest, with guidance and enforcement records.	Establishing the legal obligations on importers and the documentary evidence they must hold.
National wildlife forensic laboratories	Licensed	Genetic, isotopic and anatomical analysis capability for species and geographic origin determination.	Evidential identification of processed products and contradiction of declared origins. Results are probabilistic and must be reported with their strength.
INTERPOL environmental security programme	Open	Operational coordination, alerts and assessments on wildlife and forestry crime across member countries.	Cooperation channel for cross border cases and access to coordinated operations. Also issues notices used to alert member countries to specific threats.
Customs and trade data	Licensed	Import and export declarations, bills of lading and commodity coding for wildlife and forest products.	Detecting misdeclaration and comparing reported flows against convention trade records. Commodity coding is coarse, so misdeclaration is easily concealed.
Online marketplace and platform reporting channels	Open	Trust and safety reporting routes and published policies of platforms hosting wildlife product listings.	Removal of listings and preservation of evidence through coordinated platform engagement. Preserve listings before reporting, since removal is immediate.
Protected area and ranger monitoring data	Registration	Patrol effort, encounter and incident data collected in protected areas using standard monitoring tools.	Establishing poaching pressure baselines and evaluating whether interventions changed it. Patrol data reflects coverage as well as poaching activity.

Prefer sources that publish a methodology and a revision history. A dataset that changes silently is a liability in any product that has to survive challenge.

Tooling

Tools commonly used against Wildlife Trafficking. None of these replace judgement, and each carries its own failure modes — know what a tool infers versus what it observes.

• Wildlife forensic genetics — Identifies species and often population of origin from tissue, bone or processed product. Limitation: requires reference collections that do not exist for many species and populations.
• Stable isotope analysis — Indicates geographic origin of specimens and timber against declared harvest location. Limitation: probabilistic, needs baseline mapping, and results must be presented with uncertainty.
• SMART patrol monitoring — Records ranger patrol effort and encounters to measure poaching pressure and deployment effectiveness. Limitation: encounter data reflects patrol coverage as much as poaching activity.
• Satellite vessel monitoring and AIS analysis — Detects fishing effort, transhipment and dark vessel activity at sea. Limitation: transponders can be disabled, so absence of data is often the finding.
• Trade data reconciliation — Compares convention permit records against customs declarations to find mismatches. Limitation: reporting lags and coding inconsistencies generate many spurious discrepancies.
• Marketplace monitoring and preservation tooling — Captures listings with timestamps and hashes before removal. Limitation: much trade has moved to closed messaging groups that no monitoring reaches.
• Remote sensing for habitat and logging change — Detects deforestation, encroachment and illegal logging from satellite imagery. Limitation: cloud cover, resolution and revisit rates limit detection of small scale activity.
• Container and consignment risk targeting — Prioritises inspection using routing, declaration and trader risk indicators. Limitation: low base rates mean most alerts are false positives and inspection capacity is scarce.

AI skills and automation in detail

These are deterministic jobs with defined inputs and outputs, not open-ended prompting. Each is idempotent and cursor-based: interrupt one and it resumes where it stopped rather than duplicating work or losing progress.

• Threat Hunt — Runs saved hypotheses against the corpus and surfaces what matches, with the query preserved as a versioned artifact.
• Correlate Infrastructure — Builds the cross-entity link graph: shared hosting, reused certificates, overlapping registrants, repeated selectors.
• Run Alert Rules — Evaluates saved rules against new data so a first sighting raises a notification rather than waiting for review.
• Summarise (Copilot) — Produces a narrative summary beside the underlying records. It explains; it never creates indicators or assigns attribution.
• Generate Report — Assembles a sourced product from the current case or query, with provenance attached to each element.

A note on the boundary: the only skill that involves a language model is Summarise (Copilot), and it writes prose about records that already exist. Nothing else on this list involves generation of any kind. No indicator, relationship or attribution in the platform originates from a model. See the full skill list.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

• Trade is laundered through paperwork, not concealment. Fraudulent claims of captive breeding, recycled permits and species misdeclaration move more volume than any smuggling technique, which is why documents are the primary target of analysis.
• Species identification determines everything downstream. A confident identification of a worked or processed product without laboratory support is the single most common reason these prosecutions fail.
• Charge the money as well as the wildlife. Fraud, tax and laundering offences carry higher penalties, rest on documentary evidence and reach the organisers rather than the courier caught at the airport.
• Never publish precise locations of threatened species. Coverage of individual animals and nesting sites has directly enabled poaching, and this norm applies to research outputs and enforcement products as well as journalism.
• Distinguish subsistence and coerced participation from organised commercial poaching. Conflating them produces both injustice toward communities and an analytical picture that misses the organisers entirely.
• Enforcement led conservation has a documented abuse problem. Any assessment that recommends increased ranger operations without addressing accountability is incomplete and will eventually damage the objective it serves.
• Plan the disposal before the seizure. Perishable product, live animals and containers of timber routinely destroy cases because nobody arranged storage, welfare or custody in advance.

Measuring whether it is working

Capability claims should be falsifiable. These are the measures that show whether work on Wildlife Trafficking is producing anything, and they are worth baselining before you change process or tooling.

• Poaching pressure measured through population monitoring and carcass or encounter rates against a pre-intervention baseline.
• Proportion of prosecutions that include financial or documentary offences alongside wildlife charges, and their comparative sentencing outcomes.
• Rate of species identification supported by accredited laboratory analysis in contested cases. Unsupported identifications of processed products are the main cause of case failure.
• Time from seizure to secure custody arrangements for perishable, live or bulk specimens. Delays here routinely break continuity and lose the exhibit.
• Number of permit fraud patterns identified and corrected through engagement with issuing authorities. Corrections at the issuing authority prevent far more trade than individual seizures.
• Persistence of vendors on monitored marketplaces after enforcement or platform action, measuring displacement rather than removal.
• Documented community consent and accountability measures in place for protected area operations supported by the programme.

Beware of measuring volume alone. Indicator counts and report counts rise easily and say little; time-to-attribution, proportion of findings that survive review, and how often a product changed a decision say a great deal.

Common pitfalls

• Legal look-alikes: captive-bred, pre-convention and non-listed subspecies claims that require expert verification rather than assumption
• Species misidentification from photographs, where closely related listed and unlisted taxa are visually near-identical
• Treating convention trade data as actual trade, when it records permits issued rather than shipments completed
• Using seizure counts as a prevalence measure, when they track inspection capacity and intelligence-led targeting
• Ignoring that domestic trade legality differs sharply between range and consumer states for the same commodity
• Overlooking the labour dimension of illegal fishing, where crew are frequently victims rather than participants

Legal and ethical considerations

Convention obligations are implemented through national law that varies considerably, so an assessment must state which jurisdiction's rules it applies. Specimens require permits for handling, biosecurity controls and documented continuity of evidence. Wildlife offences are not a predicate offence for money laundering everywhere, which limits financial investigation in some jurisdictions and should be checked before proposing that route. Community, indigenous and subsistence use rights must be respected and distinguished from commercial trafficking, and field investigator and informant safety in range states requires specific risk assessment.

Data integrity: no fabrication, no drift, no hallucination

Intelligence that cannot be traced back to a source is not intelligence, it is assertion. Everything in this entry — and everything in the platform behind it — is built on a small number of non-negotiable rules.

Provenance on every record

Every indicator carries the source that supplied it, a first-seen and last-seen timestamp, and a sighting count. Where several feeds report the same artifact, each contribution is recorded separately rather than collapsed, so you can see whether a finding rests on one source or twelve. Source attribution travels with the data into every export, so a recipient can audit a claim without asking you for the working.

Nothing is invented to fill a gap

If the platform has no data for Wildlife Trafficking, it says so. Empty is displayed as empty — never padded with plausible-looking placeholder values, sample records or illustrative examples that a reader might mistake for observations. A dashboard with no rows is a true statement about collection coverage, and it is treated as a gap to close, not a blemish to hide.

Scoring is deterministic and reproducible

Threat scores, reputation grades and risk tiers are computed from stated inputs with fixed weights, not estimated. The same inputs always produce the same output, and the formula is visible rather than a black box. Aggregates are cached with an explicit time-to-live so a figure on screen is never silently stale — and when a heavy query exceeds its time budget the platform serves the last known-good value and labels it, rather than inventing a fresh number or hanging.

Where AI is used, and where it is not

Language models summarise and explain. They do not create indicators, assign attribution or manufacture relationships. No IP address, wallet, hash or identity in the platform originates from a model — every one is ingested from a named feed, resolved from a reference dataset, or entered by an analyst with a source recorded. Copilot output is presented as narrative alongside the underlying records, never in place of them, so a reader can always check the summary against the evidence.

Guarding against drift

Enrichment is additive and timestamped rather than overwriting. Reference data — sanctions lists, allocations, taxonomies — is re-synchronised from the authority on a schedule instead of being edited in place, so local copies cannot quietly diverge from the source of truth. Attribution is recorded with a confidence level and the reporting it rests on, and inferred relationships are labelled as inferred. When a source retracts or corrects, the correction propagates rather than leaving a stale assertion behind.

What this means for you

You can put a finding from this platform in front of a regulator, a court, a board or a partner agency and show where each element came from. That is the standard the tooling is built to — because in this work, being confidently wrong is more damaging than being usefully uncertain.

By the numbers

The taxonomy this entry belongs to is not a marketing list — it is the actual structure of the platform: 52 mission domains, 52 intelligence disciplines and 65 data points, each with a live dashboard behind it. Supporting that: 18 indicator types, 14 playbooks, 16 AI skills, 18 export formats and a 30-step automated pipeline.

This particular entry connects directly to 6 intelligence disciplines, 7 data points, 5 closely related entries — every one of them a tag you can follow, and a dashboard you can open.

Questions analysts actually ask

Why is permit fraud more important than smuggling?

Because volume moves through legal channels with false paperwork rather than through concealment. The recurring methods are declaring wild caught specimens as captive bred, recycling permits across multiple shipments, misdeclaring species to a non listed relative, and obtaining genuine permits through corrupt issuance. These are documentary offences, which means the evidence is retrievable and the case does not depend on catching anyone in the act. It also means the intervention point is the issuing authority and the importing regulator, which is where analysis should be directed.

How reliable is CITES trade data for measuring the market?

It is the best available record of reported legal trade and says little directly about illegal trade. Reporting lags by a year or more, is incomplete for some parties, and records permits issued rather than shipments completed. Its analytical value is comparative: discrepancies between exporter and importer reports, quantities exceeding quotas, and flows inconsistent with known populations are all informative anomalies. Combine it with seizure data, market surveys and customs records, and always state which indicator supports which conclusion rather than presenting a single series as market size.

What does forensic origin analysis actually establish?

A probability that a specimen came from a particular population or region, based on comparison with reference material. Genetic assignment can be strong where reference collections are dense and weak where they are sparse; isotope analysis indicates environmental signatures rather than a specific location. Neither produces a certainty and both must be reported with their statistical strength and the reference collection used. Their most powerful use is contradiction: showing that a shipment declared as harvested in one country carries the signature of a population elsewhere, which converts a documentary claim into a provable falsehood.

Should organisations monitor online marketplaces themselves?

Monitoring within platform terms and the law is legitimate and valuable, but never purchase specimens to test a seller, which can constitute an offence and funds the trade. Preserve listings with timestamps and hashes before they are removed, since deletion is fast. Work with platform trust and safety teams, which can act far more quickly than enforcement, and with coalitions established for this purpose. Refer criminal matters to the national authority rather than contacting sellers. Recognise that much trade has moved into closed messaging groups that open monitoring will not reach.

How should analysis handle the human rights problems in enforcement led conservation?

Directly and in the same product. Documented abuses by ranger forces against indigenous and local communities are a factual matter that affects both ethics and effectiveness, since communities that experience enforcement as violence stop providing the information that makes protection work. Assessments recommending expanded enforcement should address accountability mechanisms, grievance procedures, community consent and benefit sharing as part of the recommendation rather than as a separate governance annexe that nobody reads.

What makes wildlife prosecutions fail most often?

Three recurring failures: species identification that cannot be sustained under challenge, particularly for processed products; broken continuity of exhibits because nobody planned storage for perishable, live or bulk seizures; and charging only wildlife offences, which carry low penalties in many jurisdictions and produce sentences that do not deter. The corrective in each case is preparation before the seizure: arrange expert identification and laboratory capacity, agree custody and disposal with the competent authority, and build the financial and documentary offences in parallel from the outset.

Standards, frameworks and further reading

Work that references a recognised framework is easier to defend, easier to hand over, and easier for a partner to consume:

• Convention on International Trade in Endangered Species of Wild Fauna and Flora, governing permits, listings and legal international trade.
• UN Convention against Transnational Organized Crime, providing cooperation mechanisms where trafficking is organised.
• EU Timber Regulation and successor deforestation regulation, imposing due diligence duties on importers.
• FAO Port State Measures Agreement, aimed at preventing illegally caught fish entering markets through port controls.
• IUCN Red List assessment methodology, the standard for conservation status used in sentencing and prioritisation.
• ICCWC Wildlife and Forest Crime Analytic Toolkit, the international framework for assessing national enforcement capacity.
• ISO/IEC 17025 accreditation for laboratories performing wildlife forensic identification.
• Society for Wildlife Forensic Science standards and validation guidelines for forensic species identification methods.

References

Primary sources and authoritative references for this entry. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

1. CITES Trade Database — CITES Secretariat and UNEP-WCMC. Reported international trade in convention listed species.
2. World Wildlife Crime Report — UN Office on Drugs and Crime. Global assessment of wildlife trafficking flows and responses.
3. Wildlife trade research and portal — TRAFFIC. Trade dynamics analysis and compiled seizure data.
4. IUCN Red List of Threatened Species — International Union for Conservation of Nature. Authoritative conservation status assessments.
5. Investigations into illegal timber and wildlife trade — Environmental Investigation Agency. Documentary investigations of trafficking networks and methods.
6. Global Fishing Watch platform — Global Fishing Watch. Open vessel activity data for monitoring fishing and transhipment.
7. Environmental security programme — INTERPOL. International coordination on wildlife and forestry crime.
8. Case files on trafficking networks — Wildlife Justice Commission. Investigative case documentation handed to national authorities.

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this entry: cross-checks permits, shipment routings and marketplace listings against convention trade data and forensic origin evidence. Explore the platform, or browse the rest of the library by following any tag above.