Home • Dismantling OCGs in Merseyside: The Revolutionary Role of the Chorus Intelligence Suite

Merseyside Police Tackles Organised Crime with the Chorus Intelligence Suite (CIS)

Merseyside Police

An Introduction

Since 2022, Merseyside Police has been leveraging the Chorus Intelligence Suite (CIS) to support Operation Toxic, a major initiative aimed at combating County Lines drug operations. This initiative is part of Operation Medusa, the national effort to dismantle County Lines networks across the UK.

With the support of the CIS, the operation has successfully disrupted drug supply networks, safeguarded vulnerable individuals, and secured convictions against key offenders. The CIS has become a vital tool for the force, seamlessly integrated into their daily operations, and has greatly improved working practices and ability to combat serious and organised crime.

The Challenge

Merseyside, particularly Liverpool, is a central hub for drug distribution in the UK. Its strategic location, with easy access to motorways and ports, makes it an ideal base for Organised Crime Groups (OCGs) trafficking drugs across the country. Known as ‘County Lines’, these operations are complex, spanning multiple counties, and often require collaboration between different departments and police forces.

These operations have become increasingly difficult to investigate due to the cross-border nature of the networks and their reliance on encrypted communications, burner phones, and the exploitation of children and vulnerable adults. These factors significantly complicate evidence collection and hinder the investigation process.

The Solution

Streamlined research and entity attribution

The CIS is equipped with a federated search and entity enrichment engine, allowing users to conduct comprehensive research across a wide array of subject types—such as individuals, phone numbers, social media accounts, businesses, organisations, bank accounts, and more— all through a single query within one unified platform.

This ability to bulk search hundreds of social media networks, consented databases (e.g., Companies House), third-party systems, and internal datasets at once has been a game changer for the force. The team has not only uncovered critical connections and actionable intelligence much faster but also saved valuable time by eliminating the need to access multiple systems manually.

In addition, searches can be executed anonymously using IP-obfuscation, ensuring users maintain operational security while gathering intelligence.

Advanced network analysis progresses investigations

The CIS features an advanced workspace and dashboard where users can pull in data uploaded to or sourced via the CIS, to be overlaid, visualised and analysed in multiple ways.

Prior to having this capability, Merseyside Police would have to gather information from various systems and manually consolidate it into a network analysis tool, a time-consuming and fragmented process.

For Operation Toxic, this capability has been invaluable for investigating OCG networks as it supports the development of inferences and uncovering critical connections. For example, when analysing social media accounts, users can easily identify previously unknown associates and familial ties from the research results, immediately improving their understanding of the criminal network. They can then do further work to identify connections between entities and build dynamic network charts to visualise these. These charts are then continuously updated and refined as new information comes to light, ensuring that investigations evolve in real time.

Network analysis has also proven invaluable in strategic efforts to identify trends and hotspots for County Lines activity across Merseyside. The ability to apply hotspot filters directly to the map provides a clearer visual representation of high-risk areas, enabling more targeted and effective responses.

With the CIS, we’ve been able to link complex data sets, uncover hidden connections, and make real-time decisions that have directly led to arrests and safeguarding vulnerable individuals. It has become the backbone of Operation Toxic.

Georgia Tyrer, Intelligence Analyst, Merseyside Police

The Solution

Detecting connections, in Collections

The CIS houses an intuitive data ‘Collections’ tool, developed in partnership with Merseyside Police, which enables the secure upload of both structured and unstructured data stored in internal databases and files. Depending on the category, they can create data lakes for this data, which are then indexed and made searchable.

By centralising this data, it ensures all team members have access to consistent, up-to-date information, significantly improving collaboration and information sharing.

This is something the force had previously struggled with. Investigators often carried out their own telecoms analysis, which, while promoting autonomy, led to challenges in compiling strategic assessments and reports. The lack of centralised data made it difficult to accurately assess Threat, Harm, and Risk, or fully understand the impact of County Lines on the Force Control Strategy.

Using the CIS, investigators now create dedicated cases for each line, uploading relevant data and Chorus sessions directly into the system. As part of a shared user group, team members can access these cases and use the dashboard to perform analysis, seamlessly contributing to broader strategic efforts.

A deep dive into Collections

Merseyside Police successfully piloted the Collections tool and has since created comprehensive data collections for:

Investigation trackers –This allows the team to search an entity eg: person or phone number to see if it/they have previously been investigated, linked to or arrested in relation to a line. This has helped with inference development around OCG’s and establishing links between a nominal and a location.
Investigation Logs – Officers in Charge manage these logs through a remote system rather than relying on niche occurrences, meaning they include historical investigation logs. The advantage of storing this data in a collection is the added context and “free text” details, which provide insights that are often absent in structured datasets like spreadsheets.
Research Spreadsheets – These contain the master attribution for County Lines and Major Crime Unit investigations. The force often cross-references numbers with the attribution sheet, using a VLOOKUP between the master list and call data to avoid duplication. However, this format doesn’t provide context, such as how many grafts a number has appeared in, when contact occurred, or how often. To address this, they created a collection for Chorus Analyse Sessions.
Phone Downloads – A challenge the force encountered prior to the Collections feature being added was that many devices were only briefly being reviewed to assist with charging decisions. However, the force soon realised that these devices contained valuable intelligence that could aid in attribution, intelligence development, and network analysis. With an integrated Review and Delete (RRD) function in CIS, the force was able to upload these downloads directly into the system, ensuring thorough analysis while maintaining compliance with MOPI regulations.

The ability to upload such a vast amount of data into the Collections portal has fundamentally transformed our investigative approach. To put it into perspective, we’ve successfully imported over 3 million rows of call data, more than 300,000 rows from master research and attribution, 600 investigation logs and trackers from the past five years of Operation Toxic. And this is just from our team—imagine the impact as more teams across the force begin utilising the CIS. The potential for further improvements in efficiency and insight is immense.

Georgia Tyrer, Intelligence Analyst, Merseyside Police

Looking Ahead

The integration of the CIS into Operation Toxic has truly revolutionised Merseyside Police’s approach to tackling County Lines and organised crime. By centralising intelligence, enhancing collaboration and expanding the capabilities for research and network analysis profoundly, the CIS has been pivotal in disrupting criminal networks and safeguarding vulnerable individuals. The force continues to explore the potential of the CIS to streamline operations and uncover even deeper insights, with the ongoing impact expected to be profound.

More case studies

View All Case Studies

North Wales Police: A pioneering journey to the CIS: North Wales Police: A pioneering jounrey to the Chorus Intelligence Suite (CIS)

UN Climate Change Conference – COP26: Proactive radio frequency survey to capture the digital footprint of key locations around COP26, the 2021 UN Climate Change Conference.

Operation Faculty: TVP investigation into an attempted murder in Reading, Berkshire. Chorus was used to overlay call data and vehicle telematics to secure convictions.

Operation Monza: Operation Monza. How BTP used Chorus to investigate an organised crime county line gang using children to traffic drugs on the rail network.

Operation Blue Fulgent: A crossbow shooting in North Wales. Analysts used Chorus to interpret masses of call and telematics data to identify the offender and secure a conviciton.

Operation Gallant: An investigation into an organised crime gang suspected of drug dealing, abuse of vulnerable people and money laundering.

Operation Saracen: An investigation into an organised crime gang suspected of conspiring to supply class A drugs from the West Midlands to Lincolnshire.

Operation Fort: The largest modern slavery investigation ever conducted in the UK. West Midlands Police and Chorus Intelligence brought down 13 offenders

Operation Coast: An investigation into one of the largest drug cases in the East Midlands.

Operation Simius: A case involving the armed robbery of multiple betting shops across London. Analysts used Chorus to link together 21 different offences.

View All Case Studies