Who is it for?
Built for border security, law enforcement, and OSINT analysts tracking human smuggling networks. Most useful for anyone who needs to read coded social media activity as an early warning signal, not after the fact.
REQUEST YOUR COPY OF THE FLASH BRIEFING OR EMAIL US AT INFO@FIVECAST.COM:
The Emoji Code Advertising Border Crossings
Inside the emoji code smuggling networks use to advertise border crossings without saying a word.
Human smugglers, known as polleros or coyotes, move migrants across the United States and Mexico border through clandestine trail networks spanning six Mexican states. Some operate under drug trafficking organizations, but most run independently, paying periodic protection fees to cartels to secure their routes. Each migrant pays upwards of $6,000 upfront, with thousands more for onward transport and forged documents.
Almost none of this is stated plainly online. Fivecast LUNEX Tradecraft advisors examined how these networks advertise without naming the crime, and how open-source intelligence (OSINT) recovers the meaning behind the code.
How do smuggling networks advertise without naming the crime?
The networks have built an entire vocabulary of coded Spanish-language terms and symbols that let them promote crossings and driver services in plain sight, without triggering platform moderation. Fivecast ONYX Spanish-language discovery surfaced this vocabulary and the accounts built around it, anchoring collection to entities rather than keywords.
Why doesn’t keyword search catch this activity?
The public listing is only the entry point. Accounts invite a direct message, then move the conversation to an encrypted app where prices and pickup locations are negotiated, leaving almost nothing for a keyword search to find.
What should border security and law enforcement teams take from this?
Coded advertising is an early indicator for border security teams, surfacing active corridors, current pricing, and the division of labor between guides and drivers before anyone reaches the border. Migration is projected to decrease over the short to medium term under intensified enforcement, and smuggling groups will keep adapting to platform crackdowns, intensifying the cat-and-mouse dynamic. Download the Flash Briefing below for the full breakdown of the corridors, terminology, and tradecraft behind this activity.
What you’ll learn
- Why smuggling networks avoid the word “smuggling” entirely, and what they say instead
- Which emojis and symbols signal a border crossing or driver service
- Why public platforms function as the shopfront while encrypted apps handle the transaction
- How entity-based OSINT surfaces this activity when keyword search returns nothing
- What the coded advertising reveals about active corridors, pricing, and the division of labor between guides and drivers
