By While the fentanyl epidemic in the United States has garnered global headlines, a quieter, yet concerning development is unfolding across the Atlantic. Europe has largely remained outside the spotlight when it comes to the illicit trade in synthetic opioids—but that may be changing.
In our latest investigation, we take a closer look at an underground Telegram group based in Poland that appears to be part of this emerging market.
Poland has become a major hub for the production of synthetic cathinones in Europe, particularly substances such as 4-MMC (mephedrone), 4-CMC (clephedrone), 3-CMC (clophedrone), and Alpha-PVP. In recent years, Polish authorities have dismantled a growing number of clandestine laboratories—23 sites in 2022 alone, accounting for nearly 80% of such facilities discovered across the EU.
Using advanced threat intelligence platform StealthMole, we uncovered a Telegram group operating under the name Kocie Królestwo (Cat Kingdom). This group, identified by the Telegram ID -1001859435281, openly facilitates the sale of a broad range of illicit substances. Among the drugs advertised are cannabis, cocaine, fentanyl, mephedrone, tramadol, Xanax, and other prescription drugs sold without authorization.
Kocie Królestwo was created in July 2024 and had reached 392 members by 7th May 2025.
Thanks to the StealthMole platform, which captures timestamped screenshots of Telegram groups and channels, we’re able to establish a historical chain of evidence. This includes identifiable user profiles, messages, and shared media—critical for investigations.
Through StealthMole’s analysis, we identified 1,506 messages within this group that mention “fentanyl”.
Below are screenshots from StealthMole confirming the group’s identification and displaying its profile details.
The leading members identified during the investigation on 7th May 2025 are listed below:
- Grubу Maciеk (t.me/GrubyMacieq; ID: 7179245522; Polish)
- Rzеkоmo Kot (t.me/rzekomo_kot; ID: 6041572151)
- LALKА (t.me/LALKA03; ID: 1903154123)
- KRÓL PIGUŁA Ⓛ (t.me/Dripppp1; ID: 5229243295; Polish)
- 🔸️S Е V Е N В V L G A R I🔸️ (t.me/Houseofbalmain; ID: 7749644471)
- Fast Shore (t.me/fastshop24h; ID: 8045235713)
- ✔️ ⚡️💎💣𝙎𝙕𝙔𝘽𝙆𝙄 𝑨𝑩.. (t.me/Szybkiabdulwwa; ID: 8177009589)
Additionally, using the StealthMole platform, we can map each of the above users based on their group and channel memberships to uncover other groups where potential sellers may be active.
One identified fentanyl vendor is أبو أسامة عبدالقادر (Abu Osama Abdel Qader; ID: 1091616341), who advertises products from Dijon Pharmacy, which appears to operate out of Germany and offers international shipping. A supporting screenshot from the StealthMole platform is included below.
Since 1st January 2025, the majority of fentanyl-related listings have been posted by users such as @BlockchainHero13240 and @BlockchainNomad45188, both of whom promote products from Dijon Pharmacy. Additional Polish-based fentanyl sellers were also identified.
Dijon Pharmacy is linked to the Telegram group t.me/+MD0ed-eNxu9lNDU1 (created in November 2020; 695 subscribers), which is administered by @dr_Dijon (ID: 7011754306; account registered in February 2024). The pharmacy currently shares a SimpleX Chat link, a suspended Telegram feedback channel (removed for violating Telegram’s Terms of Service), and provides pricing through Telegraph. Shipment records indicate deliveries to Iceland, the Czech Republic, Sweden, and Poland. The entity, Dijon Pharmacy was also previously mentioned in an investigation by Resecurity.
Dijon Pharmacy is also referenced in several other Telegram groups, including Tchat public 1 (bonaff9510; 272 members; targeting French-speaking users) and ♦️ RED STREET SHOP ♦️ (t.me/joinchat/424eId-sQktjNjE1).
An earlier, now-suspended Telegram username, @drDijon, was also linked to the Dijon Pharmacy group (t.me/+MD0ed-eNxu9lNDU1).
Our vHUMINT investigations into Dijon Pharmacy have identified its primary cryptocurrency wallet, which has been tagged by AMLBot. Legitimate organizations and law enforcement agencies may request further details from AMLBot regarding the wallet’s activity.
Conclusion – Poland’s Role in Europe’s Fentanyl Pipeline and the Investigative Utility of StealthMole
Our investigation reveals that Poland is increasingly emerging as a critical node in the illicit synthetic drug trade within Europe, with growing evidence of its involvement in fentanyl distribution. While traditionally known for the production of synthetic cathinones like 4-MMC and Alpha-PVP, Poland now appears to be part of a broader trafficking infrastructure that includes high-potency opioids.
A key example is the Telegram group “Kocie Królestwo” (Cat Kingdom), which actively facilitates the sale of fentanyl and other controlled substances. Leveraging StealthMole‘s advanced threat intelligence capabilities, we were able to identify and track the group’s activity in near-real time. This included:
- Verifying group identity and growth, including timestamps and user metadata.
- Analyzing over 1,500 fentanyl-related messages.
- Mapping top members and tracing their connections to other Telegram groups.
- Uncovering links to Dijon Pharmacy, a major distributor promoting international shipments from Germany to countries including Iceland, Sweden, and the Czech Republic.
The use of StealthMole‘s monitoring and capture tools—including historical message logging, group/channel linkage analysis, and direct user tracking—has proven critical for building actionable intelligence on emerging underground groups. This technology enables investigators to document activity over time, monitor shifts in seller behavior, and flag high-risk distribution nodes.
In light of these findings, it is evident that Europe, and Poland in particular, is becoming a growing front in the global fentanyl crisis. Continued collaboration between law enforcement, intelligence analysts, and OSINT platforms like StealthMole will be instrumental in disrupting these transnational supply chains and countering the digital infrastructure that enables them.
