The report prepared by the National Center for Immigration and Borders (CENIF) of the National Police and sent to the National Court records a "sudden increase" in messages encouraging entry into Ceuta on July 28, "the day before the first alert issued by the CENIF" and the massive arrival of 72,000 people to the autonomous city starting July 30.
The document from the intelligence unit, which Europa Press has accessed, mentions the existence of "message dynamizers," that is, "profiles and phone numbers that play a decisive role in the mass dissemination of key messages," with 90% of lines having a Moroccan prefix and the rest coming from Algeria, Tunisia, or Libya, as well as countries like Spain, France, or Germany.
"These phones serve as a loudspeaker for the transmission of messages in different groups and enhance the dynamization of digital conversation," emphasizes the report, which rules out that criminal organizations or mafias based in the area are behind the mobilization.
The CENIF explains that it was already monitoring various forums and Facebook groups that promoted this action prior to July 30, activated on July 24 and 28, and that it detected "a first sudden increase in messages on July 28 --the day before the first alert issued by the CENIF--" with a peak on July 30, when 1,574 messages were recorded.
Foreign analysts refer to the methodology called "spread method," "a model for designing the viralization of messages on social networks that limits dependence on chance."
Political Influence from Morocco
Under the heading "exercise of influence," the CENIF report also mentions the role played by Moroccan political leaders. "The statements from various political leaders of the Alaouite kingdom, the international reactions, and the establishment of reinforced police devices after the achievement of the different attempts once again highlight the capacity for influence and the management of a narrative of coordinated institutional dissemination by those responsible for planning the process," the text states.
The specialized agents describe the different waves of migrants —relying on graphic material included in the report— that accessed Ceuta within a "staggered and graduated process," with two main purposes: on one hand, to achieve a "maximum impact on border management until its collapse" and, on the other, "to eliminate Spain's response capacity."
In this context, the "notable" presence of families, women, and young minors is emphasized, as it "deactivates the possibility of using coercive means or employing reactive force to restore control and operability of the border."
The report raises the estimate of how many migrants remained in Ceuta by not opting for voluntary return. "The volume of immigrants remaining in Ceuta from August 1 is estimated to be between 5,000 and 10,000 people," it states, specifying that this is a "profile compatible with irregular immigration" as they are mostly young people of Moroccan and sub-Saharan origin.
No trace of mafias in the mass entry
The CENIF rules out in its analysis that criminal networks dedicated to the combined trafficking of drugs and people participated in the events of July 30, stating that "there is not a single reference" to such groups in the autonomous city, unlike what is observed in Melilla or Almería.
The document does acknowledge the existence of a structure that operates in Ceuta and its surroundings, but "organizing swimming passes from Castillejos." "The exact number of group members is unknown, estimated to have the capacity to bring between three and five immigrants daily to the Autonomous City," it details.
The intelligence unit recalls that since January 1, 2024, 2,983 police operations and investigations have been carried out with the intervention of the General Commissariat of Foreigners and Borders linked to these networks, with a balance of 1,822 arrests for facilitating irregular immigration.
"With this level of knowledge and monitoring of the groups, profiles, and most common phones, there is not a single reference from these organizations encouraging mobilization or referring to the mass entry," concludes the report.
In the same line, the CENIF maintains that "nothing points" to the fact that after the "illegal and simultaneous entry of more than 70,000 people there is an attempt by criminal networks to profit, although it does recognize specific and "opportunistic" transfers of "at least ten boats" from the Ceuta Marina to the Peninsula, with profits of between 3,000 and 7,000 euros per person.
Specifically, the document estimates that 150 migrants would have reached the Peninsula from Ceuta until August 24, "who have paid an average price of 5,000 euros for the trip (the average rates for irregular maritime immigration from Morocco to the Peninsula were, until the massive entry, in a range between 12,000 and 20,000 euros)".
Access routes to Ceuta and profiles of the waves
The investigators point out that two alternative entry routes to Ceuta were used, both from the Playa de Castillejos, in Moroccan territory, parallel to the established Border Post, since "from that beach access is gained to the border fence that separates the territory of both countries, continued by a fenced breakwater that extends about 60 meters into the water".
According to the police account, the migrants accessed "either by swimming around the breakwater, or by walking on the narrow space existing on the breakwater, between the central fence that runs along the breakwater and the water".
After overcoming the breakwater, they arrived "at a restricted area of Playa de El Tarajal, already in Spanish territory, from where they were taken to a 'courtyard' delimited by a small wall where they remain under the custody of Guardia Civil agents," it is described in the report.
The Police clarifies that this 'courtyard' functions as an intermediate area between the restricted area of the beach and the free circulation zone, and that the exit was "opened due to the accumulation of a large mass of people," at which moment "the entry becomes more accessible and the message spreads that the border has been opened".
The document divides the massive entry into three differentiated waves. The first, until 11:00 hours on July 30, corresponds to Moroccan males between 15 and 25 years old, mostly minors, who were wearing wetsuits, fins, and other flotation elements.
In the second wave, between 11:00 and 22:00 hours on July 30, "the profile changes and begins to include" people up to 40 years old, "complete family groups and young children, mostly dressed in sportswear and flip-flops, without specific equipment." Although the predominant nationality remains Moroccan, the agents point out that "a gradual incorporation of people of sub-Saharan origin is observed."
The third and final wave occurs during the night of July 30 and July 31, in which the profile resembles that of the first phase again, according to the report.