Tag: shell companies

  • The Panama Papers: What Mossack Fonseca Built and What the Leak Revealed

    In early 2015, an anonymous source contacted the Süddeutsche Zeitung, a German newspaper, with a question: “Interested in data?” What followed was the largest leak of confidential documents in history — 11.5 million files, 2.6 terabytes of data, spanning nearly 40 years of records from a Panamanian law firm called Mossack Fonseca. The firm had created more than 214,000 offshore shell companies for clients in over 200 countries and territories. The documents — emails, financial spreadsheets, passports, corporate records — revealed the secret owners of bank accounts and companies across 21 offshore jurisdictions, from the British Virgin Islands to Nevada. The International Consortium of Investigative Journalists coordinated 370 reporters from 76 countries to analyze the files over the course of a year before publishing on April 3, 2016. The resulting investigation identified 12 current and former heads of state, 128 politicians and public officials, and an ecosystem of drug traffickers, arms dealers, tax evaders, sanctions violators, and financial fraudsters — all served by a single law firm operating out of Panama City with offices in more than 35 countries. Two journalists who investigated the Panama Papers — Daphne Caruana Galizia in Malta and Ján Kuciak in Slovakia — were subsequently murdered.

    The firm

    Mossack Fonseca was founded in 1977 by Jürgen Mossack, a German-born lawyer whose father had served in the Waffen-SS before emigrating to Panama, and Ramón Fonseca, a Panamanian novelist and politician who would later serve as an adviser to Panama’s president. The firm grew into one of the world’s largest creators of shell companies — corporate structures designed to separate the legal ownership of assets from their beneficial owners, allowing individuals to hold bank accounts, real estate, yachts, art collections, and entire business operations without their names appearing on any public record.

    The business model was straightforward. Mossack Fonseca rarely dealt with the individuals who ultimately benefited from its services. It worked through intermediaries — banks, law firms, and accounting firms — who hired Mossack Fonseca to set up shell companies for their wealthy clients. The intermediary structure provided two layers of deniability: the client’s name was hidden behind the shell company, and Mossack Fonseca could claim it didn’t know who the client was because it only dealt with the intermediary. Hundreds of banks and their subsidiaries registered nearly 15,600 shell companies through the firm. The leaked records show that Mossack Fonseca worked with global institutions including HSBC, UBS, and Credit Suisse.

    Fonseca’s public defense of the firm was that it was like a car factory — responsible for building the car, not for what the driver does with it. The leaked files told a different story. The firm regularly offered to backdate documents to give clients financial advantages. Internal emails from 2007 show employees discussing a price structure for backdating — $8.75 per month of falsified dating. In Nevada, when the firm faced a U.S. legal action, employees removed paper records from the Las Vegas branch and wiped electronic records from phones and computers. The firm’s client roster, as documented in the leaked files, included suspected financiers of terrorism, nuclear weapons proliferators, and gunrunners. The car factory knew what the cars were being used for.

    What the leak revealed

    The Panama Papers documented what the Shadowcraft course teaches as a structural principle: the offshore financial system is not a collection of isolated tax havens. It is an integrated global infrastructure — staffed by lawyers, bankers, and accountants at reputable institutions — that exists to separate wealth from accountability. The specific revelations included:

    Associates of Russian President Vladimir Putin had shuffled as much as $2 billion through banks and shadow companies connected to Mossack Fonseca entities. The money moved through a network of offshore structures whose beneficial ownership traced back to individuals in Putin’s inner circle, including a cellist who was one of Putin’s closest friends.

    Iceland’s Prime Minister Sigmundur Davíð Gunnlaugsson resigned after the investigation revealed he and his wife had secretly held nearly $4 million in bonds in Icelandic banks through an offshore company — even as his government was negotiating with those banks’ creditors after the 2008 financial crisis. He had a direct financial interest in the outcome of negotiations he was conducting on behalf of the public.

    Pakistan’s Prime Minister Nawaz Sharif resigned in 2017 after Pakistan’s Supreme Court disqualified him from office following revelations that his children had used shell companies to hold multi-million-dollar London real estate.

    In Malta, the Panama Papers revealed that the Minister for Energy and the Prime Minister’s Chief of Staff held secret companies in Panama and trusts in New Zealand — structures designed to conceal assets. The journalist who exposed this, Daphne Caruana Galizia, was killed by a car bomb on October 16, 2017. Malta’s Prime Minister had defended the officials she was investigating and kept them in government even after the Panama Papers confirmed the existence of their offshore structures. Separately, Slovak investigative journalist Ján Kuciak, who was also investigating connections revealed in the Panama Papers, was murdered along with his fiancée in February 2018.

    What didn’t change

    The Panama Papers generated massive media coverage, forced the resignation of multiple heads of state, triggered criminal investigations across dozens of countries, and led to Mossack Fonseca’s closure in 2018. But the infrastructure the firm serviced — the network of offshore jurisdictions, intermediary banks, law firms, and accounting practices that create and maintain shell companies — survived the leak entirely intact. Mossack Fonseca was the fourth-largest provider of offshore services in the world. The top three continued operating. The British Virgin Islands, where Mossack Fonseca couldn’t identify the owners of more than 70 percent of its 28,500 active companies at the time of the leak, remains one of the world’s busiest offshore incorporation jurisdictions. Panama, where the firm couldn’t identify owners of 75 percent of 10,500 active shell companies, remains a global hub for corporate secrecy.

    The Panama Papers revealed the plumbing. They didn’t turn off the water. The anonymous source — the whistleblower whose identity remains unknown — stated publicly that the murders of Caruana Galizia and Kuciak had deeply affected them and called on the European Union to deliver justice. As of 2026, criminal proceedings related to the Malta revelations are still ongoing.

    Why it’s in Shadowcraft

    Every other Shadowcraft case study involves a single institution — a bank, a front company, a chartered corporation, a secret lodge, an intelligence alliance. Mossack Fonseca is the case study that shows the system those institutions operate within. The shell companies that Marc Rich used to trade with sanctioned regimes, the offshore entities that Banco Ambrosiano used to channel $1.3 billion through the Vatican Bank, the front companies that KoKo registered across the West, the sanctions evasion architectures that Russia’s shadow fleet uses today — all of them require the same underlying infrastructure: a jurisdiction that allows anonymous incorporation, a law firm that creates the entities, a bank that opens the accounts, and an intermediary structure that ensures no single participant has to acknowledge what the system is being used for.

    Mossack Fonseca created 214,000 shell companies. Two journalists were killed for investigating what those companies concealed. The firm closed. The system that made it possible didn’t.

    We cover Mossack Fonseca alongside Wagner Group, Crypto AG, China Poly Group, and 20 other case studies of covert institutional power across our Shadowcraft course — where the Panama Papers are the X-ray that reveals the skeletal system every other case study runs on.

  • How Sanctions Evasion Actually Works: Ship-to-Ship Transfers, Flag Hopping, and Shadow Fleets

    On November 12, 2025, a rusty oil tanker called the Guru approached the English Channel, one of the busiest shipping lanes on earth, and stopped transmitting its position. For roughly 10 hours and 200 kilometers, the Cameroon-flagged vessel was invisible — no signal, no position data, no trace on any tracking system. When it reappeared near Calais just after midnight, it resumed its course to the Russian port of Vysotsk as if nothing had happened. The Guru is one of approximately 1,400 vessels in Russia’s shadow fleet, a parallel logistics system that moves roughly six to seven percent of global crude oil flows through a combination of AIS manipulation, ship-to-ship transfers, shell company ownership, fraudulent flags, and self-insurance — all designed to move sanctioned oil from Russian ports to buyers in India, China, Turkey, and Malaysia while avoiding the Western price cap regime that was supposed to limit Russia’s war revenue. The system generated an estimated $9.4 billion in additional revenue for Russia in 2024 alone. The sanctions didn’t fail. They created a market for evasion infrastructure, and Russia built it.

    The toolkit

    Sanctions evasion at sea operates through five interlocking techniques, none of which are individually sophisticated but which, combined, create a system that enforcement can’t easily dismantle without dismantling the structure of global shipping itself.

    AIS manipulation is the foundation. The Automatic Identification System is mandatory under international maritime law for vessels above 300 tonnes on international voyages — ships broadcast identity, position, speed, and destination continuously. Shadow fleet vessels defeat this in two ways: going dark (turning off the transponder entirely) or spoofing (broadcasting false position data so the vessel appears hundreds of miles from its actual location). A Follow the Money investigation analyzing 1,400 Russian-linked vessels found that in the first eight months of 2025, there were more than twice as many notable AIS gaps compared to the first year of the war — roughly 16,000 in the Black Sea alone, with hundreds in the Mediterranean, Baltic, and North Sea. Compared to a random sample of European-flagged commercial vessels, the Russian-linked ships had six times more AIS gaps.

    Ship-to-ship transfers disguise origin. A tanker loads Russian crude at a Baltic or Black Sea port, sails to a permissive jurisdiction — typically off the coast of Malaysia, in the Mediterranean, or near Greece — and transfers its cargo to a second tanker at sea. The second tanker proceeds to India or China with documentation showing the cargo originated from the transfer point, not from Russia. The oil is laundered through geography. Malaysia’s east coast has become the global hub for these operations — stateless tankers loaded with Russian oil anchor in Malaysian waters despite the government’s stated commitment to enforcing sanctions.

    Flag hopping provides legal camouflage. Vessels change their country of registration — their “flag” — frequently, moving from one permissive registry to another to stay ahead of enforcement. When Western pressure forced Panama, the Marshall Islands, and Liberia to stop registering shadow fleet vessels, the tankers moved to Cameroon, Gabon, Palau, the Comoros, Djibouti, and other flags of convenience with minimal oversight. Throughout 2025, more than 300 shadow fleet tankers shifted to fraudulent flags after repeated flag hopping. When those flags were also deregistered under pressure, approximately 70 vessels began reflagging to Russia itself — a move that, paradoxically, restores legal protection under international maritime law because at least they’re no longer stateless.

    Shell company ownership obscures beneficial control. Shadow fleet tankers are typically owned through chains of single-vessel shell companies registered in jurisdictions with minimal disclosure requirements — the Seychelles, the UAE, Cyprus, Hong Kong. When a vessel is sanctioned, the tanker is transferred to a newly created company, sometimes registered at the same address. The beneficial owner never appears in the paperwork. This is BCCI’s corporate architecture applied to shipping — layered entities across permissive jurisdictions, designed so that no single regulator can see the full ownership chain.

    Self-insurance completes the circuit. Western maritime insurance — the Protection and Indemnity clubs that cover roughly 90 percent of global shipping — is bound by sanctions compliance. Shadow fleet vessels bypass this by carrying non-Western insurance or dubious certificates from entities that may not have the capacity to pay claims. The Andromeda Star, a shadow fleet tanker owned by a Seychelles-based company without adequate insurance, collided with another vessel off Denmark in March 2024. An environmental disaster was narrowly averted only because the tanker was on its return trip and wasn’t loaded.

    The enforcement response

    2025 was the most aggressive sanctions enforcement year on record. Three major regulatory waves — January, May, and October — expanded enforcement from targeting individual vessels to targeting entire facilitation networks. The January package alone designated over 180 shadow fleet tankers alongside major Russian producers. The U.S., EU, UK, and Australia collectively sanctioned hundreds of vessels. NATO launched Operation Baltic Sentry to monitor shadow fleet traffic through the Baltic Sea. The Estonian Navy seized a tanker in the Baltic. The French Navy interdicted UK-sanctioned vessels in the Mediterranean. In January 2026, the U.S. Navy and Coast Guard seized the Russian-flagged tanker Marinera in the North Atlantic.

    Ukraine went further. In late November 2025, Ukraine’s Security Service conducted drone strikes on shadow fleet tankers in the Black Sea — the Virat, the Kairos, and the EU-sanctioned Dashan — followed by a long-range strike on a tanker in the Mediterranean that had delivered oil to India. A February 2026 French boarding of the shadow fleet vessel Boracay discovered two Russian security personnel aboard — one a former Wagner Group member — working for the Moran Security Group, a private security firm founded by a retired FSB colonel. Shadow fleet tankers are now carrying armed Russian security details.

    The result of all this enforcement is instructive. It didn’t freeze commodity flows. It redirected them into less visible channels. By December 2025, roughly 3,300 vessels were operating in shadow networks, moving approximately 3.7 billion barrels of oil. That’s slightly down from 2024’s 4.7 billion barrels, but the decline reflects restructuring rather than reduction. The fleet has hardened itself through fragmented ownership, rapid reflagging, systematic AIS manipulation, and self-insurance. These aren’t workarounds. They’re features of a parallel logistics system that’s now embedded in global trade.

    What it tells you

    The sanctions evasion infrastructure Russia built in three years is the Crypto AG lesson in reverse: instead of a state secretly owning a company to compromise its customers, a state rapidly constructed an entire commercial ecosystem — vessels, shell companies, flags, insurance, security details — to circumvent the legal infrastructure of global trade. The UFWD’s influence networks operate through civilian-looking organizations that are state-directed. The shadow fleet operates through commercial-looking vessels that are state-serving. The mechanism is different. The structural logic — embedding state objectives inside nominally private architecture — is identical.

    The environmental risk is the part that gets less attention than it should. Three Russian shadow tankers per day pass through northern European waters. Most are aging vessels purchased at end-of-life specifically because they were cheap. They carry inadequate or fictitious insurance. The Kyiv School of Economics has warned that “a major environmental disaster is only a question of time.” The undersea cable cuts in the Baltic have already demonstrated what happens when shadow fleet vessels interact with critical infrastructure. The oil spill hasn’t happened yet. The cables have already been cut.

    We cover sanctions evasion alongside Wagner Group’s resource extraction model, BCCI’s financial architecture, and 21 other case studies of invisible institutional power across our Shadowcraft course — where the question isn’t whether the system can be evaded but how fast the evasion infrastructure becomes the system.

  • BCCI: The Most Corrupt Bank in History and How It Served Every Side of Every Conflict

    The Bank of Credit and Commerce International operated in 78 countries, managed assets exceeding $20 billion, employed more than 14,000 people, and served as the personal financial institution of the CIA, Saddam Hussein, Manuel Noriega, the Medellín cartel, Abu Nidal, Pakistan’s nuclear weapons procurement network, Ferdinand Marcos, and the mujahideen fighting the Soviets in Afghanistan — simultaneously, through the same branches, often through the same officers. When regulators in seven countries raided its offices on July 5, 1991, in what remains the largest coordinated banking shutdown in history, investigators found not a bank that had been corrupted but a bank that had been designed, from its founding in 1972, as a machine for evading the laws of every country it operated in. The Kerry-Brown report to the U.S. Senate Foreign Relations Committee called it “international financial crime on a massive and global scale.” Time magazine nicknamed it the “Bank of Crooks and Criminals International.” The acting U.S. Comptroller of the Currency compared it to FTX in 2023, which is the kind of comparison that should make you realize how little has changed.

    The architecture of invisibility

    BCCI was founded in 1972 by Agha Hasan Abedi, a Pakistani financier who had previously built United Bank Limited before Pakistan’s nationalization wave took it from him. His new bank was incorporated in Luxembourg, headquartered in London, and majority-funded by Sheikh Zayed bin Sultan Al Nahyan, the ruler of Abu Dhabi, with Bank of America providing 25 percent of the initial capital and critical institutional credibility. From its first year, the bank was structured to be unregulable. It split itself into BCCI Holdings (Luxembourg), BCCI SA (Luxembourg), and BCCI Overseas (Grand Cayman), with parallel banks acquired or created in Geneva, Kuwait, and the Cayman Islands, layered through a web of holding companies, affiliates, subsidiaries, and nominee relationships so complex that no single regulator in any single country could see the full picture. That was the point. As the Kerry-Brown report documented, BCCI was “from its earliest days made up of multiplying layers of entities, related to one another through an impenetrable series of holding companies, affiliates, subsidiaries, banks-within-banks, insider dealings and nominee relationships.”

    The growth was astonishing and unsustainable. From 19 branches in five countries in 1973 to 108 branches by 1976 to over 400 branches in 78 countries by the mid-1980s. Assets grew from $200 million to $1.6 billion in four years. Abedi pursued deposits over profits, acquiring high-net-worth clients — and high-net-worth criminals — by offering services no legitimate bank would touch. The strategy worked until it didn’t. By the late 1970s, BCCI was already secretly covering non-performing loans by creating fictional transactions and using customer deposits to fill the holes. The Abbas Gokal shipping group, BCCI’s largest borrower, was effectively bankrupt by the late 1970s. BCCI threw money at the problem and falsified the books. This carried on for 15 years.

    The client list

    The list of BCCI’s known clients reads like a casting call for a Cold War thriller written by someone who decided subtlety was overrated. Noriega laundered approximately $23 million through BCCI’s London branches — the bank hand-delivered him a $25,000 Persian carpet as a hospitality gesture, because when your client is a dictator who runs a country-sized drug operation, customer service matters. Pablo Escobar and other members of the Medellín cartel used BCCI for laundering. Abu Nidal, the Palestinian terrorist, used it for arms procurement. Saddam Hussein used it for weapons purchases, including a planned $110 million acquisition of 22 Argentine Mirage fighter jets arranged through BCCI’s Latin American office. Ferdinand Marcos stashed money. Hussain Muhammad Ershad, the Bangladeshi military dictator, stashed money. Samuel Doe of Liberia stashed money. If you ran a country and needed to hide the proceeds, BCCI was the institution that said yes.

    But the client that makes BCCI historically significant rather than merely criminal was the Central Intelligence Agency. The CIA maintained accounts at BCCI branch offices, used the bank as a conduit for covert funding, and — according to the Kerry-Brown report and subsequent investigations — channeled billions through BCCI to the Afghan mujahideen. By 1987, CIA funding for the Afghan rebels reached $630 million annually, with Saudi Arabia matching the contribution, and much of it flowed through BCCI. The National Security Council also held accounts at the bank, used for transfers connected to Iran-Contra. A 1986 CIA memo stamped SECRET summarized the agency’s knowledge of BCCI’s activities, including the bank’s secret acquisition of First American Bankshares in Washington — a direct violation of U.S. banking law. A more detailed 30-page CIA report followed in 1989. The agency knew. The agency’s Directorate of Operations had informants inside the bank. The CIA “aggressively” targeted BCCI as an intelligence goldmine, according to deputy director Richard Kerr. And for years, nobody acted on what they found, because BCCI was too useful to shut down.

    The nuclear dimension makes it worse. BCCI’s Canadian operations financed Pakistan’s procurement of nuclear weapons materials — documented in the Parvez case, where a Pakistani national attempted to acquire nuclear-related materials through the United States with BCCI financing. The CIA acknowledged in a 1991 letter to the Senate that it had reporting as early as 1987 on “BCCI being used by third world regimes to acquire weapons and transfer technology.” Libya used BCCI-connected channels for chemical weapons plant procurement. The bank wasn’t just laundering drug money. It was facilitating weapons of mass destruction procurement while the intelligence agencies that knew about it weighed the cost of shutting down an asset they were also using.

    Why nobody stopped it

    The regulatory failure was systemic, not accidental. BCCI had been structured from inception to split its operations across jurisdictions so that no single regulator could see the whole picture. Luxembourg saw one set of books. The Cayman Islands saw another. London saw a third. The Bank of England formed a supervisory group in 1987, but it moved slowly. U.S. regulators were warned repeatedly — by journalists, by Senate investigators, by their own agencies — and failed to act for years. Robert Mazur, a federal agent who went undercover as a wealthy businessman in Operation C-Chase, infiltrated BCCI’s private client division and documented the money laundering in real time. His operation led to the 1988 indictments that were the first serious legal action against the bank — and even that was delayed at the Justice Department’s request to avoid interfering with the sting.

    The political protection was equally systemic. BCCI hired Clark Clifford — former Secretary of Defense, trusted advisor to four presidents, arguably the most connected man in Washington — to run First American Bankshares, the U.S. bank BCCI secretly and illegally controlled. Clifford and his partner Robert Altman insisted they didn’t know BCCI was behind their bank. BCCI employed lobbyists, PR firms (Hill and Knowlton), and white-shoe law firms to suppress critical coverage. One investigative journalist in the U.K., Anthony Mascarenhas, was beaten, stabbed, and had his research stolen. Abedi personally cultivated relationships with heads of state — his philosophy, as described by BCCI officer Abdur Sakhia, was to appeal to every sector: charity for Jimmy Carter, a job for Zia’s brother-in-law, deposits for central bank officials in exchange for government deposits. Suitcases of cash where necessary.

    When Price Waterhouse finally audited BCCI properly in 1990, they found $1.48 billion in loans BCCI had made to its own shareholders, using BCCI stock as collateral — a circular fraud where the bank was essentially lending money to people to buy ownership of the bank that was lending them the money. The March 1991 Bank of England-ordered investigation concluded that there was “evidence of massive and widespread fraud.” The bank was shut down in July 1991 with liabilities of $10 to $14 billion. Over 6,500 depositors lost their money. Abedi, who had suffered a heart attack and retired, was never extradited. Key insiders were held incommunicado in Abu Dhabi. William Casey, the CIA director who oversaw the agency’s deepest involvement with BCCI, was conveniently dead.

    What it built

    BCCI didn’t invent shell company structures or nominee ownership or multi-jurisdictional regulatory arbitrage. But it proved — at a scale nobody had previously attempted — that a bank designed from inception to evade oversight could operate for nearly two decades, serve the intelligence agencies of multiple countries, finance nuclear proliferation and terrorism, launder billions in drug money, and buy political protection in the world’s most powerful capital, all without any single institution having the authority, the information, or the incentive to stop it. The tools BCCI pioneered — layered corporate structures across permissive jurisdictions, beneficial ownership concealment, regulatory fragmentation as a feature rather than a bug — are the same tools that populate the Panama Papers, the same tools that Russia’s shadow fleet uses to evade oil sanctions, the same tools that North Korea’s Lazarus Group uses to launder stolen cryptocurrency through chains of shell entities. The 2023 Corporate Transparency Act, which for the first time requires disclosure of beneficial ownership of U.S. companies, is — three decades later — a direct legislative descendant of the BCCI scandal. The question isn’t whether the reforms went far enough. It’s why it took 32 years.

    We cover BCCI alongside Marc Rich’s commodity empire, the Vatican Bank, Crypto AG, Wagner Group, and 19 other case studies of covert institutional power across our Shadowcraft course — where every lecture follows the money, maps the personnel pipeline, identifies the deniability layer, and finds the moment the machinery became exposed.