![[CEU] When crime becomes terror: A new enforcement era by Yohir Akerman and Louis J. Milione](https://stage.corporatecompliance.org/sites/corporatecompliance.org/files/inline-images/Compliance%20Today%20Magazine%20-%20February%202026%20%2833%29.png)
Over the past year, Latin America has found itself at the center of a dramatic shift in U.S. enforcement strategy—one that blurs the lines between criminal activity and terrorism, between organized crime and national security.
While the current wave of designations centers on Latin America, the underlying enforcement philosophy is global. Similar debates are unfolding in Europe and Asia, where synthetic drug networks and cyber-enabled money-laundering groups are increasingly treated as terrorist threats. The convergence between criminal activity and extremist financing is no longer regional; it is structural.
Cartels added to terror list
The change stems from Washington’s decision to expand the list of Foreign Terrorist Organizations (FTOs) to include major Latin American cartels and transnational criminal organizations. What was once a law enforcement problem is now a counterterrorism matter.
Traditionally, domestic and international law enforcement entities were charged with focusing on this threat. Now, with the recent FTO designations, all the tools the intelligence community and the U.S. Department of Defense control could be leveraged to deal with this “counterterrorism” threat.
Since early 2025, Secretary of State Marco Rubio has moved to designate a broad set of cartels and transnational criminal organizations as FTOs.¹ These include groups such as Mara Salvatrucha (MS-13) and Barrio 18 in Central America; Tren de Aragua in Venezuela and the Andean region; major Mexican cartels like Mexico’s Cártel de Jalisco Nueva Generación (CJNG), Cártel de Sinaloa, Cártel del Golfo, Cártel del Noreste, La Nueva Familia Michoacana, and Cárteles Unidos; as well as Ecuador’s Los Lobos and Los Choneros; and Haiti’s Gran Grif and Viv Ansanm. Similar designations may soon extend to Colombia, Brazil, and the Caribbean, where several transnational groups maintain operational and financial links to these entities.
Compliance frameworks under pressure
This development marks a watershed moment. It means that traditional compliance frameworks, built around anti-bribery, anti-corruption, and sanctions, must now contend with a terrorism overlay that fundamentally changes how risk is defined and managed.
The practical effect is that businesses across Latin America are now navigating a landscape where long-standing criminal risks have been redefined as terrorism-related risks under U.S. law. For instance, a logistics firm paying local “security fees” to safeguard a shipment, a financial intermediary processing a transfer from a cartel-controlled region, or an energy contractor hiring local transporters to reach remote areas could now face scrutiny not as administrative failures, but as potential acts of material support to an FTO.
The implications go far beyond semantics. Under U.S. national security laws, providing “material support” to an FTO, directly or indirectly, can result in criminal prosecution and civil penalties, even if the conduct occurs entirely outside the U.S.
Fentanyl and the new enforcement lens
The fentanyl crisis has accelerated this trend. As precursor chemicals and synthetic opioids move from Asia through Mexico and into the U.S., enforcement agencies now view these supply chains as part of a broader terrorism-financing ecosystem. This creates new exposure not only for cartels and transporters, but also for pharmaceutical companies, chemical producers, and logistics providers whose materials, licenses, or transport routes can be diverted for illicit use.
Even inadvertent participation in these networks can now draw scrutiny under counterterrorism statutes—particularly when precursor sourcing overlaps with jurisdictions under FTO designation.
The enforcement philosophy driving these measures is clear: the U.S. government now sees certain cartels as terrorist networks, not merely criminal enterprises. This represents a fundamental realignment of priorities within the national security apparatus. The logic is that cartels today do more than move narcotics; they move money, weapons, and people across borders, often destabilizing institutions and financing extremist activity.
By reframing these groups as part of the terrorism ecosystem, Washington has unlocked a much broader set of legal and financial tools: secondary sanctions, extraterritorial prosecutions, and intelligence-driven enforcement actions. In practice, that means any corporate transaction touching an entity, geography, or supply chain linked to these organizations can fall under the same scrutiny once reserved for dealings with Hezbollah or the Taliban.
For companies operating in Latin America, this shift transforms compliance from a question of due diligence into one of national security alignment—requiring not only awareness, but foresight, coordination, and the ability to anticipate how U.S. policy now defines their operational environment.
As a recent Bloomberg Law analysis observed, doing business in Mexico today resembles “operating in Syria and Afghanistan”—a stark comparison that captures the evolving nature of regulatory risk.²
Old practices, new liabilities
This evolution has caught many companies off guard. For years, businesses operating in complex environments across Latin America have relied on informal arrangements to keep operations moving—a payment to ensure a truck’s safe passage, a local intermediary to manage “permits” in high-risk areas, or an unvetted subcontractor with access to sensitive routes.
These practices, once seen as pragmatic adaptations to fragile security conditions, now fall squarely within a terrorism-risk framework. The problem is not intent, but exposure. Even legitimate enterprises, acting in good faith to maintain continuity, can inadvertently intersect with actors or structures linked to newly designated organizations.
What was once a gray area of operational necessity is now a potential violation of U.S. counterterrorism law. In this new environment, the absence of controls or documentation no longer protects companies; it exposes them.
Enforcement agencies are adapting rapidly. The U.S. Department of Justice, Office of Foreign Assets Control (DOJ), Drug Enforcement Administration, Financial Crimes Enforcement Network, Federal Bureau of Investigation, and Homeland Security Investigations have begun coordinating investigations spanning trade, finance, and border operations, using counterterrorism tools once reserved for conflict zones.
This shift also highlights the need for deeper collaboration between the public and private sectors. Enforcement agencies increasingly expect companies to act as early warning systems, flagging suspicious activity in real time. The private sector, in turn, needs clear guidance and predictable channels to report without triggering automatic exposure.
The emerging model is one of shared intelligence, not just compliance reporting, where companies play a proactive role in safeguarding legitimate commerce.
The result is an enforcement landscape where a single flagged payment, or a relationship with an undisclosed third party, can lead to asset freezes, subpoenas, or media exposure that devastates reputations overnight.
Turning compliance into foresight
For companies active in Mexico, Central America, Ecuador, Colombia, and the Northern Triangle, this shift requires a fundamental rethinking of how risk is perceived and managed. Compliance can no longer be treated as a static checklist reviewed once a year; it must evolve into a living, intelligence-driven process that integrates constant mapping, monitoring, and mitigation.
This means identifying where operations physically overlap with cartel or FTO-controlled territories, understanding the local political and security dynamics that shape those environments, and adjusting business practices accordingly. It also requires cross-functional coordination—bringing together compliance, security, procurement, and government relations—to ensure that risk signals are captured early and acted upon.
In this new environment, agility and situational awareness are as important as written policies. The companies that succeed will be those that turn compliance into an anticipatory capability, rather than a reactive obligation.
Building a counterterrorism compliance plan
The first step is to conduct comprehensive FTO risk assessments. These must go beyond sanctions screening and include intelligence mapping of operational regions, transport corridors, and port logistics—areas where cartel influence and designated groups intersect.
Second, third-party due diligence must evolve to reflect this new reality. Screening should identify ultimate beneficial ownership, regional affiliations, and reputational exposure, not just basic registration data.
Third, training at every level—board, management, and field operation—is crucial. Employees must understand that what once passed as a “cost of doing business” may now constitute a federal offense under U.S. law.
Lookbacks are also critical. Historical payments, supplier contracts, and service agreements tied to newly designated regions must be reviewed to anticipate potential inquiries or enforcement actions.
Financial sector on the frontline
Financial institutions face their own version of this challenge. Banks, fintechs, and money-service businesses operating in Latin America now find themselves on the frontlines of enforcement. The risk no longer lies solely in the movement of funds, but in the geographic and operational context surrounding those transactions.
Institutions must monitor not only transaction data but also geospatial exposure, correspondent banking relationships, and abrupt changes in remittance flows that may intersect with entities or regions tied to FTOs. This demands a level of vigilance that goes beyond traditional anti-money laundering protocols.
Transaction monitoring should now be layered with intelligence on territorial control, logistics hubs, and known cartel corridors—elements that rarely appear in standard financial data. Institutions must also evaluate whether their local partners, payment processors, or correspondent networks maintain exposure to high-risk jurisdictions.
In practice, this means building cross-disciplinary teams that combine compliance expertise with data analytics and on-the-ground intelligence. The failure to integrate those perspectives is no longer a procedural gap; it is a strategic vulnerability.
Across sectors—from energy to logistics, manufacturing to fintech—companies should be updating their compliance matrices to include terror-finance risk as a standalone category. Equally important is supply chain auditing. Cartel-linked control of ports, transportation hubs, and fuel routes can expose legitimate operators to inadvertent violations. The closer a business operates to those choke points, the higher the need for monitoring.
In parallel, security policies must clearly prohibit any payment or facilitation to cartels or designated organizations, including “ransom-like” arrangements disguised as operational costs. Ambiguity invites liability.
The DOJ has also encouraged voluntary self-disclosure as a tool to mitigate penalties, offering a degree of predictability for companies that act proactively. This requires internal readiness and documented governance structures.
Boardrooms face strategic accountability
For corporate boards, the message is unmistakable: FTO exposure is not a legal technicality; it is a governance issue. The shift from criminal- to terrorism-related enforcement means that liability now sits closer to the top of the organization, where strategic decisions are made.
Boards can no longer delegate this risk entirely to compliance officers or legal departments. They must understand how the evolving U.S. framework on terrorism designations affects corporate structure, capital flow, and third-party exposure.
This requires proactive governance: regular briefings on geopolitical developments, integration of FTO risk into enterprise-wide risk management systems, and documented oversight of management’s response to emerging threats.
The question is no longer whether the company has a compliance program, but whether its leadership can demonstrate that it recognized and acted upon risks linked to designated organizations. In today’s enforcement climate, tone from the top is not symbolic; it’s evidentiary.
Boards that take ownership of FTO risk not only protect the company from enforcement but also position it as a credible, responsible actor in an increasingly scrutinized region. Companies that treat this as an intelligence challenge rather than a legal nuisance will be better positioned.
Integrating real-time data, open-source intelligence, and investigative partnerships can turn compliance into foresight. Ultimately, what is at stake is not just regulatory alignment but operational continuity. The reclassification of criminal groups as terrorist organizations means that risk in Latin America is now systemic, not transactional.
A prototype for global enforcement
The implications extend well beyond Latin America. As supply chains globalize, the financial and logistical ecosystems that support these groups increasingly pass through Europe, Asia, and Africa. Regulators and financial intelligence units worldwide are studying the U.S. approach, suggesting that FTO-style designations could soon influence multilateral enforcement frameworks.
In this sense, the hemisphere has become the testing ground for what may evolve into a global counter-cartel doctrine. Businesses that recognize this shift, and act accordingly, will not only protect their operations but also shape the next generation of corporate resilience in a hemisphere where the line between crime and terror is increasingly hard to draw.
View all articles Read the next article