How CJNG's Terrorist Designation Creates Corporate Liability

The warning shot for corporate counsel was not a speech about cartel violence. It was a crude oil case.

In May 2025, the Justice Department charged a Texas crude oil business with conspiracy to provide material support to CJNG after the cartel’s designation as both a Foreign Terrorist Organization and a Specially Designated Global Terrorist. The alleged scheme involved nearly 3,000 shipments of stolen crude oil and a forfeiture demand of about $300 million, according to a client alert summarizing the DOJ release.[1]

That fact pattern is why the legal consequences of CJNG’s designation cannot be treated as a symbolic foreign-policy label. It put a commercial commodity, ordinary logistics paperwork, a U.S.-side business, alleged cartel benefit, a material-support theory, and asset forfeiture into the same enforcement file. For companies doing business in Mexico or through Mexican counterparties, the hard question is no longer whether CJNG is violent. It is what a company is legally expected to know, screen, document, and escalate once a cartel-linked risk is visible.

The designation turned one risk into two liability tracks

CJNG was designated in February 2025 under Executive Order 14157 along with seven other cartels. The designation matters because it joined two different enforcement systems that overlap in practice but should not be collapsed into one vague warning about “sanctions risk.”

The practical problem is that the same transaction can create evidence for both tracks. A payment to a blocked person can trigger OFAC exposure. The same payment, if tied to support for a designated FTO and accompanied by the required knowledge, can also interest prosecutors. A logistics route, resort marketing contract, tuition payment, correspondent account, fuel purchase, or supplier invoice may look routine inside a company’s enterprise software until the counterparty, parent, beneficial owner, or network connection moves it into a sanctions or material-support frame.

That distinction is not academic housekeeping. It changes who investigates, what the government must prove, what the company must preserve, and how quickly an internal review needs to become a privileged investigation.

Constructive knowledge is where routine business becomes dangerous

The most consequential phrase for companies is not “cartel violence.” It is constructive knowledge. The material-support statute requires that a defendant know the organization is a designated terrorist organization, has engaged or engages in terrorist activity, or has engaged or engages in terrorism. The analysis in the cartel context has not yet been settled by circuit-level appellate precedent for a corporate defendant, but the statutory structure and DOJ charging posture make willful blindness a fragile place to stand once designation, SDN listings, and public enforcement actions are available to the business.[2]

A company does not need a cartel logo on an invoice to have a problem. It may have a problem because its due-diligence file shows unexplained pricing, abnormal routing, repeat use of thinly documented intermediaries, counterparties with no plausible capacity, payments from or for sanctioned family members, or ownership that appears clean only because the review stopped at the first legal entity. After public designation, those facts do not sit in a vacuum. They become notice facts.

This is where formal ownership can mislead. Cartel-linked commercial networks rarely present themselves as “CJNG, S.A.” A resort-facing marketing company, a petroleum-sector intermediary, a school payer, or a financial institution may not be majority-owned on paper by a blocked person and still be part of a network that enforcement agencies have identified as benefiting or facilitating CJNG. If a company’s controls only ask whether a counterparty name exactly matches a sanctions list entry, they are answering a narrower question than the one enforcement agencies are likely to ask later.

The memo that matters is often the one written before the subpoena. It should show what was screened, what ownership information was requested, which alerts were cleared, which unresolved facts were escalated, and why the business either proceeded, paused, exited, or filed a voluntary disclosure. A clean conclusion without the underlying diligence trail is not much of a defense when the government’s theory is that the company chose not to know.

The enforcement map is already wider than fuel

The Texas crude oil charge remains the clearest miniature of the post-designation risk: commodity movement, alleged stolen fuel, claimed cartel benefit, a U.S. business defendant, and a forfeiture demand measured in hundreds of millions of dollars.[1] But the enforcement pressure is not limited to border-adjacent commodities or obviously criminal industries.

In February 2026, OFAC reached a $1.72 million settlement with a U.S. educational institution over 89 apparent violations of counternarcotics sanctions arising from tuition payments accepted from SDN-listed parents of enrolled students, according to alerts citing OFAC’s enforcement release.[4] That case is uncomfortable precisely because the interface was mundane. The institution was not accused of operating a cartel logistics network. The compliance failure sat in payments, admissions, parent relationships, and sanctions screening.

For in-house teams, the lesson is not that schools are uniquely exposed. It is that sanctions risk can enter through anyone who pays, reimburses, guarantees, books, ships, markets, owns, or introduces business. The business unit may describe the person as a parent, customer, vendor, broker, fuel supplier, investor, franchisee, travel agent, or local consultant. OFAC will still ask whether the company dealt in blocked property or provided services in violation of sanctions.

The petroleum sector then received another direct signal. In June 2026, OFAC sanctioned two Mexican nationals and nine entities in the petroleum and petrochemical sector for fuel theft benefiting CJNG under counterterrorism authorities, with State Department and Treasury releases identifying the action as part of the government’s effort to disrupt cartel revenue.[5][6] For companies buying, transporting, financing, insuring, or storing fuel, that kind of designation narrows the space for treating suspicious sourcing as a pricing anomaly rather than a legal escalation.

Tourism and real estate-adjacent businesses received their own warning. In February 2026, OFAC blocked 17 entities and five individuals tied to a CJNG-linked timeshare fraud network in Puerto Vallarta.[7] The point is not that every resort contract in Jalisco is suspect. The point is that a sector can become relevant to cartel enforcement because it offers access to victims, payments, property, or laundering channels, even when the public-facing product looks like leisure rather than contraband.

Financial institutions face a different consequence. In June 2025, FinCEN designated three Mexico-based financial institutions as primary money laundering concerns under Section 311 of the USA PATRIOT Act, a move described in a client alert as effectively cutting off U.S. correspondent banking access.[8] The banking-law mechanics matter to specialists, but the corporate consequence is straightforward: a counterparty that loses practical access to U.S. correspondent banking can become commercially unusable almost overnight, and a company that continues routing payments through obviously impaired channels invites questions about what it was trying not to see.

What companies now have to operationalize

A cartel designation does not require a company to become an intelligence agency. It does require a company to stop pretending that ordinary commercial categories answer legal-risk questions by themselves. Procurement, sales, finance, admissions, logistics, treasury, and subsidiary management may each hold only one piece of the file. The liability risk grows when no one is responsible for assembling those pieces into a view that a prosecutor, OFAC analyst, or bank examiner would recognize as coherent.

• Screen counterparties, beneficial owners, payors, guarantors, brokers, vessels, known affiliates, and relevant addresses against sanctions lists and recent enforcement releases.
• Treat indirect payment structures as risk facts, not administrative conveniences, when the person benefiting from the transaction differs from the person paying.
• Escalate abnormal pricing, inconsistent shipment documentation, unexplained intermediaries, and counterparties that resist ownership or source-of-funds questions.
• Document why a red flag was resolved, not merely that the business wanted it resolved.
• Re-screen existing relationships after new designations, because a counterparty that was acceptable at onboarding may become blocked or newly risky later.

The re-screening point deserves more attention than it usually receives. The riskiest file is not always the new vendor. It may be the long-running local intermediary that entered the system before the designation, before the latest OFAC action, before FinCEN’s warning, or before a related person appeared on the SDN List. Legacy comfort is not evidence of present legality.

Controls also have to distinguish blocking from escalation. A sanctions-list hit on a blocked person requires immediate legal handling. A weaker network indicator may require enhanced diligence, contract suspension, management review, bank consultation, or outside counsel involvement. Treating every concern as either “blocked” or “cleared” creates the very record prosecutors like: a company designed a process that could ignore everything short of an exact match.

Older corporate-terrorism cases help, but they do not decide the cartel cases

The corporate bar already has reference points for payments or support to violent organizations. Lafarge’s $778 million resolution over payments to ISIS and other armed groups showed that a corporation can face severe criminal consequences when business operations continue through payments to a designated terrorist organization.[9] Chiquita’s $38.3 million jury verdict involving payments to the AUC offers another cautionary example of corporate exposure tied to support for a violent armed group.[10]

Those cases are useful analogies, not automatic answers. ISIS, the AUC, and CJNG differ in structure, geography, revenue model, and the ways they intersect with ordinary commerce. A cartel-FTO case involving stolen fuel, tourism fraud, or payment networks will not map perfectly onto a conflict-zone factory or a historical paramilitary-payment case. The better use of Lafarge and Chiquita is imaginative, not mechanical: they show that prosecutors and courts can treat corporate payments to violent organizations as more than reputational failures, while leaving open how cartel-specific facts will be litigated.

CJNG’s scale explains the attribution problem, not the whole story

Some basic context is necessary because corporate risk depends on reach. A profile cited by the Lieber Institute and West Point described CJNG as having an estimated 15,000 to 20,000 members across more than 20 Mexican states, while ACLED data supports a broad geographic footprint; the membership figures remain inherently imprecise.[11] That scale is enough to make counterparty attribution difficult without turning the article into a cartel history.

DOJ’s cartel prosecutions also continue on a parallel track that is not limited to corporate defendants. In July 2025, a CJNG co-founder pleaded guilty to a federal drug-trafficking conspiracy and faced a sentencing range of 10 years to life, according to a Baker Institute report referencing DOJ filings.[12] That kind of prosecution does not prove a company’s knowledge in a commercial case, but it reinforces the government’s broader posture: CJNG is not being treated as a background security issue.

The unsettled questions make diligence more important, not less

There are real uncertainties. The constructive-knowledge standard has not yet been tested at the circuit-court level in a cartel-FTO case against a corporate defendant. Courts may draw lines that are more demanding than enforcement alerts suggest, especially where the government relies on indirect benefit, attenuated counterparties, or ambiguous network evidence. Defense counsel will have arguments about knowledge, causation, materiality, and the difference between doing business in a cartel-affected region and supporting a designated organization.

There is also uncertainty inside the organization the government designated. El Mencho was reported killed on February 22, 2026, and any resulting fragmentation could change attribution risk in either direction. Fragmentation might make some commercial links harder to trace, or it might produce more splintered intermediaries, more opportunistic extortion, and less stable signals about who controls a revenue stream. The available material does not support a confident forecast.

That uncertainty is not a reason to relax controls. It is a reason to preserve the record. A company that can show timely screening, escalation, enhanced diligence, contract decisions, payment holds, and board-level attention will be in a different position from a company whose files show only that the business continued because no one wanted to interrupt a profitable relationship.

CJNG’s terrorist designation moved exposure from reputational and security risk into prosecutable and sanctionable corporate liability. The first corporate cases will not be won or lost on whether executives can describe cartel violence in Mexico. They will turn on invoices, counterparties, payments, ownership charts, emails, escalation records, and the question every compliance file now has to answer: what did the company have reason to know, and what did it do next?

References

1. Client alert citing DOJ press release on Texas crude oil business material-support charge, Paul Hastings
2. 18 U.S.C. § 2339B, Providing material support or resources to designated foreign terrorist organizations
3. International Emergency Economic Powers Act and OFAC civil penalties guidance
4. Alerts citing OFAC enforcement release on U.S. educational institution settlement, Paul Hastings and HK Law
5. Treasury sanctions targeting petroleum and petrochemical entities benefiting CJNG, U.S. Department of the Treasury, June 2026
6. State Department press release on petroleum-sector sanctions tied to CJNG, U.S. Department of State, June 2026
7. Treasury blocks CJNG-linked timeshare fraud network in Puerto Vallarta, U.S. Department of the Treasury, February 2026
8. Client alert tracking FinCEN Section 311 actions against Mexico-based financial institutions, Paul Hastings, June 2025
9. Lafarge Pleads Guilty to Conspiring to Provide Material Support to Foreign Terrorist Organizations, U.S. Department of Justice
10. Chiquita jury verdict involving payments to the AUC
11. Profile of CJNG citing NCTC and ACLED data, Lieber Institute / West Point
12. Report referencing DOJ filings on CJNG co-founder guilty plea, Baker Institute, July 2025