Ayman Joumaa’s Business Between the Cartels

A Lebanese-Colombian broker, a used-car circuit through Benin, and the question of what a financial connection proves.

Contents

1. A name that interrupted business
2. The customer at the other end
3. Where the cars entered the account
4. The connection that changed the argument
5. New names on the same map
6. Sources

The instructions arrived with the quiet efficiency of a routine commercial transfer—sometimes by encrypted email, often through a brief phone call or a string of BlackBerry PIN messages²⁵. On one end of the line, a operative for Mexico’s violent Los Zetas cartel stood over suitcases packed with millions of dollars in drug cash; on the other, cocaine suppliers in the valleys of Colombia and Venezuela waited for their cut^16,25. Bridging these two criminal worlds was Ayman Joumaa, a Lebanese broker with Colombian citizenship who transformed the chaotic revenue of street-level drug sales into clean, usable capital^16,30. According to a federal indictment filed in Virginia, Joumaa’s organization could collect up to $4 million in cash across Mexico City and guarantee that equivalent funds reached suppliers thousands of miles away within five days^16,25. For this essential service, he charged a fee of 8 to 14 percent, building a shadow financial architecture that linked Latin American cartels, West African car lots, and Beirut exchange houses—while drawing the intense scrutiny of American counterterrorism officials^17,25.

Prosecutors described a repeated business relationship: cash arriving on one side, local currency paid out on the other, a broker charging for the connection. They alleged pickups of $2 million to $4 million at a time. The scale mattered, but so did the clock. A supplier waiting for payment could not finance the next shipment with money stranded thousands of miles away. The indictment made that return flow part of the cocaine conspiracy itself: proceeds arriving back with suppliers could finance further production and distribution. The sale was not the end of the transaction. It created the next obligation²⁵.

Joumaa’s alleged value was in closing that distance. The man American prosecutors identified in 2011 as “Junior,” then 47 and of Lebanon, was accused of serving Colombian suppliers and Mexico’s Los Zetas while handling proceeds collected in Europe and West Africa^16,25. Colombia’s military college describes him as Lebanese-born with Colombian citizenship³⁰. The public portrait is built largely from the institutions pursuing or studying him: a figure visible through business relationships, rather than through an interview explaining himself^16,30.

On January 26, 2011, Treasury published his name alongside nine other people and 19 businesses¹⁷. A criminal case would follow¹⁶. Before that, the companies around him began to feel what a financial designation could do¹⁷.

A name that interrupted business

Treasury’s announcement described an organization operating across Lebanon, West Africa, Panama and Colombia. It alleged multiton cocaine shipments and laundering of as much as $200 million a month through channels including cash couriers and Lebanese exchange houses. The immediate consequences were concrete: US persons could no longer conduct the prohibited dealings, and assets under US jurisdiction were blocked. No American courtroom had first been required to hear Joumaa’s defense¹⁷.

The designation reached into a family business network. Three of Joumaa’s brothers were named. Treasury identified Akram as chief executive and general manager of Caesar’s Park Hotel and alleged the organization used it to broker trafficking and laundering activity. Other names belonged to electronics businesses in Panama and shops in Colombia. A hotel, a shop and an exchange house performed different commercial functions; the allegation was that the relationships between them made a common service possible¹⁷.

Ownership still mattered. Treasury identified Ali Mohammed Kharroubi as owner of Ellissa Holding, rather than assigning every business on the chart to Joumaa himself. The holding company’s businesses reached Lebanon, Benin and the Democratic Republic of Congo¹⁷. Its Benin operation sold used vehicles^4,17. Hassan Ayash, Ellissa and New Line were the three Lebanese exchange houses Treasury named as channels used by the organization¹⁷.

Years later, researcher Matthew Levitt reported that the initial action had blocked roughly $700,000 at JPMorgan Chase and held up about 350 vehicles awaiting shipment from American ports to Africa. Those were the kinds of consequences that could reach a network even when its alleged organizer was beyond immediate arrest: a payment stopped, goods delayed, a customer unable to complete a transaction. Levitt’s account described disruption, not the disappearance of the business²¹.

In February, investigators moved against a much larger institution. FinCEN identified Lebanese Canadian Bank as a primary money-laundering concern. The bank had more than $5 billion in assets in 2009 and served legitimate customers alongside the accounts under scrutiny. FinCEN alleged weak controls and managerial complicity; it also acknowledged that much of the correspondent activity was probably legitimate. The pressure would be felt across a functioning bank³.

Section 311 and the Kingpin designation were different tools^5,14. Treasury’s own explanation distinguishes the former’s protective measures from the asset-blocking obligations associated with sanctions⁵. The proposed LCB measure targeted access to American correspondent banking, including indirect access through other institutions¹⁴. A name on a customer file had become a question for banks handling dollars far beyond Lebanon^3,14.

The customer at the other end

The criminal indictment, filed on November 23 and announced publicly on December 13, 2011, supplied a different route. It alleged that Joumaa and associates coordinated shipments from Colombia through Guatemala, Honduras and Mexico for sale to Los Zetas^16,25. The final market was the United States. Prosecutors specified 85,000 kilograms of cocaine during approximately 2005–2007 within the wider alleged conspiracy²⁵.

That allegation placed him between producers and a distribution organization. He was not described merely as someone who accepted cash after the drugs had been sold. The government alleged participation in arranging the movement of cocaine as well as the return of its proceeds. Two kinds of delivery depended on one another: getting the shipment to a buyer and getting the supplier paid²⁵.

The money did not have to retrace the cocaine’s exact journey. The indictment described collections from Mexico, Europe—predominantly Spain—and West Africa, followed by repayment to suppliers. It alleged that Mexican dollar deliveries were settled in Venezuelan bolivars or Colombian pesos. A payment obligation could therefore connect countries even when the same physical notes did not cross every border. The filing describes settlement between participants; it does not trace one marked dollar around the world. For the supplier, the useful outcome was money available where another purchase had to be made. For investigators, the challenge was to connect a dollar collection to a different payment in a different jurisdiction. That was why the alleged coordinator mattered: his service joined the two sides of the transaction²⁵.

The figures in the case measure different things^3,25. Paragraph eight alleges more than $250 million laundered over a period running from about 1997 to September 2010. The forfeiture notice seeks $850 million if Joumaa is convicted²⁵. Treasury’s estimate of up to $200 million a month concerns the network’s laundering activity³. None of those numbers is a finding that Hezbollah received that sum. Combining them into a single financial total would make the operation look more precise than the records allow^3,25.

The investigators were working backward^16,25. The Justice Department said the indictment was based on historical information provided after the conduct occurred¹⁶. Suppliers had already sold drugs, cash had already changed hands and accounts had already received payments^16,25. Prosecutors assembled those past transactions into two charges: conspiracy to distribute cocaine intended for the United States and conspiracy to launder its proceeds. The first concerned the drugs and their destination; the second concerned transactions allegedly designed to conceal the money’s source, ownership and control²⁵.

Former undercover investigator Robert Mazur has explained why financial specialists matter in such cases. Launderers hold records and maintain relationships that can lead investigators toward people distant from the drugs¹¹. In a 2012 speech, prosecutor Neil MacBride described suspicious-activity reports as a central part of his office’s financial-enforcement work. He did not say those reports alone established the Joumaa case. They offered a way to see connections that a single seizure might miss²⁴.

Where the cars entered the account

Two days after the criminal charges were publicly announced, prosecutors in Manhattan filed the civil action against LCB and other businesses^1,4. This proceeding followed the American financial system into a commercial circuit running through West Africa. The later amended complaint alleged at least $329 million in transfers to American used-car businesses from approximately 2007 to early 2011⁴.

Cars purchased in the United States could be exported and sold in Benin. Prosecutors alleged that cash from those sales was mixed with narcotics proceeds and moved back toward Lebanon through Hezbollah-controlled channels. Ayash Exchange alone was associated in the complaint with approximately $141.5 million in car-related transfers. Ellissa’s Cotonou car park was one of the places where imported vehicles became sale proceeds⁴.

The cars were useful precisely because they were real goods with real customers. A later GAO review found that automobiles, precious metals, textiles and electronics accounted for about 70 percent of Homeland Security Investigations’ trade-based laundering casework as of 2018. Commercial activity could provide both a means of moving value and paperwork that investigators could follow. The existence of an export invoice did not resolve the separate question of where its financing originated¹².

FinCEN also described consumer goods purchased from Asian suppliers and sold in Latin America. One supplier allegedly held more than 30 LCB accounts and communicated with the bank almost daily. The financial relationships extended beyond the vehicles that became the best-known image of the case. For an alleged broker, access to several kinds of commerce could connect several kinds of customer³.

David Asher later told Congress that he had advised on a strategy to disrupt LCB beginning in 2010¹³. The bank eventually sold most of its assets to SGBL². In June 2013, it agreed to forfeit $102 million; a separate Ayash settlement exceeded $720,000. Those were outcomes for the financial institutions. They were not a conviction of Joumaa¹.

LCB maintained its denials of wrongdoing and said it settled to end litigation and complete the sale. SGBL asserted its position as an innocent purchaser. The settlement left those positions in the record alongside the payment. For the buyer, the agreement helped resolve liabilities surrounding an acquired business². For the government, it secured a substantial forfeiture. The bank could complete a commercial exit while the accusations against other alleged participants remained on different legal tracks^1,2.

The connection that changed the argument

Hezbollah was central to the public debate, but absent from the seven-page criminal indictment^18,25. Contemporary reporter Hannah Stone highlighted that distinction and relayed officials’ caution against imagining a meeting between the leaderships of Hezbollah and Los Zetas. The alleged intermediary was the important connection. A customer relationship did not, by itself, make two organizations one enterprise¹⁸.

Treasury’s position was nevertheless explicit^3,21. FinCEN said Hezbollah derived financial support from the criminal activities of Joumaa’s network and alleged that its Tehran-based envoy, Abdallah Safieddine, facilitated Iranian officials’ access to LCB managers³. Levitt later emphasized the choice of wording: deriving support from criminal activity is a narrower proposition than directing all of it²¹. That difference helps explain why the same case produced such divergent descriptions^3,21.

In January 2012, InSight Crime analyst Geoffrey Ramsey argued against treating alleged cooperation or financial support as proof of Hezbollah membership¹⁹. RAND’s later research similarly distinguishes direct organizational operations from the work of affiliates, sympathizers and intermediaries. It notes that incomplete public information makes the degree of direction difficult to establish²². The disputed question was not simply whether a connection existed, but what the connection enabled and who controlled it^19,22.

INSS researchers Sami Kronenfeld and Yoel Guzansky approached the issue from a strategic perspective in 2013. They examined how criminal transport and communication networks might furnish operational opportunities for Iran and its partners. Their discussion of potential access to cartel infrastructure was a security scenario, not a court finding that Joumaa had organized a particular attack. The possibility explains official concern; the criminal case still had to identify conduct and participants²³.

A later INSS study of Hezbollah finance also notes that most diaspora financial activity is legitimate. It describes a changing financial environment after Lebanon’s banking collapse, including an expanded role for al-Qard al-Hassan. That context directs attention toward specific relationships and institutions rather than treating Lebanese nationality, an overseas shop or a family remittance as evidence of crime⁷.

New names on the same map

At the end of December 2011, Treasury named another organization based around Jorge Fadlallah Cheaitelly and Mohamad Zouheir El Khansa. One detail made the connection particularly tangible: Treasury said Cheaitelly had replaced Joumaa as director of Junior International in Panama’s Colón Free Zone and continued operating it with Joumaa’s brothers. The agency also named exchange houses and import-export businesses reaching Colombia, Lebanon and Hong Kong. The chart was changing at the level of directors and companies²⁸.

The following June brought allegations involving a bank branch manager and a fundraiser. Treasury said Joumaa had moved more than $1 million in 2010 into an account belonging to Abbas Hussein Harb, managed by Ibrahim Chibli at Fenicia Bank. It separately accused Ali Mohamad Saleh of leading a Hezbollah support cell in Maicao, soliciting donations and sending checks and dollars through Venezuela to Lebanon. These were identified relationships, not interchangeable labels for everyone on the list. Harb’s alleged contribution was financial intermediation through Colombia, Venezuela and Lebanon. Chibli’s was access from inside a bank branch. Saleh’s alleged fundraising role reached business owners and residents. Their activities could intersect without requiring each person to perform every function in the network¹⁰.

Saleh had first been listed under narcotics authorities in December 2011; the June 2012 action added a terrorism designation^10,20. Christopher Looft reported a Treasury official explaining that the latter altered his watchlist status beyond the existing financial restrictions²⁰. The legal distinctions were producing different consequences for different people within the overlapping networks^10,20.

Treasury then alleged that Rmeiti and Halawi exchanges took over work after LCB and the earlier exchanges were disrupted^8,15. Its 2013 Rmeiti finding described a shift toward World Car Service accounts that continued reaching some of the same American businesses¹⁵. Disabling an institution could force a change of channel without erasing the commercial relationships around it^8,15.

In October 2015, Treasury targeted maritime businesses associated with Merhi Abou Merhi, alleging that vessels supplied used-car transportation to the Joumaa organization. The action named subsidiaries in Benin, Nigeria and Germany alongside Lebanese businesses. Shipping was a distinct service in the alleged circuit: somebody had to carry the vehicles between purchase and resale, even when the money moved through different institutions. Treasury identified vessels including City of Antwerp and City of Lutece, extending the action from company names to the ships used in commerce²⁶. But the story did not end with designation: OFAC removed Abou Merhi and listed associates, businesses and vessels in May 2017. The notice did not explain the reason²⁷. Associated Press later reported his consistent denial of the laundering allegations²⁹. A sanctions map has dates, and its removals belong beside its additions^26,27.

Treasury official David Cohen used the LCB investigation to argue for better information sharing between government and banks⁹. DEA official John Fernandez later described another practical consideration: drug and laundering offenses could provide common ground with foreign partners for whom terrorism terminology was politically difficult⁶. The work depended on partners as well as evidence^6,9.

Levitt also reported that a proposal to offer rewards for Hezbollah-connected kingpins including Joumaa was rejected amid disputes over enforcement and foreign policy²¹. Treasury’s October 2015 announcement still described Joumaa as a fugitive²⁶. His later custody and trial status remain unresolved in the available public record; the indictment itself supplies no verdict. The financial actions had reached companies, accounts and cargo^25,26. Bringing the alleged broker to court was a separate task²⁵.

The indictment ends with a conditional demand: forfeiture if convicted. Earlier pages describe dollars collected in Mexico and suppliers paid in another currency days later. Between those two parts of the document lies the problem investigators were trying to solve—a business capable of settling obligations across borders, and a defendant who still had to be brought before a court²⁵.

Sources