The Case Files Washington Had to Join

Contents

1. Before the new name
2. A conviction with a longer history
3. Getting the defendant into the room
4. When the next investigator works at a bank
5. A standing offer for the next lead
6. The name returns
7. Sources

When Jeff Sessions gathered a new team of prosecutors in Washington in January 2018, the file folders on his desk contained a decade’s worth of accumulated intelligence, fragmented leads, and institutional friction^[1]. The attorney general’s announcement of the Hezbollah Financing and Narcoterrorism Team brought together specialists from drug enforcement, counterterrorism, organized crime, and money laundering to reassess the unresolved leads left behind by Project Cassandra^[1]. Under the direction of John Cronan, the unit was charged with transforming intelligence dossiers spanning multiple continents and agencies into cases that could stand up in a court of law^[1]. Yet the immediate challenge was not drafting new indictments, but overcoming the handoffs between investigators tracking financial flows and prosecutors capable of bringing charges^[1],^[2].

Homeland Security Investigations explained a week later that it already had dedicated personnel at the Counter-Narcoterrorism Operations Center, supporting investigations into financiers and trade-based laundering^[2]. Experienced people and accumulated cases existed before the new acronym^[2]. The immediate problem was making their work travel: from an investigator following a shipment to a prosecutor who could bring charges, or from a financial lead to an agency empowered to restrict access to money^[1],^[2].

The danger lay in the handoff^[1],^[2]. A name could appear in a financial investigation, on a sanctions list and in a terrorism assessment without those documents producing the same legal result^[1],^[19]. Former undercover investigator Robert Mazur had described why following financial intermediaries mattered: their records could expose clients, controllers and assets across criminal organizations^[28]. But collecting that intelligence and turning it into an enforceable case were separate achievements^[28]. A broker’s importance to investigators did not, by itself, put him within reach of an American court^[28].

Before the new name

Derek Maltz, who had led DEA’s Special Operations Division, traced the investigative history back to Operation Titan, begun by Miami agents in 2004^[6]. In his 2017 congressional testimony, the ensuing campaign had four tracks: Treasury designations, restrictions aimed at a bank, civil action against financial assets, and criminal prosecution^[6]. The approach was built around using different agencies’ powers against different parts of a network^[6]. Maltz also described the weakness he had seen in that system: leadership failures and political infighting could defeat work that investigators were capable of doing^[6].

Two early results show why the tracks cannot be collapsed into a single tally^[9],^[10]. Ayman Joumaa was indicted in November 2011 on cocaine-distribution and money-laundering conspiracy charges^[10]. Prosecutors alleged that his network charged commissions of 8 to 14 percent for laundering services^[10]. The Lebanese Canadian Bank case produced a different kind of outcome: a 2013 civil settlement requiring $102 million in forfeiture^[9]. One document accused a man of crimes; the other recovered money through a civil proceeding^[9],^[10]. Neither can substitute for the other when assessing what Washington accomplished^[9],^[10].

The work also generated leads outside the United States^[8]. In February 2016, DEA said a European operation had developed from the Lebanese Canadian Bank investigation and involved cooperation across seven countries^[8]. Its announcement alleged that the Business Affairs Component of Hezbollah’s external apparatus worked with traffickers and that criminal proceeds supported weapons purchases for Syria^[8]. That was the agency’s account of the network’s purpose^[8]. The operation’s international reach also demonstrated how much depended on other governments acting on information developed elsewhere^[8].

By 2017, the people who had worked on the campaign were arguing publicly over why it had lost momentum^[5],^[7]. David Asher told Congress that the Obama administration had curtailed investigations while pursuing the Iran agreement, reassigning experienced investigators and allowing others to leave^[7]. Matthew Levitt’s later account preserved a sharp disagreement: former senior Treasury and CIA official David Cohen denied that there had been a stand-down order against Hezbollah^[5]. Levitt himself said he could not untangle the relative weight of interagency conflict, concerns about the nuclear deal and other risks^[5]. Sessions inherited that dispute as well as the cases^[1],^[5],^[7].

His institutional answer expanded in October 2018^[4]. DOJ named Hezbollah alongside MS-13, CJNG, Sinaloa and Clan del Golfo as priority transnational organized-crime threats^[4]. A Hezbollah subcommittee, staffed by HFNT members and led by prosecutor Ilan Graff, would sit inside a broader task force^[4]. The subcommittees received a 90-day deadline for recommendations covering prosecution, diplomacy and other lawful measures^[4]. The new structure made the ambition clear: Hezbollah’s support networks were to be pursued through the criminal tools used against other transnational organizations, as well as through counterterrorism work^[4].

A conviction with a longer history

Kassim Tajideen’s case was already moving before Sessions created HFNT^[1],^[11]. DEA announced in March 2017 that the businessman had been arrested overseas on 12 March and brought to the United States^[11]. Investigators had followed an alleged effort to conduct business despite sanctions^[11]. This chronology matters to the story of the team: its work included taking forward investigations that other people had already built^[1],^[11]. An eventual success could belong to the new coordinating effort without having originated there^[1],^[11].

Tajideen pleaded guilty in December 2018 to a money-laundering conspiracy connected to sanctions violations^[12]. His admitted conduct included more than $50 million in prohibited transactions with American businesses^[12]. These were commercial dealings conducted after his designation, not a judicial finding that the same sum had reached Hezbollah^[12]. For prosecutors, the transactions supplied a route to a conviction through conduct they could establish, even though Treasury’s earlier assessment of his Hezbollah support explained why sanctions had been imposed^[12].

The next August, the sentence was five years, with $50 million in forfeiture^[13]. The announcement explicitly identified the investigation as part of HFNT^[13]. It also described as much as $1 billion transmitted through the U.S. financial system in the signed statement of facts—a separate measure from the forfeiture and the prohibited U.S. business transactions^[13]. Large financial cases often arrive with several large numbers^[13]. Keeping their meanings intact reveals the actual outcome: a sanctions-related laundering conviction, a prison term and a specific forfeiture, rather than an undifferentiated billion-dollar victory^[13].

Cronan explained the broader logic in July 2019 remarks marking the AMIA bombing’s anniversary^[3]. The team would use non-terrorism charges where appropriate, coordinate across federal offices and work with foreign counterparts^[3]. He identified the practical questions that can determine a prosecution: obtaining evidence and witnesses abroad, securing extradition and protecting intelligence^[3]. Tajideen’s plea was one example of the approach^[3],^[12]. It was an institutional preference for an achievable case over waiting for every allegation about a network to fit into one indictment^[3]. Cronan also said Treasury had designated more than 50 Hezbollah-related people and entities since 2017^[3]. That figure described the administrative campaign as it stood in July 2019^[3]. It sat beside his prosecution examples, rather than measuring the same outcome^[3]. The contrast captured the breadth of his assignment: different agencies could close different doors, while a prosecutor still needed a particular defendant, a charge and evidence that would carry the case into court^[3].

The key distinctions

Different powers, different outcomes

The legal instrument determines what a result means.

Joumaa

Criminal charges

2011 indictment alleges drug and laundering conspiracies. [9]

Lebanese Canadian Bank

Civil recovery

$102 million forfeiture settlement in 2013. [10]

Tajideen

Plea and sentence

Sanctions-related laundering; five years and $50m forfeiture. [12] [13]

Ali Kourani’s case illustrated a different route^[17]. He received 40 years in December 2019 for terrorism, sanctions and immigration offenses arising from his work for Hezbollah’s external operations component^[17]. The trial concerned activities including surveillance and searches for weapons suppliers^[17]. DOJ credited the FBI-NYPD Joint Terrorism Task Force^[17]. That was a serious counterterrorism conviction; counting it as a cocaine-laundering conviction would erase what investigators had actually proved^[17].

The judgment also survived appellate examination^[18]. In July 2021, the Second Circuit affirmed Kourani’s conviction and 480-month sentence, finding sufficient support for the verdict^[18]. The opinion identified corroboration of his statements to FBI agents in laptop data, internet searches and travel history^[18]. Here the record lets the reader follow evidence beyond an agency announcement into judicial scrutiny^[18]. It shows a completed legal route, with the particular evidence that sustained it^[18].

Getting the defendant into the room

Other cases turned on a much more physical question: could the suspect be brought to trial?^[30] Cyprus arrested Ghassan Diab in March 2019 and found him extraditable that September^[30]. He arrived in Miami on 17 July 2020^[30]. DOJ’s announcement described a laundering prosecution in Florida’s state courts, in Miami-Dade’s Eleventh Judicial Circuit^[30]. The transfer was a concrete achievement of international cooperation^[30]. It was not itself a conviction, and the receiving prosecution was not a federal HFNT trial^[30]. The institutional story includes that state-level destination^[30].

Mohammad Ibrahim Bazzi’s path ran through Romania^[14]. Arrested there in February 2023, he was extradited to New York and pleaded guilty in September 2024 to a conspiracy involving unlawful transactions with a designated terrorist^[14]. Prosecutors described recorded proposals for fictitious business transactions to disguise proceeds from liquidating American real-estate interests^[14]. He agreed to forfeit nearly $830,000^[14]. The case reached conduct that could be charged through sanctions law after investigators obtained both evidence and custody^[14].

Then came a result that a press-release-only chronology could miss^[15]. The March 2025 docket records a time-served sentence, one year of supervised release and compliance with a judicial removal order^[15]. Two other counts were dismissed on the government’s motion^[15]. Those details change how the case belongs in the scorecard: a guilty plea followed by an actual sentencing disposition, not a defendant still awaiting sentence and not an automatic application of the offense’s maximum penalty^[15].

Nazem Ahmad’s case shows the earlier stage of the same journey^[16]. In April 2023, prosecutors charged him and eight others in an alleged sanctions-evasion scheme involving art and diamonds^[16]. They described six paintings worth $199,800 exported to a Lebanese entity after Ahmad negotiated their purchase^[16]. HSI trade investigators, overseas offices, Customs and Border Protection and British authorities contributed to the investigation^[16]. At the announcement, one defendant had been arrested in Britain while the other eight, including Ahmad, were described as abroad and at large^[16]. Charges exposed the alleged transactions; securing every defendant remained a separate problem^[16].

These cases do not produce an honest single win-loss percentage^[9],^[13],^[15],^[16],^[18],^[30]. The selected record contains a civil recovery, sanctions-related pleas and sentences, a terrorism conviction upheld on appeal, an extradition into a state prosecution, and charges whose announcement did not establish a final outcome^[9],^[13],^[15],^[16],^[18],^[30]. A meaningful scorecard keeps those categories visible^[9],^[13],^[15],^[16],^[18],^[30]. It also asks which investigation HFNT actually helped advance, rather than assigning every subsequent Hezbollah-related action to a team created in 2018^[1],^[9],^[13],^[15],^[16],^[18],^[30].

When the next investigator works at a bank

Criminal proceedings were only one part of the pressure^[27]. The 2015 Hezbollah financing legislation directed restrictions or strict conditions on certain American accounts used by foreign financial institutions^[27]. Its importance was structural: Washington could put access to the U.S. financial system at issue, extending the consequences of a relationship beyond the individual whose name appeared on a list^[27]. This was a different point of intervention from arresting a broker or proving a laundering conspiracy^[27].

The April 2019 action against Kassem Chams makes that difference tangible^[19]. Treasury described the designation as a joint effort with DEA’s Project Cassandra, while acknowledging that Chams Exchange operated under Lebanese central-bank licensing^[19]. The American action blocked covered property and generally prohibited U.S. dealings^[19]. A licensed business could therefore become the target of U.S. financial restrictions without a criminal judgment appearing alongside the designation^[19]. The two systems addressed the same commercial actor through different authorities^[19].

The next handoff could reach someone who had never heard of Cassandra^[20]. In October 2024, FinCEN issued an alert to financial institutions describing Hezbollah-linked revenue and laundering networks^[20]. Its Latin America section identified BAC relationships with South American traffickers and mechanisms involving the Black Market Peso Exchange, hawala and intercontinental cash movements^[20]. The document asked institutions to flag relevant suspicious-activity reports with a specific keyword^[20]. Investigative knowledge was being turned into instructions for recognizing and reporting transactions^[20].

That handoff has its own blind spot^[29]. FATF and the Egmont Group explain that an individual bank may see only a small part of a trading network^[29]. Their research also describes authorities concentrating on customs or smuggling offenses without pursuing the related financial trail^[29]. Put together, those problems resemble separate readers holding different pages of the same account book^[29]. Sharing information matters because no single participant necessarily sees the customer, the goods, the payment and the ultimate beneficiary together^[29].

FinCEN’s alert addressed that fragmented picture with indicators involving invoices, counterparties, business purpose and payment arrangements^[20]. It also warned that no single red flag determines illicit or suspicious activity^[20]. A transaction that requires examination is the beginning of an inquiry^[20]. Treating the indicator itself as a verdict would weaken the very distinction the alert asks financial institutions to make^[20]. The alert also described continued access through businesses, intermediaries and accounts held in other names^[20]. That makes a customer’s apparent distance from a sanctioned person an investigative question, rather than an answer^[20]. Following beneficial interests and commercial relationships can matter as much as matching the visible name^[20].

How it works

How a financial lead becomes usable

The handoffs described by officials and financial guidance.

Detection

Bank or investigator

A transaction or relationship raises a question. [20] [29]

Connection

Across agencies

Combine evidence and information from abroad. [1] [2] [3]

Action

The appropriate tool

Prosecution, sanctions or asset measures. [3] [6]

A standing offer for the next lead

The search for information also moved outside regulated institutions^[21]. On 19 May 2025, the U.S. Embassy in Brazil publicized a standing Rewards for Justice offer of up to $10 million for information disrupting Hezbollah’s financial mechanisms^[21]. The requested leads ranged across financiers, exchange houses, businesses, procurement companies and criminal schemes^[21]. This was an invitation to expose relationships and assets, not an announcement that a reward had been paid or a new prosecution completed^[21].

At an October 2025 Senate narcotics hearing, the strategic concern remained unresolved^[23]. Marshall Billingslea, a former Treasury official, argued that overseas financiers and their businesses had remained largely unscathed despite Hezbollah’s military losses, particularly in Latin America^[23]. He recalled Paraguayan counterparts’ concern about charcoal-related trafficking years earlier^[23]. His testimony connected the institutional campaign to a problem that survives individual arrests: commercial networks can retain people, connections and earning capacity while the organization they support loses military infrastructure elsewhere^[23].

Levitt gave the same hearing another reason to pursue narcotics finance^[22]. Mapping those networks could also reveal potential connections to operations^[22]. That argument does not require assuming that each payment funds a particular attack^[22]. It identifies an investigative payoff from understanding who works with whom, where intermediaries operate and which relationships persist after an enforcement action^[22]. The financial inquiry can generate the next question as well as the next charge^[22].

The name returns

Research from INSS in May 2026 described Hezbollah’s financial resilience in terms of replaceable intermediaries and dispersed networks^[24]. Noam Binstok, Orna Mizrahi and Esteban Klor argued that financial nodes could be reconstituted and recommended a permanent Israeli interagency body^[24]. They also emphasized that most diaspora financial activity is legitimate^[24]. Their analysis points toward targeted work on identifiable facilitators, while preserving the distinction between those networks and the wider communities within which ordinary commerce and remittances take place^[24].

RAND’s research adds a problem for anyone trying to measure the campaign from outside government^[26]. Specific revenue estimates rest on limited verifiable unclassified information, and stale public knowledge can hamper both investigations and financial detection^[26]. A list of announcements can show that agencies acted^[26]. It cannot, without more evidence, establish how much revenue disappeared, how long a route stayed closed or how many replacement intermediaries took over^[26]. Those are questions about lasting effect, beyond the immediate legal output^[26].

On 30 June 2026, the Terrorist Financing Targeting Center announced joint designations of five entities and 16 individuals connected to Hezbollah’s finances^[25]. Every target had already been designated by the United States^[25]. The action extended coordinated pressure; it did not add 21 newly discovered targets to an American total^[25]. Treasury’s accompanying account described financial access maintained through accounts re-registered in officials’ names^[25]. After years of announcements, investigations and court decisions, the task still came down to recognizing the same underlying relationship when the name on the account had changed^[25].

Sources

1. DOJ, HFNT creation, 11 January 2018
2. ICE, HSI appointed to Hezbollah team, 17 January 2018
3. John Cronan, AMIA anniversary remarks, 25 July 2019
4. DOJ, New transnational organized crime measures, 15 October 2018
5. Matthew Levitt, Hezbollah, Cocaine, and the Iran Nuclear Deal: A Nuanced Picture, Lawfare, 2018
6. Derek Maltz, House testimony, 8 June 2017
7. David Asher, House testimony, 8 June 2017
8. DEA, European drug and laundering operation, 1 February 2016
9. DOJ, Lebanese Canadian Bank settlement, 2013
10. DOJ, Ayman Joumaa indictment, 2011
11. DEA, Kassim Tajideen arrest, 24 March 2017
12. DEA, Kassim Tajideen guilty plea, 7 December 2018
13. DEA, Kassim Tajideen sentence, 9 August 2019
14. DOJ, Mohammad Bazzi guilty plea, 20 September 2024
15. United States v. Bazzi, sentencing minute entry, 12 March 2025, docket reproduction
16. DOJ, Nazem Ahmad and associates charged, 18 April 2023
17. DOJ, Ali Kourani sentenced, 3 December 2019
18. United States v. Kourani, Second Circuit opinion, 27 July 2021
19. Treasury, Kassem Chams action, 11 April 2019
20. FinCEN, FIN-2024-Alert003, 23 October 2024
21. U.S. Embassy Brazil, Rewards for Justice notice, 19 May 2025
22. Matthew Levitt, Senate narcotics caucus testimony, 21 October 2025
23. Marshall Billingslea, Senate narcotics caucus testimony, 21 October 2025
24. Binstok, Mizrahi and Klor, Hezbollah’s Global Financial Network, INSS, 3 May 2026
25. Treasury, TFTC joint Hezbollah designations, 30 June 2026
26. RAND, Hezbollah networks in Latin America, 2025
27. Hizballah International Financing Prevention Act, enrolled 2015 legislation
28. Robert Mazur, Attacking Drug Cartels Through Undercover Money Laundering Operations, CTC Sentinel, 2012
29. FATF/Egmont, Trade-Based Money Laundering: Trends and Developments, 2020
30. DOJ, Diab extradition from Cyprus, 18 July 2020