Blog

  • More Than 1,100 Ships Hit by Widespread GPS Disruption After Iran Strikes

    Following the U.S.-Israel attack against Iran on 28 February, more than 1,100 ships across the Middle East experienced GPS and Automatic Identification System (AIS) interference within a 24-hour period, exposing the vessels to navigation and accident risks, according to the maritime AI company Windward.

    In what resembled a maritime cybersecurity incident, the interference caused GPS and AIS signals to show false vessel locations –  showing them inland at a nuclear power plant, at airports, and on Iranian land, and “creating navigation and compliance risks.” In its analysis published  March 1, Windward identified “at least 21 new AIS jamming clusters across the UAE, Qatari, Omani, and Iranian waters.”

    Speaking to OCCRP, the firm said that this spike in jamming is not all “deliberate GPS spoofing by individual vessels but rather broad jamming that disrupts all traffic in affected areas.”

    This is not the first reported jamming wave. Windward said similar patterns have appeared in the Baltic, Black Sea, and Red Sea, and now again near Iran.

    Signal jamming at this scale is typically carried out using ground-based transmitters that overpower the legitimate GPS signals. In some cases, more sophisticated systems “can ‘throw’ vessels’ AIS-reported positions onto land,” similar to the recent interference, the company said.

    “What’s changed now is the intensity and geographic spread of the jamming in the Gulf in a very short period,” Windward added.

    Lloyd’s published a similar analysis, showing wide-scale jamming across the region on March 2, with about 600 cargo ships appearing off the UAE, more than 80 recorded off Iran, around 50 off Oman, and about 10 off Qatar.

    “I think it’s most likely that it is the neighboring countries trying to prevent Iranian strikes that today appear to have been targeting multiple neighbors,” said Royal Institute of Navigation chief executive Ramsey Faragher.

    “This is widespread, intentional interference that creates serious safety risks, including higher collision risk and false alerts about where ships are and what they’re doing,” Windward warned.

  • The Government Uses Targeted Advertising to Track Your Location. Here’s What We Need to Do.

    We’ve all had the unsettling experience of seeing an ad online that reveals just how much advertisers know about our lives. You’re right to be disturbed. Those very same online ad systems have been used by the government to warrantlessly track peoples’ locations, new reporting has confirmed.

    For years, the internet advertising industry has been sucking up our data, including our location data, to serve us “more relevant ads.” At the same time, we know that federal law enforcement agencies have been buying up our location data from shady data brokers that most people have never heard of.

    Now, a new report gives us direct evidence that Customs and Border Protection (CBP) has used location data taken from the internet advertising ecosystem to track phones. In a document uncovered by 404 Media, CBP admits what we’ve been saying for years: The technical systems powering creepy targeted ads also allow federal agencies to track your location.

    The document acknowledges that a program by the agency to use “commercially available marketing location data” for surveillance drew from the process used to select the targeted ads shown to you on nearly every website and app you visit. In this blog post, we’ll tell you what this process is, how it can and is being used for state surveillance, and what can be done about it—by individuals, by lawmakers, and by the tech companies that enable these abuses.

    Advertising Surveillance Enables Government Surveillance

    The online advertising industry has built a massive surveillance machine, and the government can co-opt it to spy on us. 

    In the absence of strong privacy laws, surveillance-based advertising has become the norm online. Companies track our online and offline activity, then share it with ad tech companies and data brokers to help target ads. Law enforcement agencies take advantage of this advertising system to buy information about us that they would normally need a warrant for, like location data. They rely on the multi-billion-dollar data broker industry to buy location data harvested from people’s smartphones.

    We’ve known for years that location data brokers are one part of federal law enforcement’s massive surveillance arsenal, including immigration enforcement agencies like CBP and Immigration and Customs Enforcement (ICE). ICE, CBP and the FBI have purchased location data from the data broker Venntell and used it to identify immigrants who were later arrested. Last year, ICE purchased a spy tool called Webloc that gathers the locations of millions of phones and makes it easy to search for phones within specific geographic areas over a period of time. Webloc also allows them to filter location data by the unique advertising IDs that Apple and Google assign to our phones.

    But a document recently obtained by 404 Media is the first time CBP has acknowledged the location data it buys is partially sourced from the system powering nearly every ad you see online: real-time bidding (RTB). As CBP puts it, “RTB-sourced location data is recorded when an advertisement is served.” 

    Even though this document is about a 2019-2021 pilot use of this data, CBP and other federal agencies have continued to purchase and use commercially obtained location data. ICE has purchased location tracking tools since then and recently requested information on “Ad Tech” tools it could use for investigations. 

    The CBP document acknowledges two sources of location data that it relies on: software development kits (SDKs) and RTB, both methods of location-tracking that EFF has written about before. Apps for weather, navigation, dating, fitness, and “family safety” often request location permissions to enable key features. But once an app has access to your location, it could share it with data brokers directly through SDKs or indirectly (and often without the app developers’ knowledge) through RTB. Data brokers can collect location data from SDKs that they pay developers to put in their apps. When relying on RTB, data brokers don’t need any direct relationship with the apps and websites they’re collecting location data from. RTB is facilitated by ad companies that are already plugged into most websites and apps. 

    How Real-Time Bidding Works

    RTB is the process by which most websites and apps auction off their ad space. Unfortunately, the milliseconds-long auctions that determine which ads you see also expose your information, including location data, to thousands of companies a day. At a high-level, here’s how RTB works:

    1. The moment you visit a website or app with ad space, it asks an ad tech company to determine which ads to display for you. 
    2. This ad tech company packages all the information they can gather about you into a “bid request” and broadcasts it to thousands of potential advertisers. 
    3. The bid request may contain information like your unique advertising ID, your GPS coordinates, IP address, device details, inferred interests, demographic information, and the app or website you’re visiting. The information in bid requests is called “bidstream data” and typically includes identifiers that can be linked to real people. 
    4. Advertisers use the personal information in each bid request, along with data profiles they’ve built about you over time, to decide whether to bid on the ad space. 
    5. The highest bidder gets to display an ad for you, but advertisers (or the adtech companies that represent them) can collect your bidstream data regardless of whether or not they bid on the ad space.   

    A key vulnerability of real-time bidding is that while only one advertiser wins the auction, all participants receive data about the person who would see their ad. As a result, anyone posing as an ad buyer can access a stream of sensitive data about billions of individuals a day. Data brokers have taken advantage of this vulnerability to harvest data at a staggering scale. For example, the FTC found that location data broker Mobilewalla collected data on over a billion people, with an estimated 60% sourced from RTB auctions. Leaked data from another location data broker, Gravy Analytics, referenced thousands of apps, including Microsoft apps, Candy Crush, Tinder, Grindr, MyFitnessPal, pregnancy trackers and religious-focused apps. When confronted, several of these apps’ developers said they had never heard of Gravy Analytics. 

    As Venntel, one of the location data brokers that has sold to ICE, puts it, “Commercially available bidstream data from the advertising ecosystem has long been one of the most comprehensive sources of real-time location and device data available.” But the privacy harms of RTB are not just a matter of misuse by individual data brokers. RTB auctions broadcast the average person’s data to thousands of companies, hundreds of times per day, with no oversight of how this information is ultimately exploited. Once your information is broadcast through RTB, it’s almost impossible to know who receives it or control how it’s used. 

    What You Can Do To Protect Yourself

    Revelations about the government’s exploitation of this location data shows how dangerous online tracking has become, but we’re not powerless. Here are two basic steps you can take to better protect your location data:

    1. Disable your mobile advertising ID (see instructions for iPhone/Android). Apple and Google assign unique advertising IDs to each of their phones. Location data brokers use these advertising IDs to stitch together the information they collect about you from different apps. 
    2. Review apps you’ve granted location permissions to. Apps that have access to your location could share it with other companies, so make sure you’re only granting location permission to apps that really need it in order to function. If you can’t disable location access completely for an app, limit it to only when you have the app open or only approximate location instead of precise location. 

    For more tips, check out EFF’s guide to protecting yourself from mobile-device based location tracking. Keep in mind that the security plan that’s best for you will vary in different situations. For example, you may want to take stronger steps to protect your location data when traveling to a sensitive location, like a protest. 

    What Tech Companies and Lawmakers Must Do

    Legislators and tech companies must act so that individuals don’t bear the burden of defending their data every time they use the internet.

    Ad tech companies must reckon with their role in warrantless government surveillance, among other privacy harms. The systems they built for targeted advertising are actively used to track people’s location. The best way to prevent online ads from fueling surveillance is to stop targeting ads based on detailed behavioral profiles. Ads can still be targeted contextually—based on the content people are viewing—without collecting or exposing their sensitive personal information. Short of moving to contextual advertising, tech companies can limit the use of their systems for government location tracking by:

    • Stopping the use of precise location data for targeted advertising. Ad tech companies facilitating ad auctions can and should remove precise location data from bid requests. Ads can be targeted based on people’s coarse location, like the city they’re in, without giving data brokers people’s exact GPS coordinates. Precise location data can reveal where we work, where we live, who we meet, where we protest, where we worship, and more. Broadcasting it to thousands of companies a day through RTB is dangerous.
    • Removing advertising IDs from devices, or at minimum, disabling them by default. Advertising IDs have become a linchpin of the data broker economy and are actively used by law enforcement to track people’s location. Advertising IDs were added to phones in 2012 to let companies track you, and removing them is not a far-fetched idea. When Apple forced apps to request access to people’s advertising IDs starting in 2021 (if you have an iPhone you’ve probably seen the “Ask App Not to Track” pop-ups), 96% of U.S. users opted out, essentially disabling advertising IDs on most iOS devices. One study found that iPhone users were less likely to be victims of financial fraud after Apple implemented this change. Google should follow Apple’s lead and disable advertising IDs by default.

    Lawmakers also need to step up to protect their constituents’ privacy. We need strong, federal privacy laws to stop companies from spying on us and selling our personal information. EFF advocates for data privacy legislation with teeth and a ban on ad targeting based on online behavioral profiles, as it creates a financial incentive for companies to track our every move.

    Legislators can and must also close the “data broker loophole” on the Fourth Amendment. Instead of obtaining a warrant signed by a judge, law enforcement agencies can just buy location data from private brokers to find out where you’ve been. Last year, Montana became the first state in the U.S. to pass a law blocking the government from buying sensitive data it would otherwise need a warrant to obtain. And in 2024, Senator Ron Wyden’s EFF-endorsed Fourth Amendment is Not for Sale Act passed the House before dying in the Senate. Others should follow suit to stop this end-run around constitutional protections.

    Online behavioral advertising isn’t just creepy–it’s dangerous. It’s wrong that our personal information is being silently harvested, bought by shadow-y data brokers, and sold to anyone who wants to invade our privacy. This latest revelation of warrantless government surveillance should serve as a frightening wakeup call of how dangerous online behavioral advertising  has become.

  • Paraguayan Senator Convicted of Aiding International Cocaine Trafficker

    A Paraguayan senator from the ruling Colorado Party was sentenced to 13 years in prison for money laundering and criminal association linked to a scheme led by fugitive Uruguayan drug trafficker Sebastián Marset, one of the DEA’s most wanted fugitives.

    Senator Erico Galeano Segovia was found guilty of collaborating with Marset’s criminal organization during a trial held Wednesday in Asunción, Paraguay’s capital. “Erico Galeano provided operational support to a transnational organization dedicated to the international trafficking of cargo between 2020 and 2021,” the president of the Specialized Organized Crime Sentencing Court said while reading the verdict.

    Prosecutors presented evidence that in 2020 Galeano sold a luxury property for $1 million in cash to Hugo Manuel González Ramos, who is under investigation as a frontman for Miguel Ángel Insfrán, alias “Tío Rico” (Uncle Rico). Miguel Insfrán and his brother José Alberto are considered leaders of the “Insfrán Clan,” which worked with Marset between 2019 and 2021 to traffic cocaine from South America to Europe.

    The judge said González Ramos lacked basic financial activity to justify the purchase. He also appears as the listed owner of a livestock company raided during “Operation A Ultranza Py” in 2022, Paraguay’s largest anti-drug investigation, which targeted Marset and led to the downfall of the Insfrán clan.

    The property was transferred to González Ramos only a year after the cash transaction and was not recorded in public registries. The court said the maneuver was designed to avoid leaving a paper trail and to conceal the identity of the true buyer, Miguel Insfrán.

    The presiding judge also said Marset used a light aircraft owned by Galeano on December 30, 2022, to travel from Ciudad del Este, on the border with Brazil, to Asunción. The aircraft, registered ZP-BHQ, had reportedly been used by Marset on several occasions.

    The court said financial support Galeano provided to Marset’s organization generated significant returns, part of which was funneled into Deportivo Capiatá, a semi-professional Paraguayan soccer club where Galeano served as president. Prosecutors said the club was used to launder proceeds from the trafficking scheme.

    Galeano initially did not list Deportivo Capiatá in his 2022 asset declaration. After Operation A Ultranza Py became public, he amended the statement. In March 2022, an “account receivable” of $158,730 appeared. By 2023, the amount had risen to $1,44 million.

    “The introduction of such funds into Deportivo Capiatá, among others, and their subsequent declaration as accounts receivable, reveals an operation intended to grant an appearance of legitimacy to resources that effectively stem from an illicit origin,” the court said. Marset also played briefly for the club in 2021 during Galeano’s tenure as a director. The stadium, with a capacity of about 15,000, still bears Galeano’s name.

    Galeano remains an active senator and holds parliamentary immunity, which protects him from imprisonment until the sentence is final and enforceable by Paraguay’s Supreme Court. Lawyers for the Colorado Party lawmaker said they will appeal the ruling.

  • World News In Brief: Sudan conflict intensifies, Global inequality deepening, HIV success amid new medicine, increase in ‘Domicide’ worldwide

    There has been an alarming escalation of violence in the Kordofan region where fighting has killed and injured civilians, destroyed homes, hospitals and other civilian infrastructure. 
  • MIDDLE EAST LIVE: Further escalation drives uncertainty and suffering

    On day six of the war in the Middle East, there’s been no let-up in bombs, drones and rockets targeting Iran, Israel, Lebanon and many Gulf States, while NATO forces reportedly intercepted a missile fired at Turkïye by Iran, a claim denied by Tehran. We’ll bring you the latest from the United Nations and our partners at headquarters and in the field. Thank you for joining us. UN News app users can follow the coverage here.
  • Trying to get social care can be ‘horrendous’, Baroness Casey tells BBC

    The chair of the independent commission on adult social care also says the care system relies on the exploitation of its workforce.
  • Conflict-Tainted Venezuelan Gold Entered World Market Through Caribbean Island, Documents Indicate

    The turboprop plane was meant to touch down in Miami by 4 p.m., early enough for its precious cargo to be sent on to Zurich the same day. 

    Onboard were 10 bags of gold bars, worth more than $7 million. They were headed for a complex of gray buildings in the foothills of the Swiss Alps, the Argor-Heraeus gold refinery.

    But when the plane — which had taken off from Curaçao, a tiny island nation 70 km off the Venezuelan coast — finally landed at Miami International Airport on March 17, 2015, there was no immediate connecting flight.

    With the gold bars sitting in the airport overnight, U.S. officials took a closer look at their paperwork — and seized them.

    According to an email from the logistics firm Brink’s, which was organizing the shipment, investigators were suspicious about the metal’s true origin. 

    Though it had been declared as “scrap gold” from Curaçao, U.S. authorities suspected a different source. 

    “They focused a lot on the origin of the gold and if it was from Venezuela,” a Brink’s official wrote.

    U.S. officials never got to the bottom of the question, and ended up releasing the bags of gold after a more than two-year legal tussle. 

    But now OCCRP and partners have found evidence that not only the gold bars seized in Miami, but over 90 metric tons of additional gold that moved along the same route — from the island of Curaçao to major refineries in Europe and Turkey — was indeed largely sourced from Venezuela, according to invoices, bank statements, emails, refining certificates, and court depositions obtained by journalists.

    At the time, Venezuela’s gold-mining industry was plagued by well-documented human rights abuses, corruption, and environmental destruction, and largely controlled by military elites. Because of this, gold from the country was widely considered problematic, and major refineries were expected to voluntarily disengage from supply chains that sourced from Venezuelan mines. 

    “Gold exploited in southern Venezuela is tainted by the most severe human rights abuses, including torture, summary executions, sexual violence and disappearances,” said Bram Ebus, a researcher with the International Crisis Group. “These wrongdoings have been widely documented and were known to industry actors.” 

    But between 2012 and 2018, a single trading company in Curaçao funneled huge amounts of gold from Venezuela into Europe, declaring most of it as “scrap” even though its co-founder later claimed much of it originated in mines.

    Much of this gold was ultimately sold to Argor-Heraeus, one of the world’s largest refiners, invoices show. 

    Lawyers for Argor-Heraeus confirmed that much of the gold processed through this supply chain originated in Venezuela, but denied that it came from the country’s problematic mines. 

    “Argor-Heraeus has not processed any mined gold from Venezuela but only scrap gold,” they wrote. They said the refinery stopped importing Venezuelan gold in 2017.

    There is no evidence that Argor-Heraeus violated any laws or regulations in this case, since Venezuelan gold was permitted to enter the global supply chain if it was declared as “scrap” or “recycled” gold. But experts say the case spotlights a critical oversight failure in the global bullion trade that persists today: it is relatively easy for suppliers and intermediaries to misrepresent freshly mined gold as scrap, and to obscure the real origin of gold shipments.

    The gold industry is largely self-regulated: The London Bullion Market Association (LBMA), which oversees the largest and most important gold market in the world, issues guidelines for companies to follow if they want to trade in London. But at the time, the LBMA did not require gold refiners to look beyond the first tier of their supply chains when buying scrap, which is sourced from melted-down jewelry, dental gold, or recycled coins and bars, not directly from mines. 

    This meant that Argor-Heraeus was only required to conduct due diligence on its immediate supplier in Switzerland, even though it was aware that the gold it purchased had actually been sent from Curaçao, and that much of it had been sourced from Venezuela — both considered highly risky sources of gold, according to multiple supply-chain analysts who spoke to OCCRP and partners. (Argor-Heraeus said it had always conducted stringent due diligence on its supply chain.)

    The LBMA says it has tightened its reporting requirements over time, but Juliane Kippenberg, a campaigner at the NGO Human Rights Watch, told OCCRP the guidance still has some gaps: For example, it doesn’t require full disclosure of all suppliers, including all mines of origin.

    European authorities also say that problems with the LBMA’s regulation persist to this day: A 2025 European Commission assessment of the LBMA concluded that its Responsible Gold Guidance remained only “partially aligned” with EU regulations, citing a system of internal controls that is “not working effectively” in practice. (The LBMA said its requirements for public disclosures were unmatched by other industry schemes and that it had “released additional guidance” to address issues raised by the EC.)

    The findings raise questions about how much mined Venezuelan gold may have entered the global supply chain under the guise of scrap — finding its way into everyday products like mobile phones, laptops, and electric vehicles at devastating cost to the country’s indigenous lands.

    Hundreds of U.S.-listed companies, including Apple, Nvidia, and Tesla, declared Argor-Heraeus was part of their gold supply chain during the period it was buying gold from Curaçao, according to their filings to the Securities and Exchange Commission. (There is no suggestion companies purchasing from Argor-Heraeus knew, or should have known, about the origins of the gold it provided them. Apple and Tesla did not reply to requests for comment. Nvidia said: “We routinely review suppliers to ensure compliance with our responsible mineral policy and conduct due diligence to ensure our products are sourced responsibly.”)

    A Golden Destination

    Turquoise waters, white-sand beaches, iconic Dutch colonial facades painted yellow, pink, and blue — Curaçao is a postcard-perfect Caribbean destination for honeymooners and cruise stopovers.

    But there’s more to the island than its picturesque beauty. A Dutch territory with a free-trade zone and direct connections to Europe, it is also an ideal transit point for both legal and illegal trade.

    In the 2010s, this tiny island with 150,000 residents and no gold mines suddenly emerged as a major gold-trading hub, with more than 110 metric tons of the metal, worth $4.5 billion, leaving the territory, according to data from the U.N.’s Comtrade database. (In comparison, the entire annual gold production of Colombia, one of the largest gold producers in South America, is around 60 tons.)

    “There was no plausible reason why there would be large flows going through Curaçao,” said Alan Martin, head of responsible sourcing at the LBMA.

    Around 2018, Martin says, the LBMA asked its members to stop accepting gold from the island. “If we look at the volumes, there aren’t enough jewelry stores to justify them. It was clear to us that it wasn’t a legitimate source.” But where was all this Curaçao gold coming from?

    The answer lies just 70 kilometers to the south, in Venezuela — a mineral-rich nation with a crumbling economy. 

    In 2011, President Hugo Chávez had nationalized the country’s gold mining sector, forcing out international firms and declaring that all gold mined in Venezuela was state property — at least in theory. 

    In practice, Colombian guerrillas, criminal syndicates, and military units jostled for control over individual mines, according to a 2019 International Crisis Group report, “Gold and Grief in Venezuela’s Violent South.”

    “The economic and power vacuum in mining areas created by that policy shift almost immediately led to criminal encroachment into the sector,” the Organization for Economic Cooperation and Development (OECD) wrote in a 2021 report on gold flows out of Venezuela.

    After Chávez’s death in 2013, his successor, Nicolás Maduro, faced collapsing oil revenues, soaring inflation and tightening international sanctions. The regime began treating gold as “the new oil,” according to the OECD. In February 2016, Maduro created the Orinoco Mining Arc, a zone of 112,000 square kilometers designated for extraction of gold, coltan, and diamonds. 

    What followed was an environmental and human-rights catastrophe that made Venezuelan gold globally notorious. 

    Over 2,500 square kilometers of the Venezuelan Amazon was deforested, with mercury from mining contaminating rivers, poisoning fish, and damaging technology used to provide fresh drinking water, according to a 2024 State Department report on gold extraction in Venezuela. 

    The U.N. High Commissioner for Human Rights documented extensive labor exploitation, child labor, sexual trafficking, killings, and disappearances in the mining zones. 

    “The mining and subsequent sale of gold has been one of the Maduro regime’s most lucrative financial schemes in recent years, as hundreds of thousands of miners have mined for gold in dangerous, makeshift mines in southern Venezuela, all of which are controlled by the Venezuelan military, which, in turn, corruptly charges criminal organizations for access,” the U.S. Treasury wrote in 2019.

    By 2019, a half-decade into its economic collapse, Venezuela was bleeding gold. 

    Transparency International’s local chapter estimates that some 70 percent of the country’s gold production was trafficked abroad during this period, since the government had made the independent gold trade illegal and required all producers to turn over what they had mined to the Central Bank. 

    In its 2021 report, the OECD highlighted the role of Curaçao, along with its sister islands Aruba and Bonaire, as a key transit hub for gold fleeing Venezuela. 

    “Gold transiting the Free Trade Zones (FTZs) in Aruba and Curaçao in particular was routinely shipped out as originating on the islands, effectively erasing its country of origin, and traveled to Europe easily on commercial flights, often heading to Switzerland or Dubai,” the report said, calling the volumes of gold transiting through Curaçao “striking.”

    It was against this background that large amounts of gold began flowing from Venezuela to a company called Curaçao Precious Metals & Co., or Cupremeco for short. 

    From Venezuela to Switzerland, via Curaçao

    Registered in one of Curaçao’s free-trade zones, Cupremeco was set up in 2010 by Venezuelan gold broker Héctor Óscar Castellón and Mario Pataro, part of an Italian family that migrated from Italy to Panama after World War II and became major players in the regional gold trade.

    The company was established as a trading firm that transported shipments of gold from “clients” in South America to sell in Switzerland, Pataro explained in a deposition given in 2014 as part of his divorce case in a Florida court.

    All of these gold suppliers were, in fact, located in Venezuela, he told OCCRP in an interview in December last year. 

    From Curaçao, the gold would be shipped to Argor-Heraeus’s refinery in Mendrisio, Switzerland. 

    But there was another stop along the way — at least on paper. Invoices show the gold was officially sold to a Swiss-registered broker called PMS SA (Precious Metals Services), which then sold it on to Argor-Heraeus to be refined.

    Though Precious Metals Services was technically Argor-Heraeus’s immediate supplier, it never took physical possession of the gold, which Cupremeco delivered directly to the Swiss refinery.

    According to testimony given by Castellón in Pataro’s divorce proceedings, Precious Metals Services was set up by Marco Briccola, a close business partner of Pataro’s, specifically to act as a middleman company that would help the gold ease through Argor-Heraeus’s compliance procedures. (The divorce proceedings focused in part on establishing Pataro’s wealth, during which time Castellón was questioned on his long-standing business relationship with Pataro.)

    “In order for different people to open big accounts in different refineries … you’ve got to go through … ‘know your customer’.… It is a very lengthy process and a difficult process and not everybody makes it. So we decided to go another route,” Castellón told a Florida court while testifying. 

    “We decided to go through Mario [Pataro], and Mario himself goes through another company that is the one that delivers to Argor-Heraeus in Switzerland.… It is a compliance thing,” he testified. 

    Upon arriving in Switzerland, the gold was declared to Swiss customs as having originated in Curaçao. (The “origin” country of a shipment can refer to either the country in which the product was completely obtained or where the last significant processing took place. In the case of gold, the last significant processing refers to the refinery process, a spokesperson for the Federal Office for Customs and Border Security in Switzerland told reporters.)

    Argor-Heraeus told OCCRP it could not confirm Castellón’s characterization of Precious Metals Services as a middleman intended to help pass compliance processes, which it said “would amount to an elaborate fraud to deceive downstream service providers.” (Briccola disputed Castellón’s description of Precious Metals Services’ role. Pataro and Castellón did not respond to requests for comment on the matter.)

    Argor-Heraeus said it had no business relationship with Cupremeco and dealt only with Precious Metals Services, and that it fulfilled “all due diligence requirements applicable at the time including KYC (Know Your Customer) checks on all parties along the supply chain known to us.” 

    The company said that, thanks to improved processes “over recent years…we no longer accept complex supply chain structures. As a result, we can nearly exclude fraudulent behavior circumventing our strict compliance measures nowadays.”

    The trade was lucrative: Between 2012 and 2018, gold valued at $2.2 billion was delivered from Cupremeco to Argor-Heraeus, according to invoices obtained by reporters. Bank records covering 2014 to 2019 show Precious Metals Services received around $1 billion from Argor-Heraeus for the gold it provided. (OCCRP was unable to account for the discrepancy between the two sets of documents. Argor-Heraeus said both figures were incorrect, but declined to provide corrections). For its role in moving the gold, Cupremeco received a cut of the earnings that Precious Metals Services received from Argor-Heraeus, according to Pataro.

    Precious Metals Services then paid hundreds of millions of dollars to companies owned by the Venezuela-based brokers who sourced the gold for Cupremeco, or their family members, friends and associates.

    One of those brokers was Castellón himself: Bank records show how Precious Metals Services paid more than $400 million to companies owned by him and by people in his close circle.

    A second major gold supplier to Cupremeco was Marco Antonio Flores Moreno. Companies managed by him and his close family received more than $55 million from Precious Metals Services. 

    Flores Moreno was charged in Brazil in 2020 for being a central figure in a gold trafficking organization which allegedly sourced illegally mined gold in Venezuela, transported it to Brazil, and misdeclared it as “scrap gold” to avoid scrutiny, according to a Brazilian federal court decision. (The case is ongoing. Flores Moreno did not respond to a request for comment).

    Gold Mines or Gold Teeth?

    Where were all these Venezuelan gold suppliers sourcing the metal from? 

    Although it was largely declared on Cupremeco invoices as “scrap” gold, there is evidence that a large percentage of it was actually freshly mined.

    Castellón, the biggest supplier to Cupremeco, estimated that the majority of the gold he sent the Curaçao trading firm originated from mines.

    “Some from pawnshops, but mostly mines,” Castellón said in court testimony from Pataro’s divorce case.

    For his part, Pataro doesn’t appear to have been paying much attention — he told OCCRP in December that he simply did not know where all the gold he sourced from Venezuela came from.

    “Whether it comes from [a] mine or comes from a poor guy’s teeth, I don’t know,” he said.

    Argor-Heraeus said forensic testing ruled out the possibility that any of the gold it sourced from Venezuela via Cupremeco and Precious Metals Services came from the country’s tainted mines. Instead, they said its chemical profile was consistent with scrap gold. 

    “The gold deliveries from [Precious Metals Services] to our client contained exclusively scrap gold,” lawyers for Argor-Heraeus wrote OCCRP.

    They said that Argor-Heraeus had conducted X-ray fluorescence (XRF) analysis of the gold from Cupremeco, finding that “purity levels and quantities are consistent with scrap gold stemming from a mix of jewelry scrap and bullion.” 

    XRF testing is commonly used by refiners to determine the quantities of gold, silver and other elements in the bars they receive. This process can offer clues about the gold’s origin, since mined and recycled materials tend to have distinct compositional signatures.  

    After receiving OCCRP’s questions, the refiner commissioned an independent expert, GeoBlock International, which reviewed its test results and corroborated the claim.

    “Both analyses confirm beyond any doubt that there was no evidence of primary material origins,” its lawyers wrote.

    GeoBlock told OCCRP: “The evidence strongly supports the conclusion that the material was scrap gold, not primary gold from mining operations.”

    Argor-Heraeus declined to share its laboratory results with OCCRP, citing confidentiality, and did not respond to questions over what data it shared with GeoBlock or whether all the gold supplied via Cupremeco and Precious Metals Services had been tested, or just a sample. 

    But OCCRP did independently obtain the results of 469 of Argor-Heraeus’s own refining operations for 6.5 metric tons of the gold it imported via Curaçao, mostly in 2016. The results show the amounts of gold and silver found in the material which Precious Metals Services delivered to Argor-Heraeus before the latter refined it.

    Six experts who reviewed the results, including four university academics with specialties in geology or geochemistry, told OCCRP the purity levels suggested a mixture of mined gold and recycled gold. 

    “The compositional signature observed aligns more closely with partially beneficiated primary gold than with previously refined gold re-entering the market as scrap,” said one of them, Wendell Fabricio-Silva, a forensic geologist.

    “The large amount of gold is not realistically obtainable through scrap alone, such that solely gold bullion from mining or scrap combined with mostly bullion from gold mining is the most logical explanation,” Richard Goldfarb, a professor of geology at Colorado School of Mines, told OCCRP.

    Argor-Heraeus told OCCRP it rejected the analysis of experts “whose methodology and results were not shared with us in full. The allegations are based on [an] admittedly incomplete dataset, covering only 2016 with some data points from 2014 and 2015 and only limited to gold and silver content.”

    It added: “Over recent years, we have significantly strengthened our standards and due diligence processes further, including mandatory on-site assessments and limiting partnerships to direct scrap collectors in the country of origin.”

    The Limits of ‘Good Delivery’

    As part of its standard-setting for the gold industry, the London Bullion Market Association maintains what it refers to as a “Good Delivery List” of refiners that follow guidelines based on OECD advice on “responsible” sourcing of gold.

    By 2013, the LBMA required refiners importing mined gold from “high-risk” supply chains to verify the identities of each company in the chain, as far back as the exporter — or even the mine itself. If there was any possibility of human rights abuses or contribution to conflict at any step in this chain, they were required to immediately disengage from the supply chain.

    Gold supply chain experts told OCCRP that in practice this advice would have made it extremely difficult for any refiner to source its gold from Venezuelan mines.

    “The conditions of extraction and trade in Venezuela were well documented since 2011, particularly following the establishment of the Orinoco Mining Arc in 2016,” said Luca Maiotti, a policy analyst at the OECD.

    But experts say the LBMA’s guidance at the time had a significant loophole: Although refiners had to follow a stringent due diligence process for gold sourced from mines, the same wasn’t true of recycled gold, which is considered less risky to purchase, since it has already been extracted and cannot come directly from conflict-tainted mines.

    Refiners purchasing scrap gold only needed to scrutinize their immediate supplier, not their full supply chain. Because of this, freshly mined gold is sometimes intentionally mislabeled as recycled to evade scrutiny, or roughly smelted and made into crude jewelry, which can then be declared as “scrap.”

    “Companies sourcing gold cannot take origin declarations or claims of being recycled at face value,” said Maiotti. 

    Because the gold sold by Cupremeco had been declared as scrap and routed through Precious Metals Services, Argor-Heraeus was not required to look further back in its supply chain. 

    Instead, in submissions to the LBMA, Argor-Heraeus reported sourcing the scrap gold from a Swiss importer between 2013 and 2018, without mentioning a Venezuelan origin. 

    “LBMA’s review of Argor-Heraeus’s submissions for the relevant reporting period did not indicate sourcing from Venezuela or Curaçao,” the LBMA told OCCRP.

    Argor-Heraeus said it had always exceeded the LBMA’s requirements under the applicable rules and regulations at the time. “This includes a structured and comprehensive due-diligence framework to all gold-supplying counterparties along the supply chain back to the actual origin of gold as far as technically possible,” the refiner added.

    LBMA said it had updated its reporting requirements “[a]s part of continuous improvement” to include “country-level data from 2019 and subsequently, information on material types.” 

    The supply chain from Curaçao to Argor-Heraeus eventually ran aground for good in June 2019, after British and Cayman authorities seized a cargo from Cupremeco. Most of the gold was eventually forfeited as proceeds of crime. (See box above.) 

    The investigation was finally enough to splinter the relationship between Argor-Heraeus, Precious Metals Services, and Cupremeco.

    “In line with our strict guidelines, we immediately disengage from supply chains or business partners whenever there is suspicion of fraudulent behavior,” Argor-Heraeus said of the incident.

    “This approach was also applied in 2019 to the relationship with [Precious Metals Services] and its upstream supply chain, including Cupremeco.”

    But by then, the Curaçao corridor had already shifted more than $2 billion worth of gold into the global supply chain via Argor-Heraeus.

    “Once the refiner has put it into those shiny gold bars that have their stamp on them, then it becomes legitimate and you lose all traceability and it flows into the international monetary system, into consumer electronics and jewelry and everything else,” said Quinn Kepes, Senior Program Director in the Raw Materials Programs Department at the nonprofit Verité, which helps companies identify labor risks in their supply chains.

    This investigation was developed with the support of Journalismfund Europe.

  • Modern(izing) Indian Capital?

    This post is part of a symposium on Jason Jackson’s Traders, Speculators, and Captains of Industry. Read the rest of the posts here. ** ** ** Jason Jackson’s erudite Traders, Speculators, and Captains of Industry tackles the question of how to understand India’s evolving foreign investment policy. Decisions about whether to promote domestic or foreign capital, he argues, have been guided by…

    Source

  • Ukraine Says Russia Recruited 24,000 Foreign Fighters, About Half From Asia

    Russia has recruited more than 24,000 foreign fighters from 44 countries since its full-scale invasion of Ukraine in February 2022, according to data provided to reporters by Ukrainian authorities.

    Ukraine has captured recruits from Colombia to Cameroon, and Italy to China, according to the previously unreported data.

    The figures were compiled by Ukraine’s Coordination Headquarters for the Treatment of Prisoners of War, and they cover the period from the invasion until late 2025. The data, which the agency says comes partially from sources within the Russian military, was shared with OCCRP’s media partner, Himal Southasian.

    The largest number of recruits came from Central Asia, according to the data. Uzbekistan, Tajikistan, Kazakhstan, Kyrgyzstan and Turkmenistan together sent 11,157 recruits. At least 1,399 of them have been killed, the agency said.

    “Russian efforts are focused on recruiting in the poorest countries of the world among the most vulnerable segments of the population,” said a spokesperson for the Coordination Headquarters.

    “These (recruitment) networks operate on three principles: bribery, deception, and coercion,” he told Himal Southasian.

    Russia’s foreign and defense ministries did not respond to emailed requests for comment.

    South Africa and India have made efforts to prevent recruitment, and to repatriate citizens fighting for Russia, while Kenya has charged one man with human trafficking. The Russian embassy in Nairobi denied any government involvement in recruitment, but noted that foreigners are allowed to voluntarily enlist in the military.

    Sri Lankan authorities launched an investigation in 2024 into a network allegedly sending fighters to Russia, and reportedly arrested two retired military officers. The outcome of that investigation is unclear, and police did not respond to a request for comment before publication.

    OCCRP reported in 2024 on Yemenis who said they left their own war-torn country, because they were promised non-combat jobs — and Russian citizenship — but were forced to fight.

    British Defence Secretary John Healey has said Russia’s increasing reliance on foreign recruitment is due to high levels of casualties suffered on the battlefield, Bloomberg reported.

    Between February 2022 and December 2025, Russian casualties — including killed, wounded, and missing — totalled about 1.2 million, according to a report by the Center for Strategic & International Studies (CSIS).

    The Washington-D.C.-based think tank warned, however, that “assessing casualties and fatalities in wartime is difficult and imprecise, and various sides have incentives to inflate or shrink the numbers for political purposes.”

    Ukraine has suffered about half the number of casualties as Russia, according to the CSIS report. 

    Ukraine’s Coordination Headquarters spokesperson said Russia has stopped recruiting from Sri Lanka, Nepal, India, and Pakistan, which together had sent at least 1,794 fighters.

    Of the 751 Sri Lankans recruited into the Russian military, at least 275 were killed in action, he added.

    One of the missing Sri Lankans is Ulpakada Pathira Arachchilage Mahesh Suranjith Karunanayake, 45. He had served one year in the Russian military and was due to return home, according to his wife Nayomi Maheshika Dissanayake, 41. 

    She told Himal that she had last heard from her husband more than seven months ago, and he was last seen boarding a Moscow-bound bus from Bryanka, an occupied city in eastern Ukraine.

    Before disappearing, he found that 3.7 million Russian rubles (about $48,000) had been withdrawn from his account by his commander, and he filed a complaint, Dissanayake said.

    The Ukraine Coordination Headquarters spokesperson claimed that Russian officers sometimes steal the signing bonuses received by recruits, which range from 1 to 4 million rubles (about $13,000 to $52,000).

    He added that fighters are recruited online via chatbots and advertisements on social media, as well as in person through locals who are paid to find potential candidates.

    In the case of Karunanayake, a Sri Lankan recruitment agent told him “he would not be sent to the frontline,” according to his wife, Dissanayake.

    “Then he gave money to a local agent. That agent is in hiding now,” she said.