The PCC Beyond Brazil: Criminal Adaptation, Logistical Infiltration, and Transnational Risk

A prison faction that became an infrastructure player
A name once confined to Brazilian court records now surfaces in U.S. federal indictments, European port investigations, and West African transit reports: the Primeiro Comando da Capital (PCC). Founded in 1993 inside the São Paulo prison system, it now operates as a decentralized criminal network with documented footprints across South America, European ports, West African transit hubs, and — most relevant for this readership — multiple U.S. states. The U.S. Department of the Treasury has formally characterized the PCC as “the most notorious organized crime group in Brazil and among the largest in Latin America,” sanctioning a key money-laundering operative under counter-narcotics authorities in March 2024. According to Reuters reporting from May 2025, U.S. officials informed Brazilian counterparts that the FBI had identified PCC and Comando Vermelho cells in twelve U.S. states, including Massachusetts, New Jersey, New York, Florida, Connecticut, and Tennessee.

The PCC is no longer best understood as a Brazilian domestic problem. It functions as a transnational risk variable embedded within the lawful logistical networks that move global trade. Ports, freight corridors, fuel distribution systems, customs environments, and cross-border trade routes are not collateral targets — they are where the organization operates. The PCC is not breaking into the system from the outside; it operates inside the system, using the same infrastructure as legitimate commerce and presenting to inspection as ordinary business.

A shifting policy environment
The strategic context has shifted materially in recent months. Under Executive Order 14157 of January 2025, the U.S. administration designated eight Latin American criminal organizations — primarily Mexican cartels, together with Tren de Aragua and MS-13 — as both Foreign Terrorist Organizations (FTO) and Specially Designated Global Terrorists (SDGT) in February 2025. The PCC and Comando Vermelho were not included. In May 2025, according to Reuters, the Brazilian government formally rejected a U.S. request to extend equivalent designations to both groups, with Brazil’s national secretary of public security stating that Brazil deals with criminal organizations that have infiltrated state structures, not terrorist groups. That divergence has not closed: in March 2026, U.S. authorities renewed pressure on Brasília, and the question remains formally open as of this writing. This article does not take a position on the terrorism label. The point for the border security community is that the PCC has moved, in roughly twelve months, from a regional law-enforcement concern to a transnational policy variably affecting border security frameworks across the Americas.

Two operations, one pattern
On 28 August 2025, Brazil launched Operação Carbono Oculto, described by the Federal Revenue Service and the São Paulo Public Prosecutor’s Office as the largest operation against organized crime in the country’s history. It demonstrated that the PCC had embedded itself inside the legitimate fuel sector, from importation through distribution to retail sale. According to the Federal Revenue Service, roughly one thousand fuel stations linked to the network moved approximately R$52 billion (about US$10 bn) between 2020 and 2024, with tax payments far below what those volumes should generate.

A fintech operating as a parallel bank reportedly moved an additional R$46 billion (about US$9 bn) in non-traceable transactions over the same period, and authorities identified at least forty closed-end investment funds, holding roughly R$30 billion (about US$6 bn) in assets, controlled by the organization. Search and seizure warrants were executed against approximately 350 targets — individuals and companies — across eight Brazilian states, including ethanol plants, freight transport companies, distributors, retail stations, investment funds, and payment institutions, many concentrated in São Paulo’s main financial district.

The takeaway from Carbono Oculto is not the size of the fraud but the method. According to Brazilian investigators, the PCC did not capture the fuel sector by force — it bought into it through layered corporate structures, shell companies, single-beneficiary investment funds, and parallel financial institutions that looked like ordinary business. Legitimate commercial structures were drawn into the criminal economy without ceasing to function as lawful commerce. That is what makes conventional inspection blind to it.

The second case occurred inside the United States. In March 2025, the U.S. Attorney for the District of Massachusetts announced federal charges against eighteen Brazilian nationals tied to the trafficking of more than 100 firearms across the state, with weapons sourced mostly from Florida and South Carolina. According to the Department of Justice press release of 19 March 2025, charging documents alleged that some of the firearms were tied to gang activity involving the PCC and smaller affiliated street groups. The investigation involved coordinated work by ATF, Homeland Security Investigations, ICE Enforcement and Removal Operations, the Massachusetts State Police, and local departments — the inter-agency coordination required when transnational organizations operate inside domestic territory. The PCC and its associated networks now appear in U.S. federal indictments, DHS investigations, and ICE removal proceedings.

The firearms axis is not the only U.S. exposure documented in open sources. In late 2025, the Center for Advanced Defense Studies (C4ADS) published an analysis identifying Florida-registered companies linked to alleged PCC operatives, illustrating how networks flagged abroad continue to access U.S. corporate infrastructure. The Massachusetts indictments and the C4ADS findings outline two distinct U.S. vectors: a logistical-trafficking vector running through southern source states into the Northeast, and a financial-placement vector exploiting U.S. corporate registries. Both are consistent with the pattern revealed by Carbono Oculto: distribution across lawful structures rather than concentration in identifiable criminal channels.

Four drivers of systemic criminal adaptation
Reading the Brazilian and American cases side by side reveals an operational logic that standard threat models miss. Two decades of investigative work inside São Paulo’s organized crime and narcotics units point to four structural features behind that logic, each carrying direct consequences for border, customs, port, and supply chain work.

First: horizontal command, not vertical hierarchy. The PCC does not work like a classical cartel with a single chain of command. It operates through cells with functional autonomy, held together by shared rules rather than by a top boss. When a cell is hit through arrests, seizures, or prosecutions, the damage stays local and the rest of the network absorbs the loss. Decapitation strategies developed for vertically integrated cartels deliver diminishing returns against this model.

Second: money spread across legal businesses. Carbono Oculto made this visible at scale. Instead of concentrating illicit money in identifiable accounts, the organization spreads it across hundreds of legally registered companies — fuel stations, distributors, importers, ethanol plants, investment funds, payment institutions. Each looks like ordinary commerce to a regulator. The illicit pattern only becomes visible when the network is reconstructed as a whole, which requires multi-agency cooperation and financial intelligence access beyond border-level inspection. Beneficial ownership opacity sits at the center of the model: when ownership chains pass through single-beneficiary investment funds, nominee directors, and payment institutions outside conventional banking regulation, traditional name-screening protocols become structurally inadequate.

Third: logistics is not a cover — it is the business. Trucking companies, fuel distributors, petroleum importers, port-adjacent warehousing, freight forwarders: in this model, these are not fronts in the traditional sense — they function as the operation itself. The same logistical networks that move legitimate cargo also channel illicit value. Traditional cargo inspection assumes a clean line between legitimate and contraband shipments. When that line no longer holds, the illicit value travels not as contraband but as commercial relationships, invoicing patterns, and ownership linkages that conventional inspection is not designed to detect.

Fourth: enforcement silos work in the PCC’s favor. This is not the fault of any single agency — it is how the system is built.

Border, customs, financial intelligence, and cargo inspection functions run as parallel silos with limited visibility across each other. The PCC does not exploit any one specific blind spot; it exploits the gaps between domains. A suspicious financial flow in São Paulo, an irregular shipment in Santos, a Brazilian national arriving in Miami, and a firearms transaction in Framingham can all belong to the same operation, without any single inspection regime positioned to connect them. The organization does not need to defeat any specific agency; it only needs to remain distributed across enough domains that no single agency sees the full picture. That is a structural advantage, not a tactical one, and it cannot be solved by improving any one function in isolation.

What this means at the operational level
For practitioners, the implication is concrete. Organizations like the PCC are not stopped by frameworks built around individual interception. They require frameworks built around structural infiltration — the ability to recognize when lawful commercial structures have been absorbed into a criminal economy without losing their legitimate appearance. Several practical shifts follow.
Cargo inspection cannot rely solely on physical examination of declared goods. The illicit content is no longer necessarily inside the container — it is increasingly the corporate structure operating the container, the freight forwarder documenting it, the distributor receiving it, and the financial flow paying for it. Inspection has to be paired with entity-level due diligence: corporate ownership analysis, beneficial owner verification, and cross-referencing with financial intelligence indicators. A clean container moved by a compromised company through a legitimate corridor produces no inspection alert. Customs risk-targeting algorithms should weight entity-level red flags — beneficial ownership opacity, sectoral concentration in vulnerable industries, geographic disconnection between corporate domicile and operational footprint — alongside traditional shipment-anomaly indicators.

Customs authorities working South Atlantic and trans-Atlantic corridors should treat the Brazilian fuel sector, freight transport, and importation entities with elevated scrutiny when their ownership structures show opacity indicators — single-beneficiary investment funds, shell company chains, payment institutions outside conventional banking regulation. Carbono Oculto produced a public typology of these indicators that can be incorporated into customs risk matrices in any jurisdiction exposed to South American trade.

Port authorities should integrate transnational organized crime intelligence into operational security assessments, particularly in facilities handling petroleum derivatives, bulk commodities, and containerized cargo from or transiting through Brazilian ports. The Port of Santos has been documented as a primary export node for cocaine moving toward West Africa and onward to European markets. The relevant question is not whether the port has been compromised, but whether the port has visibility into the corporate networks operating inside it — the freight forwarders, customs brokers, and ancillary service providers whose ownership linkages determine whether shipments move through clean or compromised channels.

Cross-border firearms enforcement, as the Massachusetts cases show, has to operate on the premise that domestic U.S. trafficking networks can function as logistical extensions of transnational organizations. The distance between source states (South Carolina, Florida), trafficking states (Massachusetts), and the parent organization (São Paulo) is exactly the geographic gap the PCC model is designed to exploit. The inter-agency coordination across ATF, HSI, ICE-ERO, and state partners visible in those indictments offers an operational template that should become routine, not exceptional.

The strategic priority
The PCC is not the only organization working this way. Mexican cartels, Western Balkan networks, and West African logistical brokers share elements of the same logic, configured differently. What makes the PCC analytically useful is the visibility produced by recent Brazilian and American enforcement actions — together, an unusually well-documented case study of how a modern criminal organization embeds itself inside the formal economy. The lessons apply to any transnational organization that has moved beyond traditional smuggling and built ownership inside lawful commercial sectors.

For border security agencies, customs authorities, port operators, and cargo security professionals, the priority is no longer to monitor isolated incidents but to understand the structural logic that allows organizations like the PCC to adapt, infiltrate legitimate systems, and survive sustained enforcement pressure. That means moving from incident-based enforcement to system-based analysis, and from single-agency visibility to cross-domain visibility.

The criminal organizations that will define the next decade of border security are already operating inside the systems we are tasked with protecting. The question is whether our institutional frameworks can see them in time.

By Carlos Eduardo da Silva