By: Joseph Scaramucci (Collective Liberty Founding Board Member)
Key takeaways
- FinCEN’s latest advisory and trend analysis reports that 137,000+ Bank Secrecy Act reports (2020-2024) reference suspected CMLN activity linked to Mexico-based cartels, with roughly $312B in suspicious flows.
- CMLNs use mirror transactions, trade-based money laundering, money mules (often PRC passport-holders listed as students, retirees, or homemakers), and shell companies to convert cartel dollars into clean value—including U.S. real estate.
- IMBs are a persistent trafficking venue, frequently fronted by shell companies using “spa/massage/therapy” descriptors and predictable cash-heavy operations. Those same mechanics overlap with CMLN red flags.
- Near major U.S. military installations, IMBs introduce elevated risk vectors: HUMINT targeting of service members, covert collection, and digital compromise, alongside the trafficking harm itself.
- With federal designations now treating leading cartels as terrorist organizations, IMB-connected laundering that benefits cartels can carry material support to terrorism exposure.
What to do now
- Treat IMBs as possible multi-threat nodes: trafficking + laundering + counterintelligence. Stand up joint FININT–OSINT–vice–CI working groups around bases and metro nodes.
- Drive proactive SAR collaboration with local banks/credit unions; push typology-driven subpoenas and parallel state licensing/occupational inspections.
- Prioritize asset-seizure pathways (real estate, vehicles, accounts) that disrupt cash integration and leverage forfeiture to fund survivor services.
1) Threat Landscape & Definitions
Illicit Massage Businesses (IMBs). Storefront businesses advertising massage/spa services while providing commercial sex under coercion or fraud. Typical signatures include opaque ownership (LLCs changing hands), heavy cash receipts, and advertising on
adult classifieds or encrypted chat groups. Victims are often migrant women controlled through debt bondage and threats.
Chinese Money Laundering Networks (CMLNs). Decentralized professional networks that convert bulk U.S. cash—much of it cartel drug proceeds—into value desired by PRC nationals constrained by capital controls. CMLNs “buy” cartel dollars in the U.S., settle
peso obligations to the cartel in Mexico via mirror/underground transfers, and resell those U.S. dollars to PRC clients or invest them directly in U.S. assets such as real estate.
Mexico-based Cartels. Sinaloa Cartel, CJNG, Gulf Cartel and others are the dominant wholesalers of fentanyl and meth to the U.S. market. Their business problem is not making money—it’s laundering it at scale without triggering enforcement.
National-Security Nexus. IMBs fuel trafficking harm, provide cover for covert access near sensitive sites, and plug into CMLN pipelines that bankroll cartels now treated as terrorist organizations under federal designations. That combination elevates IMBs from a local nuisance to a national security threat vector.
2) IMB Modus Operandi & Indicators Business structure and paperwork.
- Layered LLCs with nominee agents; registered agents of convenience.
- Repetitive use of “wellness,” “therapy,” or transliterated names across multiple cities.
- Licensing anomalies: lapsed massage-therapy licenses; owner-operator with no credential; therapists paid as “independent contractors” but living on-site.
Financial rhythms.
- Cash deposits just under CTR thresholds; alternating branches; night depository use.
- Commingling: nail salon, convenience retail, or short-term rental LLCs sharing accounts.
- Regular ACH/wire/FinTech transfers to ad platforms, gift-card vendors, and rideshare/food delivery (logistics for victims and buyers).
Operational signatures.
- Covered windows, buzzer-entry, back-door ingress, “open late” signage.
- Scripted phone screening; coded menu/pricing; condom-supply caches.
- Rotating staff moved between cities; shared drivers and hotel receipts.
Victimology and control.
- Middle-aged migrant women; limited English; debt bondage; threats of immigration or family harm; handset seizure; multi-shift work with minimal off-premises movement.
3) What FinCEN’s SAR Picture Adds
FinCEN’s 2025 advisory and Financial Trend Analysis quantify the CMLN threat: six-figure SAR volumes and hundreds of billions in suspect flows tied to cartels, with noted involvement in human trafficking and smuggling; heavy use of mirror transactions and
money mules; infiltration or recruitment of bank insiders; and significant placement into U.S. real estate. Red-flag patterns highlighted by FinCEN match what vice and trafficking investigators see at IMBs every week.
CMLN typologies most relevant to IMBs
- Mirror transactions / underground banking. Cartel dollars in the U.S. are “sold” to CMLNs; pesos move in Mexico through off-book settlement; U.S. dollars are then placed into accounts or asset purchases via shells that can include IMB corporate
entities. - Money-mule layering. Students/retirees/homemakers with PRC passports opening multiple accounts or moving funds inconsistent with stated occupation; repeated linkages to LLCs labeled “spa,” “wellness,” or “massage.”
- Trade-based money laundering (TBML). Import/export invoices through related shell companies; bulk purchase of salon/spa equipment or consumables as cover; shipping anomalies.
- Real-estate integration. Quick purchases of strip-mall units or mixed-use buildings housing multiple IMBs; title held by anonymous LLCs; hard-money loans; rapid refinancing.
Cross-walk: FinCEN human-trafficking indicators
- Use of front companies such as massage businesses; structured deposits; third-party management of accounts; common-payee utilities or rent across multiple IMBs in a region; payments to online classifieds known for commercial sex;
4) The Nexus: IMBs ↔ CMLNs ↔ Cartels
Revenue source. IMBs generate daily cash through coerced commercial sex.
Placement. Managers or cash couriers deposit/structure funds through local banks or FinTechs; money mules co-sign or open new accounts; POS “tips” or “wellness product” sales disguise activity.
Layering. Funds move through a lattice of shell LLCs (spa, salon, realty holding companies). CMLNs purchase these U.S. dollars and settle cartel obligations offshore through mirror transactions, avoiding Mexico’s dollar-deposit limits.
Integration. Dollars are resold to PRC clients (education fees, high-end goods, underground real-estate purchases) or flow into U.S. commercial/residential property—sometimes the very strip malls that house IMBs.
Why this matters for national security.
- Cartel finance: Every laundered dollar extends cartel capacity for fentanyl, arms procurement, bribery, and cross-border violence.
- Espionage opportunity: Near bases or defense-industry corridors, IMBs offer deniable access to personnel and IT surfaces, with blackmail leverage over compromised patrons.
- Systemic risk: Real-estate integration across multiple cities gives CMLNs durable footholds in sensitive metro areas, complicating forfeiture and counter-intel.
Case snapshots (illustrative patterns)
- Federal prosecutions of IMB operators with PRC ties in the Midwest alleged prostitution and money-laundering conspiracies spanning multiple towns, classic CMLN-overlap indicators.
- National trend reporting shows CMLNs laundering tens of millions in under two years via encrypted apps, burner phones, and fast account churn, behaviors routinely observed in IMB command-and-control.
5) Elevated Risk Around U.S. Military Installations
Field surveys around the largest Army installations (Fort Liberty, Fort Campbell, Fort Cavazos, JBLM, Fort Moore) consistently locate clusters of IMBs within 10 miles. That geography creates:
- HUMINT risk: Access to service members in permissive settings; potential for kompromat; targeting of support contractors and spouses.
- SIGINT/cyber risk: Hidden cameras, device proximity, SSID harvesting; compromised Wi-Fi; QR-code payment lures.
- Force protection: Increased off-duty incidents; UCMJ exposure; degraded unit readiness when victims and witnesses enter the justice system without wrap-around support.
Mitigation on and off base should combine CI briefings, targeted vice/trafficking operations, and bank-to-LE information-sharing sprints focused on IMB LLCs and their landlords.
6) Terrorism-Finance Considerations
With cartels designated as terrorist organizations alongside continued OFAC targeting of cartel leaders and facilitators, laundering that materially supports cartel operations can now trigger material support to terrorism exposure, not just money-laundering or
vice-level charges. For IMB ecosystems touching cartel finance through CMLNs, this adds powerful charging, extradition, and asset-blocking tools—and elevates the strategic imperative for disruption.
7) Operational Recommendations
For law enforcement and prosecutors
- Stand up fusion cells that merge trafficking, narcotics, CI, and financial-crimes detectives; include JTTF, HSI, IRS-CI, and state AGs. Treat IMBs as multi-threat nodes.
- Exploit SAR collaboration: request targeted SAR look-backs on regional “spa/massage/wellness” LLCs; subpoena merchant-acquirer data and FinTech KYC.
- Landlord leverage: nuisance-abatement actions; civil RICO where appropriate; forfeiture of properties used to facilitate trafficking and laundering.
- Victim-first operations: embed advocates and interpreters; pre-plan T-visa pathways; separate victims from managers immediately; capture digital evidence rapidly.
- Base-area surge ops: coordinate with base commanders and CID/NCIS/OSI; build off-base clean-up campaigns that pair arrests with code-enforcement sweeps and survivor services.
For financial institutions & FinTechs
- Risk models: weight PRC-passport money-mule patterns, student/retiree/homemaker occupation tags + high-velocity activity; look for common addresses/phones across many LLCs.
- Merchant monitoring: flag MCCs tied to “massage/spa/wellness” with late-night transactions, recurring ad buys on adult platforms, and common-payee utilities across multiple entities.
- Real-estate diligence: enhanced onboarding for strip-mall buyers/LLCs with links to spa tenants; beneficial-ownership reverification; look-through on hard-money lenders.
- Red-flag SAR drafting: use advisory key terms; capture shell linkages, ad-platform payments, cash structuring patterns, and mule orchestration from IP/device data.
For policymakers
- Licensing reform: eliminate loopholes that let non-licensed owners operate “massage therapy” businesses; require beneficial-owner disclosures to state boards.
- Beneficial ownership transparency: enforce and audit corporate-transparency filings; escalate penalties for false filings tied to vice or trafficking.
- Ad-market accountability: impose KYC/record-keeping on adult-services advertising marketplaces; preserve logs for subpoenas.
- Real-estate transparency: expand AML rules for commercial real estate; require title-insurance reporting beyond residential cash deals.
8) Red-Flag Checklist (Investigator/Analyst Use)
Business & licensing
- Multiple “massage/wellness” LLCs sharing owners/addresses/phones.
- Owner not licensed as therapist; repeated “independent contractors” living on-site.
Financial
- Structured deposits; multiple branches/night drops; deposits by third parties.
- Regular payments to adult-ad platforms; gift-card bulk buys; rideshare bursts at
shift changes. - Accounts opened by PRC passport-holders listing student/retiree/homemaker
occupations with flows far above stated means. - Rapid real-estate purchases/refis tied to spa tenants; hard-money loans from
opaque lenders.
Operational
- Opaque storefronts; buzzer entry; “open late”; back-door ingress.
- Frequent staff turnover; shared drivers; centralized paymaster using chat apps.
- Cameras placed in private rooms; QR codes for tips routed to personal wallets.
Conclusion
IMBs are a trafficking engine and, too often, the front door into CMLN pipelines that bankroll cartel violence. Proximity to military installations adds espionage and force-protection risk. The latest federal FININT puts numbers, and urgency, behind what
operators have seen for years. If we treat IMBs as multi-threat nodes and bring the full FININT/OSINT/CI toolbox to bear, we can disrupt trafficking, bankrupt the networks that move the money, and harden the spaces where Americans live, work, and serve.