Terrorist Financing Through Diaspora Networks: Inside France’s PKK Fundraising Case

The conviction of 11 Turkish Kurdish defendants in France exposed a form of terrorist financing that can be difficult to identify through conventional transaction monitoring: organised fundraising embedded within diaspora communities and supported by coercion, social pressure and community infrastructure.

In April 2023, a Paris court found the defendants guilty of offences connected with financing the Kurdistan Workers’ Party, or PKK. Prosecutors alleged that the network collected a so-called revolutionary tax—known as kampanya—from Kurdish individuals and businesses in south-eastern France.

The court found that significant sums had been obtained through threats and pressure, including the risk of exclusion from the community. Investigators relied on testimony, intercepted communications and evidence connected with a Kurdish association in Marseille.

Sentences ranged from suspended three-year terms to five years’ imprisonment, including one year suspended. The case demonstrated that terrorist financing does not always involve large international transfers, sophisticated corporate structures or funds originating from crime. It can begin with locally collected money, legitimate community income and small payments that acquire criminal significance through their intended beneficiary and purpose.

For financial crime teams, the central challenge is therefore not identifying a particular ethnicity, political opinion or charitable activity. It is distinguishing lawful community fundraising and advocacy from coercive collection, concealed organisational control and the provision of resources to an entity subject to terrorism-related restrictions.

Listen the podcast

Watch the video

Why the French case matters now

The investigation began in 2020 after two Kurdish women, aged 18 and 19, were reported missing in south-eastern France. Authorities subsequently concluded that they had travelled to PKK training camps elsewhere in Europe.

The inquiry expanded from possible recruitment into the financial network supporting the organisation. Prosecutors alleged that an organised structure operating around a Marseille association collected contributions from Kurdish residents and businesses according to their estimated income.

Investigators believed approximately €2 million was being raised annually in south-eastern France. The court concluded that the collections were not always voluntary and that contributors could face harassment, intimidation or exclusion if they refused.

This matters because fundraising, recruitment and community control can operate through the same network. The individuals identifying potential recruits may also know which businesses can be approached, which households are able to contribute and which community structures can be used to apply pressure.

The case also remains relevant despite the PKK’s May 2025 announcement that it would dissolve and end its armed struggle. The peace process with Turkey remained incomplete and under strain during 2026, and the organisation continued to be subject to terrorism-related designation frameworks in the European Union and other jurisdictions.

Financial institutions must follow the law and current restrictive-measures framework rather than assuming that a political announcement automatically changes the status of an organisation, its connected entities or historical financial activity.

How the revolutionary-tax model operates

A revolutionary tax differs from ordinary fundraising because the amount and obligation may be imposed by the collecting organisation rather than chosen freely by the contributor.

Collectors may assess individuals according to salary, business turnover, property ownership or perceived social status. Contributions can be requested annually or around specific campaigns, political events or operational needs.

The collection process may begin with persuasion and appeals to political identity, community solidarity or support for people affected by conflict. Those messages are not inherently unlawful. Risk increases where the supposed donation is accompanied by intimidation, repeated visits, threats, reputational pressure or consequences for refusing.

Community exclusion can be a powerful form of coercion. A person may depend on local associations, businesses, cultural organisations and social networks for employment, family support or belonging. The threat of being labelled disloyal or isolated from those structures can influence payment even where no direct physical threat is made.

Businesses can be especially exposed because their turnover, premises and owners are visible. A restaurant, retailer, transport company or professional service provider may be assigned a contribution based on its estimated capacity rather than its willingness to donate.

The payment may then appear in the financial system as an ordinary cash withdrawal, transfer between individuals, association membership fee or payment to a community organisation. The coercive circumstances and ultimate destination are not visible from the transaction description alone.

When community associations become financial infrastructure

Community and cultural associations perform legitimate and important functions. They organise language classes, social assistance, political discussion, cultural events and support for migrant communities.

Their accessibility and trusted position can also be exploited by individuals acting on behalf of a prohibited organisation. Premises can be used for meetings, fundraising events, record keeping, recruitment or the coordination of cash collection.

The French case was linked to an association in Marseille that prosecutors said formed part of the collection network. This does not mean that every Kurdish association—or every member of an investigated association—participated in terrorist financing.

Financial crime controls must avoid treating lawful ethnic, political or humanitarian activity as suspicious merely because it concerns a conflict-affected region or controversial cause. The relevant indicators are operational: who controls the organisation, how money is raised, whether contributions are voluntary, how funds are recorded and where the value ultimately moves.

Association accounts may receive membership fees, event income and donations that are entirely consistent with their stated purpose. Risk increases where cash collections are poorly documented, expenditure does not match declared activities, senior members use personal accounts or funds are transferred to unexplained intermediaries.

Governance therefore matters as much as transaction volume. Weak accounting, concentrated authority and informal payment practices can make it difficult to distinguish legitimate community support from concealed organisational financing.

Terrorist financing is not the same as money laundering

Money laundering usually involves proceeds generated through criminal activity. The objective is to conceal their unlawful source, ownership or movement.

Terrorist financing may involve money obtained legally or illegally. Salaries, business income, donations and membership contributions can all become terrorist financing where they are collected, provided or managed with the required intent or knowledge.

French criminal law treats financing a terrorist enterprise as a terrorism offence where a person provides, gathers or manages funds, assets or other resources—or advises on doing so—with the intention that they be used, or knowing that they are intended to be used, in whole or in part, for terrorist acts. The offence does not depend on a terrorist attack ultimately taking place.

This distinction changes the detection problem. A customer’s income can be legitimate, the transfer value can be modest and the recipient may be known personally. The risk lies in the purpose and wider network.

The proceeds of coercive collection may nevertheless create overlapping money-laundering concerns. If funds are obtained through extortion or threats, they may also represent criminal property before being transferred towards the intended organisation.

Investigators must therefore identify both the source and purpose of the money. Focusing only on whether the funds originated from crime can miss legally earned money being directed towards terrorism-related activity.

Why cash remains operationally valuable

Cash is well suited to community-based collection. It allows contributors to pay without creating a direct electronic link to the collector or organisation. Several small amounts can be combined before being moved by courier, deposited into an intermediary account or transferred through another service.

Cash collection can also make coercion more difficult to prove. A bank may see a business owner withdrawing money but not the person waiting to collect it or the pressure surrounding the transaction.

The use of cash does not eliminate records. Collectors may maintain contributor lists, expected amounts, payment status and local responsibilities. Phones, messages and spreadsheets can expose the structure even where the final transfer trail is incomplete.

The French investigation relied on intercepted communications and witness evidence alongside financial information. This demonstrates why terrorism-financing investigations cannot depend solely on bank records.

Cash-heavy sectors and communities should not be treated as presumptively suspicious. The stronger concern is an unexplained pattern: recurring withdrawals around collection periods, deposits inconsistent with the account holder’s activity, rapid consolidation or payments involving people connected to the same organisational network.

How collection networks become transnational

Diaspora fundraising can connect local communities with organisations operating across several countries.

One group may coordinate collections, another hold the funds, and a third arrange movement towards the ultimate destination. Money can pass through personal accounts, associations, businesses, money-service providers, informal value-transfer systems or physical couriers.

Each transfer may appear domestic even though the broader structure is transnational. Funds collected in Marseille could be consolidated elsewhere in France or another European jurisdiction before leaving the formal banking system.

Organisers may also rotate collectors and accounts to limit the impact of law-enforcement action. One person receives contributions temporarily, then another assumes the role.

The network’s financial and non-financial functions may overlap. A person coordinating cultural events may also identify donors or recruits. A business owner may provide money, transport, premises or employment. A media or community organisation may amplify fundraising narratives without directly handling the proceeds.

Effective investigation therefore requires international cooperation and analysis of relationships rather than isolated payments. France’s financial intelligence, police and judicial authorities may hold one part of the evidence, while another country sees the destination account, courier or connected association.

Recruitment and financing are mutually reinforcing

The original investigation did not begin with an unusual bank transfer. It began with the disappearance of two young women.

Recruitment activity exposed the wider support structure. This is important because terrorist organisations require more than money. They need people, transport, communications, accommodation, documentation and trusted community connections.

Financial and recruitment networks can reinforce one another. Fundraisers identify committed supporters; recruiters identify people willing to travel or train; associations provide meeting locations; and community relationships establish credibility.

Transaction monitoring may detect payments for travel, equipment or support to recruits, but such amounts can be small and individually ordinary. Intelligence concerning recruitment, travel patterns and organisational roles can make the same payments materially more significant.

Financial institutions should have mechanisms for incorporating reliable law-enforcement and sanctions intelligence into customer risk. However, adverse information must be assessed carefully. Political activism, attendance at demonstrations or support for Kurdish rights does not establish membership of or financing for the PKK.

The control objective is to identify evidence of organisational support, coercion, prohibited fundraising or resource provision—not to treat political identity as a financial-crime indicator.

Why conventional controls can miss the activity

The first challenge is low-value normality. Individual contributions may be modest and consistent with the customer’s legitimate income.

The second is domestic collection. Early-stage payments may not cross a border or involve a high-risk jurisdiction.

The third is the use of cash and personal accounts. The stated recipient may be a friend, relative or local community figure rather than the ultimate beneficiary.

The fourth is fragmented visibility. One bank sees withdrawals, another receives deposits and an association records community activity. No institution automatically sees the complete network.

The fifth is the legitimate activity surrounding the risk. Cultural events, political campaigns, humanitarian support and family remittances can create transaction patterns that resemble some elements of terrorist fundraising.

Finally, designation screening has limits. A designated organisation may not operate accounts in its formal name. Individuals and entities collecting on its behalf may not appear on sanctions or terrorism lists.

Screening remains essential, but it must be combined with behavioural monitoring, network intelligence and investigation of unusual economic purpose.

What an evidence-led investigation looks like

The investigation should begin by identifying the nature of the fundraising.

Analysts need to establish who requested the contribution, how the amount was determined, whether the payment was voluntary and what explanation was given for its use.

Financial records should be combined with communications, event information and organisational relationships. Repeated transfers to one collector, followed by consolidation and cash withdrawal, may be more significant than any payment reviewed independently.

Investigators should identify common contributors, devices, telephone numbers, addresses, businesses and association officers. Network analysis can reveal local coordinators and the movement of funds between communities.

The ultimate use of the money remains central. Evidence may include instructions, coded messages, travel, links to organisational representatives or transfer towards known facilitators.

The review must also distinguish knowledge and participation. A person attending an event may have no awareness of unlawful fundraising. A donor may believe the contribution supports legitimate cultural or humanitarian activity. Another may pay because of coercion.

These distinctions affect safeguarding, prosecution, account restrictions and suspicious-transaction reporting. The presence of money within the network does not establish that every contributor shared the same intent.

What a resilient control stack looks like

The first layer is risk-sensitive customer understanding. Institutions should understand the expected activity of associations, cash-intensive businesses and customers involved in regular fundraising without using ethnicity or political identity as a proxy for risk.

The second layer is governance analysis. Associations should have identifiable controllers, credible accounts, documented activities and transparent authority over expenditure.

The third layer is network monitoring. Shared contact details, common beneficiaries, coordinated cash activity and links between personal and organisational accounts should be assessed across the customer population.

The fourth layer is cash-pattern analysis. Repeated withdrawals and deposits should be evaluated against events, customer behaviour and connected parties rather than treated as suspicious automatically.

The fifth layer is sanctions and designation governance. Institutions should use current legal lists, understand aliases and connected entities, and respond to designation changes through controlled review.

The sixth layer is intelligence-led escalation. Reliable information concerning recruitment, coercion or organisational roles should influence transaction monitoring and investigation.

The seventh layer is protected customer engagement. A contributor may be a victim of extortion or community pressure. Staff need procedures for handling disclosures safely without alerting suspected collectors.

Finally, controls should be independently tested for both effectiveness and proportionality. A system that misses coercive fundraising is ineffective; one that indiscriminately targets lawful diaspora activity is also defective.

What the PKK’s dissolution announcement changes

In May 2025, the PKK announced that it would dissolve its organisational structure and end its armed struggle following a call from imprisoned leader Abdullah Öcalan.

The announcement represented a potentially historic development after more than four decades of conflict. It did not immediately resolve legal, security or financial questions.

By 2026, implementation remained contested. Disarmament, legal guarantees, the treatment of members and wider political reforms were unresolved, and the peace process had slowed.

For regulated institutions, the operational position is clear. Historical conduct remains subject to the law applicable when it occurred, while present-day controls follow current national and international designation frameworks.

A public declaration of dissolution does not automatically establish that every connected network has ceased operating, nor does it prove that every community organisation remains linked to the former structure. Institutions require current, evidence-based assessment rather than assumptions in either direction.

What this means for financial crime leaders

The French convictions demonstrate that terrorist financing can be organised through ordinary-looking community activity, legitimate income and locally collected funds.

The defining risk was not the size of one transaction. It was the alleged system surrounding the payments: assessed contributions, coercive collection, association infrastructure, recruitment and the intended support of a designated organisation.

Financial crime leaders should ask whether their programmes can identify collective patterns across accounts and whether analysts understand the difference between money laundering and terrorist financing.

They must also ensure that controls remain proportionate. Kurdish identity, political advocacy, humanitarian concern and participation in community associations are not indicators of terrorism financing. Investigations must be grounded in behaviour, relationships, coercion and financial purpose.

The strongest response combines sanctions screening, customer understanding, network analytics, cash intelligence and protected engagement with people who may be under pressure.

Terrorist financing succeeds when lawful money, trusted institutions and community relationships are redirected towards prohibited objectives. Institutions that reconstruct those relationships without criminalising legitimate civic activity will be better positioned to disrupt financing while preserving the rights and trust of the communities they serve.