Gold, Banks and Dirty Money: Inside Southern Africa’s Commodity Laundering Networks

The “Gold Mafia” investigation exposed how gold, false trade documentation, offshore companies and allegedly compromised banking personnel could be combined to move illicit value across borders while presenting the transactions as legitimate commerce.

Published by Al Jazeera’s Investigative Unit in 2023, the four-part series examined several networks operating across Southern Africa, East Africa, the United Arab Emirates and other financial centres.

One part of the investigation focused on an alleged South African laundering network associated with businessman Mohamed Khan, known as “Mo Dollars”, and Zimbabwean tobacco entrepreneur Simon Rudland.

Al Jazeera alleged that proceeds connected with illicit cigarette trading were moved through South African financial institutions using fabricated invoices, front companies and payments described as legitimate imports. Employees at Sasfin Bank, Absa and Standard Bank were accused of accepting benefits or assisting the movement of funds.

Those claims require careful legal treatment. They originated from investigative reporting, documents, interviews and undercover material. Rudland denied the allegations and described them as a smear campaign. The banks stated that they would investigate, cooperate with authorities or take action where misconduct was established.

The later consequences were significant but did not convert every allegation in the documentary into a judicial finding. Sasfin reported dismissing employees connected with misconduct in its foreign-exchange business and pursuing criminal complaints. The South African Revenue Service subsequently brought a multibillion-rand civil claim alleging that the bank had assisted taxpayers in unlawfully moving undeclared funds offshore. Sasfin has disputed liability.

The case is therefore best understood as a study of how illicit commodity trading, tax crime, trade-based money laundering and insider corruption can converge within legitimate financial infrastructure.

Key Takeaways

• Gold Can Function as a High-Value Laundering Instrument
• Commodity Trading Can Conceal Illicit Financial Flows
• False Trade Documentation Can Give Criminal Payments Legitimate Appearance
• Trade-Based Money Laundering Can Exploit Genuine Commercial Channels
• Illicit Tobacco Proceeds Can Feed Wider Laundering Networks
• Offshore Companies Can Obscure the Ultimate Destination of Funds
• Gold Smuggling Can Connect Tax Crime, Corruption and Money Laundering
• Compromised Bank Employees Can Neutralise Multiple AML Controls
• Insider Assistance Can Be More Powerful Than External Control Evasion
• Corrupt Benefits May Include Travel, Property Improvements and Other Non-Cash Advantages
• An Invoice Does Not Prove That Genuine Trade Occurred
• Legitimate and Illicit Transactions Can Be Mixed Within the Same Business
• Commodity Laundering Is Difficult to Detect When Data Is Fragmented
• Beneficial Ownership and Network Intelligence Are Critical to Understanding Exposure
• Financial Institutions Must Reconstruct the Complete Economic Narrative Behind High-Value Trade

Listen the podcast

Watch the video

Why the Gold Mafia investigation matters now

Gold is both a commodity and a store of value. It can be mined, refined, transported, traded, pledged as collateral and converted into cash in multiple jurisdictions.

Unlike an electronic payment, physical gold can move outside the banking system. Unlike cash, it can concentrate substantial value into a relatively small and durable asset. Once melted or refined, its origin may become difficult to establish without reliable supply-chain documentation.

These characteristics make gold attractive to legitimate investors and businesses. They also make it useful to smugglers, corrupt officials, sanctions evaders and professional money launderers.

The Gold Mafia investigation showed how illicit financial flows can move through several forms. Cash generated through an alleged predicate offence can be transferred abroad under the cover of trade. Gold can then be acquired, exported or sold, allowing the value to return in a form that appears connected to a legitimate commodity transaction.

The resulting scheme is not simply gold smuggling or bank fraud. It is a value-conversion system in which physical commodities, false documentation and financial institutions perform different stages of the laundering process.

The alleged South African laundering model

According to Al Jazeera, the network attributed to Khan used companies connected with financial services, trading and offshore commerce to move money from South Africa.

The reporting identified entities and accounts in jurisdictions including the United Arab Emirates, Mauritius, Switzerland and the United States. Payments were allegedly described as consideration for imports of tobacco, clothing, gold or other goods.

The investigation alleged that the corresponding goods did not enter South Africa as declared.

This distinction is central to trade-based money laundering. The payment passes through the formal banking system and may be supported by an invoice, contract or customs-related description. The commercial documentation gives the transaction an appearance of legitimacy even where the underlying trade is fictitious or materially misrepresented.

Funds can be moved through entirely fabricated transactions, over-invoicing, under-invoicing, multiple invoicing or false descriptions of quantity and quality.

The alleged scheme was particularly effective because the payments resembled ordinary international trade. A bank processing foreign-exchange transactions may see an established corporate customer, an invoice, an offshore supplier and a plausible commodity description.

The criminal purpose becomes visible only when the institution tests whether the customer genuinely conducts the stated business, whether the pricing is commercially reasonable and whether the goods actually exist.

How illicit cigarette proceeds enter the structure

Illicit tobacco is a significant source of cash-based criminal proceeds. Cigarettes can be manufactured legally and then diverted, under-declared, smuggled or sold without the required excise and tax payments.

The product has high demand, established distribution networks and a significant price difference between taxed and untaxed markets.

Cash generated through illicit cigarette sales creates an integration problem. The operators need to place the funds into the financial system or convert them into assets without exposing the underlying trade.

According to the Gold Mafia reporting, money attributed to illicit cigarette activity was moved through companies and cross-border payments supported by false invoices.

Gold offered a further conversion mechanism. Illicit cash could finance gold purchases or exports, while the eventual sale of the metal could generate apparently legitimate revenue in another jurisdiction.

This illustrates why predicate-crime monitoring cannot remain separated by sector. Tobacco smuggling, customs fraud, tax evasion, corruption, trade-based laundering and gold trafficking may form parts of the same financial network.

Why gold is an effective laundering instrument

Gold carries recognised value across borders and is traded through formal and informal markets.

Its physical characteristics make it portable and divisible. Bars, jewellery, scrap and doré can be transported, melted and recast. Documents describing origin, weight, purity and ownership can be falsified or substituted.

Gold can also justify large payments. A multimillion-dollar transfer may appear economically plausible where the invoice concerns precious metal rather than low-value consumer goods.

The commodity can obscure the boundary between payment and asset. Criminal proceeds used to purchase gold are no longer held as currency, but the underlying value remains available for resale, collateralisation or cross-border settlement.

The laundering process may involve several jurisdictions. Gold can be mined or acquired in one country, exported through another, refined in a major trading centre and sold into an apparently legitimate market.

Each participant may see only one stage. A bank sees payment instructions, customs authorities see declared exports, a refiner sees metal presented by a supplier, and a buyer receives certified gold.

Without effective information sharing, no single institution automatically reconstructs the complete origin and movement of value.

Bank insiders as control-system multipliers

The most serious allegations in the South African component concerned bank employees.

Al Jazeera reported that certain employees were listed in ledgers as receiving recurring payments or other benefits. Their alleged functions included supporting customer onboarding, facilitating foreign-exchange transactions, providing regulatory documentation and interfering with transaction records.

These allegations illustrate the difference between an external control-evasion attempt and an insider-enabled scheme.

An external criminal must work around the bank’s procedures. A compromised employee can use legitimate permissions, knowledge and credibility to weaken them from within.

A relationship manager may understand which documents are likely to satisfy onboarding. A foreign-exchange employee may know how payments are reviewed. A compliance employee may understand alert logic and escalation standards. An IT administrator may possess privileged access to systems and audit records.

The insider does not need to control the entire process. Several employees performing narrow functions can collectively neutralise customer due diligence, transaction monitoring, payment review and record retention.

This creates a key-person risk where operational authority is concentrated and independent verification is weak.

Corrupt payments are not always paid in cash

The investigation alleged that benefits included recurring payments, holidays and property improvements.

This reflects a wider bribery typology. An employee can be influenced through cash, gifts, travel, debt repayment, employment opportunities, discounts or benefits provided to a relative.

The value may be funded by the customer, an intermediary or a company that appears unconnected to the banking relationship.

Employee monitoring should therefore extend beyond direct payments from customers. Relevant indicators can include unexplained lifestyle changes, undisclosed outside business interests, unusual relationships with customers and repeated control overrides benefiting the same network.

Privacy and employment law must be respected, but institutions still require proportionate mechanisms for identifying conflicts and investigating credible concerns.

A declaration process alone is insufficient where employees can conceal the relationship. Transaction evidence, communications, access logs and approval patterns may be required to establish whether an employee’s decisions were influenced improperly.

When false trade becomes visible

A transaction supported by an invoice is not necessarily supported by genuine trade.

Banks should understand the customer’s expected goods, counterparties, volumes, routes and pricing. A business claiming to import clothing, tobacco or gold should have an operating model consistent with those activities.

Warning signs include payments for goods unrelated to the customer’s known business, repeated use of recently incorporated offshore suppliers, inconsistent shipping records and invoices containing generic descriptions.

Further concerns arise where substantial payments are sent to companies sharing directors, addresses or banking connections with the customer’s owners.

Institutions should also examine whether the same invoice is used more than once, whether values are inconsistent with market prices and whether the goods appear in customs or logistics records.

No single discrepancy proves laundering. Trade documentation can contain legitimate errors, and complex supply chains frequently involve intermediaries.

The risk becomes more significant when documentation problems combine with rapid international transfers, opaque ownership, high-risk commodities, tax concerns and employee intervention.

What happened after the investigation

South African authorities announced that the allegations would be examined. The banks named in the reporting also initiated internal responses.

Absa said that it had referred the information to its forensic investigation function. Standard Bank stated that it maintained zero tolerance for fraud and criminality and would cooperate with relevant authorities. A Standard Bank employee named in the documentary was later reported to have been dismissed following an internal process.

Sasfin stated that it had taken action against employees involved in misconduct within its foreign-exchange operation. It later reported laying criminal complaints against former employees.

In December 2023, SARS issued summons against Sasfin for approximately R5.3 billion. The revenue authority alleged wrongful conduct involving the unlawful export of undeclared funds by taxpayers using the bank.

Sasfin challenged the legal basis of the claim.

A November 2025 High Court judgment upheld some of Sasfin’s objections, including arguments concerning the existence of a private-law duty owed to SARS. It allowed an alternative statutory claim under financial-sector legislation to proceed.

The judgment did not determine the final merits of the underlying allegations. It addressed preliminary legal questions governing how the claim could be pursued.

This procedural distinction matters. Internal dismissals, civil litigation, regulatory action and criminal prosecution apply different legal tests. None should be reported as equivalent to a final criminal conviction.

The wider Gold Mafia network

The Al Jazeera series investigated several networks rather than one unified organisation.

In December 2024, the United States imposed sanctions on 28 individuals and entities connected with a Zimbabwe-based gold-smuggling and money-laundering network led by Kamlesh Pattni. The United Kingdom also designated Pattni and other participants.

US authorities alleged that the network used bribery, frontmen, couriers and companies across multiple jurisdictions to conceal interests and profit from Zimbabwean natural resources.

Those sanctions were a significant consequence linked to the broader issues exposed by the documentary. They should not be treated as a legal finding against every individual, bank or company appearing elsewhere in the series.

For financial institutions, the sanctions action reinforced the need to analyse ownership and control. A designated person may operate through relatives, trusted associates and companies that do not carry the individual’s name.

Screening must therefore be combined with beneficial ownership analysis and network intelligence.

Why conventional AML controls miss commodity laundering

The first problem is commercial plausibility. Gold, tobacco and other commodities generate genuine high-value cross-border transactions.

The second is fragmented data. Banks, customs authorities, tax agencies, shipping companies and commodity traders hold different parts of the evidence.

The third is documentation dependence. Institutions may verify that an invoice exists without determining whether the underlying trade occurred.

The fourth is ownership opacity. Offshore companies can separate the payment recipient from the individuals controlling the transaction.

The fifth is employee circumvention. A compromised insider can explain away anomalies, approve exceptions or direct colleagues not to escalate.

Finally, illicit and legitimate activity may be mixed. A trading business can conduct genuine transactions while using selected invoices or counterparties to move criminal proceeds.

What an evidence-led investigation looks like

The investigation should begin with the complete commercial story.

Analysts need to identify the customer, beneficial owners, payer, recipient, goods, shipment route and economic rationale.

Payment data should be reconciled with invoices, purchase orders, customs declarations, shipping records, warehouse information and tax data. Discrepancies should be mapped across time rather than assessed transaction by transaction.

Network analysis can identify companies sharing directors, contact details, addresses, employees and counterparties. Employee activity should also be reviewed where unusual approvals or overrides repeatedly benefit the same customers.

System logs are critical. Investigators should establish who accessed, changed or deleted records and whether those actions were consistent with normal responsibilities.

Cross-border cooperation may be required to obtain foreign account information, corporate records and evidence concerning the supposed supplier.

The analysis should preserve the difference between suspicion and proof. False documentation and unexplained fund movements can justify escalation or reporting without establishing every participant’s criminal intent.

What a resilient control stack looks like

The first layer is enhanced due diligence for commodity traders, foreign-exchange businesses and customers operating across high-risk supply chains.

The second is trade-data validation. Institutions should test invoices against customer activity, market prices, customs information and shipping evidence.

The third is beneficial ownership and counterparty analysis covering offshore suppliers, related companies and recurring intermediaries.

The fourth is employee-integrity monitoring, including conflict declarations, segregation of duties and review of unusual approval patterns.

The fifth is privileged-access control. Changes to customer records, payment data and audit trails should be restricted, logged and independently monitored.

The sixth is network-based transaction monitoring capable of identifying shared beneficiaries, circular payments and repeated use of the same trading infrastructure.

The seventh is cross-functional investigation. AML, fraud, tax-risk, trade-finance, cyber-security and employee-relations teams must be able to combine evidence.

The eighth is retrospective review. New intelligence concerning a customer, employee or offshore entity should trigger analysis of historical transactions.

Finally, institutions need credible escalation. Commercial importance or employee seniority must not prevent an investigation from reaching independent compliance, internal audit and the board.

South Africa’s evolving AML environment

South Africa entered FATF increased monitoring in February 2023 after strategic deficiencies were identified in its AML and counter-terrorist-financing system.

The country subsequently expanded supervision, strengthened financial intelligence and pursued reforms across law enforcement, beneficial ownership, sanctions and financial-sector controls.

In October 2025, FATF removed South Africa from increased monitoring after determining that it had completed the required action plan.

Delisting was a material institutional achievement. It does not mean that money laundering, corruption or illicit commodity trading have been eliminated.

The continuing challenge is sustainable effectiveness: whether authorities can investigate complex networks, prosecute professional facilitators and recover the proceeds moving through trade, banks and offshore structures.

What this means for financial crime leaders

The Gold Mafia investigation demonstrates that commodity laundering is not confined to mines, refineries or border crossings.

It can depend on accountants, company structures, trade documents, foreign-exchange channels and employees inside regulated institutions.

Financial crime leaders should ask whether their organisations can verify that trade actually occurred, identify relationships between customers and offshore suppliers, and detect when the same employee repeatedly neutralises controls.

They should also consider whether investigations can combine financial transactions with customs, logistics, tax and system-access evidence.

The greatest risk arises when every component appears legitimate in isolation: a registered company, a bank account, an invoice, a foreign supplier and a valuable commodity.

Effective compliance reconstructs those components into one economic narrative.

Gold becomes a laundering instrument when its recognised value and complex supply chain are used to disconnect criminal proceeds from their origin. Banks become enablers when documentation is accepted without challenge or insiders are allowed to override independent scrutiny.

The strongest institutions will not treat every gold transaction or commodity trader as suspicious. They will ensure that high-value trade is supported by verifiable goods, transparent ownership, credible pricing and employees whose decisions can withstand independent examination.

What Financial Institutions Should Consider

• Apply Enhanced Due Diligence to Commodity Traders
• Strengthen Controls Around Gold and Precious-Metal Customers
• Verify the Economic Substance of International Trade
• Reconcile Payments With Invoices, Customs and Shipping Data
• Validate Commodity Prices Against Market Benchmarks
• Identify False, Duplicate and Inconsistent Invoices
• Strengthen Beneficial Ownership Analysis
• Analyse Offshore Suppliers and Related Companies
• Monitor High-Risk Cross-Border Trade Corridors
• Detect Circular and Pass-Through Payment Patterns
• Strengthen Employee Integrity Monitoring
• Monitor Repeated Control Overrides and Exceptions
• Strengthen Privileged-Access Controls
• Apply Segregation of Duties to High-Risk Processes
• Investigate Unexplained Employee-Customer Relationships
• Integrate Trade Finance, AML, Fraud and Tax-Risk Intelligence
• Apply Network Analytics Across Customers, Employees and Counterparties
• Conduct Retrospective Reviews Following New Intelligence
• Ensure Commercial Importance Does Not Override Independent Escalation
• Combine Sanctions Screening With Ownership and Control Analysis

Download the briefing

Gold, Banks, and Dirty Money: Inside Southern Africa’s Commodity Laundering Networks