Fatoka dictated which politicians could enter communities, who could campaign, how votes would flow.
In the spring of 2026, federal investigators in Brazil cracked open the digital life of a criminal leader and found not merely a drug operation, but a shadow government — one that had quietly colonized the municipal machinery of Cabedelo, Paraíba, turning public contracts into criminal payrolls and city offices into outposts of the Red Command. Operation Leonard revealed how organized crime does not always confront institutions from the outside, but instead learns to wear them from within. The question left standing is not only one of accountability, but of whether democratic governance can be recovered once it has been so thoroughly inhabited by those who would hollow it out.
- Federal Police cracked a false iCloud account belonging to criminal leader Fatoka and found execution orders, drug shipment logistics, and money-laundering instructions all managed from a Rio favela — evidence of a criminal empire operating at municipal scale.
- Over R$270 million in public funds was siphoned through rigged city contracts awarded to front companies, which then placed faction members on government payrolls and funneled money back to politicians as bribes.
- Fatoka personally authorized the killing of a rival gang member by name, asking only that the person proposing the murder be prepared to take responsibility — a chilling bureaucratic logic applied to violence.
- A detained faction operative named former mayors and an interim mayor as participants in the scheme, testifying that the criminal organization controlled electoral access across nearly the entire city, dictating which candidates could campaign in which neighborhoods.
- All named officials have denied involvement, and the front company disputed the credibility of the key witness, leaving investigators navigating a web of denials as the case moves toward prosecution.
- The investigation now poses a structural question for Cabedelo: whether the incoming administration can disentangle city governance from an organization that, according to testimony, had become its shadow counterpart.
In the spring of 2026, Brazilian federal investigators accessed the iCloud account of Flávio de Lima Monteiro — known as Fatoka — registered under a false name, and discovered the operational blueprint of a criminal takeover. Fatoka, identifying himself in messages as "Salmo 91," was directing cocaine, marijuana, and crack shipments into Paraíba from Rio de Janeiro while simultaneously managing a money-laundering apparatus embedded inside Cabedelo's city government. The investigation, called Operation Leonard, was authorized by a judge and yielded WhatsApp conversations, audio files, and documents that painted a picture of criminal administration.
The drug logistics were businesslike: in one exchange, Fatoka and an associate named França discussed the arrival and distribution of 100 kilograms of marijuana destined for Cabedelo. But the files also contained darker material. In conversations with a faction member called Mago David, Fatoka was asked for permission to kill a man named Samuel, suspected of selling drugs for a rival gang in João Pessoa. Fatoka asked methodical questions — who proposed the killing, who would take responsibility if it failed — then gave the order: "Put steel in him."
The financial scheme was equally systematic. Cabedelo's contracting process for cleaning, maintenance, and labor services was rigged from within. Competing bids were disqualified through manufactured administrative decisions. Winning companies, including one called Lemon, became hiring fronts for the faction. Workers connected to the criminal organization were placed on city payrolls, their inflated salaries and cash payments ultimately flowing back to the organization and outward as bribes to politicians. Investigators calculated that more than R$270 million in public funds was diverted through this mechanism.
Ariadna Thalia, identified as the head of the Red Command's money-laundering operation in Paraíba and arrested in December 2024, provided testimony that named former mayor Vitor Hugo as a key figure in maintaining the arrangement. She described how a subsequent interim mayor, Edvaldo Neto, partially resumed the scheme after an earlier disruption caused by police operations. In exchange for political cooperation, the criminal organization guaranteed that opponents would be barred from campaigning in neighborhoods under its control during an April 2026 supplemental election. According to Ariadna, only one neighborhood in the entire city fell outside the Red Command's territorial grip.
All named officials denied involvement. Vitor Hugo's defense said he had no knowledge of Ariadna or Fatoka. Edvaldo Neto stated that his name appeared in testimony only because interrogators introduced it. The Lemon company questioned Ariadna's credibility, noting she had worked there briefly at minimum wage and disputing her account of cash payments. The investigation remains open, and what it has exposed — a criminal organization that did not merely operate alongside city government but functioned as its parallel authority — leaves Cabedelo facing a question that goes beyond any single prosecution: whether its institutions can be reclaimed.
In the spring of 2026, federal investigators in Brazil opened the digital vault of a man named Flávio de Lima Monteiro—known on the street as Fatoka—and found the architecture of a criminal empire. The iCloud account, registered under a false name, contained the operational blueprint for how a faction called Tropa do Amigão, an arm of the Red Command drug organization, had burrowed into the municipal government of Cabedelo, a city in Paraíba state. What emerged from those cloud files was a scheme of stunning directness: use the city's own contracting machinery to funnel public money to criminals, place faction members inside government offices, and from there, orchestrate drug distribution, money laundering, and murder.
The investigation, code-named Operation Leonard, began when a judge authorized the Federal Police to break into Fatoka's digital communications. Apple provided the contents: WhatsApp conversations, photographs, videos, audio files, documents. In the messaging app, Fatoka identified himself as "Salmo 91," a biblical reference. The conversations revealed a man managing multiple criminal operations simultaneously—from a favela in Rio de Janeiro, he was directing the movement of cocaine, marijuana, hashish, and crack into Paraíba. In one exchange with an associate named França, Fatoka discussed the arrival of 100 kilograms of marijuana destined for Cabedelo. The two men discussed how to distribute it, how to package it, how to move it through the city's networks. The tone was businesslike, almost administrative.
But the iCloud files contained something darker than logistics. Fatoka also authorized executions. In conversations with another faction member called Mago David, a third party requested permission to kill a man suspected of selling drugs for a rival gang, Nova Okaida, in the Bessa neighborhood of João Pessoa. The target was identified as Samuel. Fatoka's response was methodical. He asked who had brought the idea, whether the person proposing the killing was willing to take responsibility if it went wrong. Once satisfied, he gave the order: "Put steel in him." The Federal Police documented that Fatoka authorized the action and later recommended caution in its execution.
The money-laundering mechanism was equally systematic. The city of Cabedelo issued contracts for third-party services—cleaning, maintenance, general labor. These contracts, investigators found, were rigged. Competing bids were deliberately disqualified through administrative decisions and legal opinions that created the appearance of legitimacy. The winning companies, like one called Lemon, then became hiring fronts for the criminal organization. Faction leaders would recommend people for positions. Intermediaries and city employees would process the applications. The workers would be added to payroll. But the money flowing to these workers—inflated salaries, cash payments, transfers through third-party accounts—was diverted back to the organization and distributed as bribes to politicians. Over 270 million reais in public funds disappeared this way.
Ariadna Thalia, identified as the head of the Red Command's money-laundering operation in Paraíba, was arrested in December 2024. In testimony, she explained how the scheme worked and who benefited. She named Vitor Hugo, a former mayor of Cabedelo, as someone who maintained the arrangement. When the Federal Police conducted Operation En Passant in December 2024 and employees from Lemon were fired, the incoming mayor, André Coutinho, initially honored the agreement but then broke it, apparently frightened by the police attention. Vitor Hugo, Ariadna testified, then demanded that the scheme be restored. He promised that "someone from his side" would take over the mayor's office and restart the operation. That person was Edvaldo Neto, who assumed the interim position in December 2024. According to Ariadna, the scheme did partially resume under Neto's watch, with new hires connected to the faction. In exchange, the criminal organization guaranteed that political opponents would not be allowed to campaign in neighborhoods under its control during a supplemental election held on April 12.
The territorial reach was nearly total. Ariadna stated that the Red Command, through Tropa do Amigão, controlled the entire city. Fatoka dictated which politicians could enter communities, who could campaign, how votes would flow. Only one neighborhood, Renascer, remained outside the organization's grip. This was not merely a criminal enterprise operating within a city; it was a criminal enterprise that had become the city's shadow government.
When contacted by reporters, the former mayors and officials denied involvement. Vitor Hugo's defense said he had no knowledge of Ariadna or Fatoka and had never conducted personal or administrative business with them. Camila Holanda, the former vice mayor, called the allegations absurd and said she had provided evidence to electoral authorities proving her non-involvement. Edvaldo Neto stated that he had never made any agreement with criminal organizations and that the only mention of his name in Ariadna's testimony came from questions posed by interrogators, not from her own account. André Coutinho said he had never assumed any non-republican commitments and had never knowingly worked with organized crime. The Lemon company disputed Ariadna's credibility, noting that she had worked there for only seven months as a general services assistant earning minimum wage, and that it seemed implausible she would hold such a position while simultaneously heading a criminal money-laundering operation. The company also stated it paid salaries by digital transfer to individual accounts, not in cash as Ariadna had claimed.
The investigation stands as a portrait of institutional capture—how a criminal organization can use the machinery of government procurement, employment, and finance to launder money, distribute drugs, and enforce its will through violence. The iCloud files provided the evidence; the testimony of a detained faction operative provided the explanation. What remains is the question of how deep the corruption ran and whether the incoming administration in Cabedelo can break the pattern.
Notable Quotes
Put steel in him. You don't know the guy? That's what I wanted, someone who knows him. You know him. So put steel in him.— Fatoka, authorizing execution of rival gang member in iCloud messages
Fatoka dictates the politician who will enter the community, who can campaign, who cannot, the votes, the support of people, especially from the communities.— Ariadna Thalia, describing criminal organization's control over municipal politics
The Hearth Conversation Another angle on the story
Why would a criminal organization go to the trouble of infiltrating city government? Why not just operate in the shadows?
Because shadows don't control territory the way governments do. When you own the hiring process, you own who works where. When you control contracts, you control money flow. And when you control the mayor's office, you control who can campaign in your neighborhoods. It's not just about hiding—it's about power.
The iCloud account seems almost careless. A crime boss keeping detailed records of drug shipments and murder orders in the cloud?
Not careless—confident. Fatoka was operating from Rio, managing operations across state lines. He needed a system that worked. He probably didn't expect anyone would get a judge to authorize the break-in. And even if they did, he may have believed the encryption and the false name would be enough. It wasn't.
What strikes you most about Ariadna's testimony?
That she was willing to talk. She was arrested, she was facing serious time, and she chose to explain the whole mechanism to the court. She named names, described the process, explained the territorial control. That kind of testimony is rare and dangerous. It means the organization's hold was already broken.
The denials from the politicians seem almost rehearsed.
They have to deny. Even if some of them knew what was happening, admitting it means prison. The interesting part isn't what they say—it's what they don't address. They don't explain why the contracts were rigged, why Lemon kept winning bids, why the money disappeared. They just say they didn't know Fatoka.
Do you think the scheme will restart under a new administration?
That depends on whether the new people in office are willing to break it. The organization still controls the neighborhoods. It still has reach. But now it's exposed. The iCloud files are evidence. Ariadna testified. The Federal Police are watching. It's harder to operate in daylight once the light has been turned on.