Former Congressman Rivera Convicted: $50M PDVSA FARA Case Compliance Lessons

TL;DR

• On May 1, 2026, a Miami federal jury convicted former U.S. Representative David Rivera and lobbyist Esther Nuhfer of FARA violations, conspiracy, and money laundering tied to a $50 million PDVSA contract.
• Rivera diverted roughly $600,000 to his Florida state campaign and personal use; Nuhfer used about $455,000 to buy a Key Colony Beach property.
• Rivera faces up to 60 years; Nuhfer faces up to 30. Sentencing is set for July 22, 2026.
• Compliance takeaway: treat foreign-government-linked counterparties as a triple-stack risk — FARA, sanctions, and AML — and build the source-of-funds and political-activity review into onboarding before the first wire moves.

A federal jury in the Southern District of Florida just convicted a former member of Congress and his lobbyist co-defendant for taking $50 million from Venezuela’s state-owned oil company without registering as foreign agents — and then laundering the proceeds through campaign funds and personal real estate. It is one of the highest-profile FARA convictions of the year, and it lands at the intersection of three programs every U.S. financial-services compliance team has been told to harden: FARA, sanctions, and AML.

If your shop has any consulting, lobbying, PR, or law-firm relationships that touch foreign governments — directly or through layered intermediaries — this is the case to walk through with your team this week.

What happened

According to the DOJ announcement carried by IRS Criminal Investigation, David Rivera, a former U.S. Representative from Florida, and Esther Nuhfer, a Miami-based lobbyist, were convicted on May 1, 2026, on multiple counts:

The prosecution centered on a $50 million contract that Petróleos de Venezuela, S.A. (PDVSA) — Venezuela’s state-owned oil company — paid to a consulting vehicle controlled by Rivera and Nuhfer. The work was a lobbying campaign aimed at improving U.S.-Venezuela relations during the Maduro government’s most isolated period. The defendants arranged meetings between Venezuelan officials and U.S. policymakers, including then-Senator Marco Rubio and Representative Pete Sessions, without either Rivera or Nuhfer registering under FARA.

Two details set this case apart for compliance practitioners.

First, the use of coded language. Prosecutors highlighted that the defendants used coded references to describe their activities in text exchanges. That is exactly the pattern compliance and surveillance teams are supposed to catch in trade desk monitoring — and it is a reminder that the same playbook shows up outside trading.

Second, the money flow. Rivera diverted approximately $600,000 of the proceeds to his Florida state-level political campaign and personal expenses. Nuhfer used about $455,000 to purchase a residential property in Key Colony Beach. Sentencing is scheduled for July 22, 2026, before U.S. District Judge Jose E. Martinez.

Why this case matters for compliance

A line you’ll see in DOJ press releases for the rest of this year: FARA enforcement is no longer a corner of the National Security Division — it is mainstream. Recent cases like the Pras Michel matter and several lobbyist prosecutions over the past three years have made clear that DOJ will charge unregistered foreign-agent activity even when the underlying lobbying is otherwise lawful.

For risk and compliance teams, the Rivera/Nuhfer conviction reinforces three control gaps that keep showing up:

1. FARA review is not a legal-only problem

Most banks, broker-dealers, and asset managers don’t think they have FARA exposure. But the moment your firm — or a vendor your firm pays — engages in political activity at the direction of a foreign government, foreign political party, or foreign-government-controlled enterprise, FARA may apply. The trigger isn’t the lobbying budget; it’s the agency relationship.

The compliance question isn’t “are we lobbying?” It’s “are any of our paid intermediaries lobbying for someone whose money traces back to a foreign principal?“

2. Sanctions and FARA need to be reviewed together

PDVSA is the test case here. OFAC designated PDVSA as a Specially Designated National in January 2019 under Executive Order 13850. After that date, U.S. persons could not transact with PDVSA without OFAC authorization. Rivera/Nuhfer’s conduct predates the SDN designation — but every sanctions-aware program built since 2019 should screen for PDVSA-linked counterparties, including consulting firms paid by them, indirect subsidiaries, and successor entities.

If you’re doing OFAC screening but not asking “where did this counterparty’s revenue come from?” you have a gap. Pair OFAC screening with source-of-funds review for any politically connected counterparty.

3. AML controls have to cover the source-of-funds, not just the wire

The money laundering counts in this case rest on the use of fraudulently obtained foreign-government funds for U.S. campaign contributions and real estate. A properly designed AML program — at the bank, at the title insurer, or at the receiving political committee — should have flagged:

• Large, irregular wires from a foreign-government-linked entity
• Payments routed through multiple intermediary jurisdictions
• A consultant counterparty without an obvious operating business commensurate with the receipts
• A counterparty with politically exposed person (PEP) connections receiving outsized fees

These are exactly the typologies FinCEN has been pushing on broker-dealers and investment advisers in the FinCEN BSA expansion to investment advisers and the recent Canaccord penalty.

Control failure analysis

Map the conduct to the universal compliance gaps.

The takeaway: no single control caught this. The conviction came from coordinated investigation across DOJ National Security Division, the IRS Criminal Investigation team, and AUSAs in the Southern District of Florida. Internal programs need the same cross-cut.

Practitioner takeaways

If you run compliance, here’s what to do in the next 30 days.

CCO / Compliance Director

• Pull every consulting, lobbying, PR, and government-affairs vendor relationship from procurement. Identify any whose ultimate work could touch foreign principals — directly or downstream.
• Add a one-page FARA self-assessment to the vendor due diligence packet. Sample question: “Does the work product or activity described in this engagement involve representation, communication, or political activity directed at U.S. policymakers or media on behalf of a foreign government, foreign political party, or any entity owned or controlled by either?”
• Refresh OFAC screening lists and confirm beneficial-ownership tracing covers state-owned enterprises and their non-listed subsidiaries.

CRO / Sanctions Officer

• Run a list test against PDVSA, ALBA-linked entities, and known Venezuela-linked instrumentalities to confirm the screening tool flags subsidiaries and aliases.
• Confirm the sanctions program hits at the beneficial-owner level — not just at the entity level on the wire.

AML Officer

• Stress-test the source-of-funds review for foreign-government-linked counterparties. Pull a sample of large foreign wire receipts and check whether the documentation explains the underlying contract.
• Add a typology to the transaction monitoring system: large foreign-state-enterprise payments to U.S. consulting LLCs without commensurate operating activity.
• Cross-reference FinCEN’s residential real estate Geographic Targeting Orders with PEP-linked purchases.

MLRO / Surveillance Lead

• Add a foreign-principal lexicon to communications surveillance. Coded language is by definition not in the dictionary — but unusual references to foreign government officials, certain country names, or vague “consulting fee” language warrant escalation.

Legal

• For any new consulting or government-affairs engagement involving a foreign nexus, require a written FARA determination — not a verbal opinion. Save it in the deal file.

30/60/90 action checklist

This week (Day 0–7):

• Email the FARA conviction summary to Compliance, Legal, and Procurement leads
• Pull list of all foreign-government-linked counterparties

30 days:

• Complete a FARA + OFAC + AML coverage gap assessment for the foreign-counterparty population
• Update vendor onboarding intake form to include FARA self-assessment
• Test sanctions screening against PDVSA-linked aliases and beneficial owners

60 days:

• Formalize a written FARA determination process for engagements with foreign government nexus
• Add foreign-principal lexicon to communications surveillance
• Require source-of-funds documentation for large foreign-state-enterprise payments

90 days:

• Conduct a tabletop exercise: a U.S. consulting LLC receives a $20M wire from a foreign-state-owned bank. Walk through every control hand-off from KYC through transaction monitoring through legal sign-off.
• Document remediation in the issues tracker; close findings or escalate.

How this connects to your issues management

A conviction like Rivera/Nuhfer is exactly the kind of external event that should trigger an issues management entry — even if your firm has no direct exposure. Best-practice issues programs treat enforcement actions as inputs: log the case, identify which of your programs touch the underlying control areas (FARA, sanctions, AML, lobbying, beneficial ownership), assess your coverage, and document the assessment.

A clean issues tracker turns “we read about it” into “we evaluated it, here’s what we found, here’s what we changed.” That documentation is what regulators and auditors look for when they ask whether your firm is responsive to the threat environment.

If you don’t have a working issues tracker — or your current spreadsheet has gone stale — the Issues Management Tracker & Template is a structured way to capture, prioritize, and close out enforcement-driven actions.

Bottom line

A former U.S. Congressman is now a federal felon for taking foreign-government money without registering, laundering it through real estate and campaigns, and using coded language to cover it. The compliance lesson isn’t about lobbying — it’s about treating foreign-government-linked counterparties as a multi-program risk that has to be reviewed by FARA, sanctions, and AML at the same time, before the engagement starts.

Pull the foreign-counterparty list this week. Check what your programs caught and what they missed. Close the gaps before the next enforcement reminder.

Related reading

• FinCEN Canaccord Genuity BSA/AML Penalty: Broker-Dealer Lessons
• Iran Crypto Sanctions Risk: Strait of Hormuz
• OFAC Risk Assessment Template