JupiteX Get the app
Defence & Security31 Oct 2026 · about 6 min

Hezbollah recruits Brazilian citizens to monitor targets in the country

The brief

Operation Trapiche, conducted by Brazil’s Federal Police in November 2023, uncovered a recruitment scheme involving Brazilian criminals and Hezbollah. The group reportedly exploited financial hardship and resentment toward the justice system. Recruits were not merely contacted locally. They were sent to Lebanon for training with weapons and surveillance equipment. The investigation identified Lucas Passos Lima as one suspect. He traveled to Lebanon at least twice in 2023. After returning to Brazil, he allegedly monitored locations and a religious leader considered targets of interest to Hezbollah. Recruits also used discreet communication methods, including email drafts, to avoid suspicion. The discovery matters because local recruits could support operations while making them appear to be ordinary crimes. Prosecutor Lucas Gualtieri said this could help Hezbollah disguise terrorist attacks. Lima was later convicted by Brazil’s Superior Court of Justice for “acts preparatory to terrorism.”

01

What did Brazil’s Operation Trapiche investigation uncover about Hezbollah recruiting Brazilian citizens?

Operation Trapiche, conducted by Brazil’s Federal Police in November 2023, uncovered a recruitment scheme involving Brazilian criminals and Hezbollah. The group reportedly exploited financial hardship and resentment toward the justice system. Recruits were not merely contacted locally. They were sent to Lebanon for training with weapons and surveillance equipment.

The investigation identified Lucas Passos Lima as one suspect. He traveled to Lebanon at least twice in 2023. After returning to Brazil, he allegedly monitored locations and a religious leader considered targets of interest to Hezbollah. Recruits also used discreet communication methods, including email drafts, to avoid suspicion.

The discovery matters because local recruits could support operations while making them appear to be ordinary crimes. Prosecutor Lucas Gualtieri said this could help Hezbollah disguise terrorist attacks. Lima was later convicted by Brazil’s Superior Court of Justice for “acts preparatory to terrorism.”

02

What is Hezbollah, and why does its activity involve both Lebanon and countries such as Brazil?

Hezbollah is a Lebanese Shiite organization that the article describes as a terrorist group. Its connection to Brazil matters because Brazilian authorities found evidence that the organization used people and networks inside the country. The investigation linked activity in Brazil with training and contacts in Lebanon.

The reported process involved recruiting Brazilian criminals through financial difficulties or resentment toward the justice system. Some recruits were sent to Lebanon, where they received weapons and surveillance training. Back in Brazil, one suspect allegedly monitored places connected to Israel and the Jewish community. Communication tools included email drafts.

This cross-border structure can give an organization access to local knowledge while keeping training and other support abroad. The article also describes alleged financial links involving cryptocurrency and commercial businesses. It does not provide a complete account of Hezbollah’s global structure, but it documents connections between Lebanon and Brazil in this investigation.

03

How many synagogues were specifically identified as monitored targets, and what other targets were named?

The investigation specifically identified three synagogues as targets allegedly monitored for Hezbollah. That number is one of the clearest details in the case because it shows the reported surveillance involved several religious sites rather than a single location.

The other named targets were the embassy of Israel, a Jewish cemetery, and a rabbi in Brasília. The article links this monitoring to Lucas Passos Lima, a Brazilian suspect who allegedly began observing targets after returning from Lebanon. He had traveled there at least twice in 2023.

The article does not state that an attack occurred at any of these locations. It describes monitoring as part of alleged preparatory activity. Lima was convicted by the Superior Court of Justice in September of “acts preparatory to terrorism.” The reported target list therefore formed part of the investigation into actions before a possible operation, rather than a confirmed completed attack.

04

Why would Hezbollah use local criminals to make possible terrorist operations look like ordinary crimes?

Hezbollah would reportedly use local criminals to hide the terrorist nature of possible operations. If an action appeared to be an ordinary crime, investigators might initially treat it as an isolated act rather than part of an organized terrorist plan. The article identifies this disguise as a key advantage of local recruitment.

The suspected recruits already had experience or connections within criminal environments in Brazil. They could observe locations, communicate discreetly, and operate locally after receiving support or training abroad. One reported communication method was saving messages as email drafts, reducing visible contact between participants.

Prosecutor Lucas Gualtieri said this recruitment model could allow attacks to be presented as isolated criminal actions. That would complicate efforts to identify the organization behind them. The investigation and Lima’s conviction show that Brazilian authorities treated alleged preparation seriously, even though the article does not report a completed attack at the named targets.

05

What does “acts preparatory to terrorism” mean, and why can activities before an attack lead to criminal charges?

“Acts preparatory to terrorism” refers to conduct that advances a possible terrorist operation before the attack itself. The phrase covers preparation rather than a completed attack. In this case, the reported conduct included alleged surveillance of locations and people considered targets of interest to Hezbollah.

The legal importance is that authorities may act before violence occurs. Surveillance, travel for training, recruitment, or communication can provide evidence that a person is preparing an operation. The article states that Lucas Passos Lima was convicted by Brazil’s Superior Court of Justice in September under this category.

The charge shows that criminal responsibility can arise from conduct before an attack, not only from carrying it out. The article does not explain every legal requirement or penalty for the offense. It does establish that Brazilian courts treated the alleged preparatory activity as sufficient for Lima’s conviction.

06

How can travel, weapons training, surveillance, businesses, and cryptocurrency help connect criminal networks with terrorist organizations?

The article presents several links between criminal networks and terrorist organizations. Travel can connect a recruit in Brazil with handlers or training in Lebanon. Weapons and surveillance instruction can then turn a local criminal into someone able to support an operation. Surveillance provides information about possible targets.

The reported example is Lucas Passos Lima, who traveled to Lebanon at least twice in 2023 and allegedly monitored sites after returning. The article also describes Dante Felipe as accused of sending resources to Hezbollah and Iran’s Revolutionary Guard through cryptocurrency. Commercial establishments allegedly helped finance recruitment.

Together, these elements create a chain: people travel, receive skills, gather information, communicate discreetly, and move money. Each activity can serve a different role. The article does not establish that every business or cryptocurrency transaction is criminal. It describes them as alleged tools in this investigation and as ways the network connected people, operations, and financing.

07

What is terrorist financing, and why do such networks often use ordinary businesses or difficult-to-trace financial tools to move money?

Terrorist financing means providing or moving money and resources that support a terrorist organization, its recruitment, or its operations. It matters because an organization needs funds for people, travel, training, equipment, and other activities. The article connects financing to both Hezbollah and its alleged networks in Brazil.

The reported case includes Dante Felipe, who was accused of sending resources to Hezbollah and Iran’s Revolutionary Guard through cryptocurrency. The article also says the organization built a network of commercial establishments to finance recruitment. These examples show two different channels: digital transfers and ordinary-looking businesses.

Such channels can make financial activity harder to recognize as terrorism-related. Businesses may appear legitimate, while cryptocurrency can obscure how resources move between people. The article does not detail the specific companies or transactions. It does show that investigators viewed financing, recruitment, and criminal networks as connected parts of the broader case.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web