Colombia’s Iron Fist: How the End of “Total Peace” Turns Old Extortion Payments Into Live Compliance Risk

Somewhere in Urabá or Catatumbo, a plant manager makes a monthly transfer that everyone in the finance department has learned not to ask about. It shows up as “security,” sometimes “community relations,” and it has existed long enough that nobody remembers who approved it first. That payment is the trap. It has always been extortion. Until December 4, 2025, though, it was extortion paid to an armed group Washington had not yet named. Since that date, the recipient, Clan del Golfo, also known as the Autodefensas Gaitanistas de Colombia (AGC, “Gaitanist Self-Defense Forces of Colombia”), has carried a Foreign Terrorist Organization designation from the U.S. State Department. Since August 7, 2026, Colombia has had a president actively hunting that same organization with military force. The payment itself hasn’t changed; what it now means under U.S. law has.

Why smart teams keep paying anyway

“Total peace,” known in Colombia as “paz total,” was the framework the previous government built its policy around, and it made this normal for four years. Bogotá negotiated cessation talks with practically every armed and criminal group operating in the countryside, Clan del Golfo included, on the theory that a negotiated de-escalation beat a military one. Companies took their cue from the state: if the government treated the local bloc as a negotiating counterparty, a plant manager’s standing arrangement with the same bloc read as pragmatic continuity, not liability. Colombia’s Ministry of Defense recorded 2,914 extortion complaints in the first quarter of 2026 alone, the highest quarterly total in a decade, and Spanish multinationals operating in the country estimate the insecurity tax (vacunas, armed escorts, forced stoppages) costs them roughly €30 million a year. That is a budget line, and budget lines get filed as operating cost rather than legal exposure, because filing them as legal exposure means admitting the arrangement needs a lawyer instead of a controller.

President Abelardo de la Espriella ended that framework in decree form, not in a speech. He signed orders reactivating every suspended arrest warrant for negotiating armed groups effective the day he was inaugurated in Cali, and within 48 hours ordered a bombing campaign against Ejército de Liberación Nacional (ELN, “National Liberation Army”) positions in Catatumbo alongside strikes that killed Clan del Golfo members in Antioquia. Reporting out of Bogotá as of August 22 has the administration now moving to strip the judicial checks that constrained action against these groups in the first place. The state that used to treat Clan del Golfo as a negotiating partner now treats it as a target. Every arrangement built on the old assumption inherited the new one’s risk overnight.

What the workaround looks like in practice

The workaround the more careful GC and CCO teams are running right now is not dramatic. It is diligence, applied retroactively to arrangements that were never diligenced going in. First, an internal audit of every historical vacuna, protection arrangement, or land-access accommodation tied to Clan del Golfo intermediaries in Catatumbo, Urabá, Putumayo, or Nariño, mapped against the December 2025 designation date and checked for which paying entity, subsidiary, or joint-venture partner carries the direct exposure. Second, re-papering forward: routing security spend through vetted, licensed providers with documented sanctions screening, so the next twelve months of payments build a paper trail that argues for the company instead of against it. Third, disambiguation at the bloc level, because not every Clan del Golfo unit is behaving identically. The Bloque Roberto Vargas Gutiérrez announced a unilateral, temporary de-escalation of extortion in specific territories running July 10 through October 10, 2026 — which means exposure varies by corridor and by month, and a blanket audit treating Urabá and Putumayo as identical wastes the compliance budget on the wrong ground.

That third move matters because it is also where M&A diligence has started to catch up. Buyers evaluating Colombia energy assets are learning this the hard way: SierraCol Energy’s Putumayo-basin blocks changed hands from Carlyle to Philippines-based Prime Infrastructure Capital in a deal announced this March, and whatever counterparty security-payment history sits inside those assets transferred with operational control, whether or not it showed up in the financial diligence workbook. Firms weighing Colombia M&A now treat counterparty payment history as its own diligence line, not a footnote to the balance sheet.

What this means for your operation

This workaround has a shelf life too, and the honest limit is worth naming. De la Espriella is governing with a fiscal deficit estimated at 7 to 8 percent of GDP, a divided Congress, and an outgoing president publicly disputing the legitimacy of the result that replaced him — the combination that historically drains a high-tempo offensive of political capital within twelve to eighteen months, as anyone who watched the pendulum swing through the Uribe-era security campaigns and the post-FARC demobilization already knows. If the offensive loses momentum before the audit finishes, some teams will conclude the panic was overpriced and a monitoring posture should have been enough all along.

That read gets the politics right and the law wrong. The FTO designation that turns a historical vacuna payment into a material-support question does not expire when a Colombian military campaign runs short on fiscal room. It sits at the U.S. Treasury and Department of Justice, attached to the $1 billion security package Washington committed on inauguration day and to Colombia’s new seat as the 19th member of the “Shield of the Americas” coalition, the hemispheric security architecture the Trump administration unveiled in March 2026 under special envoy Kristi Noem. U.S. enforcement attention on Colombia-linked counterparties rises with that kind of security entanglement regardless of how long de la Espriella’s own offensive lasts. The workaround stops working the moment a team treats the Colombian political cycle as the exposure clock. It isn’t. Washington’s is.

The vacuna your Catatumbo plant manager has been quietly paying for three years wasn’t a federal case when it started. It is now: the group collecting it is a U.S.-designated terrorist organization, the government hunting that group just received a billion dollars from Washington to do it faster, and your paper trail predates the offensive. Audit it before a prosecutor, a whistleblower, or the diligence team on the other side of your next Colombia deal does it for you. Watch October 10, when the Bloque Roberto Vargas Gutiérrez de-escalation either extends or lapses, and watch early November, the 90-day mark of de la Espriella’s presidency, when his own list of ten targeted armed-group leaders shows whether the offensive is hardening or running out of road. Bogotá’s clock may reset. Washington’s doesn’t.

Further reading:

• International Crisis Group — “From ‘Total Peace’ to Iron Fist: Colombia’s Risky Turn to Hard Security”
• U.S. Department of State — “Terrorist Designations of Clan del Golfo”
• Infobae — “La Paz total peligra con el presidente Abelardo de la Espriella”
• Semana — “Abelardo De La Espriella inicia su mandato con siete acciones militares en sus primeras 48 horas”