You arrive at your office on a Monday morning and find out your bank accounts are frozen. The company’s accounts, too. Your corporate card is declined. The finance department calls — payroll won’t clear. No one has been served with anything. No one has received a copy of any court order. The information comes from your bank manager, who doesn’t fully understand what happened either.
A few hours later — sometimes days later — the explanation surfaces: your name appears in an investigation for criminal organization. The company is treated as part of a structure assembled to commit crimes. And a judge, based on that classification, authorized a package of precautionary measures that are already producing effects before you even knew you were under investigation.
This is not a hypothetical. It plays out, with variations, in police operations launched across Brazil every year. And the reason it is possible has less to do with the seriousness of the underlying facts than with a technical decision by the prosecution: classifying the conduct as criminal organization under Article 2 of Law No. 12,850/2013 — Brazil’s Organized Crime Act.
In recent posts on this blog, we examined how this charge has spilled over from gang enforcement into corporate investigations and why the classification is frequently an overcharge. The focus now is different: what that label actually unlocks. Because the classification is not merely a naming convention — it works as a key that opens an arsenal of procedural instruments with immediate impact on assets and business operations.
The freeze comes before the indictment
Classifying conduct as criminal organization makes it substantially easier for prosecutors to obtain pretrial asset restraints. Seizure of assets (Article 125, Code of Criminal Procedure — CPP), attachment (Article 137, CPP), legal mortgage (Article 134, CPP) and general asset freezes become available under a more permissive evidentiary threshold when the context is organized crime.
In practice, the prosecution’s reasoning follows a simple logic: if we are dealing with a criminal organization, then the assets are either proceeds or instruments of crime. The breadth of the charge contaminates the breadth of the restraint. Prosecutors do not seek to freeze the amount allegedly diverted — they freeze everything within reach.
The problem is that this freeze operates before indictment. Precautionary measures are granted during the investigation phase, often under seal, and the target discovers that assets are unavailable only when trying to use them. The defense enters the picture after the damage is already in place — and, as we will see, undoing that damage is substantially harder than producing it.
Wiretaps that never end
Law No. 9,296/1996 authorizes the interception of telephone and electronic communications for a period of 15 days, renewable for an equal period. In theory, each renewal requires independent justification — the judge must demonstrate that the measure remains necessary.
In criminal organization investigations, that control erodes. Brazil’s Superior Court of Justice (STJ) has upheld successive renewals when the complexity of the investigation justifies maintaining the measure. In practice, wiretaps that should last 15 days extend for months — sometimes over a year.
For a company, this means that the communications of executives, directors and potentially employees are being monitored in real time throughout the investigation. Corporate emails, WhatsApp messages, calls with outside counsel — everything enters the surveillance scope. The breadth of the wiretap follows the breadth of the charge: if the criminal organization supposedly operates through the company, then the company’s communications are the organization’s communications.
We have previously analyzed on this blog how to respond when an anonymous tip or a document request arrives. When the investigation has already reached the wiretap stage, the situation is qualitatively different: the target does not know they are being monitored, and every conversation may be transcribed and added to the case file.
Controlled delivery and undercover agents: drug-enforcement tools applied to commercial contracts
Law No. 12,850/2013 makes two instruments available to prosecutors and police that do not exist outside the criminal organization context: controlled delivery (Article 8) and undercover agents (Article 10).
Controlled delivery allows law enforcement to delay intervention — that is, to watch the alleged criminal activity unfold without acting, in order to collect more evidence and identify more participants. Undercover operations allow a state agent to infiltrate the investigated structure.
These instruments were designed for combating permanent criminal structures — drug trafficking, militias, smuggling networks. When applied to a corporate environment, they produce a distortion: a commercial relationship between companies becomes a surveillance opportunity; a contract negotiation becomes a controlled operation; a supplier with no knowledge of the investigation may be sitting across the table from an undercover agent.
The legal viability of these measures depends entirely on the classification. Without the criminal organization charge, the prosecution has no access to them. With it, the menu opens — and the line between legitimate investigation and overreach becomes harder to draw.
The domino effect: even non-targets pay the price
A particularly serious aspect of the criminal organization charge in the corporate context is its impact on third parties who are not formally under investigation.
Suppliers who maintained a regular commercial relationship with the investigated company discover that their receivables are frozen. Minority shareholders who had no role in management see their equity become illiquid. Spouses and family members with assets in their own names — acquired with lawful funds — face asset restraints because the investigation presumes commingling of patrimony.
The logic is inherently expansive: if the criminal organization operated through corporate structures, then all assets connected to those structures are potentially proceeds of crime. The distinction between lawful and unlawful assets — which should be drawn before the restraint — ends up being postponed to a later stage, when the damage is already done.
Brazil’s proposed Organized Crime Framework Bill (Law no. 15,358/2026) is likely to make this worse. As we analyzed in March, the bill expands available investigative tools and increases penalties — which indirectly strengthens the justification for more aggressive precautionary measures.
Reversal is harder than the freeze
Here is the point that rarely makes the news coverage of police operations: reversing a pretrial asset restraint in a criminal organization case is a slow, expensive and uncertain process.
A motion to unfreeze requires demonstrating the lawful origin of the assets — which, in practice, shifts the burden of proof. The target must prove that the assets have no connection to the alleged criminal activity, which presupposes access to the case file (not always available) and production of documentary evidence (which may have been seized).
While the motion is pending, the company operates without working capital. Contracts are terminated for non-performance. Employees are laid off. Suppliers cut credit lines. Reputation — already damaged by the public launch of the operation — suffers continuous erosion. By the time the unfreeze order comes — if it comes — the company that existed before the operation may no longer exist.
This is why the response to the charges and specialized legal defense from the very first moment of the investigation are not formalities: they are the difference between preserving the company and watching it dissolve.
The defense must arrive before the damage
Everything described above flows from a single classificatory decision: framing the conduct under Article 2 of Law No. 12,850/2013. Once that classification is in place, the arsenal opens automatically. And the arsenal is not proportional to the actual seriousness of the facts — it is proportional to the label attached to them.
The practical lesson is straightforward: if your company or your client is exposed to this type of risk, specialized criminal defense must be in place before the operation is launched — or, when that is not possible, within the first hours after it. Not the first weeks. The first hours.
The dynamics of plea bargaining cooperation show that some of the most severe consequences crystallize in the opening moments of an investigation. Pretrial asset restraints follow the same pattern: once granted, they create accomplished facts that the defense spends months — or years — trying to undo.
The company does not fall because of the investigation. It falls because of the time it takes to respond.
Guilherme Brenner Lucchesi is a criminal defense attorney, holds a doctorate in Law from UFPR, an LL.M. from Cornell Law School, and is a professor of Criminal Procedure at the Federal University of Paraná (UFPR) and founding partner of Lucchesi Advocacia.
