From 18,000 COVID Tests to the OFAC List: The Compliance Blind Spot Mexican Football Won't Look At

On 29 September 2026, the US Treasury announced sanctions against 50 individuals and entities linked to the Sinaloa Cartel's money-laundering network. Among them was Holistic Wellwaves - a name that had appeared on a contract to supply 18,000 rapid COVID-19 tests to the state of Sonora, Mexico. The contract was worth 8,769,600 pesos, or roughly 420 pesos per test, signed under an emergency direct-award provision in 2026, when the pandemic had all but collapsed the state's public health system.

A football analyst's first instinct is to set the story aside. This is public procurement. There is no starting XI, no expected goals, no match to dissect. But when a state government's supplier is placed on the OFAC sanctions list, the question is no longer about Hermosillo or Mexico City. It is about how Mexico's lower-division clubs are kept alive by public money - and how almost nobody audits that money until it is too late.

A lawful contract, a delayed consequence

The Sonora contract was signed under the emergency provisions of Mexican procurement law. Legally, it was valid. Officials at Servicios de Salud de Sonora - among them names such as López Mercado, Duarte Mendoza and Larrazolo Carrasco - signed on behalf of the state health service. None of them were charged at the time of signing, and by all indications the procedure followed the sequence the law permits in an emergency.

Six years later, Holistic Wellwaves was sanctioned by OFAC. The company's legal representative, Moreno Gómez Santelices, was named in the Sinaloa Cartel's money-laundering network. And according to El Universal - which reviewed the original documents - similar contracts also appeared at entities in Baja California. The story therefore does not stop at one state; it opens onto a pattern of procurement repeated at local-government level.

Here I have to state a principle that anyone working in football finance should burn into their memory: compliance risk does not disappear when a contract is signed lawfully; it simply lies dormant until the sanctioning authority wakes up. What is true of a Mexican state is true of a second-division club in Europe, of a football academy, of a shirt sponsor signed in silence.

Why this story reaches football

Mexican football has a structural layer that international media rarely touch. Clubs in Liga de Expansión MX and the lower divisions often depend on funding from state governments and local businesses. Unlike the big teams that live on broadcast rights and commercial deals, these smaller clubs survive on money tied tightly to place - where the line between a legitimate sponsor and a murky flow of funds is far thinner than in Liga MX.

The history of Mexican football has repeatedly shown that money linked to criminal organisations can seep into the lower divisions. The pattern has been documented in earlier investigations, and it is not confined to any single state. What needs clarifying in Sonora is whether that sanctioned supply network touched any sports entity receiving state budget money. At this point, there is no direct evidence that it did.

And it is precisely that evidentiary gap that matters. "The axis is off not because of the machine, but because of what people choose not to see." In football, financial misalignment rarely sits in the stadium. It sits in the accounts office, in supply contracts nobody reads carefully, in sponsorship deals signed because a club needs money before the season starts.

Based on my experience following matches and financial records, I have learned that structural problems rarely surface where it is loudest. They surface in small details: an anomalous running figure, a deeper receiving position, a supply contract nobody re-reads. Some years ago, while working with a club's tracking data, I found that a small change in the tactical setup could skew a player's entire data series. The same lesson applies to finance: a change at one small link can produce a large consequence at a much more distant one.

The mechanism of contamination and the number six

You have to understand how OFAC works to see why this story does not close in Mexico. When an entity is placed on the sanctions list, any transaction it makes with the US financial system - or with any party that touches the dollar - can be blocked. For football clubs, this is not merely their own problem. It is the problem of the bank processing the contract, of the international commercial partner, of pre-season tours on US soil, and of transfers involving accounts abroad.

The macro backdrop makes the story more notable still. In recent years OFAC has significantly expanded measures targeting the financial networks of transnational criminal organisations, including Mexican cartels. That means entities that once signed contracts with such firms - even if entirely clean at the time - can suddenly find themselves in the crosshairs of an investigation they never knew existed.

The number six is the most important detail in the whole story, and also the easiest to miss. Nobody in Sonora in 2026 could have known that their supplier would be sanctioned in 2026. That is the very nature of compliance risk: it does not show up at the moment of the transaction, but at the moment of the audit. A club that signs a sponsorship deal today may be entirely clean, but if its partner is later caught up in a network under investigation, the club's cleanliness does not automatically shield it from the consequences.

This is where European football can learn from the Mexican story. In Europe, financial fair play and club-ownership rules focus on owners' money and transfer dealings. But most compliance risk actually lies in smaller, less scrutinised contracts: equipment suppliers, medical services, transport, catering, and local sponsors. These are the deals nobody puts on the front page, until someone is sanctioned.

The most important insight here is not in the specific Sonora case but in the structure it exposes. The biggest risk to football is not notorious owners, but anonymous suppliers. A club can have a passionate fanbase, a clean president, a renowned academy - and still be dragged into an investigation simply for signing a transport contract with a company whose true owner sits on a blacklist.

The contrarian view: the "cartel football" panic is a blind spot

After every scandal like this, sports media tend to leap onto the "football taken over by cartels" narrative. It is an understandable reflex, but structurally wrong. The Sonora case is a story of public procurement being exploited, and football is only one of many sectors that can be cross-contaminated.

I have many times seen how the media turns a financial event into a sporting morality tale, then extrapolates a permanent rule from two or three small cases. That is the kind of generalisation the data does not permit. One contract in Sonora does not prove that Mexican football is controlled by cartels. It proves only that supplier-screening mechanisms - at state level and at club level alike - have holes.

The danger of moral panic is that it makes people look in the wrong place. Instead of asking "which process let this supplier through", the public asks "which club took dirty money". The second question sounds more dramatic, but the first is the one that can actually be fixed. "Numbers do not lie, but they hide the most important thing." The figure of 8,769,600 pesos does not hide a football conspiracy. It hides a compliance hole spreading across every sector that receives public money - health, education, transport, and sport too.

A serious supplier-screening process does not require complex technology. It requires three questions asked before signing: who really owns this entity, does this entity appear on any sanctions list, and is there any connection among our different suppliers. Most lower-division clubs do not ask all three. They ask a single question: how much, and when.

It is worth noting that the emergency direct-award mechanism is not a rare loophole. During the pandemic, many governments loosened procurement procedures to buy medical equipment faster, and that loosening created a window through which problematic suppliers could slip. Football has been through similar windows: when a club hits a financial crisis, sponsor checks tend to be relaxed to bring money in fast.

Takeaway

What is notable about the Sonora case is not whether it relates to football. What is notable is that it reveals a hole that can recur at any club living on public money: a contract signed today can become evidence tomorrow, even when the signatory is entirely honest. "I do not believe in miracles. I believe in properly collected data." And properly collected data, in this case, begins with a simple question clubs should ask themselves before next season kicks off: on our list of suppliers and sponsors, who will be the name that appears on a sanctions list six years from now?

Football does not die when the stands are empty. It simply exposes its true skeleton - and so does a financial scandal.