Compliance Under Fire: The Vizsla Silver Tragedy and the False Humanitarian Dilemma

On the morning of 23 January 2026, an armed command stormed a gated residential compound in La Clementina, in the municipality of Concordia, Sinaloa, and took ten workers of the Canadian company Vizsla Silver Corp. (VZLA) who were waiting to be driven to the Panuco project. Seven months later, all ten have been identified: the last of them in early July 2026. Ten engineers, geologists, community-relations staff and security personnel, taken from a place where they slept.

This is not another tabloid crime story. It is a terminal symptom of a pathology devouring the rule of law in Mexico, and it places global companies before what looks, from the outside, like an impossible crossroads. In the days that followed, opinion writers in Mexico framed the dilemma in the language of conscience: faced with threats to life and liberty — whether through kidnapping or retaliation for refusing extortion — the company took shelter in the law rather than yield. The verdict was repeated in a dozen variations: juridically they are right, humanitarily they are not.

As a lawyer, and above all as a public broker who drafts facts for a living, it is my professional duty to dismantle that dichotomy. Not because the suffering is unreal, but because the reasoning is wrong. Vizsla's refusal to pay was not a lack of humanism; it was the only decision that was legally available to it — and understanding why is the most useful lesson this tragedy can offer foreign investors watching Mexico from Washington, Ottawa or Toronto.

Three dimensions are usually ignored in the public debate: the operational context, the transnational legal wall, and the place where the real crisis of values actually sits.

1. Ground zero: what the record actually shows#

For colleagues observing this from abroad, the scenario must be stated precisely. Sinaloa is a world-class mining jurisdiction — rich in silver, gold, copper, lead and zinc — and it is also the epicentre of a fratricidal war between factions of the Sinaloa Cartel that has run since September 2024: Los Chapitos, loyal to the sons of Joaquín "El Chapo" Guzmán, against La Mayiza, loyal to the family of Ismael "El Mayo" Zambada. The end of one cartel's leadership, weeks after these abductions, did not produce calm; as we argued in our analysis of the fall of "El Mencho", the risk profile shifted from centralized cartel dominance to decentralized instability — and Concordia is what that instability looks like on the ground.

Vizsla Silver is not an improvised local firm. It is a Vancouver-based public company that graduated to the Toronto Stock Exchange in November 2024 and trades on both the TSX (VZLA) and the NYSE American (VZLA), with a Frankfurt listing alongside. It is an SEC registrant filing on Form 40-F. Its Panuco project involves a reported US$300 million of investment, an estimated 326 million ounces of silver equivalent, and roughly 230 direct and indirect jobs in Concordia.

The chronology matters more than any commentary:

Shares fell more than 11% on 9 February 2026 as the first identifications were confirmed. By then the question in every boardroom was no longer "how could this happen" but "what would we have done".

2. Two versions of the same event#

The most uncomfortable feature of this case is that Mexico has two incompatible official and unofficial accounts of it, and intellectual honesty requires stating both.

The official version. According to the Security Ministry, the detainees of Los Chapitos admitted that the workers were confused with members of an antagonistic group. The government reported no prior complaints of extortion or threats against the company or its workers, and prosecutors initially stated that no ransom or rescue demand had been received, so the case was classified as unlawful deprivation of liberty by private parties rather than as a kidnapping. The President added that the investigation would not rest on the detainees' story alone.

The reported version. Journalists and sources cited in national media have reported a different picture: pressure for a monthly floor charge — figures around 200,000 pesos circulate — alleged demands for a share of production in kind, a formal complaint filed only after the abduction, and accounts from former workers about deteriorating security during 2025, including instructions to change the colour of their work vests so that armed patrols could identify them. Vizsla Silver has categorically denied ever being extorted, ever paying extortion, and ever receiving a ransom demand, and has said it is cooperating fully with Mexican authorities while reviewing the circumstances internally.

Which version is true is a question for the Fiscalía Especializada en materia de Delincuencia Organizada, and the answer will shape the civil, criminal and diplomatic aftermath for years. For the analysis below, however, it changes nothing — and that is the first point worth making. A company does not get to choose which narrative becomes the case file. The legal consequences it faces in Washington, Ottawa and Mexico City are the same whether it refused to pay, paid and stayed silent, or paid and booked it as "logistics".

3. The false dilemma: why "pay for humanity" is not an option#

The argument that compliance is cold and inhumane assumes that paying was a lawful alternative that the company rejected on moral grounds. It was not.

The "no concessions" policy adopted by global corporations has deep ethical roots, but the reasoning is systemic rather than sentimental. If a public company yields and pays, it immediately validates the kidnapping-and-extortion business model. In that moment it converts every one of its thousands of employees across the world into a bearer cheque. Money paid to free today's hostages funds the weapons, the drones, the armoured vehicles and the recruitment that will threaten hundreds of innocents tomorrow.

And there is a harder truth in this specific case: payment would not have bought safety. No rescue demand was reported by the company, and all ten men were killed regardless. Refusing to pay is not greed; it is the only way to avoid becoming the automated teller of an armed group — and, as the next section shows, it is not a matter of preference at all.

4. The legal wall: what would have happened, step by step#

Suppose the board had decided otherwise. Suppose, in the days after 23 January, someone had authorized a transfer to "resolve the situation". The chain reaction is not speculative; it follows from statutes.

a) Material support to terrorism#

Since February 2025, the Sinaloa Cartel has been designated by the U.S. State Department as a Foreign Terrorist Organization and a Specially Designated Global Terrorist. Under 18 U.S.C. § 2339B, knowingly providing material support or resources — explicitly defined to include currency, financial services, lodging and transportation — is a federal crime. Courts will infer knowledge from willful blindness: consciously avoiding an obvious fact is treated as knowledge itself. A board that hires a "fixer" precisely because nobody wants to ask what the fixer does is supplying the element of the offence.

b) The OFAC trap#

Sanctions liability for transactions with blocked persons is strict. The exposure is not a symbolic announcement: it is the blocking of any property within U.S. jurisdiction, the 50 Percent Rule catching entities that appear on no public list at all because they are owned — directly or indirectly — by designated persons, and the practical consequence of losing correspondent banking and institutional counterparties. (Listed issuers face their own listing-standard problems, but delisting is neither automatic nor the main risk; frozen access to the financial system is.) A Canadian issuer with U.S. listings and dollar clearing is squarely within reach.

c) The accounting problem#

The FCPA's books-and-records and internal-controls provisions apply to issuers — and Vizsla Silver is an SEC registrant. How does one record a ransom payment? There is no lawful line item. Booking it as "consulting", "security" or "logistics" converts the original payment into accounting fraud and creates a fresh offence in the United States. On the Canadian side, the Corruption of Foreign Public Officials Act criminalizes bribery of foreign public officials; Canada has also seen its own enforcement wave against companies operating in high-risk jurisdictions. The books-and-records hook is American, but the reputational and prosecutorial exposure is hemispheric.

d) Mexican liability — and Mexican protection#

Mexican law cuts both ways. Article 421 of the National Code of Criminal Procedures makes legal entities criminally liable when, alongside a catalogue offence committed in their name or for their benefit, there was a "failure to exercise due control in the organization". Conversely, a company that can prove it had real, operating controls — documented refusal policies, escalation protocols, third-party diligence — is precisely the company that can defeat that allegation. Extortion payments made under genuine duress may be argued narrowly; recurring payments silently absorbed into the cost structure cannot.

The cruel arithmetic of this case is that the company faced potential responsibility in three jurisdictions for the same money it never sent — while the actual killing, according to every official account, was motivated by something else entirely.

5. What actually went wrong: the other side of the compliance ledger#

An honest legal analysis cannot stop at "they were right not to pay". The public record raises harder questions that every operator in Mexico should answer before, not after, an incident.

Security conditions in the Panuco area had already forced a suspension of field activities in April 2025; the pause lasted about a month and operations resumed. Workers reported that gunfire, drone flights and vehicle searches had become routine during 2025. The Attorney General's Office is examining the labour and security conditions of the miners — that is, not only what the armed group did, but what the company knew, when, and what it decided to do about it.

This is where compliance proves it is not a checklist. There are two obligations, and companies routinely satisfy only the first:

1. Do not pay. Non-negotiable, and the easier half.
2. Suspend and document when the threshold is crossed. The "no" only works when it is followed by "and we stop working here", with the decision, its basis and its timing recorded in a form that can later be produced to a regulator, a court or an arbitral tribunal.

A refusal without an exit protocol leaves your people on site, your licences exposed and your board with no evidence of reasonable conduct. In this environment the facts you will need — the state of a route, the conditions of a facility, who actually controls a corridor — are far cheaper to fix in advance. A certificate of facts issued by a public broker turns an observation into a public instrument with a certain date, which is exactly what a prosecutor, a regulator or a family will ask you to produce.

Equally, the instruments that protect a foreign investor in Mexico are built before the crisis: clean incorporation with foreign investment, commercial contracts that allocate security and force-majeure risk expressly, commercial mediation and arbitration clauses for supplier and community disputes, and a chain of third-party diligence that survives the 50 Percent Rule. None of that stops a criminal command. All of it determines whether you are defending a company or defending yourself.

6. Compliance as survival DNA#

For legal professionals — particularly those in compliance — Vizsla is a bitter but necessary lesson. It reminds us that compliance is not a bureaucratic checklist to avoid fines or to look good in the annual photograph. In the current global environment, regulatory compliance is the DNA of survival for organizations: the shield that prevents the institution from becoming an involuntary accomplice to crime.

Companies cannot substitute for the State. They cannot, and must not, finance crime in order to operate. Doing so would be the true moral bankruptcy — and it would still not protect the next shift.

7. The real crisis of values: the abdication of the State#

If the company acted within the law and under an ethic of non-proliferation of violence, where is the crisis of values? The answer is uncomfortable but inevitable: the crisis lies in the abdication of the State.

The social contract establishes that the State holds the monopoly on the use of force to guarantee the safety of its citizens. In parts of Sinaloa that contract is broken. It is the State that has allowed extortion to become a de facto operating tax in extractive regions. It is the State that, failing to guarantee security on the highways, leaves private companies to armor their convoys and negotiate their own reality — and that deploys 1,190 military personnel, helicopters and aircraft to search for missing civilians months later. It is the State that reaches for comforting narratives — a confusion between gangs, a local incident — before admitting that territorial control has slipped.

A line from a former president entered the political vocabulary in April 2022, directed at the Supreme Court during the electricity-law dispute: "que no me vengan con ese cuento de que la ley es la ley" — don't come to me with that story that the law is the law. That disdain for legality, the idea that norms are a dispensable inconvenience, is the germ of the impunity we now lament.

Accusing a foreign company of a "lack of humanism" for refusing to violate international law is to lose focus. The tragedy of the miners is not the fault of compliance; it is the direct consequence of an authority vacuum that leaves civil society at the mercy of barbarism.

8. Frequently asked questions#

Is it ever lawful to pay extortion in Mexico?#

Never as a policy. Narrow duress arguments exist for a specific, immediate threat to life, and they must be documented in real time and escalated to counsel. Recurring payments, absorbed into operating costs and booked as anything other than what they are, are not duress — they are a course of conduct that prosecutors will characterize as support.

Does the FCPA apply to a Canadian company listed in the United States?#

Yes, in substance. An issuer with U.S. listings, SEC registration and dollar clearing falls within the anti-bribery and accounting provisions; the CFPOA covers the Canadian dimension; and OFAC exposure reaches any transaction touching U.S. jurisdiction or the dollar system. The nationality of the company is far less relevant than the routing of its money.

Did Vizsla Silver pay or not?#

The company states that it has never been extorted and never paid extortion, and that it received no ransom demand. The government reported no prior extortion complaints. Journalists and former workers have described a different reality. The Attorney General's Office is investigating the circumstances, including the company's own conduct. Until that investigation closes, anyone — including a commentator — who states as fact either "they paid" or "they never faced demands" is speculating.

What should a company do differently?#

Define, in advance, the threshold at which operations suspend. Document who decides, on what basis and when. Verify the beneficial owner of every logistics, security and catering counterparty — the single most effective first step. Then maintain the escalation channel so that a payment proposed in the field arrives at the board as a legal question, not as an operational fait accompli.

Who protects the workers when the State cannot?#

The honest answer is that corporate measures cannot substitute for public security — but they do raise the cost of error: vetted contractors, transport and accommodation off public roads where intelligence requires it, real authority for site managers to halt work, and a duty of care that does not end when a project is suspended. A protocol that only tells people what to do if they are taken is already too late.

Conclusion#

The tragedy of the ten miners of Concordia is not an argument for paying. It is the proof that in a jurisdiction where the State has stepped aside, the company is left holding two obligations at once: the duty not to finance violence, and the duty to protect the people it put in harm's way.

Compliance is where those two duties meet. It is not warmth, and it is not coldness; it is the discipline of doing the lawful thing on purpose, in advance, on paper.

My solidarity goes out to the families of the ten miners. Their loss must not be in vain: it must serve to demand that security be guaranteed by those who hold the constitutional mandate to provide it — and not by the chequebook of an extorted company.

In a world where barbarism is a business model, clinging to the law — even when it hurts, even when it looks inhumane in the short term — is the last act of civility we have left.

Let's talk#

If your operation crosses the threshold where a payment, a "route fee" or a local facilitation stops being an expense and starts being a criminal theory, we should review it before it happens.

Start the conversation on the contact page.