Within days, several unusual payments were submitted to newly established vendors.

One was connected to Ryan’s cousin, Oscar.

On paper, his business provided logistics services.

In reality, investigators found very little evidence that the company had legitimate operations.