STF decision says that the Class received amounts for threats, obtaining data and improper access
The decision by Minister André Mendonça, of the STF (Supreme Federal Court), which authorized the , issued on Thursday (May 14, 2026), states that he would have paid an end-of-year “bonus” to members of the group A Turma, identified by the PF (Federal Police) as an intimidation arm linked to the criminal organization investigated in the Banco Master case.
The document cites a conversation in which Felipe Mourão, known as Sicário, explained to Daniel the division of monthly payments to the groups A Turma and Os Meninos.
In the message, Mourão said: “He sends the monthly and I divide it among the class. I send it to them. 400 I divide between 6. The boys I send 75 each, mine. DCM and two other editors. This is the monthly. He sends 1 and when you send bonuses I divide it between the boys and the class”. Leia a (PDF – 408 kB).
According to the PF, the centers would receive around R$1 million per month. Of the total, R$400,000 would be allocated to the Class, R$75,000 for each member of Os Meninos, and the remainder would, in theory, go to Felipe Mourão.
The investigation also states that Daniel’s father played the role of financial operator for payments to the group.
THE CLASS AND THE BOYS
The decision also reports that, on December 31, 2025, Marilson Roseno da Silva, a retired federal police officer appointed as operational leader of A Turma, asked for the Pix key from Anderson Wander da Silva Lima, an active federal police officer, to send an “offering”.
Payment was made the following day. For the PF, the transfer is compatible with the year-end bonus that Daniel Vorcaro would have allocated to the group.
According to the investigation, the structure was divided into:
- The Class — focused on threats, face-to-face intimidation, coercion, clandestine surveys, obtaining confidential data and improper access to government systems;
- The Boys — nucleus with a technological profile identified as responsible for cyber attacks, telematic intrusions, profile takedowns and illegal telephone and digital monitoring.
The PF states that the 2 groups were, at the time of the events, managed by Felipe Mourão and responded to commands from the central nucleus of the criminal organization.
According to the decision, the activities continued even after the previous phases of the , with identification of members and greater detail on the division of tasks.
