XLSlidesThe transfers around a dismissal
On the morning of the sixteenth of November, 2017, a bank account belonging to Angola's state oil company held fifty-seven million dollars. By that evening, it held three hundred and nine. Three transfers had gone out. Thirty-eight million dollars. Then fifteen million. Then four million. The biggest went to a bank account in Dubai. The day before, the company's chair had been fired.
She was the daughter of the man who had ruled Angola for thirty-eight years. And some of the money leaving Angola that year was on its way to three of the most famous advisory firms in the world. This is the story of the Luanda Leaks.
Source context: [7]
The president's daughter
Her name is Isabel dos Santos. Her father, José Eduardo dos Santos, was Angola's president from 1979 to 2017. She studied engineering in London and built a business empire in banking, telecoms and diamonds. In 2013, Forbes called her Africa's first female billionaire. Then, in January 2020, the International Consortium of Investigative Journalists published the Luanda Leaks: more than seven hundred thousand leaked documents, reviewed by over one hundred and twenty journalists.
They mapped more than four hundred companies linked to her and her late husband, in forty-one countries. Dos Santos denies any wrongdoing. She calls the allegations a political campaign against her family.
Source context: [2]
An oil state
To understand the money, start with the oil. Angola is one of Africa's biggest oil producers. According to the World Bank, in 2022 oil made up ninety-five percent of the country's exports, and sixty-two percent of its tax revenue. Much of that wealth runs through one company: Sonangol, the state oil firm. In 2018 its turnover was about eighteen billion dollars.
Yet in 2018, about one in three Angolans lived on less than two dollars and fifteen cents a day. When oil prices crashed in 2015, Sonangol was in trouble. The government decided it needed a restructuring.
The restructuring
In late 2015, a decree signed by the president set the restructuring in motion. A contract worth nine point three million dollars went to a Maltese company called Wise Intelligence Solutions, to oversee the work. According to The New York Times, Wise was owned by Isabel dos Santos and her husband. Two of the world's best-known strategy firms joined the project: Boston Consulting Group, and McKinsey.
The Times reported that both agreed to be paid through Wise, her company, rather than directly by the Angolan state. Then, in June 2016, her father appointed her chair of Sonangol.
Old relationships
For some advisers, she was not a new client. In 2012, a Lisbon team from BCG took a central role in running a Swiss jeweler, de Grisogono, that her late husband had bought into, backed by more than one hundred and twenty million dollars in loans from Angola's state diamond company. One BCG employee who later became its chief executive called it "shadow management."
The state diamond company later said it expected losses of more than two hundred million dollars on the investment. Meanwhile, PwC was the accountant, auditor or tax adviser for at least twenty companies controlled by the couple. One of its partners, Sarju Raikundalia, became Sonangol's chief financial officer.
Source context: [8]
Follow the money
In May 2017, Wise was replaced as project manager by a company in Dubai: Matter Business Solutions. Its listed owner was Paula Oliveira, a friend and business partner of dos Santos. Bank records reported by the Portuguese outlets Expresso and SIC show about one hundred and thirty-one million dollars was paid to Matter. From Dubai, thirty-one point two million went on to BCG. Twenty-one point four million to PwC. Fifteen point four million to McKinsey.
Another thirty-one point five million, the reporting found, is unaccounted for after it left Dubai. Oliveira says the services were real, and that the claim they were not is "deeply false."
Source context: [1]
Follow the payment, not only the contract
- 01State institution
Identify the client, public mandate and signatory authority.
- 02Intermediary company
Establish ownership, services and why this entity receives the payment.
- 03Professional firms
Reconcile onward fees, deliverables and the ultimate economic benefit.
The last week
Now, back to November 2017. A new president, João Lourenço, had taken office in September. On the seventh of November, the head of Sonangol's London subsidiary was dismissed. According to The Guardian, a memo naming her replacement was dated two months earlier. On the tenth, that replacement and Paula Oliveira signed a new consultancy contract with Matter.
On the fifteenth, Isabel dos Santos was fired. And on the sixteenth, the transfers went out. Dos Santos says she approved the payment before she was dismissed, and that it paid for legitimate work. "I'm not clairvoyant," she said.
What went wrong
Why did advisers say yes? According to The New York Times, global banks, bound by strict rules on politically connected clients, had largely declined to work with the family. Consultants, it reported, "readily embraced" her business. Look at the red flags. A state oil company, run by the president's daughter. Restructuring fees routed through companies owned by her, or by her friends.
And payments sent offshore, through Malta and Dubai, instead of straight from the state. Money-laundering experts who reviewed the documents for the reporters called them "obvious red flags."
The reckoning
After the leak, PwC ended all work for the family's companies. Its tax chief for Angola and Portugal stepped down from that role. McKinsey said internal inquiries found no irregularity by its team, and that its work for Sonangol began before dos Santos became chair. BCG declined to comment, citing the investigations. The sources used for this account do not establish criminal guilt of BCG or McKinsey.
For dos Santos, the cases kept coming. Interpol issued a red notice in 2022, at Angola's request. A London court froze up to five hundred and eighty million pounds of her assets in 2023. In 2024, Angola charged her over losses of about two hundred and nineteen million dollars at Sonangol, and Britain sanctioned her, saying she had embezzled at least three hundred and fifty million pounds.
In 2025, Angola's Supreme Court dropped some of the charges, but kept embezzlement and money laundering. She denied the allegations. The proceedings and sanctions discussed here have distinct legal statuses, and are not presented as a final criminal conviction.
THE SEQUENCE
A timeline of the case
Restructuring arrangements
The reporting describes consulting work routed through an intermediary. [1]
Sonangol chair appointment
Dos Santos became chair of the state oil company. [2]
Dismissal and transfers
Investigators later examined payments around the change in leadership. [2]
Luanda Leaks
ICIJ and partner newsrooms published their investigation. [1]
UK sanctions
The UK announced sanctions against dos Santos, who denies wrongdoing. [4]
The institution, the person and the intermediary
A consultancy can appear to have one client while responding to several centres of authority. A public institution pays for work. An individual in a leadership role gives instructions. An intermediary holds the contract or sends the invoice. Each role needs to be understood separately before the arrangement can be evaluated.
The Luanda Leaks reporting is useful because it follows those distinctions through documents and payments. A professional brand at the end of the chain does not explain why the chain was structured that way. Equally, an unusual structure is not automatically proof of a crime. The reviewer needs evidence of ownership, authority, services and economic purpose.
The practical question is simple to state and difficult to answer well: whose interests is this engagement actually serving? A public-company mandate should be tested against the work delivered, not inferred from the title on the proposal. If the work benefits a private network, a familiar corporate name does not resolve the conflict.
Reconcile amounts before drawing a flow diagram
Payment diagrams can make a complex investigation understandable, but they can also imply more certainty than the underlying records support. Every arrow should have a defined basis: an invoice, a bank entry, a reported transfer or an allegation. Those categories should not share a visual treatment that makes them look equally established.
The reported onward fees to BCG, PwC and McKinsey total $68 million. That arithmetic does not explain every dollar received by an intermediary, nor does the difference between two totals establish where the remaining money went. Timing, tax, other services, account coverage and incomplete records may all matter. An unexplained amount is a question, not a verdict.
| Part of the chain | What to establish | What the amount alone cannot prove |
|---|---|---|
| Public institution to intermediary | Authority, service period and contract | That the payment was justified |
| Intermediary to professional firm | Invoice, work and recipient | That all underlying funds were legitimate |
| Remaining balance | Full account reconciliation | That every residual was stolen |
| Final beneficiary | Ownership and control | The intent of every person involved |
This is our due-diligence framework. A financial presentation should state the currency, period and source under the flow diagram, then explain where the evidence ends. An attractive set of arrows cannot replace a reconciliation.
Beneficial ownership is a live question
The ownership of a company matters because it can reveal a connection that the trading name does not. But an initial ownership check is not enough for a long engagement. A new intermediary, a change in signatory authority or a request to pay a different account can alter the risk even when the workstream has not changed its name.
A practical review records the legal entity, beneficial owners, directors, authorised signatories and the reason the entity sits in the chain. It also identifies which facts were independently verified and which were supplied by the counterparty. If a piece of information cannot be verified, that limitation belongs in the approval decision.
Political exposure should lead to a more careful assessment of authority and conflicts. It is not itself proof of wrongdoing. The response must be proportional to the real arrangement and applicable obligations. A firm should be able to explain why it accepted the client and what conditions would cause it to stop work.
A change-of-control exercise for project teams
Imagine a fictional state-owned enterprise whose chair is dismissed while a large consulting invoice is pending. The project team receives an urgent instruction to pay an intermediary’s new bank account. The staff recognise the sender and know the work was performed. Those facts still leave important questions unanswered.
Does the sender retain authority after the leadership change? Is the invoice owed by the institution or another entity? Why has the recipient account changed? Has an independent person verified the bank details through a trusted channel? Which approval is required before payment? Urgency should not remove those questions from the process.
The exercise is illustrative rather than a claim about an additional Luanda Leaks transaction. Its lesson is that a valid deliverable and an invalid payment instruction can coexist. Project quality, client authority and payment integrity are separate controls. A business-case review should not assume that commercial approval settles all three.
Read responses with the same care as allegations
An investigative article should make space for the explanations offered by the parties. A firm may say that it performed legitimate work, that its institutional relationship predated a particular leader or that an internal review found no irregularity. Those statements are relevant, but they should be identified as the firm’s position rather than as an independent finding.
The same standard applies to an allegation. A leak, complaint or sanctions announcement has a source and a procedural status. The article should explain what the document establishes and what remains contested. A strong headline does not justify changing reported suspicion into a criminal conviction.
The UK sanctions record is therefore presented as a dated official designation. It is not treated as a trial judgment. Dos Santos’s denial remains part of the account. The public record concerning one individual should not be used to imply that every adviser in the story has the same legal status.
Who reviews the institution’s interest?
Professional work can be technically competent and still leave a difficult question about the mandate. A restructuring model may be well designed. The adviser may have delivered the contracted analysis. The institution still needs to know whether the contract served its legitimate objective and whether the price and payment route were appropriate.
Independent oversight should therefore examine both the work product and the engagement structure. The person approving a deliverable should not be the only person assessing a sensitive payment. An audit trail should connect authorisation, scope, execution and payment without requiring the reviewer to rely solely on the account of the project sponsor.
The South Africa case examines this problem through public procurement and partners. The France case adds the visibility of spending, authorship and tax. Together they show why a consulting engagement is more than the quality of its final presentation.
A useful exhibit ends with the unanswered question
For a management audience, the most effective Luanda Leaks presentation would show the institutional mandate, the contracting structure, the reported payment chain and the parties’ responses on separate pages. It would mark gaps in the evidence and state what an independent reviewer would need to resolve them.
That approach makes the analysis actionable without manufacturing certainty. A team can ask which records are missing, which approvals need checking and which relationship requires a fresh review. An executive summary should preserve those open questions alongside the recommendation. The final decision is then based on the evidence available and the risk that remains, rather than on the prestige of the names at the end of the arrows.
TAKE IT INTO THE NEXT MEETING
Three practical lessons
Identify the real client and beneficiary
Record the institution being served, the person giving instructions and every intermediary. Those roles can diverge even where the proposal looks conventional.
Reconcile the whole payment chain
Match each transfer to a contract, service period, deliverable and authorised signatory. An unexplained residual is a question to investigate, not automatic proof of theft.
Renew diligence when control changes
A dismissal, new intermediary, urgency request or changed bank account should trigger review. Initial client acceptance cannot cover every later transaction.
Questions about the case
What did Luanda Leaks report about consultants?
ICIJ and partner reporting described professional firms working within dos Santos’s business network and traced payments through intermediaries. The firms’ services, explanations and responses differ and must be considered individually.
Does receiving a payment establish criminal wrongdoing?
No. A reported transfer establishes a payment claim, subject to verification. Proving an offence requires additional facts about authority, intent, services and applicable law. Sanctions and civil proceedings are also distinct from convictions.
What is the strongest practical lesson?
Know who the client is and why money moves through each entity. Reconcile beneficial ownership, authority, invoices, deliverables and bank details, then revisit the assessment whenever the arrangement changes.
THE EVIDENCE TRAIL
Sources & editorial notes
Adapted from the original XLSlides documentary, with additional analysis. Published 29 October 2026. Sources have different roles: primary records, investigative reporting and the positions of affected parties.
- ICIJ: consulting giants’ cash windfall ↗Original investigation, bank-record reporting, payment amounts and firm responses.
- ICIJ: family ties, shell companies and inside deals ↗The broader investigation; allegations and denials.
- PBS Frontline: responses to Luanda Leaks ↗Responses by affected parties, not an endorsement of the allegations.
- UK government: November 2024 anti-corruption sanctions ↗Dated official sanctions announcement.
- UK sanctions list: Isabel dos Santos ↗Designation, stated reasons and the later director-disqualification measure.
- Lusa via AMAN: charges narrowed in November 2025 ↗Dated reporting on the Angolan Supreme Court development, not a statement of present trial status.
- The Guardian: Sonangol’s November 2017 transfers ↗Original reporting on the account balance, payment sequence and responses.
- New York Times reporting via Gulf News: the professional advisers ↗The Wise arrangement, professional-firm relationships and attributed red-flag analysis.
- World Bank: October 2023 Macro Poverty Outlook, Africa ↗Angola’s dated export, fiscal and poverty context; survey and reporting years differ.
Image credits & licences
Original illustrations and typography: XLSlides. Documentary stills have been resized and converted to WebP for this article. Underlying images retain the credits supplied with the episode.
- Original paper-cut figures, diagrams and schematic maps: XLSlides.
- McKinsey text logo: public domain source via Wikimedia Commons; company names identify the subjects of the reporting.
FROM EVIDENCE TO A RECOMMENDATION
Make the reasoning visible.
Use clear action titles, sourced exhibits and an explicit decision. XLSlides helps turn your analysis into an editable presentation; the evidence and judgment remain yours to verify.
Build a case-study presentation
