The U.S. has authorized certified private firms to engage in cyber operations against foreign criminals, enhancing efforts to combat online crime.
On August 12, President Donald Trump signed a memorandum allowing certified private companies to conduct cyber operations against foreign criminal organizations with federal oversight. This initiative aims to combat transnational criminal groups involved in ransomware and financial fraud, empowering contractors to gather intelligence on these entities and propose targets for government intervention.
Under this program, certified firms will be authorized to take significant actions against information systems, including blocking or destroying hardware and data. The National Coordination Center at the Department of Homeland Security will oversee operations, with additional guidance from the Department of Justice, ensuring that private companies act under government authority and do not choose targets independently.
To qualify for participation, contractors must undergo a certification process to prove their technical capabilities and secure their infrastructures, alongside maintaining a bond of at least $1 million, which can be forfeited for non-compliance. The targets for these operations are strictly limited to foreign criminal entities that are not government-controlled.
This initiative builds on earlier efforts, including a March executive order that called for a strategy against foreign scam centers and highlighted the need for private sector involvement in combating online crime. This memorandum formalizes the role of private contractors in government-approved offensive actions against cybercriminals.
Collaboration with Major Technology Firms
Previously, U.S. authorities had worked with tech companies, but their roles were restricted to their internal services. In May, the Scam Center Strike Force executed a large-scale Disruption Week involving firms such as Apple, Google, and Microsoft, among others. During this operation, law enforcement shared data on fraudulent networks, allowing these companies to identify and block over 1.4 million social media and email accounts, disrupt malicious traffic, and shut down servers used by fraudsters.
This collaborative effort resulted in the freezing of more than $3.8 million in cryptocurrency linked to laundering activities and the arrest of seven individuals in Thailand suspected of cyber crimes. However, the strategy of involving the private sector in offensive cyber actions raises concerns about potential retaliation, unintentional harm, and coordination issues among agencies.
Additionally, a report from the United Nations Office on Drugs and Crime highlights that losses from scam operations in East and Southeast Asia, Australia, and New Zealand could reach approximately $114.1 billion by 2025, underscoring the urgency of these initiatives.
