OPINION — Within the fall of 2021, an FBI informant obtained a chilling provide: $300,000 to assassinate former U.S. Nationwide Safety Advisor John Bolton. The would-be hitman posed as a drug cartel enforcer. The shopper? Shahram Poursafi (a.okay.a. Mehdi Rezayi) — a member of Iran’s Islamic Revolutionary Guard Corps (IRGC). Two years later, the U.S. Drug Enforcement Company (DEA) uncovered an assassination plot focusing on a U.S. citizen of Indian origin on U.S. soil. The plot was orchestrated by an Indian authorities worker who described himself as a “senior discipline officer” with obligations in “safety administration” and “intelligence,” and Nikhil Gupta, a global narcotics trafficker. These plots will not be simply far-fetched terror schemes, nor a mere aberration. They signify a glimpse right into a darker playbook: sovereign states outsourcing political violence, intimidation, and destabilization to prison intermediaries, cloaking their arms within the deniability of the black-market chaos.
The strategic use of criminals in geopolitics is neither novel nor unique to autocracies. From mafia boss Charles “Fortunate” Luciano’s entanglements with U.S. Naval Intelligence in World Warfare II to the CIA’s infamous dealings with gangsters in makes an attempt to assassinate Fidel Castro, historical past is replete with pragmatic marriages of comfort of this nature. But, what distinguishes the present epoch is that these actions that have been as soon as peripheral, episodic, and transactional are more and more turning into strategically normalized and globally subtle.
What we’re witnessing isn’t an ethical shift, however a strategic evolution – an growth of that logic right into a extra deliberate observe of outsourcing intelligence and covert operations to non-state actors. Within the grey zone — the murky house between peace and warfare — a rising variety of states not merely tolerate prison networks. Transnational prison organizations (TCOs) have turn into covert devices of statecraft that states are more and more weaponizing to coerce, disrupt, and compete within the shadows. Removed from incidental allies, TCOs now function pressure multipliers and structural scaffolding upon which these states construct their grey zone campaigns, reshaping the worldwide safety surroundings. And their attain is increasing.
To be clear, not each act of violence, sabotage, or criminality is orchestrated by a state sponsor. TCOs usually pursue their very own agendas, working autonomously, participating in coercion, trafficking, and destabilization for revenue or energy. That’s their nature. Relationships between states and such actors are neither clear nor hierarchical, and the true extent of coordination, delegation, or intent is usually troublesome to hint. Nonetheless, the overarching development is plain.
Associations between the state and TCOs mirror a extra profound transformation within the structure of energy projection, specifically the criminalization of statecraft. These alliances enable states to venture energy cheaply, deniably, and – at instances – even successfully, whereas exploiting the authorized and political blind spots of open societies. Operations that have been as soon as particularly the area of state safety and intelligence providers are more and more outsourced to cartels, traffickers, cybercriminals, transnational gangs, contract killers, and even unwitting helpful idiots. But, the very deniability that makes these actors helpful additionally makes them harmful. As states more and more depend on TCOs for delicate operations, they threat being dragged into confrontations they didn’t script – with actors they don’t totally management.
Additional muddying the waters is that states like Iran, Russia, and Venezuela are forming strategic alliances with terrorist organizations, such because the Houthis and Hezbollah. Every, like many different militant actors, engages in a spectrum of prison actions to finance their operations, disrupt adversaries, and advance ideological or strategic objectives.
The implications of those affiliations are profound. The ability, entry, data, and infrastructure that TCOs could purchase by means of these preparations will not be one thing they’d willingly relinquish. Moreover, a long time of overt and covert wars in theatres all through Europe and the Center East have given a number of violent non-state actors a wealth of classes and insights into Western weapon techniques, intelligence, fight capabilities, and operational vulnerabilities, in addition to entry to illicit underground infrastructure. Throughout Africa, Wagner-linked mercenaries present regime safety and entry to vital minerals, whereas Chinese language firms safe infrastructure and market dominance. These classes are prone to unfold throughout shared networks, benefiting actors hostile to Western pursuits worldwide.
What emerges are the deepening relationships amongst authoritarian powers, TCOs, mercenaries, and terrorist organizations, exploiting weak governance, and eroding Western affect. Whereas these will not be formal alliances, they signify a free, resilient structure of malign cooperation. The long-term corrosion of norms, establishments, and stability stemming from actions orchestrated by states by means of TCOs can have irreversible, lasting results, notably in cases the place states have misplaced or lack management over actors they empower. In different phrases, as soon as the genie is out of the bottle, placing it again will not be fairly really easy. Subsequently, understanding — and countering — the strategic use of prison networks by states in worldwide relations should turn into a central pillar of Twenty first-century Western safety considering.
Join the Cyber Initiatives Group Sunday publication, delivering expert-level insights on the cyber and tech tales of the day – on to your inbox. Join the CIG publication right now.
Associates with Advantages and Their Instruments
It will be an error to view the connection between states and prison networks solely as a byproduct of weak spot, desperation, or decay. For some regimes, it’s a deliberate characteristic of strategic design. The logic is certainly compelling. TCOs provide states international attain, operational flexibility, built-in income streams, and – most critically – an arm’s size deniability that insulates governments from direct blame. Whether or not the aim is to destabilize a rival, evade sanctions, venture affect, or obscure state fingerprints from a brazen operation, these alliances present scalable, adaptable instruments of coercion.
The relationships between states and TCOs are neither hierarchical nor clear. The mechanics differ extensively, from deeply embedded alliances to tactical, one-off collaborations. But, throughout instances, the operational means seem to fall into three overlapping classes: logistical enablers, coercive subcontractors, and deniable disruptors. These roles will not be static. They evolve in response to shifting geopolitical pressures and the relative energy or weak spot of the state and the actor. Understanding these fluid dynamics is crucial to greedy their long-term strategic consequence.
Logistical enablers present the infrastructure for covert actions – they transfer money, weapons, folks, and data throughout borders and sanctioned regimes with pace and deniability and pad the black finances. North Korea, remoted by sanctions and international opprobrium, successfully bankrolls its regime by means of hacking, cyber heists, and smuggling — a lot in order that U.S. officers have described it as “a prison syndicate with a flag.” In 2021, for instance, the U.S. indicted three North Koreans affiliated with the navy intelligence providers, particularly the Reconnaissance Normal Bureau, in cyber-enabled heists on 4 continents, focusing on over $1.2 billion. China-linked triads have been implicated in intimidating dissidents and journalists overseas whereas concurrently laundering cartel proceeds by means of China.
Russian safety providers have lengthy relied on mafia-linked facilitators to acquire illicit items, smuggle sanctioned supplies, and handle dark-money flows by means of Europe’s monetary hubs. Within the UK, regulation enforcement just lately disrupted a Russian TCO connecting Russian elites, crypto-rich cyber criminals, and UK drug gangs laundering cash and reportedly channeling funds to Russian intelligence providers. In Spain, regulation enforcement have documented how Russian mafia syndicates with ties to senior Kremlin figures have been concerned in arms offers, cash laundering operations, and property purchases throughout Europe.
Coercive subcontractors perform the soiled work and repression. These will not be conventional intelligence brokers developed and groomed for prolonged intervals, however reasonably expendable enforcers with native data or operational attain. Tehran has for many years been honing its coercive use of transnational criminals and terrorist actors to subvert, surveil, harass, abduct, and assassinate dissidents or defectors overseas. Its use of TCOs is extra punitive – a mix of deterrence and revenge characterised by persistence and unpredictability. In 2021, U.S. authorities uncovered what they mentioned was an IRGC orchestrated a plot to abduct a U.S.-based Iranian journalist counting on members of an Jap European crime syndicate with hyperlinks to Iran. Tehran, in keeping with the British Dwelling Secretary, is “more and more utilizing proxies, violent thuggish proxies … very elusive, fairly refined, very brutal European-wide gangs who don’t clearly have a connection or a sympathy or a pure allegiance to the Iranian regime and people international prison networks are conducting assassinations round Europe … .”
In 2016, the U.S. intelligence neighborhood assessed, with a excessive confidence degree, that the Russian Authorities would proceed to make use of intelligence providers and “different loyal entities” to assassinate suspected terrorists and people deemed threats to the regime overseas. In 2019, as an illustration, German and U.S. intelligence companies assessed that Zelimkhan Khangoshvili, a Georgian-Chechen exile, was assassinated in Berlin by Vadim Krasikov, a contract killer with ties to the Russian FSB. Maksim Kuzminov – a Russian pilot who, to Moscow’s chagrin, defected to Ukraine in 2023 – was assassinated in Spain in February 2024 by two killers the Spanish police believed have been skilled contractors, presumably organized crime. Kuzminov was shot six instances and run over by a automotive, which was later discovered torched.
Even India has allegedly adopted the playbook, emulating these revisionist states’ techniques to focus on dissidents overseas.
Deniable disruptors focus on chaos. They’re brokers of confusion, subversion, sabotage, and affect, blurring the road between prison and intelligence actions and covert motion. The Kremlin has been utilizing mobsters, mercenaries, terrorists, and cybercriminals to destabilize governments, sow chaos, and wage warfare by proxy for many years. A high-profile trial within the UK revealed an internet of personal spies and an espionage provide chain run by Jan Marsalek, the fugitive former COO of Wirecard and a contract dealer for Russian intelligence providers. They bugged automobiles, cloned IDs, surveilled NATO navy installations in Germany, and focused folks for assassination.
Within the Tri-Border Space of Paraguay, Brazil, and Argentina, Hezbollah, which serves each as a proxy and a service supplier, has entrenched itself in profitable narcotics and contraband markets, in keeping with U.S. and regional authorities. Hezbollah’s presence within the Western hemisphere presents a persistent and underappreciated safety threat to the US and its regional pursuits.
The IRGC and Hezbollah are additionally accused of involvement within the manufacturing and distribution of narcotics, corresponding to captagon, primarily trafficked throughout the Levant and into Gulf states. The flooding of the Saudi market with this narcotic serves not simply as a profitable income stream but additionally as a type of irregular stress – a method to destabilize and weaken a rival by means of non-military means. Historical past is replete with examples through which a state weaponized narcotics. Whereas the brand new Syrian management could declare to have intensified efforts to stem the captagon manufacturing and smuggling, it could be naïve to imagine that this estimated annual international commerce price $10 billion will merely perish.
Beijing’s method is multitiered. Its opaque partnership with triads and cash launderers permits financial and social coercion, diaspora surveillance, and artificial medicine manufacturing on a worldwide scale. Talking in regards to the triad’s function in Hong Kong within the Nineteen Nineties, a Chinese language official defined that Chinese language “safety organs” had “broad hyperlinks and ties with totally different strata in society, together with such teams.”In a single U.S. Treasury investigation, the infamous 14K triad – whose former chief in Macao, Wan Kuok Koi is affiliated with the Chinese language Communist Occasion – was implicated in cartel cash laundering and billion-dollar so-called “pig butchering” scams — refined crypto funding frauds. Within the Mekong River area, Chinese language prison teams controlling drug trafficking routes have been related to political affect efforts that align with Beijing’s rising regional ambitions.
In the meantime, some states focus their efforts extra regionally. Serbia, Venezuela, and Turkey, for instance, are all accused of counting on prison organizations to venture energy, intimidate and assault regime critics, protect regime management, and undermine rivals. But, even regionally confined actions can simply metastasize into broader strategic patterns, with international penalties.
What emerges is not only an opportunistic alignment however a sample of calculated, strategic synergies. In what is likely to be known as a type of strategic parasitism — borrowing from Robert Cox’s notion of “parasitic symbiosis” to explain exploitative relationships between state energy buildings and illicit actors — states more and more exploit prison networks not essentially by means of command-and-control, however by means of casual, deniable, and mutually opportunistic relationships.
Everybody wants a very good nightcap. Ours occurs to return within the type of a M-F publication that retains you on top of things on nationwide safety. Enroll right now.
Countering Criminalized Statecraft
The West’s incapability to confront the criminalization of statecraft stems not merely from a scarcity of assets or authorized limitations however from conceptual ones. Western governments are outfitted to battle standard wars, prosecute criminals, and sanction rogue states and people – however not abruptly or in unison. In the present day’s adversaries exploit this rigidity. The U.S. intelligence neighborhood’s declassified 2025 Annual Menace Evaluation makes no point out of the synergies between main adversaries – Russia, China, Iran, or North Korea – and transnational prison networks in worldwide relations, though all are referenced individually. The British Authorities inquiry into state threats additionally famous that it was not clear whether or not the Authorities’s methods have been aligned or who was accountable in addressing these threats, and that the federal government was over-complicating its buildings and techniques.
TCOs will not be merely prison enterprises. When backed or tolerated by hostile regimes, they turn into covert devices of state energy – pressure multipliers that transfer cash, arms, folks, and knowledge throughout borders with deniability, able to manipulating, subverting, and systematic destabilization. They’re tougher to detect than proxies and tougher to discourage than state actors. TCOs are additionally extra unstable. Their motivations – revenue, repute, survival, energy – don’t at all times align with these of their sponsors.
Countering this sort of menace requires a brand new strategic logic. Meaning rethinking nationwide safety structure, increasing the scope of deterrence, and focusing on whole ecosystems reasonably than simply particular prison actors to blunt the influence of criminalized statecraft.
1. Rethink Nationwide Safety Structure
Intelligence, regulation enforcement, monetary regulators, and diplomats should deal with TCOs not merely as safety nuisances however as vectors of geopolitical competitors and international affect within the grey zone. This calls for specialised interagency process forces. Publish-9/11 counterterrorism fusion facilities provide a helpful mannequin: real-time intelligence sharing, multi-domain focusing on, and a unified strategic mission.
2. Strengthen Attribution and Publicity
Governments ought to take into account decreasing the attribution threshold for hybrid assaults involving prison actors. Whereas courtroom-level proof stays splendid, ready for a “smoking gun” within the grey zone is strategically self-defeating. Intelligence-based attribution — acknowledging publicly when prison operations serve state pursuits, even absent smoking-gun proof — ought to turn into a norm. Naming, shaming, and strategic leaks can impose reputational prices, disrupt ongoing operations, and form public consciousness. Publicity itself is a deterrent.
3. Disrupt the Enablers
Goal state-criminal alliances as persevering with prison enterprises — even when cloaked in diplomatic immunity or sovereign — cowl and the monetary and logistical infrastructure that sustains the collaboration. Go after arms brokers, crypto facilitators, cash launderers, and logistics nodes – accountants, attorneys, actual property facilitators, and shell agency registrars that present infrastructure – reasonably than simply the gangsters caught red-handed. “Sanctions 2.0” ought to hit whole ecosystems, making it extra disruptive and tougher to evade.
4. Develop a Counter-Grey Zone Technique for Criminalized Statecraft
The fusion of state and prison energy calls for a coherent doctrine for grey zone competitors — one which addresses the strategic logic behind criminalized statecraft. Such a technique ought to embrace: i) preemptive disruption by means of offensive our on-line world and counterintelligence operations to infiltrate and degrade the networks that states use to mobilize prison actors; ii) cognitive deterrence that alerts that using prison proxies will set off uneven responses — together with financial retaliation, digital sabotage, and publicity campaigns; iii) doctrinal codification that formally acknowledges and descriptions how democracies will interpret and reply to covert criminalized aggression.
5. Shift the Strategic Narrative
Autocracies weaponize ambiguity. Democracies should weaponize publicity. Reframing prison actors as pawns of authoritarian technique, not remoted actors, delegitimizes them in each political and prison ecosystems. The narrative shift transforms them from feared villains to manipulated patsies, disrupting networks and diminishing their affect. Elevating this subject on the G7, United Nations, NATO, and different international boards — and constructing norms across the non-weaponization of crime — may help efforts to stigmatize and delegitimize the observe.
The underside line is that countering criminalized statecraft isn’t merely a matter of policing crime or naming villains. It requires a strategic overhaul of how the West conceives of international intelligence actions, energy projection, and geopolitical rivalry. On this new form of geopolitical sport, crime-as-statecraft should turn into expensive, uncovered, and in the end, strategically self-defeating. If liberal democracies fail to adapt, they threat ceding the grey zone to regimes which have discovered to battle wars not with troopers or diplomats, however with gangsters, fixers, ghosts, and the “little inexperienced males.”
Opinions expressed are these of the writer and don’t signify the views or opinions of The Cipher Transient.
The Cipher Transient is dedicated to publishing a variety of views on nationwide safety points submitted by deeply skilled nationwide safety professionals.
Have a perspective to share primarily based in your expertise within the nationwide safety discipline? Ship it to Editor@thecipherbrief.com for publication consideration.
Learn extra expert-driven nationwide safety insights, perspective and evaluation in The Cipher Transient
