US authorises private firms to target cybercrime groups

WASHINGTON: The United States has taken an unusual step in its fight against international cybercrime by allowing selected private companies to conduct government-approved hacking operations against foreign criminal organisations.

President Donald Trump has signed a memorandum directing the departments of Justice and Homeland Security to establish a framework under which approved private-sector partners can investigate, infiltrate and disrupt transnational cybercrime networks.

The move is aimed at tackling growing threats including ransomware attacks, online fraud and so-called sextortion schemes. The White House said such crimes caused more than $20 billion in losses to Americans during 2025.

Under the new framework, authorised companies could potentially infiltrate cybercriminals’ computer systems, deploy spyware or disrupt servers used to conduct criminal activities. However, each operation would require approval from the US government before any action is taken.

Participating companies would also be required to provide a bond of at least $1 million. Operations involving actions that could cause death or physical injury would remain prohibited. Activities that could qualify as the use of force under international law would also be excluded.

The initiative has drawn comparisons with privateering, a practice used centuries ago when governments authorised private vessels to attack or seize enemy ships.

Supporters argue that private technology companies possess specialised cyber expertise and access to data that government agencies may not have. They believe combining those capabilities with government authority could help disrupt criminal networks more effectively.

However, cybersecurity experts have raised concerns about accountability, oversight and the possibility of unintended consequences. Critics warn that allowing private companies to conduct offensive cyber operations could create diplomatic complications and make it difficult to control activities once they begin.

The policy also represents a notable shift in the Trump administration’s previous position. Earlier this year, senior US officials had indicated that the government was not interested in using private companies to fight cybercriminals through offensive operations.

It remains unclear what prompted the change in policy.

Some cybersecurity specialists believe the programme contains important safeguards because operations will be conducted under government authorisation. Others remain concerned that existing oversight institutions may not be strong enough to monitor such activities effectively.

The initiative could also expose participating technology companies to new risks. Experts warn that firms involved in government-sanctioned cyberattacks could become targets themselves and face retaliation from criminal groups or foreign governments.

The Trump administration has 60 days to finalise the programme’s operational framework, while some details are expected to remain classified.