White House Authorizes US Firms To Target Foreign Cybercrime Gangs With Cyber Operations

The White House is opening the door for vetted US companies to conduct cyber surveillance and disruptive cyber operations against foreign cybercrime organizations, under the direction and oversight of the federal government.

 

TL;DR

 

• President Donald Trump signed a memorandum creating a program for cyber operations against foreign cyber-enabled criminal organizations.
• Vetted US companies can participate, but operations require government supervision and written approval.
• Participating firms may be required to maintain a bond or escrow of at least $1 million.
• The White House says Americans lost over $20.8 billion to cyber-enabled crime in 2025.

 

President Donald Trump signed a National Security Presidential Memorandum on August 12 that expands the US government's approach to foreign cybercrime by bringing private companies directly into certain government-controlled operations.

The program will be created and managed by the Homeland Security Task Force's National Coordination Center (NCC), with co-executive directors appointed by the Department of Justice (DOJ) and Department of Homeland Security (DHS).

The White House said the initiative is aimed at foreign transnational criminal organizations behind ransomware attacks, phishing campaigns, financial fraud, sextortion, impersonation scams, and other cyber-enabled crimes targeting Americans.

 

What Can Private US Companies Do?

 

Under the new memorandum, participating companies can be authorized to carry out two types of activities: Cyber Surveillance Operations and Cyber Effects Operations.

Cyber Surveillance Operations can involve accessing targeted information systems without authorization, or exceeding authorized access, for the purpose of gathering information or intelligence while intending to remain undetected. This can include intelligence that may support subsequent cyber operations.

Cyber Effects Operations go further. The memorandum defines them as activities that can result in the manipulation, disruption, denial, degradation, or destruction of information systems, networks, digitally controlled infrastructure, or information stored on those systems.

However, this does not give cybersecurity companies a free hand to independently attack suspected criminals.

Operations must be conducted on behalf of and under federal supervision, and the program's executive directors must review every cyber operations package and provide written approval before participating companies can act.

 

Companies Face Vetting And A Potential $1 Million Safeguard

 

Companies seeking to participate must enter contractual agreements with either the DOJ or DHS and undergo what the memorandum describes as rigorous vetting.

The criteria are set to include technical proficiency, previous cyber operations performance, facility security, personnel vetting, competence, and reliability. The government also intends to make the program accessible to large companies as well as smaller businesses that may be better suited to specialized operations.

DOJ and DHS may also require participating companies to maintain a bond or escrow worth at least $1 million. That amount can be forfeited if a company fails to comply with its contractual obligations.

The memorandum additionally requires firms to stop an operation and notify authorities if activity unintentionally moves beyond approved limits, including cases involving a US person, a system located in the United States, or a system controlled by a US person.

Operations expected to result in loss of life, serious injury, or reach the level of an armed attack under international law are classified as “Critical Outcomes” and face additional restrictions.

 

White House Says Cybercrime Cost Americans $20.8 Billion

 

The administration says the initiative responds to the growing financial and human impact of cybercrime.

According to a White House fact sheet, American consumers reported more than $20.8 billion in losses from cyber-enabled crime during 2025. It also claims 73% of US adults have experienced some form of online scam or attack.

“The American private sector is the most innovative and technologically advanced in the world,” reads the memorandum, which argues that its scale and capabilities provide the US with a “critical offensive cyber advantage.”

The White House said partnering with vetted American companies would expand the government's ability to counter foreign cybercriminal organizations.

Reuters noted that involving private firms in cyber operations against criminal targets is not an entirely new concept and has previously attracted concerns around escalation, unintended consequences, and coordination between government agencies.