President Donald Trump has signed a National Security Presidential Memorandum (NSPM) that expands the U.S. government’s ability to use cyber operations against foreign based transnational criminal organizations targeting Americans. The August 12, 2026 memorandum directs federal agencies to work with vetted private sector cybersecurity companies to disrupt criminal networks involved in ransomware, financial fraud, phishing, sextortion and other cyber enabled crimes.
The new policy marks a significant shift in the U.S. cybersecurity strategy because it brings private technology and cybersecurity firms into government directed offensive cyber operations. Under the framework, participating companies can support cyber surveillance and cyber effects operations while federal authorities retain direction, control and legal oversight.
Trump Expands U.S. Cyber Operations Against Criminal Networks
The memorandum instructs the Homeland Security Task Force’s National Coordination Center to establish a program for conducting targeted cyber operations against foreign transnational criminal organizations. The program will operate under the oversight of the Department of Homeland Security and Department of Justice, creating a centralized structure for identifying threats and coordinating responses.
The White House says the policy targets criminal organizations that operate outside U.S. jurisdictions while attacking Americans online. These groups increasingly use ransomware attacks, phishing campaigns, financial scams, impersonation schemes and sextortion operations to steal money, personal information and digital assets from victims in the United States.
The scale of the problem also influenced the administration’s decision. According to White House figures, Americans reported more than $20.8 billion in losses from cyber enabled crime during 2025. The administration argues that foreign-based criminal networks have exploited gaps in international enforcement and outdated approaches to cybercrime.
Private Cybersecurity Firms Get a New Role
The memorandum directs the government to leverage the expertise and technological capabilities of vetted private sector companies. Participating firms can work with other companies and federal, state, local, tribal and territorial agencies to collect threat intelligence and recommend cyber operations against identified criminal organizations.
The framework goes beyond traditional cybersecurity defense. Reuters reports that approved companies can conduct cyber surveillance operations and cyber effects operations against specified targets under federal supervision. The memorandum defines cyber effects broadly enough to include the manipulation, disruption, denial, degradation or destruction of information systems, networks, infrastructure and information.
The government will also impose financial and operational safeguards on participating companies. Firms that take part must maintain a bond or escrow of at least $1 million, while federal officials must establish procedures to review and authorize operations. The White House says those procedures must comply with the U.S. Constitution, U.S. laws and applicable international agreements.
Cyber Offensive Raises Security and Escalation Concerns
The administration describes the initiative as a way to give law enforcement more tools to fight sophisticated criminal organizations operating beyond U.S. borders. By combining government intelligence with private-sector cybersecurity capabilities, officials hope to identify criminal infrastructure faster and disrupt networks before they can continue targeting American victims.
However, the expansion of government-directed cyber operations into the private sector could create new cybersecurity, legal and geopolitical challenges. Reuters notes that private-sector participation in cyber operations is not unprecedented, but the practice has raised concerns about escalation, unintended consequences and coordination between government agencies and commercial companies.
The policy therefore places significant responsibility on federal oversight. The White House says private companies will not operate independently; instead, their cyber activities will remain under the direction, control and authority of the U.S. government. The move could become an important test of how governments and cybersecurity companies cooperate when defensive security measures evolve into offensive operations against criminal infrastructure.
For the cybersecurity industry, the memorandum could also create a new role for specialized U.S. companies with advanced threat intelligence, incident response and cyber operations capabilities. The policy signals that Washington increasingly views private-sector technology expertise as a strategic resource in the fight against transnational cybercrime.
