White House backs cyber privateering to combat crypto-linked crime

Congress is moving in parallel. The Senate introduced S.5000 in July 2026, formally titled the Cyber Letters of Marque and Reprisal Act. The bill would grant the president explicit statutory authority to authorize private entities to conduct cyber operations against foreign threats. The naming is literal: letters of marque and reprisal are referenced in Article I of the US Constitution.

The NSPM's framework targets two primary objectives: recovering stolen funds and dismantling infrastructure that supports crypto-enabled criminal networks. That means going after mixers, fraud operations, ransomware-as-a-service platforms, and exchange networks that facilitate illicit flows.

Neither the NSPM nor S.5000 targets any specific cryptocurrency or token. The framework is technology-neutral, aimed at criminal behavior rather than particular protocols or assets.

The approach marks a shift in US cybersecurity posture. For years the default was defensive: build walls, patch vulnerabilities, monitor for intrusions. This framework explicitly endorses limited offensive measures, bringing the fight to criminal organizations rather than waiting for them to strike.

The Senate bill remains in committee. No date has been set for a floor vote.