Introduction

Nation-state actors increasingly use criminal networks as proxies to achieve political and strategic goals, leveraging their resources and capabilities to engage in activities that may be harder to attribute directly to the state. This collaboration provides several advantages to nation-states, including plausible deniability, lower financial and political costs, and enhanced operational reach in otherwise inaccessible regions. By outsourcing operations to criminal networks, nation-states can distance themselves from activities such as cyberattacks, illicit trade, or assassinations, allowing them to deny involvement. This strategy often leaves adversaries without clear evidence directly linking the state to the operation, complicating diplomatic or retaliatory responses.

Criminal networks have established infrastructure for smuggling, cyber operations, and money laundering, which nation-states can tap into without needing to build these networks themselves. This access is especially valuable for state actors facing international sanctions, as it provides alternative channels for resource acquisition and revenue generation. By aligning with criminal networks involved in trafficking, smuggling, or illicit financial transactions, states can also destabilize the economies of rivals. This tactic undermines the social and economic stability of targeted nations, weakening them internally and internationally.

Most impactfully, criminal groups’ expertise in cybercrime—particularly ransomware, data theft, and online disinformation—can bolster a nation-state’s information warfare. This collaboration has been particularly evident with countries like North Korea, where state-aligned cybercriminals engage in cryptocurrency theft and ransomware to fund government projects. This convergence presents a significant security threat, as criminal networks often possess advanced logistical capabilities, local ties, and technical expertise that amplify the reach and impact of state-sponsored operations.