Research: Intelligence Services and Diaspora Networks — Postwar Template and Worldwide Adoption

Intelligence services as institutional actors instrumentalizing diaspora communities — postwar Mossad/CIA/KGB template and its worldwide adoption by MSS, RAW, MOIS, MIT, FSB/GRU, GIP, and others

2026-05-29 52 min read Research file
Contents

Companion dossier to Diaspora PACs as Remittance-Economy Political-Influence Mechanisms (US PAC formation), H-1B / L-1 Labor Arbitrage — Diaspora-as-Labor-Cost-Suppression (US labor channel), and the parallel EU / Canada / Australia files. This file covers a different mechanism: intelligence services using diaspora networks for operational purposes (recruitment pool, cover, surveillance target, lobbying lever).

The Ratchet Chapter 8 (“The Embassy”) already touches UFWD, Diyanet, and AIPAC, and references the Eichmann (1960) and Magic Carpet (1949-50) operations. This dossier provides the deeper historical anchoring: the template was first industrialized postwar by Israeli services working through Jewish diaspora networks, then copied by every major modern intelligence service.

Every operation cited is anchored in declassified file, court ruling, DOJ indictment, royal commission, parliamentary inquiry, OPCW finding, ODNI report, or court-tested book. Single-source claims are flagged.

1. Framing Statement — Read Twice Before Reading Anything Else

The institutional actor in this dossier is intelligence services. The operational environment is the diaspora community. The grammar throughout is consistent:

  • “Mossad operated through Jewish diaspora networks via the Sayanim apparatus.” Not: “The Jewish diaspora was used by Mossad.”
  • “The Chinese MSS recruits assets from Chinese-language overseas communities.” Not: “Chinese-Americans help China spy.”
  • “Iranian MOIS surveils and intimidates Iranian-American dissidents, documented in DOJ indictments 2021-2024.” Not: “Iranian-Americans are dual-loyal.”

This is NOT a treatise on diaspora communities. It is a treatise on intelligence services as institutional actors following a pattern first industrialized by Israeli services in the immediate postwar period and subsequently copied by every major modern intelligence service.

Anti-tinfoil rules (non-negotiable):

  • Foundations and intelligence agencies are institutional actors → IN.
  • Bloodline-conspiracy / ethnic-conspiracy framing → OUT.
  • No characterizations of any diaspora community as a whole as “loyal/disloyal,” “infiltrated/clean,” “pure/corrupted.”
  • Every claim about an intel-service operation is anchored in a declassified file, court ruling, DOJ indictment, royal commission or parliamentary committee report, published government acknowledgment, or major-outlet reporting tied to those records.
  • ALLEGATION (intel-community claim) is distinguished from DOCUMENTED (court ruling, indictment, declassified file, self-acknowledgment).

The Israel/Mossad sections are held to the same evidentiary standard as the China/MSS, Iran/MOIS, Russia/FSB, and Saudi/GIP sections.

2. Part A — The Postwar Template (Mossad, CIA, KGB and Jewish Diaspora Networks)

2.1 Aliyah Bet, Bricha, and Mossad LeAliyah Bet (1939-1948)

The institutional ancestor of Israeli intelligence is Mossad LeAliyah Bet (“Institution for Immigration B”), established in 1938-1939 by the Jewish Agency to coordinate clandestine immigration to Mandatory Palestine in defiance of British White Paper quotas (USHMM Holocaust Encyclopedia; Wikipedia Mossad LeAliyah Bet and Aliyah Bet cross-references; primary documents in Israel State Archives). Sources: USHMM Holocaust Encyclopedia, Aliyah Bet.

Between 1945 and 1948 Mossad LeAliyah Bet, operating jointly with the Bricha (“flight”) underground network across Poland, Romania, Hungary, Czechoslovakia, Yugoslavia, Austria, Germany, and Italy, moved roughly 250,000 Holocaust survivors (USHMM collections, Bricha event history) through smuggling corridors into displaced-persons gathering points and then onto approximately 65 ships attempting to land in Palestine. Over 90% were intercepted by the Royal Navy and the passengers held in British detention camps on Cyprus (USHMM; Wikipedia Bricha and Aliyah Bet, cross-referenced with British colonial-office files declassified at the National Archives, Kew). Sources: USHMM, Aliyah Bet (over 90% of ships intercepted; Cyprus camps); Wikipedia, Bricha (~250,000 moved). Sources: Encyclopaedia Judaica via Encyclopedia.com, “Illegal” Immigration.

The operational scaffolding — front companies in port cities, false documents, courier networks, friendly shipping crews, sympathetic Holocaust-survivor and Jewish-community contacts across Europe — became the staffing pool, tradecraft library, and source network for the Israeli intelligence establishment formalized in 1949-1951 (Mossad in its modern form was established 1949; Shin Bet 1949; Aman 1950) (Jewish Virtual Library, “Ben-Gurion Establishes the Mossad (December 13, 1949)”, text of Ben-Gurion’s order; Jewish Virtual Library, The Israeli Security Agency). Mossad LeAliyah Bet is the documented direct ancestor. Mossad LeAliyah Bet itself ran until 1952 and was then split into two successors: Mossad’s Bitzur unit, which ran immigration from countries where Jews were in danger and protected diaspora communities, and Nativ, which worked Soviet and Eastern European immigration. Sources: Wikipedia, Shin Bet (“founded as a branch of the Israel Defense Forces”, formed 8 February 1949, preceding agency “Shai (Haganah unit)”); Wikipedia, Mossad (formed 13 Dec 1949); Grey Dynamics, Aman: Israel’s Military Intelligence Directorate: “In 1950, it formally established Aman. Many early personnel came from the Haganah’s pre-state intelligence operations”; Wikipedia, Mossad LeAliyah Bet, quoting Haaretz, Yossi Melman, “Why the Mossad Must Remain an Intelligence Service for All Jews”, 4 Nov 2010: “Two units were designated as the successors to the Mossad Le’Aliyah Bet, which was disbanded in 1952. The more secret of the two was the Mossad’s Bitzur unit, tasked with overseeing the immigration of Jews from countries where their lives were in danger as well as protecting Jewish communities in the Diaspora. The other, Nativ, encouraged immigration from the Soviet Union and Eastern Europe.” Sources: Palyam veterans’ association, Ha’Mossad Le’Aliya Bet: the 1945-48 “golden age” when it “organized 65 sea voyages to Eretz Israel, carrying over 70,000 ma’apilim”; “Ha’Mossad was headed by the senior Hagana member Shaul Avigur, who reported directly to Ben-Gurion”; the mass flight “was aided and in fact led, by emissaries sent from Israel, ‘Haganah’ members”.

Documented operation: Operation Magic Carpet / On Wings of Eagles (1949-1950). Between June 1949 and September 1950 the Jewish Agency together with the American Jewish Joint Distribution Committee (JDC) and chartered US military-surplus aircraft (primarily Alaska Airlines DC-4s and C-46s; Alaska Airlines, “Operation Magic Carpet”: “the one-way flights, in twin-engine C-46 or DC-4 aircraft, covered nearly 3,000 miles”) airlifted approximately 49,000 Yemenite Jews from Aden, 500 from Djibouti and Eritrea, and ~2,000 from Saudi Arabia, in over 380 flights. The operation depended on cooperation from the British authorities in the Aden protectorate (transit camps), the US (aircraft), and on-the-ground emissaries embedded in Yemen’s Jewish communities (Jewish Virtual Library (Jewish Virtual Library); AIPAC retrospective; JDC self-description (JDC Archives); Haaretz 2012 historiographical reassessment “The Frayed Truth of Operation Magic Carpet”). This is the documented prototype of an Israeli state operation conducted through a diaspora community using sympathetic local Jewish networks as on-the-ground assets. Sources: Jewish Virtual Library; JDC Archives; Wikipedia, Operation Magic Carpet (500 Djibouti/Eritrea, ~2,000 Saudi Arabia). Sources: Aish, Alaska Airlines and the Jews of Yemen; Alaska Airlines, Operation Magic Carpet; Alaska Airlines News, On Eagles’ Wings.

Documented operation: Capture of Adolf Eichmann (1960). Mossad director Isser Harel, with Prime Minister Ben-Gurion’s authorization, ran a 1957-1960 hunt that culminated in the May 11 1960 abduction of Eichmann from a Buenos Aires suburb and his transport to Israel on an El Al flight on May 20. The operational chain explicitly depended on diaspora civilians: Lothar Hermann, a German-Jewish Holocaust survivor in Argentina, whose daughter Sylvia had a relationship with Eichmann’s son Klaus and surfaced the lead; Fritz Bauer, the Jewish prosecutor-general of Hessen, who passed credible location intelligence to Israel outside his formal West German role for fear of leakage; the in-Argentina snatch team (Rafi Eitan, Peter Malkin, Zvi Aharoni, Moshe Tabor) who were Israeli operatives but were sheltered, transported, and supplied by sympathetic Argentine Jewish-community contacts (Yad Vashem exhibition; Wikipedia Adolf Eichmann’s capture, cross-referenced with the Eichmann-trial archives at the Israeli State Archives; Times of Israel summary of the Israel State Archives 2020 special publication). The operation is the canonical illustration of intelligence-service use of diaspora networks for cover, logistics, and human intelligence. Sources: Yad Vashem, Operation Eichmann (Hermann, Bauer, 11 May capture, El Al flight); Wikipedia, Adolf Eichmann. Sources: JTA, 24 Nov 2017; Times of Israel.

These are documented operations — declassified files exist, primary participants have self-acknowledged, the events are uncontested.

2.2 Lakam — Bureau of Scientific Liaison (1957-1986)

Lakam (Hebrew acronym לק"מ, Lishka le-Kishrei Mada — “Bureau of Scientific Relations”), an intelligence outfit attached to the Defense Ministry, was created in the late 1950s under Benjamin Blumberg with a narrow mandate: clandestine collection of scientific and technological intelligence, particularly nuclear-program-relevant material, from sources abroad. From 1981 it was headed by Rafi Eitan, the Eichmann snatch-team commander (GlobalSecurity.org Lekem; Foreign Policy 2019-03-31 obituary of Rafi Eitan; Confidential documentary; Wolf Blitzer’s earlier reporting on the Pollard case). Sources: Wikipedia, Lekem (Blumberg 1957-1981, Eitan 1981-1986); GlobalSecurity, Lekem.

Lakam’s operational pattern was diaspora-and-host-country-resident asset cultivation for procurement of US technology — and the documented cases below show that pattern colliding with US law repeatedly:

Jonathan Pollard case (1985-2015). US Navy civilian intelligence analyst, arrested November 21 1985 after a failed attempt to enter the Israeli embassy in Washington. Indicted by the DOJ on conspiracy to commit espionage; pleaded guilty 1986; sentenced to life 1987 (paroled 2015, departed to Israel 2020) (VOA, 30 Dec 2020). Pollard was handled by Joseph Yagur, counselor for scientific affairs at the Israeli Consulate in New York, who reported to Rafi Eitan’s Lakam (CIA 1987 damage assessment, declassified December 2012, hosted by the National Security Archive at George Washington University (National Security Archive); History.com day-in-history entry; Britannica entry; CIE / Israel-Education timeline). Israel issued a formal apology to the US in 1987 while describing the operation as unauthorized, and in May 1998 formally acknowledged Pollard as a state agent handled by Lakam and admitted paying him (CRS RS20001: “in 1998 the Netanyahu government acknowledged that Pollard had been an Israeli agent”). Pollard was granted Israeli citizenship (announced November 1995, formally conferred early 1996). Lakam was dismantled in the immediate aftermath of the Pollard affair (1985-1986) (GlobalSecurity.org Lekem; Foreign Policy 2019 obituary). Sources: CRS RS20001 (arrest 21 Nov 1985, plea, life sentence, ‘rogue operation’, 1998 admission); Israel Line, 12 May 1998 (Lakam acknowledgment letter); National Security Archive; Wikipedia, Lekem (disbanded 1986). Sources: JTA, 21 Nov 1995; JTA, 24 Jan 1996. CRS RS20001: the government’s factual proffer was “submitted by U.S. Attorney Joseph E. diGenova to the District Court in Washington on June 4, 1986”; Pollard “received regular payments estimated to have totaled over $45,000”; “in 1998 the Netanyahu government acknowledged that Pollard had been an Israeli agent”.

Ben-Ami Kadish case (2008). US Army Armament Research mechanical engineer arrested April 2008, indicted on four counts of conspiracy and espionage. In December 2008 Kadish pleaded guilty to acting as an unregistered agent of Israel between 1980 and 1985, admitting that he provided classified documents — including material on US missile defense systems — to the same Joseph Yagur who had handled Pollard. Yagur photographed the documents at Kadish’s New Jersey home. The espionage count, which had carried a possible death penalty, was dropped in a plea agreement; Kadish was 85 at sentencing and was fined $50,000 with no prison time (DOJ Office of Public Affairs press materials; ABC News; France 24; Wikipedia Ben-Ami Kadish with linked court docket). Sources: DOJ, plea, Dec 2008; DOJ SDNY, sentencing, May 2009; NBC News, 2008 (four conspiracy counts).

Stewart Nozette case (2009-2012). Planetary scientist with DOE/DARPA/NRL/NASA classified access. In September 2009 Nozette began receiving phone calls from someone purporting to be a Mossad officer — in reality, an undercover FBI agent in an authorized sting. Over several weeks Nozette accepted $10,000 in cash drops and provided SECRET/SCI and TOP SECRET/SCI material on US national defense, believing his contact to be Israeli intelligence. Arrested October 19 2009; pleaded guilty September 7 2011 to attempted espionage; sentenced March 21 2012 to 13 years (DOJ Office of Public Affairs press releases 2011-09-07 and 2012-03-21; Wikipedia Stewart Nozette; Washington Report on Middle East Affairs / IRmep summary). Important caveat (verbatim from the DOJ’s 2011 plea release): “The indictment does not allege that the government of Israel or anyone acting on its behalf committed any offense under U.S. laws in this case.” Nozette believed he was dealing with Mossad; he was dealing with an FBI sting. The case demonstrates the FBI’s view of the Lakam template’s persistence as a recruitment pitch, not a documented post-Lakam Israeli operation on US soil. Sources: DOJ, plea, 7 Sep 2011; DOJ, sentencing, 21 Mar 2012; Wikipedia, Stewart Nozette.

Arnon Milchan — Lakam asset, self-acknowledged 2013. Israeli-born Hollywood producer (Regency Enterprises; Pretty Woman, Fight Club, L.A. Confidential, 12 Years a Slave). The book Confidential: The Life of Secret Agent Turned Hollywood Tycoon Arnon Milchan (Meir Doron and Joseph Gelman, 2011) detailed Milchan’s role as a Lakam operative through at least the mid-1980s, including front-company management of financing for Israel’s intelligence and nuclear-procurement operations outside the country. On the November 25 2013 Israeli Channel 2 Uvda documentary, Milchan personally confirmed on camera the central claims of Confidential — that he had been a “full-fledged operative” of Lakam, buying components for Israel’s nuclear arsenal and supervising government-backed front-company accounts (Times of Israel 2013-11-26 (Times of Israel); Channel 2 Uvda broadcast, archived; IMDb news item; Confidential book; subsequent Israeli press coverage). Self-acknowledged; not a disputed claim. Sources: Times of Israel; Wikipedia, Lekem.

2.3 The “Sayanim” Concept

The most-cited single-source claim about Mossad use of diaspora networks is the Sayanim (“helpers”) apparatus described by Victor Ostrovsky, a former Mossad katsa (case officer) who resigned in 1986, in By Way of Deception: The Making and Unmaking of a Mossad Officer (Ostrovsky and Claire Hoy, St. Martin’s Press, 1990 (Internet Archive)). Ostrovsky’s claim: Mossad maintains a non-staff worldwide network of voluntary Jewish- community helpers in destination countries — physicians, real-estate agents, lawyers, communications professionals, business owners — who provide ad-hoc operational assistance (safehouse access, vehicle rental under their name, courier services, surveillance support) without being Mossad employees and often without contact except when needed. Sources: Internet Archive.

Litigation history. The Government of Israel filed a preliminary injunction in the New York State Supreme Court on September 12 1990, the first sovereign-state attempt to halt publication of a book in the United States. Justice Michael Dontzin briefly granted the order; the New York Appellate Division threw out the injunction within 48 hours on September 13 (UPI 1990-09-12 wire archive; Wikipedia By Way of Deception; Time Magazine 1990 “The Spy Who Spilled the Beans”; Christian Science Monitor 1990-11-07 review; WRMEA December 1990 Ostrovsky interview). The book reached #1 (Christian Science Monitor, 7 Nov 1990) on the New York Times nonfiction list for the week of October 7 1990. Israel did not pursue the case further on the merits. Some specific operational claims in the book were contested by the Israeli government; many uncontested. The broader Sayanim claim was neither confirmed nor disconfirmed in court. Sources: Wikipedia, By Way of Deception (Dontzin injunction, vacated 13 Sep 1990, NYT #1 7 Oct 1990).

Corroboration. Gordon Thomas, Gideon’s Spies: The Secret History of the Mossad (1999, multiple subsequent editions), reproduces the Sayanim concept in broadly compatible form, with additional anecdotal detail. Yossi Melman and Dan Raviv, Every Spy a Prince: The Complete History of Israel’s Intelligence Community (1990), an Israeli-journalist account that did not draw a government injunction, describes a similar but more narrowly framed pattern of voluntary diaspora assistance to Israeli operations abroad. Ronen Bergman, Rise and Kill First: The Secret History of Israel’s Targeted Assassinations (Random House, 2018) — a work researched with at-times-formal Mossad cooperation including hundreds of interviews with Israeli intelligence officers — describes specific operations using Jewish-community assistance abroad and treats the use of diaspora helpers as a recurring operational feature, without adopting Ostrovsky’s specific Sayanim labeling.

What the dossier treats as DOCUMENTED versus ALLEGED:

  • Documented: specific operations (Eichmann 1960; Magic Carpet 1949-50; Pollard’s handler relationship; Lakam procurement networks) using diaspora-community assistance, anchored in declassified files and acknowledged participants.
  • Less directly documented from primary sources: the broader Sayanim claim of a systematic worldwide voluntary-helper network. It is corroborated by multiple court-tested sources and broadly compatible with the documented operations, but is not anchored in a single declassified file. Cited as Ostrovsky’s claim plus Thomas’s and Melman/ Raviv’s and Bergman’s compatibility, not as a court finding.

2.4 CIA + Jewish Diaspora in the Cold War

James Jesus Angleton’s Israel-desk relationship (1951-1974). Angleton, who became CIA Counterintelligence Staff chief in 1954, personally ran the agency’s liaison with Israeli Mossad and Shin Bet from 1951 through 1974 (Wikipedia James Jesus Angleton; CIA’s own published profile, “James Angleton: Master Spy Hunter,” cia.gov/stories; “Mossad-CIA Ties Legacy of Casey and Angleton,” declassified CIA document CIA-RDP90-00965R000100540001-4 in the agency’s electronic reading room; US Naval War College LibGuide on Angleton; Israeli Espionage in the United States Wikipedia summary). By one DCI-era account, Angleton “almost single-handedly ran the Israeli account at CIA” for two decades. DCI William Colby stripped Angleton of control over the Israel desk in December 1974 as part of a broader counterintelligence-curb reorganization; Angleton’s resignation was announced Christmas Eve 1974 amid Church- Committee-era congressional inquiries. Sources: CIA, ‘James Angleton: Master Spy Hunter’ (CI chief 1954, Israeli desk, left 1974); CIA reading room, CIA-RDP90-00965R000100540001-4. Sources: FRUS 1969-76 vol. XXXVIII pt 2, doc. 18, Marsh to Ford, 24 Dec 1974.

The Angleton case is the documented illustration that Cold War US intelligence treated allied-foreign-intelligence relationships as a single channel that could not be cleanly separated from diaspora- community relationships. Subsequent US reforms (Foreign Agents Registration Act enforcement, the Pollard prosecution, the Kadish prosecution) are responses to that pre-1990 tolerance.

Soviet Jewry / Refusenik movement and the Jackson-Vanik Amendment (1974). Senator Henry “Scoop” Jackson and Representative Charles Vanik introduced what became Title IV of the Trade Act of 1974 — denying non-market economies most-favored-nation status if they restricted emigration. The legislative target was the Soviet emigration head tax of 1972 and the Soviet practice of “refusing” Jewish emigration applications. The amendment was adopted by the House 319-80 in December 1973 and was signed by President Ford January 3 1975 (CRS report IF12556 (Congress.gov); Wilson Center event proceedings on Jackson-Vanik and US-Russian relations; Wikipedia Jackson-Vanik amendment; CFR backgrounder; YIVO Encyclopedia entry). Approximately one million Soviet Jews subsequently emigrated to Israel and roughly half that number to the United States. The declassified diplomatic record shows the amendment functioning simultaneously as a human-rights instrument, a domestic US political mobilization vehicle for the Soviet-Jewry movement, and a Cold War lever that Israeli and US intelligence both treated as operationally relevant (the Refusenik émigré flow generated debriefable Soviet citizens of intelligence interest to both services). Sources: CRS IF12556; Wikipedia, Jackson-Vanik amendment (House 319-80, signed 3 Jan 1975).; Voteview, House roll call 473, 11 Dec 1973, H.R. 10710, “Trade and Jewish immigration from USSR”: 319 yea, 80 nay. Sources: Mark Tolts, A Half Century of Jewish Emigration from the Former Soviet Union (Harvard Davis Center, 2019).

Robert Maxwell (1923-1991). Czech-born British media proprietor; Daily Mirror Group; died November 5 1991 falling from his yacht Lady Ghislaine off the Canary Islands. Multiple sources allege various intelligence relationships across his career; the strongest court-tested treatment is Tom Bower, Maxwell: The Final Verdict (HarperCollins, 1995), which examined the Maxwell Communications Corporation fraud and the subsequent UK Department of Trade and Industry investigation that established Maxwell as the architect of a pension-fund fraud of approximately £400 million. The DTI report (inspectors appointed 1992; published 2001) is the primary documented record; the intelligence-service allegations are more contested. Seymour Hersh’s The Samson Option (1991) alleged Mossad relationships and was the subject of one of the most consequential UK libel actions of the period before Maxwell’s death intervened (Wikipedia Robert Maxwell; Bower 1995; HarperCollins UK product page; Internet Archive scan of Bower 1995; Hersh 1991 (Internet Archive)). Treat as: court-documented financial fraud (DTI), partially-documented intelligence-service relationship (Bower’s court-tested account; Hersh’s allegations court-litigated to inconclusive resolution: the litigation ended in August 1994 with Mirror Group apologising to Hersh and Faber in court and paying damages and costs, with no court finding on the Mossad allegation). This is the right level of hedging for the Maxwell entry — a working illustration of the difficulty of evidentiary discipline on intel-and-diaspora intersections. Sources: Wikipedia, Robert Maxwell (died 5 Nov 1991; Hersh allegations); Association of Mirror Pensioners, the DTI report; Internet Archive, The Samson Option. Sources: Association of Mirror Pensioners, Maxwell: the fallout; Pensions Archive Trust, Unravelling the Web; Deseret News/AP, 20 Aug 1994. Association of Mirror Pensioners: “How was it possible for Maxwell to steal £426 million from the fund without anyone noticing?”

2.5 KGB / GRU + Jewish Diaspora (Both Directions)

The Soviet record is, by volume, the largest of any state actor in this dossier, but is asymmetric: the KGB used Jewish-émigré channels both as penetration vector into Israel and the US, and as ideological-warfare target against the Refusenik movement and world Jewish organizations.

Mitrokhin Archive (declassified 1999-2014). Vasili Mitrokhin, KGB First Chief Directorate archivist 1972-1984, exfiltrated handwritten summaries of tens of thousands of KGB files when he defected to the UK in 1992. The Mitrokhin Archive (Christopher Andrew and Vasili Mitrokhin, The Mitrokhin Archive: The KGB in Europe and the West (1999 (Internet Archive)) and The Mitrokhin Archive II: The KGB and the World (2005); papers held at the Churchill Archives Centre, Cambridge (Churchill Archives Centre); Wilson Center Digital Archive Mitrokhin Archive topic page) is the single largest declassified primary-source dump on Soviet active measures and includes documented operations:

Documented operation: Israel Beer (1961). Senior employee in the Israeli Ministry of Defense, former IDF lieutenant colonel, military commentator, and Ben-Gurion confidant. Arrested March 31 1961 by Shin Bet on suspicion of espionage for the Soviet Union. Convicted; sentenced to 15 years; died in prison. Beer had been meeting Soviet handler Sokolov from 1958, passing details of the 1956 Franco-Israeli arms deal, the 1956 Sinai Campaign preparations, and Israeli arms purchases from West Germany (Britannica Israel Beer; Jewish Telegraphic Agency archive; Jerusalem Post 2016 in-depth piece; Wikipedia Israel Beer; international journal Blinding the Bear in International Journal of Intelligence and CounterIntelligence 36:1, 2022). Be’er’s pre-emigration biography remains unverified; his recruitment to the KGB was never admitted by him. The case is the canonical documented illustration of Soviet penetration of Israel via a Vienna-born Jewish immigrant. Sources: Wikipedia, Israel Beer (arrest 31 Mar 1961, 10 years raised to 15 on appeal, died 1966); JTA, 17 Apr 1961. Sources: Jewish Virtual Library, Israel Be’er.: “The Austrian-born Be’er spoke German fluently”; he told interrogators “he had been born in Vienna in 1912”.

Brighton Beach and the FSB/Russian-organized-crime nexus. Robert I. Friedman, Red Mafiya: How the Russian Mob Has Invaded America (Little, Brown, 2000), built on his Vanity Fair 1993 reporting, documented the Russian-organized-crime networks based in Brighton Beach, Brooklyn — Marat Balagula and the loosely Italian-affiliated networks operating under the supervision of figures like Semion Mogilevich (named in the book’s title concept). The CIA intercepted, and the FBI confirmed, a $100,000 contract on Friedman’s life placed by Mogilevich after the Village Voice exposé (Friedman 2000; Foreign Affairs 2000 capsule review; Wikipedia Robert I. Friedman; Salon May 2000 review; FBI counterintelligence public testimony 2000s on Russian organized crime). Subsequent FBI organized-crime files (much partially declassified) and Treasury / OFAC actions in the 2010s identify operational overlap between Russian-organized-crime networks and FSB/GRU assets — the “hybrid” or “outsourced” intelligence model the post-1991 Russian state adopted. The Alinejad-targeting Russian-mob murder-for-hire plot (see §3.4 below) is one of several court-documented illustrations. Sources: Salon review of Red Mafiya, May 2000 ($100,000 contract; Balagula; Mogilevich); Wikipedia, Robert I. Friedman. Sources: Vanity Fair, Robert I. Friedman, “Brighton Beach Goodfellas,” Jan 1993; US Treasury, Evil Corp sanctions, Oct 2024.

3. Part B — Worldwide Adoption: The Template Goes Industrial

3.1 China — MSS, UFWD, MPS

The Chinese state runs the largest current diaspora-engagement apparatus by budget and personnel; multiple distinct entities are involved.

  • United Front Work Department (UFWD) — organ of the CCP Central Committee. Mandate: management of relations with non-CCP elites outside the party, including the overseas Chinese diaspora. Per Ryan Fedasiuk’s CSET / Georgetown analysis (“Putting Money in the Party’s Mouth,” Jamestown Foundation reprint), organizations central to China’s national and regional united-front systems spent more than USD 2.6 billion in 2019, including ~USD 1.3 billion budgeted annually by regional governments for united-front work (CSET, Jamestown, RFA explainer, Wikipedia United Front Work Department, Public Safety Canada briefing materials, USCC 2018 report). Ratchet Ch 8 covers UFWD. Sources: CSET, Fedasiuk 2020; NSICOP special report, June 2024. CSET: “organizations central to China’s national and regional united front systems spent more than $2.6 billion in 2019”; “Across China’s 31 administrative regions, spending on united front work exceeds $1.3 billion annually”; “No data is available for the Central United front Work Department”.
  • Ministry of State Security (MSS) — civilian foreign-intelligence service. Operational lead on most overseas-Chinese asset cultivation and surveillance.
  • Ministry of Public Security (MPS) — domestic police, but operationally responsible for Operation Fox Hunt (2014-) (FBI, Wray, Hudson Institute, 7 Jul 2020; Safeguard Defenders (NGO), China announces expansion of Sky Net) and Operation Sky Net, the overseas extralegal-repatriation campaigns.

Documented operation: Operation Fox Hunt — DOJ indictments (2020, 2021, 2022). October 2020: DOJ unsealed charges against eight defendants for conspiring to act as unregistered agents of the PRC in a multi-year campaign to stalk, surveil, harass, and coerce a US resident and his family into returning to China. July 2021 superseded indictment adding additional defendants. October 2022: DOJ charged 13 additional individuals, including PRC MSS personnel, in a coordinated set of cases on illegal-agent and stalking offenses (DOJ Office of Public Affairs press materials 2020-10 (DOJ), 2021-07, 2022-10; CNN 2022-10-20; HSToday; NPR 2022-10-24; ProPublica investigative series; Harvard Epicenter analysis; 2024-04 USCC report China’s Global Police State). March 2025: lead Fox Hunt operator on US soil (Quanzhong An) sentenced to 20 months (DOJ press release). Status: a jury convicted Michael McMahon, Zhu Yong and Zheng Congying on 16 June 2023. Sources: DOJ, Oct 2020; DOJ, July 2021 superseding indictment; DOJ, Oct 2022 (13 charged); EDNY 21-cr-265 order; IRS-CI, 19 Mar 2025.

Documented operation: Overseas Police Service Stations. Safeguard Defenders (Madrid-based human-rights NGO) published the initial mapping in late 2022; FBI searched the Manhattan “Fuzhou Police Overseas Service Station” in October 2022; in April 2023 DOJ Brooklyn indicted Lu Jianwang and Chen Jinping for conspiring to act as unregistered agents of the PRC and obstruction of justice (DOJ EDNY). Lu was convicted by federal jury in May 2026 (Wikipedia Chinese police overseas service stations; USCC December 2023 China’s Global Police State background report; Courthouse News May 2026 conviction coverage; PBS Newshour 2023 explainer; Ireland Foreign Affairs Ministry October 2022 closure orders). Status: Chen Jinping pleaded guilty in December 2024; Lu Jianwang was convicted in May 2026 and awaits sentencing. Sources: DOJ, Apr 2023; Courthouse News, May 2026; Malay Mail, Dec 2024. Sources: Safeguard Defenders (NGO), 110 Overseas, Sept 2022; TheJournal.ie, Oct 2022; Irish Times, 27 Oct 2022.

Documented operation: WeChat ecosystem surveillance. FBI Director Christopher Wray public testimony 2018-2023; ASIO Director-General Mike Burgess annual threat assessment speeches; ASPI International Cyber Policy Centre reports on PRC surveillance of overseas Chinese WeChat users. Pattern: PRC MSS uses WeChat (Tencent-operated, subject to PRC data law) to monitor communications of overseas Chinese, including in the US, Canada, Australia, and UK. Coercion of family members in mainland China is the documented enforcement mechanism. Sources: NSICOP special report, June 2024 (WeChat networks, CSIS assessment); Citizen Lab, 2020 (academic; monitoring of non-China accounts). Sources: FBI, Wray, “Countering Threats Posed by the Chinese Government Inside the U.S.,” 31 Jan 2022; Freedom House, China: Transnational Repression.

3.2 India — RAW

Documented operation: Nikhil Gupta / Gurpatwant Singh Pannun assassination plot (2023). November 2023: DOJ SDNY unsealed an indictment charging Indian national Nikhil Gupta with murder-for-hire in a foiled plot to assassinate US-Canadian dual citizen Gurpatwant Singh Pannun, a Khalistan advocate and US citizen, on US soil. The indictment described an “Indian government employee,” later identified in superseding charges (October 2024) as Vikash Yadav, an officer in India’s Research and Analysis Wing (RAW), as the directing official. Gupta pleaded guilty in Manhattan federal court February 13 2026; sentencing, first set for May 29 2026, was postponed to November 20 2026 (DOJ SDNY indictment docket (DOJ SDNY); Lowy Institute analysis; RealShePower February 2026 plea coverage; Reuters and AP wire coverage 2023-2024). Status: Gupta has pleaded guilty; Yadav is charged, not convicted. Sources: DOJ SDNY, Nov 2023; DOJ, Oct 2024 (Yadav); DOJ SDNY, 13 Feb 2026; India Weekly, Aug 2026 (sentencing moved to 20 Nov). India Weekly: “A US federal court has postponed the sentencing of Nikhil Gupta … to November 20”; the court “had originally scheduled Gupta’s sentencing for September 25”.

Documented operation: Hardeep Singh Nijjar killing, Surrey, British Columbia (June 18, 2023). RCMP charged four Indian nationals with first-degree murder in May 2024 (RCMP (RCMP IHIT release (current URL)) (archived)). Canadian Prime Minister Justin Trudeau publicly stated in the House of Commons September 2023 that Canadian intelligence was investigating “credible allegations” of a link to “agents of the Government of India.” Pavan Kumar Rai, then RAW station head in Canada, was expelled by Ottawa in September 2023 following British-shared intelligence linking the killing to Indian-government agents (Global News, 6 Nov 2025: “British intelligence provided Canada with the initial tip”). The Public Inquiry into Foreign Interference (the Hogue Commission) reported in 2024-2025 that while a disinformation campaign followed the announcement and India was identified as a foreign-interference actor, no definitive link between that disinformation campaign and a foreign state could be proven; the report describes the killing itself as the subject of “credible allegations of a potential link” to agents of the Government of India (Globalnews 2024 RCMP press materials; CBC 2024 Hogue Commission coverage; Globe and Mail; Al Jazeera 2026-03 follow-up; National Herald India on Hogue findings; Swarajya on the direct indictment). Status: the four accused are charged with first-degree murder and conspiracy, not convicted; the case had not been tried as of February 2026. Sources: CBC, Trudeau statement; Global News, Rai expulsion; CBC, arrests FAQ; Global News, Feb 2026; Hogue Commission final report, vol. 1; NSICOP, June 2024. Hogue final report, vol. 1: the disinformation campaign after the announcement ran “though again no definitive link to a foreign state could be proven”; “the assassination of Hardeep Singh Nijjar, coupled with credible allegations of a potential link between agents of the Government of India and Mr. Nijjar’s death, derailed those efforts”; “Over the course of the summer, however, intelligence revealed India’s involvement.” Sources: CNN, 24 Sep 2023; Tribune India.

The two cases together — one charged in US court with a named RAW officer, one charged in Canadian court with the foreign-state link alleged by the Canadian government but not yet tested at trial — illustrate the post-2023 RAW operational footprint in North America.

3.3 Iran — MOIS and IRGC-IO

Documented operation: Masih Alinejad kidnapping plot (2021). July 2021: DOJ SDNY indicted an Iranian intelligence official and three Iranian intelligence assets working under him (plus a California resident accused of financing the surveillance) for conspiracy to lure US-based Iranian-American journalist Masih Alinejad to a third country for forcible rendition to Iran. Charges: kidnapping conspiracy, sanctions violations, bank fraud (DOJ press release 2021-07-13 (DOJ SDNY); RFE/RL coverage; Wikipedia Masih Alinejad). Status: Bahadorifar was sentenced to four years; the four Iran-based defendants are charged, not convicted. Sources: DOJ OPA, July 2021; DOJ SDNY, Bahadorifar sentencing. DOJ: “Farahani is an Iranian intelligence official who resides in Iran. Khazein, Sadeghi and Noori are Iranian intelligence assets who also reside in Iran and work under Farahani.”

Documented operation: Alinejad murder-for-hire plot (2022). When the kidnap operation failed, IRGC hired Russian-mob operatives in New York for a contract murder of Alinejad. Two Russian-mob principals (Rafat Amirov and Polad Omarov) were convicted at SDNY trial in March 2025 and sentenced to 25 years each in October 2025 (DOJ Office of Public Affairs 2025-10-30 press release “Two Russian Mob Leaders Sentenced to 25 Years” (DOJ); Time 2026 trial coverage; J. Post coverage). Brigadier General Ruhollah Bazghandi, former chief of an IRGC Intelligence Organization (IRGC-IO) counterintelligence office, was indicted in the October 2024 superseding case (FDD analysis 2024-10-22; DOJ press materials). Sources: DOJ, 30 Oct 2025 sentencing (mirror); DOJ SDNY, Oct 2024; CNN, 22 Oct 2024; Wikipedia, Ruhollah Bazghandi. DOJ, 30 Oct 2025: Amirov and Omarov “were each sentenced yesterday to 25 years’ in prison”. DOJ SDNY, Oct 2024: Bazghandi “has previously served as chief of an IRGC Intelligence Organization (“IRGC-IO”) counterintelligence office”.

Documented operation: Iran International (London). Persian-language satellite channel. November 2022: the Metropolitan Police formally notified two staff including general manager Mahmoud Enayat that the threats were “an imminent, credible and significant risk to their lives” and they relocated abroad (AIB, Nov 2022). February 2023: under Metropolitan Police advice, Iran International temporarily relocated its London studio operations to the US (VOA, Feb 2023). December 2023: ITV News investigation exposed a thwarted IRGC plot to assassinate two presenters at the network using a people-smuggler paid $200,000. Hansard 2023-02-20 records UK Security Minister Tom Tugendhat reporting the UK had responded to 15 credible threats to kill or kidnap British or UK-based individuals by the Iranian regime since the start of 2022 (VOA, Feb 2023, quoting the Met’s Matt Jukes) (Hansard 2023-02-20; Iran International coverage of its own relocation; UN OHCHR 2024-05; OFCOM reporting; RSF court-case and ITV News reportage). Sources: Wikipedia, Iran International (2022 threats; Feb 2023 move); RFE/RL on the ITV investigation, Dec 2023; Hansard, 20 Feb 2023. Sources: Center for Human Rights in Iran, May 2024; UN OHCHR, May 2024.

3.4 Russia — FSB / GRU / SVR

Documented operation: Alexander Litvinenko (London, 2006). Polonium-210 poisoning at the Millennium Hotel. UK public inquiry chaired by Sir Robert Owen reported January 21 2016 (HC 695, UK Stationery Office). Findings: Andrey Lugovoy and Dmitry Kovtun killed Litvinenko; they were probably acting under the direction of the Russian FSB; the operation was “probably approved by Mr Patrushev, then head of the FSB, and by President Putin” (Owen Report (GOV.UK); ITV News summary; UK Parliament Hansard 2016-01-21 (Hansard); NPR; RUSI commentary).

Documented operation: Sergei and Yulia Skripal (Salisbury, 2018). Novichok poisoning attempt March 4 2018. OPCW confirmed the nerve agent in biological samples (OPCW Technical Secretariat report April 2018, document S/1612/2018 (OPCW)). UK attribution to GRU Unit 29155 (GOV.UK, Profile: GRU cyber and hybrid threat operations) under Major General Andrey Averyanov, with three named operatives (Aleksandr Mishkin, Anatoly Chepiga, Denis Sergeev). Subsequent attack on Dawn Sturgess (death) and Charlie Rowley via discarded perfume bottle. UK NCA investigation; OPCW; Bellingcat open-source intelligence reporting; Lord Hughes Inquiry into the Death of Dawn Sturgess (report published 4 December 2025). Joint statement by France, Germany, US, UK March 15 2018 assessing Russia “highly likely” responsible (GOV.UK, Salisbury attack: joint statement, 15 Mar 2018) (Wikipedia Poisoning of Sergei and Yulia Skripal; UK government profile GRU cyber and hybrid threat operations, gov.uk; RUSI commentary on the Bellingcat exposure). Sources: OPCW S/1612/2018; Wikipedia, Skripal poisoning (Averyanov, 15 Mar joint statement); Dawn Sturgess Inquiry (report 4 Dec 2025).

Both cases targeted Russian-origin individuals living in the UK — a former FSB officer (Litvinenko, defected 2000) and a former GRU officer (Skripal, defected via 2010 prisoner swap). The diaspora- nexus is that both lived as part of Russian-speaking communities in the UK, and the operations relied on Russian-speaking operatives flown in from Moscow.

Litvinenko, 2006: the émigré circle’s trust was the way in. Andrey Lugovoy, once Boris Berezovsky’s head of security at ORT, was treated by Berezovsky as “one of us” and let into his private offices weeks before the poisoning. His London trips were covered by business meetings inside that circle, and Kovtun’s visa was sponsored by a London oil company. Two witnesses doubted that Lugovoy’s 2001-02 imprisonment for helping a Berezovsky associate try to escape was real; they suspected it was staged to build that trust. The inquiry made no finding on it. No émigré helped knowingly: the inquiry found Berezovsky “bore no responsibility”, found no evidence against Chechen groups, and held that a crime-gang theory “would not be implausible” but “is not supported by the evidence”. The one recorded attempt to recruit a local helper ran through Kovtun’s old restaurant colleagues in Hamburg to an Albanian cook in London, who shared no language with him and did not help. The inquiry found Kovtun “did wish to enlist C2 as an accomplice”. The operatives flew in from Moscow and stayed in ordinary hotels. The inquiry is “sure” they put the polonium in the teapot, and found FSB direction a “strong probability”.

Skripal, 2018: no diaspora trace on the record. The Dawn Sturgess Inquiry (December 2025) is “sure” that three Unit 29155 officers “arrived in London from Moscow”, stayed in commercial hotels in Bow and Paddington, and “brought with them” Novichok “made in Russia”. It records no local support network. The unit’s documented rear base was a set of hotels in Haute-Savoie, France, used from 2014 to at least 2018.

Who disputes the official accounts, and on what evidence.

  • The Russian government says the UK staged or provoked Salisbury. It offers no positive evidence, and the Sturgess Inquiry examined its points one by one and rejected them. Lugovoy’s frame-up theory got the same treatment in the Litvinenko report.
  • Independent sceptics, Rob Slane the most cited, raise objections inferred from public documents: CCTV gaps, the timeline, how the victims survived so pure an agent. His CCTV objection predates the inquiry’s CCTV and phone-mast reconstruction.
  • In March 2018 Jeremy Corbyn said “Russian mafia-like groups” in Britain could not be excluded. It was said before the evidence came in, and nothing since supports it.
  • Porton Down’s chief executive said in April 2018 that the lab had “not identified the precise source”. That was a statement of the lab’s remit; attribution came from other intelligence and later from the inquiry.
  • The identifications do not rest on the UK alone. Bellingcat and The Insider identified all three GRU officers from leaked Russian passport and travel records; the European Court of Human Rights (Carter v Russia, 2021, 6-1) found “a strong prima facie case” that Lugovoy and Kovtun acted for the Russian state; Bulgaria charged the “Fedotov” identity over the 2015 Gebrev poisoning. None of these challenges produced evidence of a diaspora role.

Open questions the record leaves open.

  • What Lugovoy and Kovtun did between Gatwick and their hotel on 16 October 2006. The inquiry “cannot exclude” that they got polonium “from some source in London” that day, and has “no positive evidence” that they did. The closed evidence is unpublished.
  • Whether Lugovoy’s imprisonment was real or staged.
  • What the third officer, “Fedotov” (Denis Sergeev), did in London. The inquiry calls a meeting with the other two a “real possibility (no more)”. The inquiry has him flying home from Heathrow; Bellingcat has him skipping that flight and leaving via Rome.
  • How the Novichok physically entered the UK. The open report says the officers brought it; how is in closed material.
  • Whether the Gebrev team had help in Sofia. No published record says.

Sources: Litvinenko Inquiry, HC 695, January 2016: ¶6.65 “Mr Lugovoy and Mr Kovtun flew from Moscow to London Gatwick on the morning of Monday 16 October 2006”; ¶6.86 “I cannot exclude … the possibility that they obtained polonium 210 from some source in London”; ¶6.167 Berezovsky “regarded Mr Lugovoy as a trusted associate — someone who was ‘one of us’”; ¶¶4.146-4.147, 6.168 on the imprisonment; ¶8.108 “Mr Kovtun did wish to enlist C2 as an accomplice”; ¶9.16 “Mr Berezovsky bore no responsibility”; ¶¶9.24-9.25 organised crime “would not be implausible” but “not supported by the evidence”; ¶9.32 no evidence against Chechen groups; ¶10.11 “I am sure that Mr Lugovoy and Mr Kovtun placed the polonium 210 in the teapot”; ¶¶10.15-10.16 FSB direction a “strong probability”. Dawn Sturgess Inquiry report, December 2025 (inquiry site): ¶8.10 “arrived in London from Moscow on Friday 2 March 2018 with the intention of working together to kill Sergei Skripal”; ¶8.11 “brought with them to Salisbury the ‘Nina Ricci’ bottle containing Novichok made in Russia”; ¶3.50 a meeting with Fedotov “a real possibility (no more)”; ¶¶3.113-3.124 the staging claims, ¶3.124 “I am sure that there was no staging of the Salisbury event by the UK authorities”. PM statement, 5 Sep 2018: “arrived at Gatwick Airport at 3pm on Friday 2nd March, having flown from Moscow”. Haute-Savoie base: Euronews, reporting Le Monde, 4 Dec 2019, “une base arrière pour l’ensemble des opérations clandestines”. Identifications: Bellingcat on Chepiga, Mishkin and Sergeev (“It is unclear what Fedotov’s role may have been, if any”); ECHR, Carter v Russia, 21 Sep 2021, press release; Sofia Globe, 23 Jan 2020. Challenges: Rob Slane, OffGuardian, 4 Mar 2019; Euronews, 16 Mar 2018 (Corbyn); France24, 3 Apr 2018 (Aitkenhead).

Documented operation: Illegals Program (2010). June 27 2010: FBI arrested ten Russian SVR “illegals” in coordinated operations across multiple US states, including Anna Chapman and the “Murphy” cover identities (Richard and Cynthia Murphy, NJ). Charges: conspiracy to act as unregistered agents of the Russian Federation and conspiracy to commit money laundering. Ten were swapped July 9 2010 in Vienna for four Western-held assets (DOJ Office of Public Affairs 2010-06-28 press release “Ten Alleged Secret Agents Arrested” (DOJ); Wikipedia Illegals Program; Wikipedia Anna Chapman; SOFmag / PHC Intelligencer analysis). The illegals operated under deep non-Russian-citizen covers; the operation is the documented post-Cold-War continuation of the KGB-era illegals tradition. Sources: Wikipedia, Illegals Program (ten swapped in Vienna, 9 July 2010). BBC News, 9 Jul 2010: “Ten Russian agents were flown to Vienna hours after they admitted in a US court to being agents for a foreign country.”

Brighton Beach / Russian-mob nexus. As noted in §2.5, post-1991 Russian intelligence services have repeatedly used Russian-organized- crime networks as outsourced operational assets, with the Alinejad murder-for-hire convictions providing the most recent court- documented illustration.

3.5 Turkey — MIT and Diyanet

Diyanet (Presidency of Religious Affairs). Mosque/imam-deployment abroad as a state-aligned religious-affairs network. The DITIB (Diyanet İşleri Türk-İslam Birliği) network in Germany has been investigated by the German Federal Prosecutor General for alleged imam surveillance of Gülen-network adherents in Germany (German federal investigations 2017-2019; Bundestag answers; major-outlet reporting by Der Spiegel, Süddeutsche Zeitung). Belgian Federal Prosecutor cases 2008-2020 dealt extensively with Turkish-state activity in Belgium (two are set out under Belgium, below: the PKK prosecution in which the Turkish State joined as civil party, ended at the Court of Cassation in 2020, and the 2017 Kartal/Aydar plot, tried from 2021 — Turkish Minute, 1 Oct 2021). Ratchet Ch 8 covers Diyanet. Status: Germany’s Federal Court of Justice twice refused arrest warrants for DITIB imams in 2017; the espionage case was not proven. Sources: Deutsche Welle; Foreign Policy, Mar 2017.

Belgium. No Belgian court has convicted anyone of spying for Turkey. The Belgian record is administrative action against Diyanet mosques, one criminal case, and one federal prosecution in which Turkey sat on the prosecution’s side.

What Diyanet itself disclosed. In December 2016 Diyanet told the Turkish parliament’s coup commission that mosque officials in 38 countries, Belgium among them, had sent it 50 intelligence reports on suspected Gülenists. A September 2016 Diyanet directive to its Belgian branch asked for “a detailed report on all FETO/PYD organisations”. Gülenist plaintiffs and their lawyer say Belgian Diyanet imams did the collecting; no Belgian court or prosecutor has ruled on it.

Administrative action.

  • 2017, Beringen. Flemish minister Liesbeth Homans withdrew recognition of Diyanet’s Fatih mosque, citing a State Security report. State Security publicly denied that its report named the mosque.
  • 2017, visas. Belgium refused visas to 12 Turkish imams, on the stated ground that they would preach in unrecognised mosques. Espionage was not the reason given.
  • 2023, three mosques. Minister Bart Somers opened de-recognition proceedings against the Diyanet mosques in Lommel, Aalst and Heusden-Zolder, after State Security and the threat-assessment body OCAD found the twelve recognised Diyanet mosques in Flanders “too much under the influence of the Turkish government”. The finding concerned Turkish-paid imams and control, not espionage. Aalst’s Kevser mosque was suspended in March 2024, formally on a procedural rule.
  • 2024, work permits. Minister Zuhal Demir revoked the work permits of five Diyanet imams because the Turkish state pays them.
  • The courts pushed back on Flanders, not on Turkey. Diyanet’s Belgian association won twice at the Constitutional Court: in 2023 against the Flemish ban on foreign funding and foreign-paid imams, and in September 2025 against its 2024 replacement.

The criminal case. In 2017 Belgian police broke up a plot against the Kurdish politicians Remzi Kartal and Zübeyir Aydar in Brussels. The accused, a former Turkish officer and a man found carrying a Turkish police ID, were acquitted in 2022 and convicted in absentia on appeal in 2024, five years each. Aydar and the plaintiffs’ lawyers say Turkish intelligence ran the plot, on the strength of photographs they put before the court. The reporting on the appeal judgment does not show the court attributing the plot to the Turkish state.

The federal prosecution ran the other way. The federal prosecutor’s 2008 terrorism case against PKK-linked defendants, including the company behind Roj TV, had the Turkish State as a civil party. The Court of Cassation rejected the appeals of the federal prosecutor and of Turkey on 28 January 2020, holding that the armed-conflict exclusion in Article 141bis of the Criminal Code applied. Belgium was the forum where Turkey pursued Kurdish defendants, not a place that prosecuted Turkish-state activity.

What State Security says in public. Its annual reports from 2019 to 2025 discuss the PKK and name no Turkish-state interference or espionage. The 2020-21 foreign-interference findings against the Muslim Executive and the Great Mosque of Brussels concerned Morocco, not Turkey.

Open questions.

Documented operation: Reza Zarrab / Halkbank case (SDNY). October 26 2017: Reza Zarrab pleaded guilty in SDNY to seven counts including conspiracy to violate IEEPA, bank fraud, money laundering, and conspiracy to bribe a US public official, in connection with a multi-billion-dollar scheme to evade US sanctions on Iran through Turkish state-owned Halkbank (RFE/RL, 29 Nov 2017). January 3 2018: jury convicted Halkbank deputy general manager Mehmet Hakan Atilla on five of six counts. Zarrab’s trial testimony directly implicated then-Prime Minister and later President Recep Tayyip Erdoğan in the sanctions-evasion operation (Euronews, 30 Nov 2017). October 2019: DOJ unsealed criminal charges against Halkbank itself for fraud, money laundering, and sanctions offenses (DOJ Office of Public Affairs press releases 2017-10-26, 2018-01-03 (DOJ), 2019-10-15 (DOJ); Foreign Policy 2019-10-16; NBC News; Just Security 2020 timeline “Trump, Barr, and the Halkbank Case”). Status: the Supreme Court denied Halkbank’s last appeal in October 2025; DOJ agreed to drop the case in March 2026 (a deferred prosecution agreement dated 6 March 2026; on 17 June 2026 it applied for a nolle prosequi dismissing the charges with prejudice). Sources: Wikipedia, Reza Zarrab; Wikipedia, Halkbank. Sources: CourtListener, US v. Zarrab / Halkbank, 1:15-cr-00867 (SDNY); SDNY Dkt. 771, Declaration and Nolle Prosequi, 17 Jun 2026.

Targeting of Gülen network abroad. Following the July 2016 coup attempt, the Turkish state designated the Gülen movement (FETÖ) a terrorist organization and pursued Gülen-affiliated individuals abroad through diplomatic, intelligence, and legal channels. Multiple DOJ findings post-2016 on Turkish MIT activity on US soil; Belgian, German, Swiss prosecutorial files. (One on the record: the 29 Aug 2017 D.C. grand-jury indictment over the Sheridan Circle assault on anti-Erdoğan protesters names fifteen defendants as “a Turkish security official” among “security personnel and supporters of Turkish President” Erdoğan — indictment, US v. Narin et al..) The case traced here is the 2018 FARA indictment of Bijan Rafiekian and Kamil Ekim Alptekin over an alleged Turkish-government-directed campaign against Gülen (an allegation, naming Turkish officials rather than MIT; Rafiekian’s 2019 jury verdict was set aside and his case dismissed with prejudice in 2023 (EDVA Dkt. 432, Order, 11 Sep 2023), and the case against Alptekin was dismissed in October 2025 (EDVA Dkt. 434, 20 Oct 2025 (docket); Turkish Minute, 9 Feb 2026)). The Belgian Court of Cassation ruled January 28 2020 (and again subsequently) that the PKK could not be classified as a terrorist organization under Belgian anti-terrorism legislation because Belgian law (Article 141bis of the Criminal Code) exempts forces engaged in an armed conflict — a ruling separate from but reinforcing the broader Belgian judicial pushback against Turkish-state pressure on Turkish-origin diaspora in Belgium, in a case the Turkish State had joined as a civil party on the prosecution’s side (Belgian Court of Cassation 2020-01-28; Euronews; Turkish MFA press release No. 29 of 2020-01-29; Middle East Eye 2020 analysis; Medya News 2024 piece “Unpacking the Debate”). Wikileaks diplomatic cables 2011 documented US diplomatic engagement with both Belgian and Turkish governments on the case. Sources: Deutsche Welle, Mar 2019 (Brussels appeal-court PKK ruling). Sources: Hof van Cassatie, 28 Jan 2020, P.19.0310.N, ECLI:BE:CASS:2020:ARR.20200128.6; Lawfare, 17 Dec 2018. Sources (the US, Belgian, German and Swiss files): Special Counsel, Statement of Offense, US v. Flynn, 1:17-cr-00232 (D.D.C.), Dkt. 4, 1 Dec 2017: the Flynn Intel Group project was “for the principal benefit of the Republic of Turkey”, and the FARA filings omitted “that officials from the Republic of Turkey provided supervision and direction over the Turkey project”; Hof van Cassatie, P.19.0310.N, 28 Jan 2020: the appellants are the federal prosecutor and the “TURKSE STAAT, vertegenwoordigd door de minister van Buitenlandse Zaken van de republiek Turkije … burgerlijke partij”; dictum: “Verwerpt de cassatieberoepen I en III”; Bundestag Drucksache 18/13702, federal government answer of 18 Oct 2017: “19 Ermittlungsverfahren wegen des Verdachts der geheimdienstlichen Agententätigkeit für türkische Geheimdienste” in five years, “elf im Jahr 2017”; AP via Fox News, 10 Oct 2017: Mehmet Fatih S. “was sentenced in Hamburg state court to two years’ probation for spying for the Turkish intelligence service MIT”; swissinfo, 14 Mar 2018: “On March 16, 2017, the Office of the Attorney General launched a criminal inquiry into possible foreign spying on Switzerland’s Turkish community”, and the OAG “confirmed … that the investigation also concerned an attempt to kidnap an individual in Switzerland to take them abroad”; Reuters, 24 Mar 2017, “Swiss open probe into spying on Turkish community”: the OAG said it “has been made aware of concrete suspicion that political espionage has likely been conducted involving the Turkish community in Switzerland”, investigation opened 16 March 2017.

3.6 Saudi Arabia — GIP (General Intelligence Presidency)

Documented operation: Jamal Khashoggi assassination (Istanbul, October 2 2018). Washington Post contributor lured into the Saudi consulate in Istanbul, killed, and dismembered by a Saudi team including members of Crown Prince Mohammed bin Salman’s protective detail and a forensic specialist. ODNI declassified assessment “Assessing the Saudi Government’s Role in the Killing of Jamal Khashoggi” released by the Biden administration February 26 2021: “We assess that Saudi Arabia’s Crown Prince Muhammad bin Salman approved an operation in Istanbul, Turkey to capture or kill Saudi journalist Jamal Khashoggi.” Basis: MBS’s control of decision-making in the Kingdom; direct involvement of a key adviser and members of MBS’s protective detail; MBS’s support for using violent measures to silence dissidents abroad including Khashoggi (ODNI report 2021-02-26 (ODNI); Washington Post coverage; Al Jazeera summary; FDD analysis 2021-03-04). UN Special Rapporteur on extrajudicial, summary, or arbitrary executions Agnès Callamard had published a June 2019 report concluding the killing was a state-perpetrated extrajudicial execution and finding “credible evidence, warranting further investigation of high-level Saudi officials’ individual liability, including the Crown Prince” (UN OHCHR A/HRC/41/CRP.1 2019-06-19 (UN OHCHR)).

Documented operation: Ahmad Abouammo / Saudi Twitter case. July 2020: DOJ NDCal indicted three defendants including Twitter employee Ahmad Abouammo for acting as an agent of Saudi Arabia, wire fraud, money laundering, and obstruction. Abouammo had been Twitter’s media partnerships manager for the Middle East/North Africa 2013-2015; he accessed private data on Saudi-dissident Twitter accounts and passed it to a Saudi royal-court official in exchange for a Hublot watch and approximately $300,000 in wire payments. August 2022: federal jury convicted Abouammo on six of eleven counts including acting as an unregistered foreign agent, wire fraud, honest-services wire fraud, conspiracy, money laundering, and falsifying records. December 2022: sentenced to 42 months and ordered to pay $242,000 in restitution (DOJ NDCal press release (DOJ); CNN 2022-12-15; NBC News; The Register; Law and Crime). Status: in Abouammo v. United States (11 June 2026) the Supreme Court held the falsification count was tried in the wrong venue. Sources: Wikipedia, Saudi infiltration of Twitter; SCOTUSblog, June 2026.

Saudi student-monitoring cases. Multiple US court filings 2018- 2024 involving Saudi-funded student-association activity at UC Davis, UCLA, and other US institutions, with FBI counter-intelligence investigation. The pattern is documented in DOJ FARA enforcement filings and in academic civil litigation; treat individual student defendants with care — anchored claims involve specific filings only.

3.7 North Korea — Overseas Workers and Front Companies

The DPRK pattern is structurally distinct from the others above: rather than running operations through a diaspora community of free émigrés, the DPRK exports state-controlled overseas-worker contingents under diplomatic-bag and front-company cover.

UN Panel of Experts final report, March 2024 (S/2024/215): approximately 100,000 DPRK workers active across 40 countries, generating ~USD 500 million per year for the regime (excluding IT-sector revenue) (UN Security Council (S/2024/215)). DPRK IT workers obtain contracts under fraudulent identities and have used the resulting privileged access to enable DPRK malicious cyber intrusions (UN Panel of Experts S/2024/215; US Treasury OFAC sanctions designations 2023-2025; ISIS / Institute for Science and International Security Alleged Sanctions Violations annual reports; TRM Labs blog 2024-2025 DPRK banker and front-company designations; 38 North policy analysis 2025-10). Sources: UN S/2024/215 (figures attributed to Member States).

Russia vetoed the UN Panel of Experts mandate renewal in 2024, ending the formal UN monitoring channel. US, ROK, and EU sanctions enforcement continues unilaterally. Sources: UN S/PV.9591, 28 Mar 2024 (13-1-1, Russian veto).

The DPRK case demonstrates that the diaspora-instrumentalization template scales down to state-controlled labor contingents — a related but distinct operational form.

4. Part C — Comparative Analysis: The Template’s Spread

4.1 What Mossad/Lakam Pioneered (Postwar) That Everyone Else Now Does

  1. Diaspora as asset-recruitment pool. Not unique to Israel — every intelligence service in history has cultivated co-ethnic and co-linguistic assets — but Mossad LeAliyah Bet and its successors were the first postwar service to do so at industrial scale, formalized into doctrine and staffing pipelines, and the Pollard, Kadish, and Nozette cases collectively illustrate the persistence of that recruitment pattern across decades. Mossad LeAliyah Bet’s diaspora work passed in 1952 to two standing state units, Mossad’s Bitzur and Nativ, which made working the diaspora a formal government function (see §2.1 above). Scale receipts: Ha’Mossad’s postwar run of “65 sea voyages … carrying over 70,000 ma’apilim” (Palyam); Israel’s Operation Yachin, under which “more than 97,000 Jews emigrate from Morocco via France or Italy” by 1964 (Center for Israel Education).
  2. Voluntary-helper networks. The Sayanim concept (Ostrovsky 1990, corroborated in Thomas 1999, Melman/Raviv 1990, Bergman 2018) is the most explicit doctrinal description of voluntary diaspora-community assistance to intelligence operations. The Chinese UFWD’s “overseas-Chinese cultivation” doctrine, formalized post-2012 (Jamestown Foundation, China Brief, 9 May 2019) under Xi Jinping, is the closest documented contemporary parallel — though UFWD operates at a budget level (USD 2.6B across the national and regional united-front system) that Lakam never approached.
  3. Diaspora as cover for clandestine procurement. Lakam’s front- company network for nuclear-program procurement (Milchan’s self- acknowledged 2013 role) is the documented prototype. Post-2000 DOJ BIS export-control enforcement files show similar patterns for Chinese, Iranian, Russian, and Pakistani procurement networks.
  4. Diaspora as foreign-policy lever via host-country lobbying. This crosses into the diaspora-PAC mechanism covered in Diaspora PACs as Remittance-Economy Political-Influence Mechanisms; the AIPAC model has been explicitly copied by USINPAC (Mother Jones, Oct 2007), ANCA, the Cuban-American National Foundation, and others. Distinct from intelligence operations but operationally adjacent (intelligence services routinely cultivate relationships with diaspora-lobbying-organization principals).

4.2 What’s New in the Post-1990 Generation

  1. Telecoms/social-media monitoring at scale. WeChat (Tencent, subject to PRC data law) is the canonical PRC example; IRGC use of Telegram for Iranian-diaspora surveillance is documented in the Alinejad superseding indictments; FSB use of VK for Russian- speaking-diaspora monitoring is documented in UK NCA filings.
  2. Algorithmic surveillance integration. Hogue Commission Canadian filings document large-scale PRC algorithmic monitoring of Canadian Chinese-language community.
  3. Industrial-scale state budgets. The PRC united-front system’s USD 2.6B budget represents an operational tier that no Cold War-era equivalent approached. The DPRK overseas-worker program (~$500M/year) operates at sovereign-revenue scale rather than intelligence-budget scale.
  4. Outsourcing to organized-crime networks. The Alinejad case (IRGC contracting Russian mob) is the cleanest documented example. The Russian cases in the UK do not fit it: both official records attribute the Litvinenko and Skripal operations to serving FSB and GRU officers. Organised crime enters the Litvinenko record as the subject of his own accusations against the FSB, and the inquiry held that a crime-gang theory of the killing “would not be implausible” but is “not supported by the evidence”. Corbyn’s 2018 suggestion of “Russian mafia-like groups” is the only public claim of a crime role in Salisbury, and nothing on the record supports it (see the Litvinenko and Skripal entries above). Sources: Litvinenko Inquiry, HC 695, ¶¶9.24-9.25, and ¶9.120 (Litvinenko’s books “accused the FSB of responsibility for the 1999 apartment bombings and of collusion in organised crime”); Dawn Sturgess Inquiry report, ¶¶8.10-8.11.
  5. Extraterritorial police-station infrastructure. The PRC MPS overseas-service-station network mapped by Safeguard Defenders and prosecuted in Brooklyn (Lu and Chen 2023, conviction 2026) is a model with no clear Cold War analog.

4.3 What’s MORE Constrained Today Than in the Cold War

  1. FARA / FITS / FIRS registries. US FARA (1938, enforced sporadically pre-2017, more aggressively post-2017); Australian FITS (Foreign Influence Transparency Scheme Act 2018, in force from 10 December 2018); UK FIRS (Foreign Influence Registration Scheme, National Security Act 2023, in force July 1 2025); Canada FITA (enacted June 2024 in Bill C-70) create public accountability nonexistent in 1950s. The post-Pollard prosecutions of Kadish (2008) and Nozette (2009-2012), the Alinejad indictments, the Pannun-plot indictment, and the Fox Hunt indictments collectively show a US enforcement posture that did not exist pre-1990. Sources: GOV.UK, FIRS in force 1 July 2025; Wikipedia, Bill C-70 (assent 20 June 2024); APH, FITS review. Parliament of Canada, LEGISinfo, Bill C-70: “This bill received royal assent on Thursday, June 20, 2024”; “Part 4 enacts the Foreign Influence Transparency and Accountability Act”. Sources: University of Canberra, Foreign Influence Transparency Scheme; Attorney-General’s Department.
  2. Reduced effectiveness for openly state-affiliated assets. A Robert Maxwell-class figure — major media proprietor with pre-emigration Soviet-bloc origins, frequent travel to handler capitals, and undocumented extraordinary income flows — would face far more aggressive multi-jurisdictional financial and counter-intelligence scrutiny today than in the 1980s.
  3. Court-enforcement asymmetry between pre-1990 and post-1990. The Angleton-era CIA tolerated extensive friendly-foreign-intelligence operations on US soil with minimal prosecution. The Pollard, Kadish, Nozette, Abouammo, Pannun-plot, and Fox Hunt prosecutions together establish a different posture: the post-1990 US system prosecutes any documented foreign-intelligence operation on US soil regardless of which ally or adversary directed it.
  4. Diaspora-civil-society pushback. Iran International’s continued broadcasting under UK police protection; Safeguard Defenders’ public mapping of PRC overseas police stations; the network of Khalistani-diaspora civil-society organizations in Canada and the US that became investigative partners with RCMP and DOJ — these are post-2000 phenomena that did not exist in the Cold War.

7. Sources Reviewed by Category

7.1 Declassified Government Files

  • CIA 1987 Pollard damage assessment, declassified December 14 2012, hosted by the National Security Archive at George Washington University.
  • ODNI 2021-02-26 Assessing the Saudi Government’s Role in the Killing of Jamal Khashoggi, declassified by DNI Haines.
  • CIA reading-room declassified documents on Angleton-Mossad liaison (e.g., CIA-RDP90-00965R000100540001-4).
  • CIA Stories profile of Angleton, cia.gov.
  • Mitrokhin Archive (Churchill Archives Centre, Cambridge; Wilson Center CWIHP).
  • US State Department Global Engagement Center, More than a Century of Antisemitism (January 2024).
  • US Department of the Treasury OFAC designations and press materials on DPRK overseas-worker and front-company networks.
  • UN Panel of Experts on DPRK final report (S/2024/215).
  • UN OHCHR A/HRC/41/CRP.1 (Callamard report on Khashoggi, 2019-06-19).
  • Israel State Archives, Eichmann trial materials and Special Publication “Behind the Scenes at the Eichmann Trial.” Sources: NSA Pollard damage assessment; ODNI Khashoggi assessment; CIA reading room; CIA Angleton profile; Churchill Archives Centre; UN S/2024/215; UN A/HRC/41/CRP.1.

7.2 Court Rulings, Indictments, and Convictions

  • DOJ (D.D.C.) Jonathan Pollard indictment and conviction (1985-1987).
  • DOJ SDNY Ben-Ami Kadish indictment and plea (2008).
  • DOJ DDC Stewart Nozette indictment, plea, and sentencing (2009-2012).
  • DOJ EDNY Lu Jianwang and Chen Jinping indictments (2023) and Lu’s federal jury conviction (May 2026).
  • DOJ EDNY / SDNY Operation Fox Hunt indictments (2020-10, 2021-07, 2022-10).
  • DOJ SDNY Pannun-plot indictment of Nikhil Gupta (2023-11); superseding indictment naming Vikash Yadav (2024-10); Gupta plea (2026-02-13); sentencing set for 2026-11-20.
  • RCMP charges against four Indian nationals in Nijjar killing (May 2024).
  • DOJ SDNY Alinejad-kidnap indictment (2021-07-13); Alinejad-murder superseding indictments (2024-10-22); Amirov/Omarov conviction March 2025; sentencings October 2025.
  • DOJ SDNY Reza Zarrab plea (2017-10-26); Halkbank Atilla conviction (2018-01-03); Halkbank corporate indictment (2019-10-15).
  • DOJ NDCal Ahmad Abouammo indictment (2020-07); conviction August 2022; sentencing December 2022.
  • DOJ Illegals Program complaints and arrests (2010-06-27).
  • UK Litvinenko Public Inquiry, HC 695, Sir Robert Owen, 2016-01-21.
  • OPCW Technical Secretariat report on Salisbury Novichok (S/1612/2018, 2018-04-12).
  • Belgian Court of Cassation ruling on PKK status (2020-01-28).
  • Hogue Commission (Canadian Public Inquiry into Foreign Interference) reports (2024-2025). Sources: Kadish plea; Nozette plea; Fox Hunt 2020; Fox Hunt verdict order; police-station charges; Pannun 2023; Yadav 2024; Gupta plea 2026; Alinejad 2021; Amirov/Omarov sentencing; Bazghandi 2024; Halkbank 2019; Abouammo sentencing; Illegals 2010; Litvinenko Inquiry; OPCW S/1612/2018; Hogue final report.

7.3 Parliamentary, Government, and Inquiry Reports

  • UK Hansard 2023-02-20 Security Minister statement on Iran-regime threats.
  • UK Hansard 2016-01-21 Litvinenko Inquiry debate.
  • Public Safety Canada briefing materials on UFWD.
  • US-China Economic and Security Review Commission (USCC) reports including China’s Global Police State (December 2023).
  • US Treasury Department OFAC designations and TRM Labs analyses.
  • Lord Hughes Inquiry into the Death of Dawn Sturgess (report published 2025-12-04). Sources: Hansard 2023-02-20; Hansard 2016-01-21; NSICOP 2024; Dawn Sturgess Inquiry.

7.4 Court-Tested and/or Authorized Books

  • Victor Ostrovsky and Claire Hoy, By Way of Deception (1990) — Israeli-government injunction attempt overturned by NY Appellate Division 1990-09-13; broader Sayanim claim neither confirmed nor refuted in court.
  • Gordon Thomas, Gideon’s Spies: The Secret History of the Mossad (1999, multiple editions).
  • Yossi Melman and Dan Raviv, Every Spy a Prince (1990).
  • Ronen Bergman, Rise and Kill First (Random House, 2018) — authorized cooperation from multiple Mossad sources.
  • Tom Bower, Maxwell: The Final Verdict (HarperCollins, 1995).
  • Seymour Hersh, The Samson Option (1991) — substantial litigation history; court-litigated to inconclusive resolution (the libel actions ended in August 1994 with Mirror Group’s apology, damages and costs).
  • Robert I. Friedman, Red Mafiya (Little, Brown, 2000).
  • Christopher Andrew and Vasili Mitrokhin, The Mitrokhin Archive (1999, 2005).
  • Meir Doron and Joseph Gelman, Confidential: The Life of Secret Agent Turned Hollywood Tycoon Arnon Milchan (2011) — central claims confirmed on-camera by subject November 25 2013. Sources: By Way of Deception (Internet Archive); The Samson Option (Internet Archive); The Mitrokhin Archive (Internet Archive); Milchan confirmation (Times of Israel).

7.5 Think-Tank, Academic, and NGO Reports

  • Ryan Fedasiuk, “Putting Money in the Party’s Mouth,” CSET / Georgetown (2020, republished by Jamestown Foundation).
  • Australian Strategic Policy Institute (ASPI), International Cyber Policy Centre UFWD reports (June 2020 et seq.).
  • Safeguard Defenders, 110 Overseas: Chinese Transnational Policing Gone Wild (2022) and follow-up Patrol and Persuade (2023).
  • Foundation for Defense of Democracies (FDD) analyses on IRGC-IO Bazghandi indictment (2024) and Pollard case re-assessment (2012).
  • Royal United Services Institute (RUSI) commentaries on Litvinenko Inquiry and Bellingcat exposure of GRU 29155.
  • Council on Foreign Relations (CFR) backgrounders on Jackson-Vanik and on North Korea sanctions.
  • Wilson Center event proceedings on Jackson-Vanik and US-Russian relations.
  • Carnegie Council for Ethics in International Affairs.
  • Institute for Science and International Security (ISIS) on DPRK sanctions violations.
  • 38 North policy analysis on DPRK overseas labor.
  • Lowy Institute The Interpreter on the Pannun-plot indictment. Sources: Fedasiuk, CSET.

7.6 Major-Outlet Reporting Anchored to Records Above

The New York Times, Washington Post, Wall Street Journal, Reuters, Associated Press, Bloomberg, Financial Times, The Guardian, BBC, CNN, NPR, NBC News, ABC News, CBS News, PBS NewsHour, Al Jazeera, ITV News, Times of Israel, Haaretz, Jerusalem Post, Jewish Telegraphic Agency, Foreign Policy, Foreign Affairs, Time, ProPublica, Just Security, Lawfare, RealClearDefense, RFE/RL, VOA, Brussels Times, Middle East Eye, The Conversation, Jacobin, The Diplomat, Nikkei Asia, Globalnews.ca, CBC, Globe and Mail, Courthouse News Service, Law and Crime, The Register.

researchthe-ratchetdiasporaintelligencetradecraft
← OlderResearch: Nation-State Ratchets — Comparative Architecture Newer →Research: Historical Precedents — When Polities Confronted Foreign-State or Foreign-Commercial Displacement

Get updates on the Evil Robots series

Newsletter essays on AI escape, deception, and the humans who built them.