Story Highlights
Trump administration lifts sanctions on three executives tied to the Intellexa spyware network after petitions and review.
The move keeps Intellexa’s founder sanctioned while signaling a tighter “evidence-based” standard for listing individuals.
The decision lands amid global scrutiny of commercial spyware used against journalists, dissidents, and political opponents.
The Trump administration has removed three individuals—Sara Hamou, Andrea Gambazzi, and Merom Harpaz—from the U.S. sanctions list after they petitioned for reconsideration and demonstrated they had separated from the Intellexa spyware consortium, according to a Treasury notice and reporting on the case. Intellexa has been linked to the “Predator” spyware ecosystem, which investigators and journalists have associated with politically sensitive surveillance controversies in multiple countries. The administration did not remove Intellexa’s founder, Tal Dilian, who remains sanctioned and has denied wrongdoing related to allegations around surveillance in Greece.
Why it matters is less about optics and more about how sanctions power is used. Supporters of Trump’s approach will see this as a process check: if the government is going to deploy one of its strongest financial tools—blocking assets and restricting dealings—then the burden for keeping a person listed should remain high, current, and specific. In practical terms, delisting can signal to banks and international partners that the U.S. is willing to differentiate between individuals rather than applying permanent guilt-by-association. That distinction can strengthen the credibility of sanctions overall—making it harder for bad actors to claim listings are purely political.
Geopolitically, spyware sits at the intersection of national security, diplomacy, and human rights. Predator—and commercial spyware like it—has become a recurring flashpoint across allied democracies because the targets are often journalists, activists, opposition figures, and government officials. A delisting also sends a message to the wider surveillance-tech market: the U.S. can punish abusive ecosystems, but it can also reverse course where documentation shows separation or reduced involvement. That combination—pressure plus review—can shape how European partners, Gulf states, and other governments calibrate their own restrictions on surveillance vendors.
Implications
This move is likely to be cited by the administration as proof it is pursuing targeted accountability rather than blanket punishment: keep the alleged architect sanctioned while removing names that, after review, no longer meet the threshold. Expect advocates of stricter spyware controls to push for clearer disclosure on how delisting decisions are made, while sanctions hawks argue the real test is whether this sharper approach leads to more enforceable penalties against the core actors and the downstream companies that keep these surveillance pipelines alive.
