In 1970, the Central Intelligence Agency and West Germany’s Bundesnachrichtendienst paid $5.75 million for a Swiss encryption company called Crypto AG. They didn’t announce the purchase. They didn’t change the branding. They didn’t replace the employees. They installed one or two people at the executive level who knew the truth, kept the rest of the workforce in the dark, and for the next 48 years sold encryption machines to more than 120 governments worldwide — machines that the CIA and NSA had rigged so that every message encrypted on them could be read by American and German intelligence as easily as plaintext. The governments of Iran, Egypt, Pakistan, Saudi Arabia, Italy, Argentina, India, the Vatican, and dozens of others paid good money for equipment they believed was protecting their most sensitive diplomatic and military communications. It was doing the opposite. A CIA internal history, leaked in 2020, called the operation “the intelligence coup of the century.” That’s not journalistic hyperbole. That’s the agency’s own classified assessment of its own program.

The Hagelin relationship

The story starts before the CIA owned the company. Boris Hagelin, a Swedish inventor, founded Crypto AG in 1952 after building the M-209 cipher machine that the U.S. military used extensively during World War II. Hagelin relocated to Switzerland and built a business selling encryption equipment to governments worldwide, leveraging Swiss neutrality as a brand asset — a company based in a neutral country, manufacturing security products, seemed inherently trustworthy. By the early 1950s, Hagelin had entered an informal arrangement with William Friedman, the NSA cryptologist widely regarded as the father of American codebreaking. The “gentlemen’s understanding” was straightforward: Hagelin would sell his most capable machines to countries approved by the U.S., and weaker, breakable versions to everyone else. The arrangement was unofficial, personal, and — critically — it worked. Correspondence between Friedman and Hagelin, declassified in 2015, documented the relationship in detail.

By the late 1960s, Hagelin was aging and the informal arrangement was becoming untenable. When French and West German intelligence approached Hagelin in 1967 to propose their own partnership, Hagelin reported the approach to his CIA handlers. The agency decided it was time to buy the company outright. They partnered with the BND, and in June 1970 the purchase was completed. Crypto AG was given the internal codename “Minerva.” The operation was initially called “Thesaurus,” later renamed “Rubicon.” Hagelin’s son, Boris Jr., who had been the company’s sales manager for the Americas, died in a car accident the same year. His father investigated and did not believe it was an accident.

How the rigging worked

The manipulation was elegant rather than crude. The CIA and NSA didn’t install obvious backdoors or program the machines to dump their encryption keys. They weakened the algorithms — specifically, they rigged the keystream generators so that the output, while appearing random to the user, contained mathematical structures that the NSA could exploit to recover the plaintext. To anyone without knowledge of the specific weakness, the encryption looked secure. To the NSA, it was transparent. As the technology evolved from mechanical cipher machines to electronic systems to software, the rigging evolved with it. NSA cryptologists and CIA engineers worked with a small number of witting Crypto AG technical staff to design each new generation of products with weaknesses that were invisible to the company’s own unwitting engineers and to every customer who tested the equipment.

Siemens, the German electronics conglomerate, manufactured teleprinters for Crypto AG, provided management personnel for 20 years, and held a five percent share of the profits. Siemens engineers helped develop the encryption equipment. The Maximator alliance — a second Western signals intelligence partnership comprising Denmark, France, Germany, Sweden, and the Netherlands, operating parallel to the Five Eyes — was also read into the vulnerabilities and exploited them for their own intelligence collection. The circle of governments benefiting from Crypto AG’s compromised machines was wider than the CIA and BND alone.

What it produced

The intelligence yield was staggering across decades of global events. During the 1978 Camp David negotiations between Egypt and Israel, the NSA read every communication between President Sadat and his advisors in Cairo — because Egypt was a major Crypto AG customer. During the 1979 Iran hostage crisis, Iranian communications were intercepted in real time. In 1982, the British government received intelligence during the Falklands War because Argentina’s military encrypted its communications on Crypto AG equipment. In 1986, intercepted Libyan diplomatic traffic between Tripoli and the Libyan embassy in East Berlin provided the evidence President Reagan cited when he ordered the bombing of Tripoli and Benghazi in retaliation for the West Berlin discotheque bombing — and Reagan’s public statement about the intercept nearly blew the entire operation, because Libya and every other Crypto AG customer suddenly had a reason to wonder how the Americans were reading their communications.

By 1988, the CIA and BND were decrypting approximately 19,000 Iranian messages annually — 80 to 90 percent of Iran’s total encrypted traffic. The operation provided intelligence on the South American Operation Condor dictatorships — Chile, Argentina, Bolivia, Paraguay, Uruguay, and Brazil — as they coordinated cross-border campaigns of imprisonment, torture, and extrajudicial killing. The Condor nations used Crypto AG equipment to coordinate their operations. American and German intelligence read the traffic. They knew what was happening. The CIA and BND documents, as the Washington Post reported, “largely avoid more unsettling questions, including what the United States knew — and what it did or didn’t do — about countries that used Crypto machines while engaged in assassination plots, ethnic cleansing campaigns and human rights abuses.”

How it almost fell apart — and didn’t

The operation survived repeated near-exposures across five decades, which is arguably more remarkable than the operation itself. Reagan’s 1986 public reference to Libyan intercepts was the first serious scare. The 1991 assassination of former Iranian Prime Minister Shapour Bakhtiar produced another: Iranian intelligence transmitted a coded message to Iranian embassies the day before Bakhtiar’s body was discovered, and the speed of Western intelligence’s response raised suspicions about how the intercept was obtained.

The most dramatic exposure came in 1992, when Hans Bühler, a Swiss Crypto AG salesman, was arrested in Iran on espionage charges. Bühler had no idea he was selling rigged equipment — he was a genuine salesman who believed in his company’s products. Iran detained him for nine and a half months. Crypto AG paid approximately $1 million in bail for his release. When Bühler returned to Switzerland, he started talking to journalists. Another former Crypto AG engineer who had independently suspected the company was controlled by Western intelligence also went public. The media coverage was extensive. Bühler was fired. But the operation survived. The BND, rattled by the exposure risk, sold its stake to the CIA in 1993 or 1994 for $17 million. The CIA kept going alone. For another 24 years.

Why did it survive? An academic study in Intelligence and National Security identified three factors: geopolitical pressures on target countries that limited their alternatives, the target governments’ limited technical resources for independently verifying encryption security, and individual operational brilliance by CIA-BND agents inside Crypto AG who managed each crisis without the operation collapsing. The simplest factor was the most powerful — there weren’t many alternatives. If you were a mid-sized government in the 1980s and you needed encryption equipment, your options were American, Soviet, or Swiss. The Swiss option looked neutral. It wasn’t.

What it means

The CIA sold Crypto AG’s remaining assets in 2018. The Swiss company was split into CyOne (domestic Swiss sales) and Crypto International AG (international sales under new ownership). The operation formally ended after 48 years of continuous signals intelligence collection from more than 120 governments. But the structural lesson is the one that connects Crypto AG to every other lecture in the Shadowcraft course: the most effective covert operation isn’t one that steals secrets. It’s one that sells the target the tool they’ll use to betray themselves — and charges them for the privilege.

The parallel to modern debates about encryption backdoors, tech company cooperation with intelligence agencies, and the post-Snowden landscape is obvious and uncomfortable. As Warwick University researchers noted after the 2020 revelations: “Long before Edward Snowden released documents of modern firms colluding with intelligence agencies, we can see evidence for significant cases in the past. It certainly is not a recent phenomenon and leads us to ask just how many firms had been working directly with intelligence agencies.” The question the Crypto AG story poses isn’t whether intelligence agencies compromise commercial encryption. It’s how many current products carry weaknesses that will take another 48 years to discover. We cover Operation Rubicon alongside BCCI’s financial architecture, the United Front Work Department’s influence networks, Wagner Group‘s mercenary-propaganda fusion, and the shell company structures that make all of it possible across our Shadowcraft course — 24 lectures on the invisible institutions that shaped the modern world from behind the paperwork.

In September 2024, a former aide to the governor of New York was arrested for allegedly acting as an unregistered agent of the Chinese government. The same month, a Chinese democracy activist living in New York was arrested and accused of spying for Beijing. A month earlier, a historian in the same city was convicted of being an agent for China’s intelligence services. Three separate cases, three separate individuals, one city, one operational playbook — and the organization coordinating the playbook has been running continuously since 1942, reports directly to the Chinese Communist Party’s Central Committee, and as of a February 2026 study by the Jamestown Foundation, operates through more than 2,000 linked organizations across the United States, Canada, the United Kingdom, and Germany alone. The organization is the United Front Work Department, and most people outside of intelligence and China-studies circles have never heard of it.

What the United Front actually is

The UFWD is one of six main departments of the Chinese Communist Party. It is not an intelligence agency in the way the CIA or MI6 are — it doesn’t run agents collecting classified information. It is something more structurally ambitious than that. The UFWD’s mission is to identify, cultivate, and manage relationships with every group and individual outside the CCP that could be useful to the Party’s interests — ethnic minorities, religious organizations, private entrepreneurs, overseas Chinese communities, foreign politicians, academics, business leaders, social media influencers, and the eight minor political parties legally permitted to exist inside China. Mao Zedong described the UFWD as one of the Party’s “three magic weapons” alongside the People’s Liberation Army and the Party itself. Xi Jinping repeated that description in 2017. He wasn’t being nostalgic.

The best one-sentence summary came from Representative Mike Gallagher, former chair of the House Select Committee on the CCP: the United Front’s operational principle is “making idiots useful” — co-opting any individual or organization to advance the Party’s goals. The strategy operates through three main channels: silencing criticism of the regime globally, promoting Beijing’s preferred narratives abroad, and manipulating foreign institutions through clandestine and often illegal operations. Stanford University’s Internet Observatory and the Hoover Institution described the United Front as cultivating pro-Beijing perspectives by rewarding those it deems friendly with accolades and lucrative opportunities, while orchestrating social and economic pressure against critics — pressure that is “often intense but indirect, and clear attribution is therefore difficult.”

The difficulty of attribution is the feature, not the bug. The UFWD operates through quasi-official organizations, civic groups, cultural associations, professional networks, and friendship societies that carry innocuous names — the Council for the Promotion of Peaceful National Reunification, the Chinese People’s Association for Friendship with Foreign Countries, the All-China Federation of Returned Overseas Chinese — and blur the line between state activity and private initiative. When a Chinese community organization in Manhattan turns out to be housing an undeclared police station operating on behalf of China’s Ministry of Public Security, the plausible deniability is structural. The organization looks like a community center. It functions as a transnational law enforcement outpost. Both of those things are simultaneously true.

The machinery

In 2018, Xi reorganized the UFWD to absorb the State Administration for Religious Affairs and the Overseas Chinese Affairs Office, making it the Party’s central agency for managing ethnic, religious, and diaspora affairs under one roof. The department’s director, Shi Taifeng, is a Politburo member — a level of seniority that signals the UFWD’s priority within the Party hierarchy. The UFWD oversees or coordinates with the Chinese People’s Political Consultative Conference, whose 2,000-plus members serve as the department’s primary interface with non-Party elites both domestically and abroad.

The overseas infrastructure operates through several documented channels. Confucius Institutes — Chinese-language and cultural programs embedded in universities worldwide — were launched in 2004 by Liu Yandong, who was head of the UFWD at the time. The program was funded through the CCP Propaganda Department, formally affiliated with the UFWD, and overseen by personnel based in Chinese embassies and consulates. At peak, more than 500 Confucius Institutes operated in universities globally, with over 1,000 Confucius Classrooms in secondary schools. A former Politburo Standing Committee member responsible for propaganda wrote in 2010 that China should “actively carry out international propaganda battles” on core issues and “do well in establishing cultural centers and Confucius Institutes.” Over 100 have been shut down in the United States since 2019 after the FBI flagged them as potential propaganda and intelligence-gathering platforms. Some have reopened under new names.

Chinese Students and Scholars Associations receive funding and direction from Chinese embassies and serve as monitoring and mobilization networks on foreign campuses. Multiple CSSAs have been documented suppressing academic freedom — organizing protests against speakers critical of Beijing, reporting on Chinese students’ “dissident activity” to embassy officials, and mobilizing nationalist demonstrations. The UFWD also works through overseas Chinese-language media, several of which are owned or controlled through China News Service, a UFWD-affiliated outlet.

Elite capture

The term “elite capture” describes the UFWD’s strategy for cultivating relationships with foreign decision-makers — corporate executives, university presidents, politicians, former intelligence officials — by offering access, business opportunities, paid trips to China, honorary positions, and investment partnerships. The strategy is patient and incremental. A university president accepts funding for a research center. A retired politician joins the board of a Chinese-linked foundation. A business executive receives preferential market access. None of these interactions are illegal in isolation. The aggregate effect is a network of relationships that constrains criticism of Beijing at the institutional level without any single participant necessarily understanding the full architecture they’re embedded in.

Australia became the most publicly documented case study. In the mid-2010s, investigations revealed that businessmen with close ties to UFWD-linked organizations had made significant political donations to both major Australian parties, prompting a national reckoning and new foreign interference legislation — the first of its kind in a Western democracy. The Australian Strategic Policy Institute documented the UFWD’s operational structure in a landmark 2020 report, concluding that “there’s no clear distinction between domestic and overseas united front work: all bureaus of the UFWD and all areas of united front work involve overseas activities.” New Zealand faced similar revelations. Canada launched its own public inquiry. In October 2024, Swedish journalists identified 233 individuals across Europe connected to the United Front system, and the Jamestown Foundation identified 103 UFWD-linked groups in Sweden alone, spanning culture, business, politics, and media.

The Taiwan dimension is the UFWD’s longest-running and most intensive operation. The department sponsors paid trips and summer camps to mainland China for Taiwanese youth to promote pro-unification sentiment. In August 2025, Taiwan’s Ministry of Education banned academic cooperation with three mainland universities — Jinan University, Huaqiao University, and Beijing Union University — specifically because of their documented UFWD affiliations and their role in recruiting Taiwanese students for influence activities.

What it isn’t

It’s important to distinguish the UFWD from a conspiracy theory about Chinese people. The UFWD targets the Chinese diaspora as much as it targets foreign institutions — monitoring overseas Chinese communities, suppressing dissent among Chinese nationals abroad, and co-opting community leaders to serve as intermediaries. The victims of UFWD operations include Chinese students who self-censor on foreign campuses because they know their classmates report to the embassy, Uyghur and Tibetan activists who face harassment from UFWD-linked civic organizations in their adopted countries, and Hong Kong democracy advocates who discover that community associations in their new cities are operated by the same apparatus they fled. The UFWD is a Party instrument aimed at everyone the Party considers potentially useful or potentially threatening, regardless of nationality — but with particular intensity directed at the Chinese diaspora itself.

The Council on Foreign Relations described the UFWD as an “external intelligence organization” whose officials often operate under diplomatic cover. The British government’s assessment, published in 2024, concluded that the UFWD is not an intelligence organization in the traditional sense but provides cover for Ministry of State Security officers and serves as a node in a “whole of state” approach to information gathering where the boundaries between influence, intelligence, and legitimate diplomacy are deliberately erased. That deliberate erasure — the impossibility of determining where diplomacy ends and espionage begins — is the United Front’s structural advantage and the reason it has operated for 84 years without most of the world knowing its name.

We cover the UFWD alongside BCCI’s regulatory arbitrage, the shell company architectures behind sanctions evasion, Crypto AG’s signals intelligence operation, and 20 other case studies of invisible institutional power across our Shadowcraft course — where the question isn’t whether covert influence networks exist, but how they’re built, how they’re funded, who they report to, and what the paperwork looks like when they’re finally exposed.

The Bank of Credit and Commerce International operated in 78 countries, managed assets exceeding $20 billion, employed more than 14,000 people, and served as the personal financial institution of the CIA, Saddam Hussein, Manuel Noriega, the Medellín cartel, Abu Nidal, Pakistan’s nuclear weapons procurement network, Ferdinand Marcos, and the mujahideen fighting the Soviets in Afghanistan — simultaneously, through the same branches, often through the same officers. When regulators in seven countries raided its offices on July 5, 1991, in what remains the largest coordinated banking shutdown in history, investigators found not a bank that had been corrupted but a bank that had been designed, from its founding in 1972, as a machine for evading the laws of every country it operated in. The Kerry-Brown report to the U.S. Senate Foreign Relations Committee called it “international financial crime on a massive and global scale.” Time magazine nicknamed it the “Bank of Crooks and Criminals International.” The acting U.S. Comptroller of the Currency compared it to FTX in 2023, which is the kind of comparison that should make you realize how little has changed.

The architecture of invisibility

BCCI was founded in 1972 by Agha Hasan Abedi, a Pakistani financier who had previously built United Bank Limited before Pakistan’s nationalization wave took it from him. His new bank was incorporated in Luxembourg, headquartered in London, and majority-funded by Sheikh Zayed bin Sultan Al Nahyan, the ruler of Abu Dhabi, with Bank of America providing 25 percent of the initial capital and critical institutional credibility. From its first year, the bank was structured to be unregulable. It split itself into BCCI Holdings (Luxembourg), BCCI SA (Luxembourg), and BCCI Overseas (Grand Cayman), with parallel banks acquired or created in Geneva, Kuwait, and the Cayman Islands, layered through a web of holding companies, affiliates, subsidiaries, and nominee relationships so complex that no single regulator in any single country could see the full picture. That was the point. As the Kerry-Brown report documented, BCCI was “from its earliest days made up of multiplying layers of entities, related to one another through an impenetrable series of holding companies, affiliates, subsidiaries, banks-within-banks, insider dealings and nominee relationships.”

The growth was astonishing and unsustainable. From 19 branches in five countries in 1973 to 108 branches by 1976 to over 400 branches in 78 countries by the mid-1980s. Assets grew from $200 million to $1.6 billion in four years. Abedi pursued deposits over profits, acquiring high-net-worth clients — and high-net-worth criminals — by offering services no legitimate bank would touch. The strategy worked until it didn’t. By the late 1970s, BCCI was already secretly covering non-performing loans by creating fictional transactions and using customer deposits to fill the holes. The Abbas Gokal shipping group, BCCI’s largest borrower, was effectively bankrupt by the late 1970s. BCCI threw money at the problem and falsified the books. This carried on for 15 years.

The client list

The list of BCCI’s known clients reads like a casting call for a Cold War thriller written by someone who decided subtlety was overrated. Noriega laundered approximately $23 million through BCCI’s London branches — the bank hand-delivered him a $25,000 Persian carpet as a hospitality gesture, because when your client is a dictator who runs a country-sized drug operation, customer service matters. Pablo Escobar and other members of the Medellín cartel used BCCI for laundering. Abu Nidal, the Palestinian terrorist, used it for arms procurement. Saddam Hussein used it for weapons purchases, including a planned $110 million acquisition of 22 Argentine Mirage fighter jets arranged through BCCI’s Latin American office. Ferdinand Marcos stashed money. Hussain Muhammad Ershad, the Bangladeshi military dictator, stashed money. Samuel Doe of Liberia stashed money. If you ran a country and needed to hide the proceeds, BCCI was the institution that said yes.

But the client that makes BCCI historically significant rather than merely criminal was the Central Intelligence Agency. The CIA maintained accounts at BCCI branch offices, used the bank as a conduit for covert funding, and — according to the Kerry-Brown report and subsequent investigations — channeled billions through BCCI to the Afghan mujahideen. By 1987, CIA funding for the Afghan rebels reached $630 million annually, with Saudi Arabia matching the contribution, and much of it flowed through BCCI. The National Security Council also held accounts at the bank, used for transfers connected to Iran-Contra. A 1986 CIA memo stamped SECRET summarized the agency’s knowledge of BCCI’s activities, including the bank’s secret acquisition of First American Bankshares in Washington — a direct violation of U.S. banking law. A more detailed 30-page CIA report followed in 1989. The agency knew. The agency’s Directorate of Operations had informants inside the bank. The CIA “aggressively” targeted BCCI as an intelligence goldmine, according to deputy director Richard Kerr. And for years, nobody acted on what they found, because BCCI was too useful to shut down.

The nuclear dimension makes it worse. BCCI’s Canadian operations financed Pakistan’s procurement of nuclear weapons materials — documented in the Parvez case, where a Pakistani national attempted to acquire nuclear-related materials through the United States with BCCI financing. The CIA acknowledged in a 1991 letter to the Senate that it had reporting as early as 1987 on “BCCI being used by third world regimes to acquire weapons and transfer technology.” Libya used BCCI-connected channels for chemical weapons plant procurement. The bank wasn’t just laundering drug money. It was facilitating weapons of mass destruction procurement while the intelligence agencies that knew about it weighed the cost of shutting down an asset they were also using.

Why nobody stopped it

The regulatory failure was systemic, not accidental. BCCI had been structured from inception to split its operations across jurisdictions so that no single regulator could see the whole picture. Luxembourg saw one set of books. The Cayman Islands saw another. London saw a third. The Bank of England formed a supervisory group in 1987, but it moved slowly. U.S. regulators were warned repeatedly — by journalists, by Senate investigators, by their own agencies — and failed to act for years. Robert Mazur, a federal agent who went undercover as a wealthy businessman in Operation C-Chase, infiltrated BCCI’s private client division and documented the money laundering in real time. His operation led to the 1988 indictments that were the first serious legal action against the bank — and even that was delayed at the Justice Department’s request to avoid interfering with the sting.

The political protection was equally systemic. BCCI hired Clark Clifford — former Secretary of Defense, trusted advisor to four presidents, arguably the most connected man in Washington — to run First American Bankshares, the U.S. bank BCCI secretly and illegally controlled. Clifford and his partner Robert Altman insisted they didn’t know BCCI was behind their bank. BCCI employed lobbyists, PR firms (Hill and Knowlton), and white-shoe law firms to suppress critical coverage. One investigative journalist in the U.K., Anthony Mascarenhas, was beaten, stabbed, and had his research stolen. Abedi personally cultivated relationships with heads of state — his philosophy, as described by BCCI officer Abdur Sakhia, was to appeal to every sector: charity for Jimmy Carter, a job for Zia’s brother-in-law, deposits for central bank officials in exchange for government deposits. Suitcases of cash where necessary.

When Price Waterhouse finally audited BCCI properly in 1990, they found $1.48 billion in loans BCCI had made to its own shareholders, using BCCI stock as collateral — a circular fraud where the bank was essentially lending money to people to buy ownership of the bank that was lending them the money. The March 1991 Bank of England-ordered investigation concluded that there was “evidence of massive and widespread fraud.” The bank was shut down in July 1991 with liabilities of $10 to $14 billion. Over 6,500 depositors lost their money. Abedi, who had suffered a heart attack and retired, was never extradited. Key insiders were held incommunicado in Abu Dhabi. William Casey, the CIA director who oversaw the agency’s deepest involvement with BCCI, was conveniently dead.

What it built

BCCI didn’t invent shell company structures or nominee ownership or multi-jurisdictional regulatory arbitrage. But it proved — at a scale nobody had previously attempted — that a bank designed from inception to evade oversight could operate for nearly two decades, serve the intelligence agencies of multiple countries, finance nuclear proliferation and terrorism, launder billions in drug money, and buy political protection in the world’s most powerful capital, all without any single institution having the authority, the information, or the incentive to stop it. The tools BCCI pioneered — layered corporate structures across permissive jurisdictions, beneficial ownership concealment, regulatory fragmentation as a feature rather than a bug — are the same tools that populate the Panama Papers, the same tools that Russia’s shadow fleet uses to evade oil sanctions, the same tools that North Korea’s Lazarus Group uses to launder stolen cryptocurrency through chains of shell entities. The 2023 Corporate Transparency Act, which for the first time requires disclosure of beneficial ownership of U.S. companies, is — three decades later — a direct legislative descendant of the BCCI scandal. The question isn’t whether the reforms went far enough. It’s why it took 32 years.

We cover BCCI alongside Marc Rich’s commodity empire, the Vatican Bank, Crypto AG, Wagner Group, and 19 other case studies of covert institutional power across our Shadowcraft course — where every lecture follows the money, maps the personnel pipeline, identifies the deniability layer, and finds the moment the machinery became exposed.