There are more than twelve thousand entities on the United States sanctions list. The number grows each year, and each year it is reported as though it signified something.

It does not. The size of the sanctions list measures how busy the Office of Foreign Assets Control has been. It tells us almost nothing about how much coercive power the United States actually holds, or how much pressure any given target is actually under. A roster of twelve thousand names that share no structural significance is a measure of administrative output, not of strategic effect.

This is the central error in how we discuss economic coercion. We count the wrong thing. We count measures imposed, designations made, tariffs announced, packages passed, because these things are easy to count and produce a satisfying upward line. The variable that actually determines who can coerce whom, and how severely, goes almost entirely unmeasured.

That variable is the chokepoint. The right question is never how many sanctions a state has imposed. It is how many chokepoints it controls, and how many its target depends upon. Count those, and the picture of global economic power looks very different from the one the sanctions tallies present. This essay makes the case for the new unit and then sets out the method I use to count it, whether the subject is a country, a company, or one's own position.

Why the sanctions count misleads

The appeal of counting sanctions is plain. Designations are discrete, dated and countable, and they lend themselves to charts. A regime that has issued two thousand designations appears twice as formidable as one that issued a thousand.

But coercive power does not operate by accumulation. It operates by position. A single action taken from the correct structural position can produce more effect than ten thousand designations taken from the wrong one. When the United States severed a handful of Iranian banks from dollar clearing, what mattered was not the number of banks. It was that dollar clearing is a chokepoint, a node through which Iran's trade was obliged to pass and which the United States happened to control. The leverage derived from the position, not the count.

Conversely, a state may issue an enormous volume of sanctions and accomplish very little, because it sits upon no chokepoint its target depends on. A great many sanctions regimes around the world are precisely this: prolific, meticulously documented and almost wholly without effect, because the issuing state controls no node the target cannot route around.

The sanctions count misleads about direction of travel as well. A rising count may indicate that a regime is growing more powerful, or that it is flailing, issuing ever more designations precisely because each accomplishes less as targets adapt. The number cannot distinguish the two. The chokepoint frame can, because it asks whether the underlying structural leverage is expanding or eroding, which is the thing that actually matters.

The chokepoint as the unit

The concept comes from Farrell and Newman's work on weaponised interdependence, to which I keep returning because it is the most important structural insight in the field. Their argument is that global economic networks are hierarchical. Traffic does not flow evenly across a flat web; it concentrates through a small number of hubs that most participants are obliged to use. Whoever sits upon a hub acquires the power to deny access to it, the chokepoint effect, and to observe everything that passes through it, the panopticon effect.

A chokepoint, then, is any node in an economic network where access can be denied and from which no easy alternative route exists. Its defining features are control and the absence of substitutes. A node one controls but which everyone can route around is not a chokepoint. A node no one can route around but which one does not control is a chokepoint for someone else. Genuine leverage requires both: a node one holds, and a target with nowhere else to go.

The major chokepoints of the present system are well known once one learns to look for them. Dollar clearing runs through a small number of correspondent banks in New York. International payment messaging runs overwhelmingly through a single Belgian cooperative. The most advanced semiconductors cannot be designed without software from a few firms, nor manufactured without equipment from a few others. Reserve assets sit in custody with a handful of institutions. Certain critical minerals can be mined in many places but refined in very few. Each is a point at which access can be denied and at which the target has no ready alternative.

Counting these, and counting how many of them a given target depends upon, produces a measure of actual exposure. That is the number worth charting.

How to count chokepoints

The reason this reframing is useful rather than merely correct is that one can act upon it. Counting chokepoints is a method, and it functions at any scale: a nation, a firm, a portfolio, or one's own operation. This is how I run it.

Begin by mapping what the target cannot do without. Strip the entity back to its load-bearing dependencies. For a country this may be export revenue, energy imports, access to a reserve currency, or a critical input it cannot produce. For a firm it may be a payment processor, a single supplier, a cloud provider, or access to a particular market. The question is not what the entity uses but what the entity would fail without. Most of what an entity uses is not a chokepoint. A few things are existential.

For each dependency, ask whether a substitute exists. A dependency with ready substitutes is not a chokepoint, however large it appears. If the target can switch suppliers, currencies or routes at tolerable cost, that node holds no real leverage over it. The dependencies that matter are those for which the answer is no, where switching is impossible, prohibitively expensive, or so slow that the pressure would have achieved its purpose before the substitution completed.

For each genuine chokepoint, ask who controls it. A chokepoint is a weapon only in the hands of an actor willing and able to deny access. Identify who sits upon the node. Is it a single state, a coalition, a private firm, a multilateral institution? The identity of the controller determines whether the chokepoint is a threat, and from whom.

Then count. The output is not a single figure but a structured map: the entity's existential dependencies, which of them are true chokepoints, and who holds each. A target that depends on five chokepoints, four of them controlled by the same adversary, is profoundly exposed regardless of how few sanctions have been imposed upon it. A target that depends on none, or whose chokepoints are dispersed across many controllers with no common interest, is robust regardless of how many designations it carries.

Run this on a country and one obtains a sober assessment of its strategic vulnerability. Run it on one's own firm and one discovers, often uncomfortably, exactly where it could be squeezed. Run it on a portfolio and one finds that holdings which appear diversified by sector or geography are in fact concentrated upon the same two or three chokepoints, and would suffer together were those nodes ever weaponised.

What the new unit reveals

Exchange the counting of sanctions for the counting of chokepoints and several things the old metric conceals come into view.

The first is the true distribution of power. A handful of states and firms control a vastly disproportionate share of the world's economic chokepoints. That concentration, and not the volume of any country's sanctions activity, is the real structure of coercive power in the system.

The second is the cost of being indispensable. To sit upon a chokepoint is to hold leverage, but it is also to wear a target, and to furnish every party that depends on you with an incentive to build a way around you. Every use of a chokepoint accelerates the search for substitutes. The dollar's clearing dominance and the rise of parallel payment systems are the same story told from opposite ends: the more the chokepoint is weaponised, the harder others labour to escape it.

The third is where to invest in resilience. If one can count one's chokepoint exposure, one can reduce it deliberately, by building redundancy at exactly the nodes where one is most exposed rather than spreading effort evenly. Redundancy at a chokepoint is worth more than redundancy anywhere else, because the chokepoint is the only place at which the pressure can actually be applied.

The sanctions count will continue to be reported, because it is easy and produces a number. Ignore it. It measures how hard a bureaucracy is working, not how much power it commands. The question that matters, the only one that predicts who can coerce whom, is how many chokepoints lie between a target and the things it cannot live without, and who is standing upon them.

Learn to count those, and one ceases to read the headlines and begins to read the map.

This is the third in a series on the doctrine of economic and financial warfare. A companion piece works through the chokepoint self-audit in detail, applied to a single firm.

Companies do not make decisions. People do.

The observation is obvious, and yet it is almost wholly absent from how we think about economic coercion. We measure pressure at the level of the state, by counting sanctions and tallying tariffs, and at the level of the firm, by tracking share prices and credit spreads. The board, the handful of individuals who actually determine whether a company resists or capitulates, sits in a blind spot. We treat the firm as a single rational actor when it is in fact a small group of people with mortgages, reputations, other directorships, and a pronounced personal preference not to become the subject of a regulator's attention.

Anyone who has studied these campaigns closely, or advised those defending against them, understands this. The campaign is not, in truth, aimed at the entity. It is aimed at the people who control the entity, and it works by rendering the cost of continued resistance personal. The activist short-seller who names a director in a report, the state-linked actor who ensures a board member's other interests attract scrutiny, the litigant who files in a jurisdiction where a particular director is personally exposed: each operates at the level of the individual, not the firm.

The Director Pressure Index is the instrument I developed to measure vulnerability at that level. It scores the coercive leverage that exists against a specific board member, constructed from the structural features of their position rather than from anything secret about them. I built it as a module within a broader system for modelling financial pressure, and I set it out here because the phenomenon it measures is real, expanding, and almost entirely unmeasured.

The purpose of the index is defensive. If one can measure where a board is exposed, one can protect it. The same instrument that reveals how a campaign would target a director allows that director to understand their own surface area and to reduce it before anyone else maps it for them.

Why the individual is the right unit

The reasoning behind the index derives directly from the structural logic of weaponised interdependence. Farrell and Newman demonstrated that power within a network concentrates at the nodes through which traffic must pass. A board is a network of its own. Decisions flow through it, and within it certain individuals carry disproportionate weight: the chair, the lead independent director, the chair of the audit committee, the long-serving member to whose judgement the others defer.

Pressure applied to the correct node moves the entire board. Pressure applied to a peripheral director achieves nothing. The first task of any campaign, offensive or defensive, is therefore to determine which directors are load-bearing and which are decorative. This is targeting, in the precise sense in which the kill chain employs the word, and it is the inflection point at which a campaign against a company becomes a campaign against a person.

The reason this matters for resilience is that boards almost never consider themselves in these terms. They examine the company's risk exposure in exhaustive detail and their own personal exposure scarcely at all. A board that has never asked which of its members is the soft target is a board that has left its decision-making open to capture.

What the index measures

The Director Pressure Index combines several dimensions of structural vulnerability into a single score. None of its inputs requires private information. All are observable from public filings, the register of interests, and the ordinary record of a professional life. This is deliberate. A measure that depends on secrets is a measure no one can use to defend themselves; a measure built from public structure is one a board can run on itself.

The first dimension is financial entanglement. How much of the director's own wealth is bound to the entity? A director whose net worth is concentrated in the company's equity, or who carries personal guarantees, has far more to lose from a falling share price than one holding a diversified position and a fixed fee. Concentrated exposure is leverage.

The second is reputational surface area. How public is the director, and how heavily does their standing depend upon a clean record? A director who is also a public figure, who sits on charitable boards, who holds an academic or advisory position, presents a large reputational surface that a campaign can attack. A private operator with no public profile presents very little to threaten. Reputation is an asset, and like any asset it can be placed at risk.

The third is directorship contagion. How many other boards does the director occupy, and how interconnected are they? A director holding five concurrent directorships is a single point of failure across five companies. Pressure applied through one seat propagates to the others, because reputational damage is not ring-fenced to the entity in which it originates. Concurrent directorships multiply both the value of the target and the reach of any pressure brought against them.

The fourth is jurisdictional exposure. In how many legal systems is the director personally reachable? A director who resides, holds assets and travels across multiple jurisdictions is exposed to legal pressure in each of them. The pertinent question is not where the company is incorporated but where the individual may be served, sued, investigated or detained. Jurisdictional reach is the difference between a threat that is theoretical and one that can actually be executed.

The fifth is regulatory vulnerability. Does the director hold positions or licences that a regulator might threaten? A director who is also a licensed professional, a fund manager, or the holder of a security clearance possesses a pressure point that an ordinary director does not. The threat need never be acted upon; its existence constitutes the leverage.

Scored together, these dimensions produce a profile of where a board is soft. A director who is financially concentrated, publicly prominent, seated on several interlocking boards, reachable in multiple jurisdictions, and holding a threatened licence is a high-pressure target. A director who is none of these things is, for practical purposes, immune.

Reading a board through the index

Run the index across a full board and a pattern almost invariably emerges. The pressure is not evenly distributed. It concentrates, usually upon one or two members whose particular combination of exposure renders them the obvious route to the whole.

This concentration is itself the most useful output. A board that knows its highest-pressure member can manage around that knowledge, rebalancing committee responsibilities so that the soft target is not the single point of decision, strengthening the independence of the chair, and ensuring that no one director can be isolated and worked upon alone. The defensive logic mirrors the kill chain. If you know which link a campaign will attack, you reinforce that link before the campaign begins.

There is a harder truth here as well. The highest-pressure director is sometimes also the most valuable: the public figure whose name lends the company credibility, the operator whose other directorships bring deal flow. The very features that make a director an asset are frequently the features that make them a target. Resilience does not require removing such people. It requires recognising the trade-off honestly and constructing the arrangements that allow a valuable but exposed director to continue serving without becoming the vulnerability upon which the whole company depends.

The defensive brief

I want to be exact about the purpose of this instrument, because a tool that measures how to pressure individuals could obviously be read the wrong way.

The Director Pressure Index is a diagnostic, in the same sense that a stress test is a diagnostic. A stress test does not cause a financial crisis; it measures how a balance sheet would behave under one, so that the institution can reinforce its weak points in advance. The index performs the same function for a board. It measures how the board's decision-making would behave under coercive pressure, so that the board can reinforce its weak points before that pressure arrives.

The phenomenon it measures already exists, and is already deployed against people who possess no framework for understanding it. Activist campaigns, litigation strategies and state-linked pressure operations routinely target individual directors, and they do so with an intuitive command of precisely the dimensions the index formalises. The directors on the receiving end are usually defending blind, without a map of their own exposure and without language for the thing being done to them. Naming and measuring it levels that asymmetry.

That is the case for placing the instrument in the open. The actors who run these campaigns already think in these terms; the people defending against them, for the most part, do not. An index that renders the structure visible is, on balance, a tool for the defender, because the attacker already holds the map.

The deeper argument is the one to which this series continually returns. Coercion in the economic domain is not abstract. It does not act upon entities or markets in some bloodless aggregate. It acts upon people, through the specific structures of their lives, and it works by rendering resistance personally expensive. Measure that, and it can be defended against. Decline to measure it, and one is merely hoping the campaign is aimed at someone else.

This is the second in a series on the doctrine of economic and financial warfare. The Director Pressure Index is a working instrument; the dimensions described here are its public, structural inputs, and a fuller account of the scoring methodology will follow.

The most complete open-source record of an economic kill chain, executed end to end by short sellers, journalists, and one whistleblower, against a target that turned out to be an instrument of Russian intelligence.

BLUF: Wirecard is the proof case for the Economic Kill Chain’s central claim: the framework applies whether the operator is a state targeting an adversary or a hedge fund targeting a corporation. Between 2010 and 2020, a loose network of non-state actors ran all seven phases against a €24bn DAX company while the German state actively defended the target. The campaign succeeded. The post-collapse intelligence revelations then reframed it entirely: Wirecard’s chief operating officer had been a Russian intelligence asset for a decade, and the irregulars who destroyed the company had unknowingly executed the most effective counterintelligence operation in modern European finance. No security service did this. Markets did.

In the first essay in this series I argued that the most sophisticated practitioners of financial warfare are not in government, they are on Wall Street, and that the kill chain logic holds regardless of who operates it. This piece runs the record against the framework, phase by phase. If you need the framework itself, start with the canonical post and come back.

The target

Wirecard was founded in 1999 and grew under Markus Braun into Germany’s payments champion: processor, risk manager, card issuer, and bank. It entered the DAX in September 2018 at a valuation of roughly €24bn, briefly worth more than Deutsche Bank. The reported profits rested on third-party acquiring partners in Dubai, Singapore, and Manila, with the cash supposedly parked with escrow trustees in Asia. On 25 June 2020 the company filed for insolvency after admitting that €1.9bn of that cash probably never existed.

Running the chain

Phase 1: reconnaissance.

The anomaly was detectable early. A German shareholder association attacked the balance sheet as far back as 2008. John Hempton’s Bronte Capital in Sydney began pulling at the accounts around 2010, doing forensic work on cash conversion and the Asian business that made no sense against the reported margins. Inside the target, the decisive collection came in 2018, when Pav Gill, a legal counsel in Wirecard’s Singapore office, uncovered evidence of book-cooking across the Asian entities. Reconnaissance in the economic domain is exactly this: detecting that the target’s stated position and its actual position diverge, and confirming the divergence is structural rather than noise.

Phase 2: mapping.

The attackers then charted the network that sustained the fraud. The Zatarra report of February 2016, produced by Fraser Perring and Matt Earl, mapped entities and alleged money laundering. The Financial Times built the documentary picture: the third-party acquirers Al Alam, Senjo, and PayEasy generating the reported margin, the round-tripping that manufactured revenue, the trustee accounts that supposedly held the cash. This is dependency mapping in its purest form. The fraud lived in specific nodes, and the campaign found them.

Phase 3: positioning.

Capital and information moved into place years before the decisive strikes. Bronte carried its short from the early 2010s. In 2014, by Dan McCrum’s own account, Hempton emailed him asking whether he would be interested in some ‘German gangsters’, the tip that seeded the FT’s House of Wirecard series from 2015. Gill’s documents reached the FT in 2018. Chris Hohn’s TCI built a large disclosed short through 2019. Positioning is the phase where the attacker accepts carry cost, and in this campaign the carry ran for the better part of a decade.

Phase 4: execution.

The strikes landed in sequence, each applying the same logic: deny, disrupt, degrade, delay, and impose cost. On 30 January 2019 the FT published the Singapore whistleblower material and roughly €9bn of market value evaporated in days. On 15 October 2019 the FT published internal spreadsheets showing profits at the Dubai and Dublin units were fraudulently inflated and that customers listed in documents provided to EY did not exist, forcing Wirecard to appoint KPMG for a special audit. On 28 April 2020 KPMG reported it could not verify that the arrangements responsible for the lion’s share of 2016 to 2018 profits were genuine. On 16 June 2020 the Philippine banks BPI and BDO told EY the documents evidencing €1.9bn in balances were spurious, and on 18 June EY refused to sign the accounts.

Phase 5: amplification.

Once the decisive strike landed, the market did the demolition. The stock fell 72% in 2 days. On 22 June the company admitted the money probably never existed. Braun was arrested within the week. Roughly €1.3bn in credit lines faced termination within a fortnight. Insolvency followed on 25 June, DAX ejection in August, and merchant and counterparty flight throughout. Amplification is the phase attackers do not control and do not need to: the target’s own dependencies transmit the damage.

Phase 6: exploitation.

Value capture and consolidation followed the collapse. The late shorts monetised the terminal phase. Santander bought the core European technology assets for €100m in November 2020, and competitors absorbed the merchant book. Germany exploited institutionally: the Financial Market Integrity Strengthening Act of 2021, the severing of FREP from accounting enforcement, the restructuring of BaFin, and the departure of its president.

Phase 7: assessment.

Measured against objectives, the campaign succeeded completely: the fraud was exposed and the target destroyed. But assessment also has to record who captured the value and what the campaign actually was, and on both counts the answers kept changing for years after the collapse. That is where the two most useful lessons sit.

The defender ran a counter kill chain

BaFin’s failure was not passive. It was an active defence of the target. In 2016 it referred Zatarra-linked short sellers to prosecutors for market abuse. On 18 February 2019 it banned new net short positions in Wirecard for two months, the first single-stock short ban in German history, justified as protecting market confidence. It filed criminal complaints against the FT journalists investigating the company. The accounting first line, FREP, had 15 staff and a €6m budget. The one institution with real authority pointed it at the attackers, and that defence bought the fraud another 16 months of life. BaFin’s own president later called the affair a ‘complete disaster’. The doctrinal point: home-regulator capture functions as counter-targeting, whether the motive is corruption, nationalism, or institutional embarrassment, and any campaign plan that does not price the defender’s regulator is incomplete.

The economics of the chain

The value flowed to the wrong end of the chain. Bronte carried a position that rose roughly twentyfold against it between the early shorts and the September 2018 peak near €191, realising losses repeatedly along the way, and Hempton’s own account is that he finished ahead but modestly. TCI arrived in 2019, filed a criminal complaint against Wirecard’s management in May 2020, and monetised the terminal collapse. The structure is general: reconnaissance and mapping are cost centres, execution captures the value, and no mechanism transfers returns back down the chain to the actors who generated the original intelligence. In state terms, the collection function subsidised the strike function and booked none of the return. The corollary for defenders is uncomfortable: the attacker most likely to be right early is also the least resourced to persist, which means a determined defence can outlast correct attackers for years. Wirecard’s did.

The intelligence coda

Then the assessment phase rewrote the campaign. Joint investigations by The Insider, Der Spiegel, and ZDF concluded that Jan Marsalek, Wirecard’s chief operating officer and the manager of exactly the third-party acquiring business the attackers had mapped, was recruited by Russia’s GRU around 2010. Reporting indicates he used Wirecard money to support Russian operations in Syria and opened doors for Moscow in Libya. In the week of the collapse he flew by private jet from an Austrian airfield to Minsk and on to Moscow, where he has lived since under stolen identities, receiving Russian citizenship in 2023, his phone geolocated repeatedly near FSB headquarters. In March 2025 the Old Bailey convicted the final members of a 6-person Bulgarian cell that had conducted surveillance and kidnap planning across Europe between 2020 and 2023, targeting the investigative journalists Christo Grozev and Roman Dobrokhotov and a US base in Stuttgart. Prosecutors named Marsalek as the cell’s director, working for the FSB and at times the GRU, with sentences in May 2025 totalling more than 50 years. Wirecard had been paying companies linked to the cell’s ringleader as early as 2019.

Read that back against the chain. The short sellers and journalists were not merely exposing an accounting fraud. They were, without knowing it, degrading and ultimately destroying a DAX-listed payment platform whose operations officer was servicing Russian intelligence. Three lines of German state defence missed it. A decade of financial reconnaissance by irregulars found it. The earliest reliable signal of a hostile intelligence penetration of European finance was a cash conversion anomaly spotted by a hedge fund in Sydney.

What this means for doctrine

Three conclusions. First, the chain is operator-agnostic, now demonstrated rather than asserted: every phase ran without a single state actor on the attacking side. Second, defensive doctrine has to treat the home regulator as part of the attack surface, because your own institutions can be the adversary’s most valuable asset. Third, assessment must fuse financial and counterintelligence outcomes, because a financial target can be an intelligence target, and FININT generated the earliest warning by years. A Financial Warfare Office built along the lines I have argued for elsewhere would treat the Hemptons and McCrums of the world as sensors, fusing market anomaly detection with counterintelligence collection. Wirecard shows the cost of not having one. The campaign happened anyway, run by volunteers, funded privately, sustained for a decade against state resistance, and the state it protected found out what it had been protecting five years too late.

This is part of the Economic Kill Chain series. The framework post, with the full seven-phase model, is here.

Sources and further reading: Dan McCrum, Money Men (2022) and the FT’s House of Wirecard archive; Bronte Capital blog archives, 2010 to 2015; KPMG special investigation report, 28 April 2020; Crown Prosecution Service statements and Old Bailey sentencing remarks, March to May 2025; joint investigations by The Insider, Der Spiegel, and ZDF on Marsalek, 2024 to 2025.

Suggested citation: Tennant, J.J. (2026). ‘Wirecard: a kill chain run by irregulars’. FinINT.

A few months ago I built a framework for breaking economies. I called it the economic kill chain, and the name was deliberate. I wanted it to provoke people into thinking, because the ones who most needed to take economic security seriously were treating it as someone else’s problem.

This model was borrowed... Lockheed Martin has a cyber kill chain that maps how an attacker moves through a network, one stage at a time, until the target is owned. I did the same for an economy. Find the dependency. Map the supply chain. Identify the chokepoint. Deny, degrade, disrupt.

An investor read it and asked me what if it was reversed for company building. What if you ran the same chain backwards, not to strangle a company but to build one that cannot be strangled and to prosper? It is the most useful question anyone has put to me in a year, and it is what this piece is about.

The chain I built

The economic kill chain has seven steps, because the cyber version does too. Reconnaissance, weaponisation, delivery, exploitation, installation, command and control, and actions on objectives. In a network attack those phases take you from scanning a target to owning it. In an economy they take you from a map of dependencies to a country that can no longer feed its industry, finance its trade, or arm itself without someone else’s say-so.

None of this is theoretical. Henry Farrell and Abraham Newman gave it an academic name in 2019, weaponised interdependence, and showed how a handful of states sit on the chokepoints of the global system, the dollar, the SWIFT messaging network, the chip supply chain, and turn them into instruments of coercion. The uncomfortable thing I learned writing my own version is how short the chain usually is. Economies are not strangled across a thousand fronts. They fail at a few nodes. One foundry. One strait. One refining step for one metal that sits inside one border. You do not attack the whole system. You find the single part of it the rest cannot live without, and you get there before anyone thinks to defend it.

That is the offensive logic. Now turn it around.

The same map, read two ways

Here is the part that should interest any founder or investor. The map an adversary draws to kill a company is the same map a good operator draws to build one. The reconnaissance is identical. Only the intent changes.

I would love to claim the reversal as my own, but it is one of the oldest moves in thinking. Charlie Munger built half a fortune on it, borrowing a line from the mathematician Carl Jacobi: invert, always invert. Munger’s own version is darker and better.

All I want to know is where I am going to die, so I’ll never go there.

You do not plan your way to a great company by listing the things that go right. You find every way it dies, and then you do not go there.

The discipline already exists in pieces. Gary Klein, the psychologist, calls it a pre-mortem. Before you start, imagine the project has already failed completely, then work backwards to write its obituary. Josh Wolfe, who backs some of the hardest deep tech on earth at Lux Capital, says it more plainly than I can: ‘failure comes from a failure to imagine failure.’ The economic life chain is just that instinct, made systematic and pointed at your own company before anyone points it at you.

So let me walk the seven steps the other way.

The life chain, step by step

1. Reconnaissance. Map yourself the way an opponent would.

Draw the full dependency graph of your own business before anyone else does. Not the org chart, the dependency chart. Every supplier, every critical input, every source of capital, every jurisdiction, every dataset, every licence, every person whose departure would hurt. Most companies know their product cold and their fragilities not at all. Andy Grove ran Intel on the opposite assumption. He called the book ‘Only the Paranoid Survive’, and he meant it as an operating principle: assume someone is always coming for the weak point, and find it first.

2. Weaponisation. Name your chokepoints out loud.

An adversary hunts for the node where one input controls the flow. Find yours first and say them plainly. Michael Porter has been making this point since 1980, when his five forces put the bargaining power of suppliers at the centre of strategy. A single-source supplier is not a procurement detail, it is a structural weakness someone can price or sever. The chokepoint is not always a part, either. Sometimes it is a person: the founder who is the only one who can raise the round, the engineer who alone understands the core system. Ben Horowitz wrote a whole book on the wartime reality of running companies, and the thread through it is that the things which kill you are concentrated, not diffuse. A chokepoint you have named is a problem to manage. One you have not named is a kill shot waiting to happen.

3. Delivery. Run the attack on yourself, on paper.

This is the pre-mortem made concrete, and it is the same muscle as good diligence. Sit down and deliver the blow yourself. What happens the morning the component stops shipping, the week the bank account is frozen, the day the lead engineer resigns to a competitor, the quarter the one large customer reopens the contract. Tabletop it before the market does it to you live.

4. Exploitation. Trace the cascade.

A chokepoint matters because of what it takes down with it, so follow the blast radius. A frozen account is not just cash. It is payroll, which is retention, which is the supplier who now will not ship on terms, which is the customer who hears you are wobbling and quietly starts a tender. The first-order effect is rarely the one that kills you. The third one is.

5. Installation. Build the redundancy in before you need it.

Where an attacker would deepen a dependency, you remove it. Dual-source the critical input. Friend-shore or sovereign-source the part that sits in the wrong country. Stockpile what cannot be substituted quickly. Get the irreplaceable knowledge out of one head and into the company. This is unglamorous and it is the whole game. Resilience is not a word for a deck, it is a set of contracts and design choices you make while you still have the choice.

6. Command and control. Become the chokepoint.

Everything so far plays defence. This step plays offence. The strongest companies do not just remove their own dependencies, they make themselves the node nobody else can route around. This is the venture capitalist’s actual religion, however they dress it up, and Peter Thiel does not dress it up at all: ‘competition is for losers’, and monopoly is the condition of every successful business. Warren Buffett has spent a career hunting the same thing in gentler language, ‘economic castles protected by unbreachable moats.’ Hamilton Helmer’s ‘7 Powers’ is the engineer’s manual for it, the cornered resource, the switching cost, the scale that makes you hard to dislodge. Even Jeff Bezos is supposed to have told his suppliers ‘your margin is my opportunity‘, which is the same instinct read from the other side of the table. Resilience keeps you alive. Leverage is what you do with the life you keep.

7. Actions on objectives. The unkillable company.

The offensive chain ends in capitulation. The life chain ends somewhere better: a company that cannot be cheaply cut off, that holds leverage instead of being subject to it, and that a serious acquirer or competitor studies, runs their own kill chain against, and decides is not worth attacking. This is also, quietly, how venture returns actually work. Sebastian Mallaby called his history of the industry ‘The Power Law’ for a reason. A tiny number of nodes capture almost all the value, because they made themselves the ones that could not be replaced. The objective is not a company that has never been targeted. It is one that has already targeted itself and closed the gaps.

Build for the cycle, not the morning

There is a time dimension to this that deep tech makes unavoidable. These companies take a decade, which means they will live through at least one market that hates them, so the life chain has to survive the cycle and not just the morning.

Paul Graham reduced it to the only question that matters: is your company default alive or default dead. On today’s burn and today’s growth, do you reach profitability on the money you already hold, or are you depending on a future raise the market may simply decline to offer. Sequoia has twice sent its founders the same warning, ‘R.I.P. Good Times’ in 2008 and ‘Adapting to Endure’ in 2022, both versions of one instruction: assume the capital stops, and make sure you are still standing when it does. Howard Marks, who has compounded a career out of reading cycles, says everything eventually reverts to the mean, which was almost word for word what the investor who set me this question said in the same conversation. Carlota Perez found the deeper pattern in her history of technological revolutions, the long gap between the installation of a technology, all bubble and hype, and its deployment, when it quietly reshapes the economy. The companies that matter are the ones that survive the gap.

Nassim Taleb would push it one step further, and he is right to. The aim is not merely to survive disorder but to be antifragile, built so that chaos hands you ground while fragile competitors fold. Every supply shock that breaks a single-sourced rival is a customer arriving at the door of the company that dual-sourced two years earlier. The cut that kills one company is the opening for the one that ran its own kill chain first.

Why this matters now

Two worlds are colliding, and the people in them mostly do not talk to each other. One is economic statecraft: sanctions, export controls, supply-chain coercion, the slow weaponisation of everything we used to call trade. The other is deep technology, the companies being built right now in space, quantum, energy, biology and advanced manufacturing, almost all of which depend on exactly the inputs the first world has learned to squeeze.

The smart money has noticed. Katherine Boyle and Andreessen Horowitz built an entire practice, American Dynamism, around backing companies in the national interest, supply chain and defence and manufacturing included, and turned a thesis into a meme and then a US$600m fund. Founders Fund got there earlier and angrier, with the line that has haunted venture for a decade:

We wanted flying cars, instead we got 140 characters.

Marc Andreessen wrote ‘It’s Time to Build’ in the first weeks of the pandemic, a blunt admission that the West had forgotten how to make physical things. And Mariana Mazzucato has spent years reminding everyone that the state, not the venture fund, was the original deep tech risk-taker, the patient capital behind technologies the market later took credit for. Defence budgets are rising across the democratic world and will keep rising for years, peace deals or not, because rearmament has its own momentum. That money flows down into exactly these companies, and most of them are optimised for cost and speed, which is to say optimised to be fragile. They have never run the chain on themselves.

Sovereignty is becoming a product feature rather than a slogan. A customer who is a government, or who sells to one, wants to know the thing they are buying cannot be switched off from somewhere else. The company that can answer that, because it has already mapped and secured its own life chain, wins business the fragile competitor never sees coming.

So here is the whole thing in one line, and Munger got there long before I did. The map an adversary uses to find where you die is the same map you should use to decide how you live. The only question that matters is who draws it first.

Run your own kill chain before someone runs it for you. What is left standing when you are finished is the life chain. Build that.

The genius of modern financial warfare is amplification, and so is its crime.

In the framework I set out in The Economic Kill Chain, amplification is phase five: the point at which a narrow, precise action propagates through the financial system and becomes something vastly larger than the action itself. A single designation, a single freeze, a single insurance withdrawal, multiplied by the risk aversion of thousands of private institutions until it reaches a scale no government could have imposed directly. Amplification is what separates a sanction from a weapon. Without it, economic pressure is a fine; with it, economic pressure can collapse an economy.

I have argued at length that amplification is the source of the chain's power. What I have not done, and what the field as a whole has largely declined to do, is reckon honestly with the fact that amplification is also the source of its harm. The same property that makes the weapon effective makes it indiscriminate. We have built no honest accounting of the cost.

This essay is that reckoning, or the start of one.

The asymmetry at the heart of the chain

Consider what is actually precise about an economic campaign and what is not.

Execution, phase four, can be exquisitely targeted. The United States can designate one bank, name one individual, restrict one product. The instruments of execution are scalpel-fine, and their proponents are right to say so. When Treasury named Banco Delta Asia, it named a single institution in Macau. There is nothing indiscriminate about that act in isolation.

Amplification is the opposite. Once the designation enters the system, its spread is governed not by the targeting officer but by the collective behaviour of every bank, insurer and counterparty that would rather over-comply than risk its own access to the dollar. The cascade does not stop at the guilty. It cannot, because the mechanism driving it is generalised fear, and fear does not distinguish between the regime and the population living under it. A central bank loses its correspondent relationships, and the consequence is borne not by the elite, who hold assets abroad, but by the citizen who can no longer buy imported medicine because the letters of credit that financed it have evaporated.

This is the asymmetry that ought to sit at the centre of any honest doctrine of economic warfare. Precision at the top of the chain, indiscriminate harm at the bottom. We market the precision and we externalise the harm, and the gap between the two is where the ethical problem lives.

When the measurement itself becomes a weapon

The hardest part of this subject is that the harm is genuinely difficult to measure, and that the difficulty is exploited by everyone with a stake in the answer.

The defining case is Iraq. Comprehensive United Nations sanctions, imposed in 1990 after the invasion of Kuwait and sustained for more than a decade, restricted the country's ability to export oil and therefore to import food and medicine. The Oil-for-Food Programme, introduced in the mid-1990s, was meant to ease the worst of it. Out of this period came the most cited figure in the history of economic warfare: that sanctions had caused the deaths of around half a million Iraqi children.

The figure became iconic. Madeleine Albright, then the United States ambassador to the UN, had the number put to her directly in a 1996 television interview and replied that she believed the price was worth it, a remark that has followed her ever since. That number, and that answer, did more to shape the moral reputation of sanctions than any academic study.

The trouble is that the number does not survive scrutiny. It originated in a 1995 letter to a medical journal, was withdrawn amid signs of manipulation, and then returned in a 1999 survey conducted with the cooperation of the Iraqi government. In 2017, researchers at the London School of Economics, writing in BMJ Global Health under the pointed title "a history of lies, damned lies and statistics", concluded that the 1999 survey had been manipulated by Saddam Hussein's regime to manufacture international sympathy, and that subsequent surveys showed no sign of the enormous and sustained rise in child mortality the figure implied. The regime, in other words, had an interest in exaggerating the suffering of its own people, and acted on it.

I want to be careful here, because the honest position is not the tidy one. The collapse of the headline figure does not establish that sanctions caused no civilian harm; some demographers continue to argue that real excess mortality occurred, even after accounting for the regime's manipulation. The truthful summary is messier and more disturbing than either side's slogan. Civilian harm from amplified economic pressure is real. The most famous measurement of it was a fraud. And the measurement was a fraud precisely because both the sanctioning powers and the target regime understood that the number was itself a weapon, to be inflated by one side and deployed against the other.

That is the deeper lesson of Iraq, and it generalises. Amplification harm is so politically charged that the act of counting it becomes another front in the campaign. The target inflates it to break the sanctions; the sanctioning state minimises it to sustain them; and the people actually bearing the cost are reduced to a contested statistic. A doctrine that leaves the measurement of its own harm to the propagandists of both sides is not a serious doctrine.

The reserve-freeze problem

If Iraq is the contested case, Afghanistan is the clean one.

When the Taliban took Kabul in 2021, the United States froze roughly seven billion dollars in Afghan central bank reserves held in New York, with further billions immobilised in Europe. The freeze was a phase-four execution, narrowly aimed at denying the new regime control of the state's foreign assets. Its phase-five amplification was anything but narrow. A central bank stripped of its reserves cannot backstop a banking system; the banking system seized; liquidity drained out of an economy that was already among the poorest on earth; and the result was a humanitarian and financial collapse whose victims were overwhelmingly people who had no part in the Taliban's return and no means of leaving.

The reserve freeze is the purest illustration of the amplification problem because the gap between target and casualty is so stark. The action was aimed at a regime. The cost fell on a population. Nothing about the mechanism connecting the two was precise, and nothing about it was accidental; the cascade from a frozen central bank to an empty pharmacy is well understood by anyone who has studied the chain. The harm was foreseeable. It was simply not counted as part of the decision.

What an honest doctrine would require

If amplification is both the source of the chain's power and the source of its harm, then a serious doctrine of economic warfare cannot treat the harm as an externality. It has to bring it inside the planning cycle. Three commitments follow.

Forecast the amplified effect, not merely the executed one. Targeting that models the first-order effect of a designation while ignoring the cascade is not precision; it is precision theatre. If we can map a network well enough to find the chokepoint, we can map it well enough to forecast who downstream will bear the consequences. The civilian effect of amplification belongs in the output of phase two, not in the regret of phase seven.

Build the carve-outs and the off-ramp into positioning. Humanitarian exemptions bolted on after the fact arrive too late, because the compliance cascade has already taught every bank that touching the target in any form is dangerous, and a legal carve-out does not undo a learned fear. The exemptions, the protected channels for food and medicine, the explicit assurances to over-cautious institutions, all belong in phase three, built before the trigger rather than after the damage.

Measure the harm yourself, honestly, and ahead of the propagandists. The vacuum that the Iraqi regime filled with a fraudulent number existed because no one credible was measuring the real one. A state serious about both the effectiveness and the legitimacy of economic warfare would treat honest measurement of civilian harm as a core capability, not a concession to its critics. The alternative is to keep ceding the moral narrative to whoever lies most effectively.

None of this blunts the weapon. A campaign can forecast its civilian cost, build genuine carve-outs, and measure honestly, and still be devastating to its intended target. What changes is that the harm becomes a decision rather than an accident, something chosen and owned rather than externalised and denied.

The line we have refused to cross

We celebrate amplification as the genius of modern financial statecraft, and it is. The compliance cascade, the allied coordination, the market psychology that turns a single designation into systemic isolation: this is the machinery that lets a finance ministry achieve what once required a fleet. I have spent years describing how it works and arguing that it is the most important phase in the chain.

It is also the part that reaches people we never targeted, through a mechanism we understand perfectly well and choose not to measure. A doctrine that forecasts its precision to the basis point while leaving its civilian cost to a contested statistic is not precise. It is merely unaccountable. The amplification problem is not that the weapon is too powerful. It is that we have declined to count what it does, and called that restraint.

This is the first in a series on the doctrine of economic and financial warfare. It examines the ethical cost of phase five of the Economic Kill Chain; later essays turn to measurement, to new battlespaces, and to what happens when the chain runs at machine speed.

Further reading

• Dyson, T. & Cetorelli, V. (2017). "Changing views on child mortality and economic sanctions in Iraq: a history of lies, damned lies and statistics." BMJ Global Health.

• Spagat, M. (2010). "Truth and death in Iraq under sanctions." Significance.

• Tennant, J.J. (2026). "The Economic Kill Chain Framework." Finint.

Subscribe now

Private equity is consolidating control of defence-critical infrastructure globally. This is not a market story: this is financial warfare.

Over the past five years, three PE firms (Carlyle, Blackstone, Apollo) acquired 42 critical defence companies. These acquisitions operate below regulatory scrutiny. They create leverage points for state actors. And Australia is directly exposed.

This is not accidental. This is deliberate strategy to weaponize private capital.

The Capital Problem

PE assets grew from USD 3 trillion (2015) to USD 4.2 trillion (2026). This capital requires deployment. Defence acquisitions provide what PE needs: regulatory certainty, government contracts, high entry barriers.

Capital flows where regulations are weakest and strategic importance highest.

Data source: Preqin, McKinsey & Co. | February 2026

Defence Sector Consolidation

PE firms acquired 15 defence companies (2020-2026), plus 8 semiconductors, 12 biotech, 6 rare earths, 4 comms. Defence dominates because it is strategically essential, government-funded, politically protected.

Data source: Preqin, Bloomberg | February 2026

Four Case Studies

Carlyle: StandardAero (USD 3.2B, 2021)

Carlyle acquired StandardAero in 2021. StandardAero manufactures jet engine components for military aircraft. Control this, control the repair supply chain for allied militaries.

CFIUS approved it. Why? Carlyle is American, so the assumption was US capital equals US interest. But strategic capital does not always align with strategic interest. What if Carlyle’s LPs include foreign sovereign funds? What if the fund structure obscures beneficial ownership?

It does.

Chinese PE: Australian Rare Earths (2018-2022)

Chinese PE firms acquired Australian rare earth processors below FIRB thresholds, structured as Australian entities. Result: Chinese entities now control critical processing for Australian exports.

Australia mines 1.2M tonnes of rare earth oxide annually. Half of processing happens offshore. A significant portion is now foreign-controlled through PE.

This is supply chain control. This is financial warfare.

Blackstone: Lumen Communications (USD 7.6B, 2020)

Blackstone acquired Lumen’s fibre network assets in 2020. Lumen owns critical telecommunications infrastructure across the US and globally.

Comms infrastructure is military infrastructure. Control it, and you control signals intelligence, network access, strategic leverage. Blackstone’s ability to restrict access is now a state-level vulnerability.

Strategic Positioning

Carlyle dominates defence (15). Blackstone covers semiconductors and comms (8 each). Apollo focuses biotech (12). This fragmentation is deliberate. Own pieces, not wholes. Create dependencies. If PE firm A owns processing and PE firm B owns distribution, neither operates independently. This fragmentation is a weapon.

Data source: Preqin, Company reports | February 2026

The Objection

“PE is profit-seeking, not strategic.” Wrong. Profit and geopolitics are not mutually exclusive. Foreign state actors use PE vehicles as cover precisely because profit motive provides plausible deniability.

Chinese PE buys rare earth processors because “returns.” Russian oligarchs buy defence tech because “alpha.” State actors buy comms because “stable cash flows.” The motivation obscures the strategy.

That is the point.

Australia’s Exposure

Three vulnerabilities:

One: FIRB thresholds are too high. Foreign PE acquires Australian critical assets below thresholds if structured locally. Rare earths, semiconductors, comms are all exposed.

Two: Beneficial ownership is opaque. PE funds obscure ownership through LP structures. You cannot identify the true beneficiary.

Three: No sector-specific protection. Australia protects some sectors (defence, utilities). But suppliers (rare earth processors, chip designers, fibre networks) are unprotected.

Result: Australia is exposed to supply chain control by foreign PE backed by state actors.

The Timeline

2015-2018: Initial consolidation. Carlyle expands defence. Blackstone acquires comms.

2018-2021: Acceleration. PE AUM hits USD 4 trillion. Foreign PE targets Australian rare earths.

2021-2024: Velocity. Strategic consolidation accelerates. PE firms achieve critical mass.

2026: Critical point. Foreign PE threatens Australian assets. The window closes. Australia must act now, before the next acquisition wave.

Data source: Company reports, industry analysis | February 2026

What Must Happen

One: Lower FIRB thresholds for PE. Any PE acquisition in critical sectors triggers review, regardless of size.

Two: Demand beneficial ownership disclosure. PE funds must reveal ultimate owners. No opacity.

Three: Restrict foreign PE in critical sectors. Rare earths, semiconductors, comms, dual-use tech off-limits.

Four: AUKUS coordination. US, UK, AU must vet PE acquisitions together. Strategic competitors consolidate; allies must do the same.

Five: Sovereign capital deployment. Australia establishes or expands a sovereign fund to acquire strategic assets. Private markets will not protect strategic interests.

Trading Implications

This creates asymmetric opportunities. Winners: PE-backed defence tech and semiconductors from supply chain fragmentation. Losers: legacy defence contractors facing margin compression.

Long Positions

NVIDIA (NVDA): PE targeting AI/chip firms benefits NVIDIA through consolidation. Semiconductors become more valuable as competitors disappear. Position: Long. Catalyst: Q4 earnings, defence AI contracts.

ARM (ARM): Defence-critical IP. PE targets RISC-V alternatives. ARM moat strengthens as competitors vanish into PE portfolios. Position: Long. Catalyst: Geopolitical chip protection, AUKUS demand.

Lockheed Martin (LMT): Benefits from supply chain consolidation. PE fragments sub-suppliers; LMT gains leverage. Position: Long. Catalyst: Q1 earnings, supply chain inflation signals.

Short Positions

Raytheon (RTX): Legacy contractor vulnerable to PE disruption. Margin compression as PE reallocates to specialised sub-suppliers. Position: Short into Q1 earnings. Target: -8% by April 2026.

Boeing (BA): Capital-intensive, exposed to PE capital reallocation. Cost pressure as PE consolidates lower-tier suppliers. Position: Watch (slight short bias). Risk: Government contracts provide stability.

Acquisition Watch

SAIC (SAIC): Mid-cap defence integrator; prime PE target. Watch for announcement. Upside: 25-40% on acquisition.

GD (General Dynamics): Potential strategic review; PE interest possible. Upside: 15-25% on announcement.

AXON (Axon Enterprise): PE-backed defence tech. Acquisition target or compounder. Risk: Valuation already elevated.

Risk Management

Stop Loss: -8% per position
Position Size: 2-3% of portfolio
Hedge: Long /NQ (Nasdaq-100) for tech sector hedge
Timeframe: 6-12 months
Review: Q2 earnings (April-May 2026)

Conclusion

Private equity consolidation in defence is financial warfare. PE firms are acquiring control of supply chains, comms infrastructure, critical technology. Consolidation operates below regulatory thresholds. It creates leverage for state actors.

Australia is exposed. The window closes fast.

Action comes before the deal closes. After is too late.

DISCLAIMER: This is analysis, not financial advice. Do your own due diligence. Trade at your own risk. Not investment advice.

The most sophisticated practitioners of financial warfare are not in government. They are on Wall Street.

Activist investors, distressed debt funds, and short sellers have spent decades perfecting the art of financial targeting. They gather intelligence on corporate vulnerabilities. They map network dependencies. They position capital before striking. They coordinate with allies. They exploit secondary effects. They measure outcomes against objectives. This is the Economic Kill Chain, executed quarterly, for profit.

States are only now discovering what hedge funds have known for forty years: capital is a weapon system. The question is whether government institutions can learn fast enough to match adversaries who already operate at market tempo.

The Kill Chain in Private Hands

The Economic Kill Chain comprises seven phases: Reconnaissance, Mapping, Positioning, Execution, Amplification, Exploitation, and Assessment. Each phase has a direct analogue in activist investing.

Reconnaissance in the private sector means forensic accounting, supply chain analysis, and management due diligence. Firms like Muddy Waters and Hindenburg Research have built entire business models on financial intelligence gathering. They deploy analysts to count trucks in parking lots, interview former employees, and parse footnotes in SEC filings. The goal is identical to state intelligence: understand the target’s financial architecture before acting.

Mapping means identifying the nodes and links that constitute the target’s ecosystem. Which banks provide credit facilities? Which counterparties depend on the target’s solvency? Where are the covenant triggers? Activist investors construct network topologies as sophisticated as anything produced by OFAC. They distinguish between critical chokepoints and redundant pathways. They identify where pressure will propagate and where it will dissipate.

Positioning means accumulating capital before the market recognises your thesis. This is the quiet phase: building a stake, securing borrow for short positions, lining up financing for a proxy fight. The parallel to government positioning is exact. Assets and authorities must be staged before execution. The goal is to compress the time between decision and effect.

Execution in activist campaigns takes many forms: public letters, proxy contests, short reports, credit default swap positions. The instruments differ from government tools, but the logic is identical. Primary actions impose direct costs. Secondary instruments extend pressure across the target’s network.

Amplification means coordinating with allies. Wolf packs of hedge funds share intelligence and coordinate positions. Institutional shareholders are lobbied to support activist agendas. Media campaigns shape the narrative. The private sector understood force multiplication long before defence strategists applied it to sanctions coordination.

Exploitation extracts value from secondary effects. A short seller profits not just from the initial price decline but from the cascade: credit downgrades, covenant breaches, management distraction, customer defection. Sophisticated operators position for the second and third order effects, not just the primary impact.

Assessment is continuous. Positions are marked to market daily. Thesis validity is tested against price action. Capital is reallocated based on outcomes. The feedback loop is tighter than any government review cycle.

The Tempo Gap

The private sector operates the Economic Kill Chain at a tempo that government institutions cannot match. A hedge fund can move from reconnaissance to execution in weeks. A government sanctions programme takes months or years.

This tempo gap reflects structural differences. Private actors face market discipline: capital flows to strategies that work and away from those that do not. Government agencies face bureaucratic discipline: processes must be followed, authorities must be obtained, allies must be consulted. The former selects for speed. The latter selects for caution.

The gap matters because adversaries are closing it. China’s Military-Civil Fusion doctrine deliberately blurs the line between state and market actors. Russian oligarchs operate as instruments of state power while maintaining commercial cover. The distinction between public and private financial warfare is eroding, but Western governments still organise as if it remains absolute.

What States Can Learn

Three lessons from the private sector apply directly to state financial warfare.

First, intelligence must be operationalised, not just collected. Hedge funds do not gather information for its own sake. Every data point serves a thesis. Every analysis implies a trade. Government financial intelligence often sits in reports that inform but do not compel. The Economic Kill Chain demands that reconnaissance and mapping produce actionable targeting, not background briefings.

Second, positioning determines outcome. The returns to activist investing accrue disproportionately to those who position before the market moves. The same logic applies to state action. Authorities prepared in advance, assets pre-staged, allies pre-briefed: these compress execution timelines and maximise impact. Reactive financial warfare, assembled after a crisis begins, arrives too late to shape outcomes.

Third, the cycle must be continuous. Private capital markets provide real-time feedback on thesis validity. Government programmes often lack equivalent mechanisms. Assessment must be embedded in operations, not conducted as post-hoc review. The Kill Chain is a loop, not a line.

The Institutional Implication

Australia lacks institutions designed for financial warfare at market tempo. Treasury manages economic policy. DFAT manages diplomacy. Home Affairs manages border security. Defence manages kinetic capability. AUSTRAC monitors transactions. ASD conducts cyber operations. No single entity owns the mission of deploying financial instruments for strategic effect.

The private sector solved this problem decades ago. Trading desks integrate research, execution, and risk management under unified command. The entire Kill Chain operates within a single organisational structure with clear authority and accountability.

A dedicated Financial Warfare Office would apply this logic to government. It would integrate FININT collection, network analysis, legal authorities, allied coordination, and assessment under single leadership. It would operate at tempo closer to market speed than bureaucratic speed. It would treat capital as a weapon system, not an administrative input.

The Doctrinal Foundation

The Economic Kill Chain provides the doctrinal foundation for this institutional change. The seven phases describe how financial warfare campaigns unfold. The framework applies whether the operator is a hedge fund targeting a corporation or a state targeting an adversary. The logic is the same. The instruments differ. The tempo must converge.

This is the first in a series examining the Economic Kill Chain in detail. Subsequent articles will apply the framework to specific domains: critical minerals, semiconductor supply chains, correspondent banking networks, and sovereign wealth fund dependencies. The goal is to build a shared vocabulary for financial warfare that bridges the gap between private practice and public doctrine.

Finance is the sixth domain of warfare. The private sector has been fighting in this domain for decades. It is time for states to learn from the practitioners who mastered it first.

• Fabian logic has moved from the battlefield to the balance sheet. States now stretch conflicts by exhausting opponents economically through iterative sanctions, export controls and market exclusion.
  NB: Conventional forces can be bypassed if the treasury collapses first.

• Russia and China show both sides of the coin. Moscow is under its seventeenth EU sanctions package, while Washington has placed more than 240 Chinese entities on the US Entity List since 2024.
  NB: Attrition is already grinding-level policy, not theory.

• Economic counter-punches matter. Beijing’s licence regime on gallium and germanium and its latest rare-earth slow-walk underline that targets will respond in kind.

  NB: Australia’s minerals dominance makes it both an arsenal and a bullseye.

• Canberra lacks a purpose-built economic-warfare unit. Financial fires remain dispersed across Treasury, DFAT and Defence.
  NB: Without fused planning, Australia risks strategic surprise and slow response times.

1. Fabian strategy 2.0: Time as a weapon

The Roman general Fabius Maximus won by delaying battle and draining enemy capacity; modern policymakers do the same with sanctions schedules, dollar funding restrictions and grey-zone finance operations. This trades battlefield manoeuvre for calendar attrition.
NB: Defence planners must budget for campaigns measured in quarters, not days.

2. Example financial instruments of attrition

• Sanctions packages
  The EU’s seventeenth round adds new energy, shipping and crypto controls on Russia in May 2025 .

• Entity-listing
  The US Commerce Department has added 136 Chinese firms in December 2024 and a further 80 in March 2025, taking the running total since 2018 above 700 .

• Payment denial
  Selected Russian banks were removed from SWIFT in March 2022, with more ejections announced for March 2025 .

• Market and capital controls
  US lawmakers are pressing the SEC to delist 25 major Chinese companies, signalling escalation into equity markets .

NB: Each layer magnifies cumulative stress; none is decisive alone.

3. Case study – Russia 2022-25

Combined energy caps, asset freezes and SWIFT exclusion pushed Russia’s economy into an 8–12 percent GDP contraction path in 2022-23 and are now slowing growth below 2 percent in 2025 . Shadow imports and high oil receipts blunt the blow, yet every sanctions tranche narrows fiscal manoeuvre and technology access.
NB: Long-run capability, not quarterly figures, reveals whether attrition is biting.

4. Case study: United States versus China

Washington’s “techno-resource containment” policy links advanced-chip export controls with upstream mineral leverage . Beijing retaliated by licensing exports of gallium and germanium from August 2023 and has since tightened rare-earth approvals, leaving global magnet shipments thirty-five percent below normal by June 2025 .
NB: Supply-chain attrition is mutually assured delay; Australia’s lithium and rare-earths posture must anticipate economic counter-strikes.

5. Early indicators of a Fabian financial campaign

• Escalating yet narrowly scoped sanctions rounds

• Coordinated cyber probes on payment rails timed with policy moves

• Sudden licence requirements on critical inputs (minerals, semiconductor equipment)

• Regulatory threats to delist adversary-aligned firms from exchanges

NB: Intelligence fusion across trade, cyber and capital-flow data is essential for early warning.

6. Implications for Australia

1. Build resilience
   Dual-site domestic clearing capability and offline CBDC wallets limit coercive leverage if SWIFT alternatives become necessary. NB: Payment friction is itself an attritor.

2. Create an Economic Warfare Detachment within Defence’s Information Warfare Division
   Embed Treasury and ASD liaison to plan economic fires. NB: Speed and credibility rise when targeting, legal and operational teams sit together.

3. Accelerate allied coordination
   Rapid-mirror legislation should allow Australia to match partner sanctions within forty-eight hours.
   NB: Time is the Fabian centre-of-gravity—delay favours the target.

4. Exploit minerals advantage
   Use critical-minerals diplomacy with Japan and Singapore to lock in preferential deals and hedge against Chinese counter-controls.
   NB: Controlling chokepoints reduces exposure.

Conclusion

Financial warfare has adopted the Fabian playbook, attack not with kinetics but spreadsheets, draining adversaries resources until they concede strategic aims.

If you’re a policy maker in Australia, you must treat economic statecraft as an operational theatre, resource it accordingly and ensure the ledger favours the alliance side of the balance.

Delay breeds decay.

Subscribe now

Selected references

1. European Commission, EU adopts 17th sanctions package against Russia, 20 May 2025

2. BIS, Additions of Entities to the Entity List (Dec 2024; Mar 2025)

3. SWIFT ban chronology, SWIFT ban against Russian banks and Interfax dispatch on 2025 expansion

4. RBC, Bank of Russia recession forecast, 29 Apr 2022

5. FocusEconomics, Russia GDP Q1 2025, 16 May 2025

6. USITC, Germanium and Gallium Export Controls, Aug 2023

7. Reuters, China rare-earth licence delays squeeze magnets market, 27 Jun 2025

8. FPRI, Re-Balancing the Strategy of Tech Containment, 23 Sep 2024

If you want early access to these articles, or more long form analysis I'm also writing over at finint.substack.com

Executive summary

Six Israeli defence equities, Elbit (ESLT), Gilat (GILT), Orbit (ORBI), NextVision (NXSN), Aeronautics (ARCS) and Israel Shipyards (ISHI), all posted unusually strong price gains and heavy turnover in the trading week 6 – 12 June 2025 with no public catalysts. The same three domestic institutions, Clal Insurance, Phoenix Holdings and Meitav Dash, plus private-equity house FIMI Opportunity Funds already held significant cross-portfolio stakes. Clal’s chair is a former Israeli cabinet secretary with a defence brief, and FIMI places ex-IDF officers on portfolio boards. These overlaps are circumstantial only, but worth closer regulatory review. Nothing here alleges wrongdoing.

Market anomalies in the pre-strike week

NB: A cluster of abnormal moves across drone, comms and naval names, without earnings, contract news or dividends, suggests investors were positioning for conflict rather than reacting to routine events.

Who owned the winners? Cross-portfolio overlaps

NB: A small cadre of domestic pensions plus FIMI dominated the share registers of all six anomaly stocks. Two of those funds (Clal, FIMI) have board-level ties to Israel’s security establishment, creating plausible, but unproven, information channels.

Defence capability relevance of the movers

• Gilat markets airborne/ground SATCOM terminals used by the IDF’s long-range UAV fleet.

• Orbit provides Ku/Ka airborne antennas and naval SATCOM; FIMI remains controlling shareholder.

• NextVision supplies lightweight gimballed cameras for loitering munitions and mini-UAVs.

• Aeronautics manufactures Orbiter/Hermes drones used in cross-border ISR and strike missions.

NB: The tickers that drew the sharpest flows map directly to the ISR and strike systems believed deployed over Iran, strengthening the inference that investors were “following the kit”.

Senior-leadership links

• Danny Naveh chaired Clal Insurance after a career as cabinet minister and government adviser on defence and foreign affairs.

• FIMI explicitly positions itself as Israel’s leading industrial/defence PE firm and keeps ex-IDF officers on portfolio boards; Globe articles confirm FIMI’s ongoing control of Orbit at 28 %.

NB: Finance–defence networks in Israel are dense; individuals with prior national-security roles sit at the apex of major funds that were already long the very equities that spiked pre-strike.

Legal and analytical hedge

All data come from public exchange tapes, regulatory filings and open-source biographies. Israeli pension funds routinely hold large cross-market stakes, and ex-IDF officers commonly move into finance. This memo does not allege insider trading or illegal activity; it merely highlights patterns that merit further inquiry. Alternative explanations, macro hedging, algorithmic flows or coincidental sector rotation, remain entirely plausible.

Conclusion

Abnormal multi-day trading surges across drone-, SATCOM- and naval-focused Israeli defence equities, combined with concentrated ownership by a small set of domestically connected investors, provide a circumstantial, but not conclusive, signal that well-informed capital may have anticipated Israel’s 13 June strike on Iran. Integrating real-time financial-market monitoring into Australia’s hybrid-warfare early-warning apparatus would allow analysts to test such signals prospectively.

Recommendations

1. ASIC / Govt. Entities – Defence FinINT cell to flag unexplained spikes in dual-use equities in real time.

2. Cross-list feed sharing between TASE surveillance and Australian regulators.

3. Voluntary event-risk disclosure from large Australian industry funds on major portfolio reallocations.

4. Academic partnership to map defence-finance board interlocks using open data.

Disclaimer

The views expressed in this post are entirely my own and do not represent the official position of the Australian Government, the Australian Defence Force, or any other institution with which I am affiliated. This content contains no classified or confidential information and is based solely on publicly available sources (OSINT) and personal academic conjecture as part of my ongoing research. This is not legal or financial advice. Trading and investing involve significant risk, and the information provided regarding potential trading implications is for informational and analytical purposes only and should not be construed as a recommendation to buy or sell any security. Readers should conduct their own thorough research and consult with a qualified financial professional before making any investment decisions.

TLDR:

The global security and economic landscape is undergoing a profound transformation driven by the emergence of 'War Capital'. This term, encompassing various forms of private investment (primarily venture capital), signifies a strategic shift in how national security and economic resilience are funded and developed. Historically dominated by state-led initiatives like war bonds, 'War Capital' now represents a forward-looking deployment of private funds into dual-use technologies, innovations with both civilian and military applications. This shift is fueled by escalating geopolitical tensions, the immense market opportunities in Defence tech, and the rapid pace of commercial technological disruption.

NB: Ive called it ‘War Capital’ to be illustrative and punchy, this type of capital and its associated funds also goes by a ton of different names including but not limited to;

Defence Technology, Advanced Defence Systems, Tactical Tech, National Security Innovation, Warfighter Tech, Next-Gen Defence Platforms, Military Technology, Dual-Use Technologies, Civil-Military Tech, Frontier Dual-Use Systems, Dual-Purpose Innovation, Defence-Commercial Crossover, National Interest Dual-Use, Deep Tech for Defence, Hard Tech Ventures, Mission-Driven Engineering, Strategic Frontier Technologies, Advanced Systems Engineering, Next-Gen Physical Infrastructure, Strategic Sovereign Technologies, Economic Statecraft Ventures, Nation-Scale Innovation, Homeland Resilience Tech, National Capability Tech, Critical Sovereign Systems, American Dynamism, Allied Dynamism, Defence of Democracy Tech, Resilience Capital, Tech for Western Prosperity, Deterrence-by-Innovation, Arsenal of Innovation, National Security Tech, Strategic Supply Chain Tech, Industrial Defence Resilience.

The list goes on, all real examples…

The influx of private capital, estimated at $100-130 billion in Defence tech since 2021, is accelerating innovation in critical areas like AI, autonomy, cybersecurity, and space. While offering unprecedented agility and speed in technology development ("blitzscaling"), this model introduces complexities around aligning private sector incentives with long-term national security imperatives. Governments and alliances are actively fostering this ecosystem through initiatives like NATO DIANA and AUKUS Pillar II, which represent proactive 'War Capital' deployment for collective security. Simultaneously, this new environment expands the scope of financial warfare beyond traditional sanctions to include strategic investment coercion and sophisticated cyberattacks on financial infrastructure, necessitating robust defensive measures. Understanding 'War Capital' is crucial for market participants and the public, as it shapes future economic resilience, job creation, and the very nature of national Defence.

Venture Capital's Strategic Pivot to Defence

The landscape of Defence innovation is undergoing a seismic shift, with venture capital emerging as a formidable new force. This "New Arsenal" is not one of conventional weaponry, but of capital, talent, and disruptive technology, strategically deployed to address the evolving challenges of national and economic security. Several powerful drivers are fueling this VC pivot, leading to levels of investment in key technology sectors, with dual-use innovations playing a particularly crucial role.

Drivers for VC Investment in Defence and Dual-Use Technologies

The surge in venture capital flowing into the Defence and dual-use technology sectors is not a monolithic trend but is propelled by a confluence of interconnected factors:

1. Geopolitical Imperative
   The most significant driver is the undeniable shift in the global geopolitical landscape. Heightened international tensions, the resurgence of great power competition, and ongoing conflicts have created an urgent demand for advanced Defence capabilities and rapid modernization. Governments worldwide are signaling substantial increases in Defence spending and a strategic need to integrate cutting-edge technologies to maintain a competitive edge. This creates a clear "demand pull" for innovative solutions that VCs are keen to fund.

2. Market Opportunity and Returns
   The Defence technology sector is increasingly viewed as a high-growth area with the potential for substantial financial returns. VCs are attracted by the prospect of startups securing lucrative, long-term government contracts and the potential to disrupt established Defence industry giants. The emergence of "national security unicorns", privately held startups valued at over $1 billion, such as Anduril Industries and Palantir Technologies, has validated the market's potential and fueled further investor interest.

3. Technological Disruption
   Rapid advancements in fields like artificial intelligence (AI), autonomy, cybersecurity, space technology, and biotechnology are fundamentally reshaping the nature of warfare and security. Commercial technology development is, in many instances, outpacing traditional, slower-paced government R&D cycles. VCs, adept at identifying and backing disruptive innovators, see a prime opportunity to capitalize on these transformative technologies.

4. Government Facilitation and Ecosystem Building
   Recognizing the need to harness private sector agility, governments and alliances are actively working to attract and streamline innovation and capital. Initiatives such as the U.S. Department of Defence's (DoD) use of Other Transaction Authorities (OTAs), programs like S²MARTS (Strategic & Spectrum Missions Advanced Resilient Trusted Systems) and the Microelectronics Commons, are designed to lower barriers for non-traditional Defence contractors. Similarly, alliance-level efforts like NATO's Defence Innovation Accelerator for the North Atlantic (DIANA) and the NATO Innovation Fund (NIF) aim to foster a transatlantic ecosystem for Defence innovation. The Pentagon, for instance, has been overtly courting Silicon Valley to bring its technological prowess to bear on military challenges.

5. Shifting Limited Partner (LP) Sentiment and the "Patriotic Duty" Narrative
   Historically, many LPs (the investors in VC funds) were hesitant to allocate capital to Defence-focused ventures, often due to Environmental, Social, and Governance (ESG) concerns or the perceived complexities of the Defence market. However, the stark realities of the current geopolitical environment and the increasing strategic importance of dual-use technologies are causing a palpable shift in this sentiment. This is further bolstered by a growing narrative, promoted by some prominent VCs and tech leaders, that investing in national security is a "patriotic duty,” which helps to reframe Defence investment in a more positive light.

6. The "Blitzscaling" Approach to Defence
   The venture capital model, characterized by rapid and aggressive investment to achieve exponential growth and market dominance, a strategy known as "blitzscaling", is now being applied to the Defence technology sector. This approach aims to quickly develop and scale solutions, challenging the traditionally slower, more bureaucratic Defence procurement cycles and potentially offering a faster route to capability enhancement.

These drivers collectively create a fertile ground for VC investment, transforming the Defence innovation landscape from one dominated by a few large incumbents to a more dynamic ecosystem populated by agile startups and a new class of investors. This influx of private capital is not merely supplementary; it is becoming integral to how modern nations develop and acquire the technologies deemed essential for their security and economic well-being. The very structure of the "Defence tech stack" is evolving, with software, AI, and data analytics becoming central components, often developed by these VC-backed innovators. This shift, while promising accelerated innovation, also introduces new dependencies on these software and AI providers, potentially creating new strategic vulnerabilities if not managed carefully.

Furthermore, the rise of investment theses like "American Dynamism" suggests that techno-nationalism is becoming an explicit factor in capital allocation. VCs operating under such theses may prioritize investments that align with national strategic interests and aim to build domestic technological champions, sometimes blurring the lines between private financial endeavours and quasi-governmental strategic initiatives. This can influence which technologies receive funding and how they are developed, potentially favouring solutions with clear national security applications even if their purely commercial prospects are less certain.

While government initiatives like OTAs are intended to help startups cross the "valley of death", the perilous gap between research and development and fielded, operational capability, VC funding offers an alternative, often faster, bridge. However, this bridge comes with its own set of demands. Startups funded by VCs must meet expectations for rapid growth and eventual exit (e.g., acquisition or IPO), timelines and objectives that may not always perfectly align with the DoD's typically longer-term, more deliberate acquisition, integration, and sustainment requirements.⁴ This potential misalignment underscores the complexities of integrating the fast-paced VC world with the structured needs of national Defence.

Scale of Investment and Key Technology Sectors

The infusion of venture capital into the Defence and dual-use technology sphere has reached remarkable levels, signaling a significant and sustained commitment from the private sector. Global VC investments in companies relevant to Defence saw a notable surge, with one report indicating $31 billion in 2024, a 33% year-over-year increase. Other analyses suggest even larger figures, with estimates around $100 billion invested between 2021 and 2023, and nearly $130 billion channeled into Defence tech since 2021. These substantial capital inflows are not diffusely spread but are concentrated in specific technology sectors deemed critical for future security and economic competitiveness.

The following table provides an overview of major VC funds active in this space and some of their notable investments, illustrating the key players and focus areas:

VC Fund Name

Andreessen Horowitz (a16z)

Anduril Industries, Skydio, Shield AI, Applied Intuition

Anduril Series E ($1.5B, 2024 ), Skydio Series E ($230M, 2023)

AI, Autonomy, Software, Aerospace

Founders Fund

Anduril Industries, SpaceX, Palantir Technologies, Varda Space Industries

Anduril (multiple rounds, expected lead in $2.5B Series G), SpaceX (multiple rounds)

AI, Space, Autonomy, Data Analytics

Lux Capital

Anduril Industries, Epirus, Hadrian Automation

Deep Tech, AI, Space, Manufacturing

Sequoia Capital

Skydio, (Historically: Google, Apple)

Skydio (various rounds)

AI, Software, Enterprise Tech

General Catalyst

Applied Intuition, Vannevar Labs

AI, Software, Enterprise Tech

8VC

Anduril Industries, Epirus, Palantir Technologies

AI, Data Analytics, Logistics

Lightspeed Venture Partners

Anduril Industries

Anduril (early rounds)

Enterprise, AI, Fintech

BOKA Capital

(Infleqtion, Adarga, All.Space, etc)

(Seed, Series A typical for specialized funds)

Dual-Use, AI, Quantum, Cybersecurity

Lockheed Martin Ventures

(Various early-stage tech companies)

Aerospace, Defence-related Tech

Disclaimer:

The views expressed in this post are entirely my own and do not represent the official position of the Australian Government, the Australian Defence Force, or any other institution with which I am affiliated. This content contains no classified or confidential information and is based solely on publicly available sources (OSINT) and personal academic conjecture as part of my ongoing research. This is not legal or financial advice. Trading and investing involve significant risk, and the information provided regarding potential trading implications is for informational and analytical purposes only and should not be construed as a recommendation to buy or sell any security. Readers should conduct their own thorough research and consult with a qualified financial professional before making any investment decisions.

For those that don't know, I’ve recently commenced a PhD focused on Financial Warfare and specifically, its conceptual and operational separation from Economic Warfare. This in conjunction with my work at BOKA Capital investing in Dual Use Technologies amongst NATO and AUKUS and allies should yield interesting learnings not covered in traditional media or military journals.

Subscribe now

Context

We’ve covered before that the weapons wielded are not always conventional. Beyond missiles and main battle tanks that dominate the media there is a underbelly of financial warfare, where the aggressor's tools are often entities designed to deceive, obscure, and circumvent. Today we’re going to look at shell and front companies… seemingly legitimate businesses that, in reality, serve as conduits for illicit activities, particularly in times of war or heightened international tension.

A shell company is essentially an empty house with a mailbox and a legal address, but no real occupants or business activity. It exists primarily on paper, often registered in jurisdictions with lax oversight and high levels of corporate secrecy. Its purpose is to hold assets or facilitate transactions while obscuring the true owner. A front company, on the other hand, might appear more substantial. It could be an actual operating business – say, a trading company or a consulting firm, but its overt commercial activities serve as a disguise for its primary, covert purpose. This could range from sanctions evasion and illicit procurement of sensitive technologies to funding intelligence operations or paramilitary groups. In warfare, these entities become crucial cogs in the machinery of conflict, enabling states and non-state actors alike to operate beyond the reach of international law and scrutiny.

Case Studies

The "Ghost Fleet" and Sanctions Evasion

• Scenario: A nation under stringent international sanctions, particularly targeting its oil exports and access to global financial markets, needs to continue funding its war machine and maintain its economy.

• Actors Involved: State-owned enterprises, intelligence agencies of the sanctioned nation, and a network of newly created or acquired shipping and trading companies registered in various opaque jurisdictions.

• Methods Used

  • Creation of Shell Companies.
    Dozens of shell companies are established in countries with minimal beneficial ownership disclosure requirements. These companies become the registered owners of aging oil tankers.

  • Obfuscation of Vessel Identity.
    Tankers frequently change names, flags (re-flagging to countries with lax maritime oversight), and disable their Automatic Identification System (AIS) transponders to avoid tracking – creating a "ghost fleet."

  • Complex Payment Structures.
    Payments for illicitly sold oil are routed through multiple front companies, often involved in seemingly unrelated trades (e.g., agricultural products, textiles), and utilize smaller, less scrutinized financial institutions or even cryptocurrency transactions to obscure the origin and destination of funds.

  • Use of Front Companies for Procurement.
    Other front companies, posing as legitimate importers in neutral or friendly countries, are used to procure dual-use technologies, spare parts for military equipment, or luxury goods for the regime, which are then transshipped to the sanctioned nation.

• The Intended Objective.
  To circumvent sanctions, generate revenue from illicit oil sales, procure critical goods and technologies, and maintain financial lifelines despite international pressure.

• Observed Outcomes.
  Partial success in evading sanctions, though at a higher cost and with increased risk. The sanctioned state manages to export a reduced but still significant volume of oil. The complexity of the network makes it difficult for international bodies to fully dismantle, though individual entities are often identified and sanctioned over time. This creates a continuous cat-and-mouse game.

  NB: The 'So What'
  This case study demonstrates how shell and front companies are instrumental in creating resilient, albeit illicit, financial and logistical networks to undermine international sanctions regimes. The aim of these structures is to ensure state survival and the continuation of strategic objectives (like funding a war) by creating layers of deniability and complexity that are difficult and resource-intensive to penetrate. It highlights the challenge for enforcers in keeping pace with adaptive adversaries.
  

  Subscribe now

Financing Proxy Forces and Covert Operations

• The Example Scenario.
  A regional powr seeks to exert influence and destabilise a neighbouring state without resorting to direct military confrontation, opting instead to support proxy militias or insurgent groups.

• Actors Involved.
  The state's intelligence services, military special operations units, well-connected business figures (acting as intermediaries), and a series of front companies.

• Some Methods Used -

  • Establishment of Front Companies.
    Legitimate-seeming businesses (e.g., construction companies, import/export firms, charities) are established or co-opted in the target country or in nearby neutral territories. These companies often have genuine commercial dealings to provide cover.

  • Cash Generation and Movement.
    These front companies may engage in activities like over-invoicing for goods/services, smuggling, or even involvement in local black markets to generate untraceable cash. Funds may also be injected from the sponsoring state disguised as foreign direct investment or loans.

  • Logistical Support.
    The front companies use their legitimate business infrastructure (warehouses, transportation networks, bank accounts) to procure and move non-lethal aid, communications equipment, and sometimes even weapons to the proxy forces.

  • Payment to Operatives.
    Shell companies in offshore jurisdictions can be used to make payments to key leaders or facilitators within the proxy groups, obscuring the link to the sponsoring state.

• Intended Objectives.
  To provide deniable financial and logistical support to proxy forces, destabilise the target regime, and achieve strategic objectives without direct attribution.

• Observed Outcomes.
  The proxy forces are sustained and able to conduct operations. The sponsoring state maintains plausible deniability, though intelligence agencies of other nations may suspect or gather evidence of their involvement. The use of front companies complicates efforts to cut off support to the proxies and can prolong conflicts.

  NB: The 'So What'
  This case study illustrates the utility of front companies in the murkier aspects of warfare, such as funding and supplying non-state actors. The aim is to achieve geopolitical goals covertly, minimizing diplomatic and military repercussions. It underscores how financial warfare tactics, through these opaque structures, enable asymmetric warfare and plausible deniability, challenging traditional notions of state-on-state conflict.

How to Trade This Information

(Disclaimer: The following is analytical and not financial advice.)

The pervasive use of shell and front companies in conflict scenarios has subtle but important implications for investors and markets.

• Potential Market/Sector Impacts:

  • Increased Compliance Costs.
    Financial institutions, and increasingly other multinational corporations, face higher compliance burdens and costs associated with Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Financing of Terrorism (CFT) regulations. This can benefit companies in the RegTech (Regulatory Technology) and compliance solutions space.

  • Supply Chain Vulnerabilities.
    Industries reliant on complex global supply chains (e.g., electronics, defense, critical minerals) may face increased risks of disruption or unknowingly dealing with entities linked to sanctioned actors or conflict financing. This could drive investment towards supply chain transparency and security solutions.

  • Cybersecurity Sector.
    As financial warfare increasingly involves digital means, and shell/front companies often rely on complex digital trails (or attempts to erase them), the cybersecurity sector, particularly firms specialising in financial crime detection and dark web intelligence, may see increased demand.

  • Geopolitical Risk Premiums.
    Sectors or companies heavily exposed to regions with high geopolitical instability or those known for opaque corporate environments might face higher risk premiums from investors.

• Investment Flow Considerations:

  • Scrutiny of FDI.
    Heightened awareness of illicit finance may lead to greater scrutiny of Foreign Direct Investment (FDI) flows, particularly from or into jurisdictions perceived as high-risk for money laundering or sanctions evasion.

  • Capital Flight and Havens.
    Periods of conflict or increased sanctions activity can trigger capital flight from affected regions. Conversely, jurisdictions seen as stable and transparent may attract capital, although even these can be unwittingly used if due diligence is lax.

  • Shift towards Transparency.
    Over the long term, there might be a subtle investor preference for jurisdictions and companies that demonstrate higher levels of transparency in their ownership structures and financial dealings.

• Counterparty Risk Assessment

  • Sophisticated investors and institutions will likely intensify their due diligence processes. This involves not just looking at the immediate counterparty but also attempting to understand the ultimate beneficial ownership (UBO) and the source of funds.

  • The presence of multiple layers of shell companies, operations in high-risk jurisdictions, or unnecessarily complex transaction structures related to a counterparty could be red flags, potentially leading to declined transactions or demands for higher collateral / risk premiums.

• Some Indicators to Watch (Contextual, Not Advice)

  • Changes in beneficial ownership regulations in key financial centres.

  • Major enforcement actions (e.g., large fines, indictments) against institutions or individuals for facilitating illicit finance through such structures.

  • Reports from bodies like the Financial Action Task Force (FATF) on jurisdictional risks.

  • Increased media and academic focus on specific typologies of shell / front company abuse.

My Thoughts / Takeaways

• Key Takeaways:

  • The primary challenge posed by shell and front companies in warfare is their ability to create a fog of financial opacity. This allows belligerents, sanctioned states, and illicit actors to fund operations, procure restricted goods, and evade international scrutiny, thereby prolonging conflicts and undermining global security frameworks. Enforcing transparency and accountability remains a significant hurdle.

  • While not new, the sophistication and integration of shell / front companies into modern financial warfare tactics are evolving. The speed of digital transactions, the rise of cryptocurrencies, and the interconnectedness of the global financial system provide new avenues for their exploitation, representing an ever-adapting front in financial warfare.

  • The "layering" technique, where funds are passed through numerous shell companies in different jurisdictions, is a classic money laundering method now extensively used in conflict financing. Often, the directors listed for these companies are "nominees" with no real control or even knowledge of the company's true purpose.

  • There's a continuous push for stronger global standards on beneficial ownership transparency. However, implementation varies widely, and loopholes persist. This puts pressure on regulators to enhance international cooperation and on financial institutions to invest heavily in due diligence technologies and expertise.

  • The use of shell and front companies in warfare and illicit finance will likely not go anywhere and probably just adapt. We can expect to see more sophisticated cyber techniques to create and manage these entities, as well as continued exploitation of emerging financial technologies. Counter-efforts will increasingly rely on AI-driven analytics (like a Palantir), enhanced intelligence sharing (hence the reason for pushing an integrated FinINT cell), and potentially more aggressive secondary sanctions targeting facilitators.

  • The battle against the misuse of shell and front companies is a critical component of maintaining international financial integrity and security. Their role in warfare underscores that modern conflict is fought not just on physical battlefields, but also within the ledgers and digital pathways of the global financial system.

A Few References I Came Across:

• Financial Action Task Force (FATF) Reports (e.g., on Money Laundering and Terrorist Financing typologies)

• UN Panel of Experts Reports (e.g., on sanctions against specific countries)

• Academic journals on international security, financial crime, and international relations.

• Investigative reports from organizations like the Organized Crime and Corruption Reporting Project (OCCRP).

Subscribe now

Disclaimer

The views expressed in this post are entirely my own and do not represent the official position of the Australian Government, the Australian Defence Force, or any other institution with which I am affiliated. This content contains no classified or confidential information and is based solely on publicly available sources (OSINT) and personal academic conjecture as part of my ongoing research. This is not legal or financial advice. Trading and investing involve significant risk, and the information provided regarding potential trading implications is for informational and analytical purposes only and should not be construed as a recommendation to buy or sell any security. Readers should conduct their own thorough research and consult with a qualified financial professional before making any investment decisions.

This work is undertaken alongside my role at BOKA Capital, where I lead investments in Dual Use Technologies across NATO and AUKUS-aligned jurisdictions. These two perspectives, academic and investment, are shaping a growing body of thought at the intersection of finance, security, and strategic competition.

This is an early contribution to what will be a longer inquiry. I remain open to feedback, critique, and alternative viewpoints as I continue to test and refine these ideas through further research and dialogue.

If you’re interested in deeper or early access to these topics, I’m also writing long-form content over at finint.substack.com.

Foreword

This report investigates the depth of foreign (Chinese for this article, however it isn't exclusively a China problem) financial influence in Australia, particularly where it intersects with national security. It moves beyond the typical discussion of trade reliance and attempts to uncover more strategic and structural dependencies built through investment in critical sectors. The goal is to highlight leverage points, places where economic relationships could be transformed into coercive or strategic influence in a crisis.

Setting the Scene

Financial leverage in this context isn’t just a corporate metric, it’s an instrument of statecraft. When states use investment, credit, or market access to alter the policy landscape of other nations, they are engaging in financial statecraft. China has shown a strong capability in this space through tools like the Belt and Road Initiative. Australia’s openness to foreign capital has created potential exposure points, particularly in infrastructure, energy, and critical minerals.

These investments, whether from state-owned or nominally private Chinese entities, can lead to control over supply chains, infrastructure access, or corporate governance. This control may not be hostile today but represents potential influence tomorrow. As Australia deepens its security cooperation with the US and other allies, these vulnerabilities take on strategic weight. Public discourse has shifted accordingly, debates about investment are no longer just economic but geopolitical.

I aim to examine Chinese investment patterns across key sectors and look towards two case studies, the Darwin Port lease and critical minerals, and how these links translate into potential national security risks or dependencies.

Financial Warfare in Action

Case Study 1

The Strategic Acquisition of The Port of Darwin Lease (Landbridge Group)

In 2015, the NT government leased key commercial components of the Port of Darwin to Landbridge Infrastructure Australia Pty Ltd for A$506 million over 99 years. Landbridge is a subsidiary of the Chinese Landbridge Group, which has "reported" ties to the CCP.

The lease includes East Arm Wharf and Fort Hill Wharf, used by commercial, cruise, and military vessels. Notably, it initially bypassed FIRB scrutiny due to an exemption for state asset sales. Defence and ASIO reviewed the deal and did not raise initial objections, but subsequent assessments and reviews (in 2021 and 2023) reaffirmed this position.

NB: I personally find it strange if there was any military use of the ports it could be anything other than sovereign / sovereign capital owned.

However, by 2025, political consensus shifted. Both major parties pledged to return the port to Australian control, citing unspecified security concerns. Landbridge’s financial position has also raised alarms, with questions about its ability to operate the port sustainably.

The Port of Darwin lease demonstrates how infrastructure control can create long-term influence. While no malicious activity has been proven, ownership itself allows leverage: over port development, access policy, or preferential treatment. Its proximity to defence infrastructure only amplifies the concerns.

Case Study 2

Sectoral Influence of Energy & Critical Minerals

Beyond infrastructure, Chinese investment in the energy grid and minerals has become a flashpoint.

NB: This all falls under the 'critical infrastructure' umbrella.

SGCC acquired minority stakes in ElectraNet and Jemena pre-2015 but was blocked in 2016 from acquiring TransGrid. The risks cited were not just corporate, they included potential cyber and physical disruption, and reliance on Chinese tech platforms flagged in other national security contexts.

In critical minerals, FIRB has taken an increasingly aggressive stance. Recent examples include the Treasurer blocking Alita Resources’ acquisition and ordering divestment from Northern Minerals. Global Lithium has alleged an orchestrated attempt by China-linked shareholders to gain board control. These responses reflect a stronger national interest doctrine.

Leverage in these sectors may manifest through supply chain control, price influence, technological dependence, or corporate governance. Each creates a latent vulnerability.

Australia’s response, through FIRB and ministerial interventions, shows a maturing understanding of financial leverage as a vector of strategic risk. Policymakers are increasingly focused on pre-empting dependency before it manifests as coercion.

The coercion campaign exposed how economic ties can be weaponised. It also demonstrated Australia’s partial resilience: fungible goods found new markets, and mutual dependencies (like iron ore) insulated some sectors. Leverage is context-specific, it depends on the ability of both parties to substitute or absorb shocks.

Market Perspective... i.e. Where are the market opportunities?

• Critical minerals. I'd expect high volatility and regulatory scrutiny. FIRB actions, shareholder moves, or political announcements can swing equities.

• Agriculture. The risk persists in land and water acquisitions, but market access for crops like barley and wine remains vulnerable.

• Infrastructure. There may be long-term divestment or nationalisation trends presenting risks for foreign owners and opportunities for domestic capital.

• Cyber and compliance tech. This one a lot of people look to cover, however, demand likely to increase due to regulatory obligations like the SOCI Act.

• I expect Foreign Direct Investment (FDI) approvals to split into two tracks. Safe, low-risk deals will be approved quickly, while investments in sensitive sectors will face tough and detailed reviews. Im still new to the FIRB practices / controls so still researching there.

• Currency implications. AUD/CNY may remain sensitive to commodity flows and bilateral political signals.

• Due diligence. Investors, Companies and Government must incorporate geopolitical risk, ownership structures, beneficial control, and technology reliance all matter.

My Take

Chinese financial leverage in Australia highlights the thin line between opportunity and vulnerability. Investment builds prosperity but also creates exposure. The Darwin Port lease or lithium sector tensions show that influence can arise not from overt acts but from structural dependency. Australia’s regulators are evolving to meet this challenge, but effective management of this risk requires whole-of-government coherence.

The distinction between SOEs and POEs is blurring. Influence can occur regardless of ownership structure. Australia’s investment review regime must remain agile and political will is critical.

Resilience has been possible, but it requires intentional diversification. That means both export markets and inbound capital sources must broaden. Australia’s strategic posture should be to welcome investment, but only on terms that reinforce national interest, not undermine it.

This isn’t just an Australian story. It’s a case study in how middle powers can manage economic interdependence with strategic competitors.

A Few References I Came Across:

• Australian Strategic Policy Institute (ASPI). Various reports and analyses on China, Critical Technology, Economic Coercion, Port Security.

• Australian Government, Department of the Prime Minister and Cabinet. Review into the circumstances of the lease of the Port of Darwin, October 2023.

• Australian Parliament, Senate Economics References Committee. Foreign Investment Review Framework - Interim Report, March 2016.

• Foreign Investment Review Board (FIRB) / Australian Taxation Office (ATO). Annual Reports on Foreign Ownership of Agricultural Land and Water Entitlements.

• KPMG & University of Sydney Business School. Demystifying Chinese Investment in Australia report series.

• Lowy Institute. Analyses on China-Australia relations and economic coercion.

• Council on Foreign Relations (CFR), Atlantic Council, Center for Strategic and International Studies (CSIS), Hoover Institution. Publications on Economic Statecraft.

• Various news outlets (e.g., ABC News, The Australian, Sydney Morning Herald, Financial Times, Reuters) as cited in research material.

Disclaimer

The views expressed in this post are entirely my own and do not represent the official position of the Australian Government, the Australian Defence Force, or any other institution with which I am affiliated. This content contains no classified or confidential information and is based solely on publicly available sources (OSINT) and personal academic conjecture as part of my ongoing research. This content is provided for informational and analytical purposes only and does not constitute financial, investment, legal, or professional advice. The author is not a licensed financial advisor and does not make any recommendations regarding the buying, selling, or holding of any security, asset, or investment. Readers are strongly encouraged to conduct their own research and due diligence, and to consult with qualified financial, legal, or professional advisors before making any decisions based on the information provided. Markets are complex and subject to rapid change; any action taken based on this content is strictly at your own risk.

Foreword: For those that don't know, I’ve recently commenced a PhD focused on Financial Warfare and specifically, its conceptual and operational separation from Economic Warfare. This in conjunction with my work at BOKA Capital investing in Dual Use Technologies amongst NATO and AUKUS and allies should yield interesting learnings not covered in traditional media or military journals. This is my third post.

A Three-Part Case Study

In financial markets, sudden spikes in short selling i.e. bets placed against stock prices, can sometimes act like subtle tremors signalling deeper geopolitical earthquakes.

Historically, certain devastating events have raised suspicions about unusual trading patterns beforehand. Let's critically examine three notable examples and consider what we can learn from each.

#1 September 11, 2001... Did The Traders See It Coming?

The horrific events of September 11, 2001, shocked the world. Yet, in the days leading up to the attacks, traders took an unusual level of interest in betting against airline stocks, particularly United Airlines and American Airlines, whose planes were tragically hijacked (9/11 Commission Report, 2004).

Initially, this suspicious trading suggested someone might have had advance knowledge. Investigations by the SEC and FBI scrutinised these trades thoroughly. They discovered a significant surge in put options, indicative of bearish sentiment, just days before the attacks. Yet, despite the suspicious timing, authorities ultimately found no evidence linking the trades to terrorist groups or insiders (9/11 Commission Report, p. 172).

Thought Bubbles

• Could these trades have been coincidental, based merely on bearish airline industry forecasts?

• Does the absence of proof necessarily mean an absence of insider knowledge?

#2 Hamas Attack on Israel, October 2023... Coincidence or Foreknowledge?

On October 7, 2023, Hamas launched a devastating assault on Israel. Yet again, eyes turned suspiciously toward market movements preceding the attack. Research by law professors Robert Jackson Jr. (NYU) and Joshua Mitts (Columbia) highlighted unusual short-selling activity, particularly targeting the MSCI Israel ETF in early October (Jackson & Mitts, SSRN, 2023).

Their analysis suggested traders could have had foreknowledge, profiting substantially from market disruptions triggered by the attack. However, Israeli financial regulators quickly disputed these claims. The Tel Aviv Stock Exchange stated their data showed no significant anomalies, attributing Jackson and Mitts' findings to analytical errors, particularly around currency miscalculations (Reuters, 2023).

Thought Bubbles

• Are market regulators always incentivised to thoroughly investigate such sensitive claims?

• Could geopolitical tensions alone prompt traders to adopt short positions without insider information?

#3 The 2022 Russian Invasion of Ukraine... Market Anticipation or Insider Information?

Russia's invasion of Ukraine on February 24, 2022, rattled global markets, particularly commodities like oil and natural gas. Interestingly, prior to the invasion, analysts noted elevated speculative activity and bearish sentiment across European markets (TradingSim, 2022).

• At what point does informed speculation cross into ethically grey territory, is it ethically challenging?

• Can transparency around geopolitical risk assessments mitigate suspicions?

My (Personal) Reflections

The intersection between financial markets and geopolitical crises is murky. Suspicious trading prior to catastrophic events naturally sparks concerns, yet historical examples show mixed evidence of actual foreknowledge.

• The difficulty in distinguishing between savvy market anticipation and unethical insider trading.

• The challenges faced by regulators to conclusively prove wrongdoing.

• Are their countries or non-state actors warmongering for a profit?

These examples compel us to think deeply about the relationship between markets, information asymmetry, and geopolitical events. While suspicion is natural, definitive proof remains elusive, reminding us to approach such claims critically and cautiously.

References:

• The 9/11 Commission Report. (2004). National Commission on Terrorist Attacks upon the United States.

• Jackson, R., & Mitts, J. (2023). Suspicious Short Selling Before the Hamas Attack. SSRN.

• Reuters. (2023). Tel Aviv bourse disputes unusual trading claims.

• TradingSim. (2022). Navigating volatility: How geopolitical tensions shape global financial markets.