Germany's Federal Criminal Police Office confirms it bought NSO's Pegasus spyware in 2019 and used it in operations on terrorism and organized crime since March
Sources have confirmed media reports that federal criminal police purchased and used the controversial Israeli surveillance spyware despite lawyers' objections.
Context & Ripple Effects
Germany's Federal Criminal Police Office (BKA) has confirmed what media had reported: it bought NSO Group's Pegasus in 2019 and has run it in counter-terrorism and organized-crime operations since March — over internal legal objections. The confirmation lands amid a widening record of state use: an investigation traced Pegasus deployments across the CIA, UAE, Mexico and Saudi Arabia, while the FBI bought but never deployed it in the investigation into Pegasus' global spread.
The German move also cuts against the direction other democracies took once the tool became radioactive. French officials were reportedly in the final stages of a purchase in July but walked away after claims that French politicians were targeted, and Citizen Lab later documented an infection inside UK's No. 10 in its investigation of the commercial spyware industry. Berlin is now the first major Western government to openly acknowledge operational use.
First-order effects
- Germany's own lawyers flagged objections to the purchase, so the BKA now faces domestic legal and parliamentary scrutiny over whether terrorism and organized-crime targets were hacked within constitutional limits.
- NSO gains a rare public endorsement from a G7 law-enforcement agency at the same moment its client list — from Saudi Arabia to UAE intelligence users documented in the Pegasus investigation — is driving Western scrutiny of the firm.
Second-order effects
- Other EU interior ministries face a forced choice between following the BKA's precedent and the French path of abandoning procurement, with any future targeting of European officials by allied spyware likely to end such deals as it did France's.
- Pegasus' documented capabilities — real-time wiretapping, message reading and remote camera control shown in the Israeli police prototype revealed by Haaretz — raise the stakes for phone makers and carriers whose platforms are being exploited as a matter of routine policing.
Third-order effects
- Western democracies are splitting into two camps on commercial spyware — operational adopters like Germany versus abstainers like France and the FBI — which points toward codified national frameworks rather than a shared ban, even as infections of senior officials keep eroding trust among allies.
- If acknowledged law-enforcement use becomes normalized, the industry NSO leads shifts from covert proliferation to licensed government contracts, with export-control regimes and EU rules becoming the main check on who can buy intrusion tools.
The trend: Commercial spyware is moving from a covert, scandal-driven market toward openly acknowledged state procurement, with democracies diverging between institutional adoption and abstention.