By the authority granted to me as President under the Constitution and laws of the United States of America, I hereby issue the following order:
Section 1. Purpose and Policy
The scourge of cybercrime, fraud, and predatory schemes is siphoning away the hard-earned savings of American families, robbing them of a lifetime’s work, and wreaking havoc on the lives of our youth. This nefarious behavior—which encompasses ransomware, malware, phishing, financial fraud, “sextortion,” and various extortion methods—is frequently orchestrated by Transnational Criminal Organizations (TCOs) targeting our most vulnerable citizens. Alarmingly, some foreign regimes either support or turn a blind eye to these criminal enterprises, fostering an underground economy built on stolen identities, coercion, forced labor, and human trafficking.
It is the official policy of the United States to safeguard its citizens from these threats and bolster our financial and digital infrastructures against such attacks. The U.S. is committed to countering assaults on its citizens with a robust response that includes law enforcement actions, diplomatic initiatives, and, where necessary, offensive measures. We also aim to support victims of these crimes, enhance public awareness, and prioritize protective measures for those most at risk, thereby putting an end to the exploitation of Americans.
Sec. 2. Combating Scam Centers and Cybercrime
(a) The Secretary of State, the Secretary of the Treasury, the Secretary of Defense, the Attorney General, and the Secretary of Homeland Security, in collaboration with the Office of the National Cyber Director and under the guidance of the Assistant to the President and Homeland Security Advisor (APHSA), shall:
(i) Within 60 days of this order, conduct a thorough review of the current operational, technical, diplomatic, and regulatory frameworks to identify improvements that can be made to effectively combat TCOs involved in cyber-enabled crime and similar predatory activities targeting Americans; and
(ii) Within 120 days of this order, based on the findings from subsection (a)(i), present to the President, through the APHSA, an action plan detailing the TCOs behind scam centers and cybercrime, along with proposed strategies aimed at preventing, disrupting, investigating, and dismantling these networks. This action plan will include the establishment of an operational cell within the National Coordination Center (NCC), created under Executive Order 14159 of January 20, 2025, which will coordinate federal efforts to detect, disrupt, dismantle, and deter cyber-enabled criminal activities conducted by foreign TCOs targeting U.S. citizens, businesses, critical infrastructure, or public services.
(b) The action plan shall outline how, in accordance with applicable laws, the Attorney General and the Secretary of Homeland Security, with support from the Secretary of Defense, will utilize technological capabilities, threat intelligence, and operational insights from commercial cybersecurity firms and other non-federal entities to enhance the tracking and disruption of malicious cyber actors and their enabling infrastructures involved in cybercrime, fraud, and predatory schemes.
(c) The action plan and the NCC operational cell will incorporate mechanisms to enhance information sharing, operational coordination, and rapid response across the federal government, while aligning with existing law enforcement frameworks and efforts to counter cyber-enabled threats arising from foreign jurisdictions.
(d) The Attorney General will maintain a focus on prosecuting defendants involved in cyber-enabled fraud, including scam centers and sextortion schemes, and will pursue the most serious and provable offenses consistent with federal prosecution principles.
(e) To the fullest extent permitted by law, the Secretary of Homeland Security, through the Director of the Cybersecurity and Infrastructure Security Agency, will collaborate with the NCC to provide training, technical assistance, and resilience-building initiatives to support State, local, Tribal, and territorial (SLTT) partners, aiming to enhance defensive capabilities, share threat intelligence, and fortify SLTT partners’ critical infrastructure systems against cybercrime exploitation by TCOs.
Sec. 3. Victim Restoration Program
Within 90 days of this order, the Attorney General will present a recommendation to the President, via the APHSA, regarding the establishment of a Victims Restoration Program. This program is designed to provide, as much as the law allows and in alignment with the Department of Justice’s goal to serve all crime victims, restoration or remission to victims of cyber-enabled fraud schemes from funds recovered, forfeited, or seized from the TCOs responsible for such schemes.
Sec. 4. International Engagement
The Secretary of State, in partnership with the NCC, will engage with foreign governments to demand enforcement actions against TCOs operating within their territories and to foster greater cooperation with U.S. law enforcement. The Secretary shall take necessary steps to ensure that nations permitting such predatory actions face consequences consistent with U.S. law and policy. This may include limiting foreign aid, imposing targeted sanctions, enforcing visa restrictions, and, where appropriate, expelling foreign officials and diplomats complicit in these schemes. Furthermore, the Secretary will coordinate these actions with allies and partners to amplify the repercussions faced by nations that tolerate such predatory activities.
Sec. 5. General Provisions
(a) Nothing in this order shall be interpreted as impairing or affecting:
(i) the authority granted by law to any executive department or agency, or its head; or
(ii) the functions of the Director of the Office of Management and Budget regarding budgetary, administrative, or legislative proposals.
(b) This order shall be executed in accordance with applicable law and subject to the availability of appropriations.
(c) This order does not intend to, nor does it, create any right or benefit, substantive or procedural, enforceable at law or in equity by any party against the United States, its departments, agencies, or entities, its officers, employees, or agents, or any other individual.
(d) The expenses incurred for the publication of this order shall be covered by the Department of Homeland Security.
DONALD J. TRUMP
