US terrorist designation of Autistici/Inventati extends sanctions to hosting infrastructure

On August 26, the U.S. State Department, working with the Treasury Department, designated the Italy-based digital collective Autistici/Inventati as a Specially Designated Global Terrorist under Executive Order 13224, Decode39 reports. The move stands out because the target is not a group accused of carrying out attacks, but a provider of communications and hosting services — and because the designation does not bind Italy or the European Union, where the collective actually operates.

What the US alleges

The State Department describes A/I as an extremist organisation that builds and runs digital infrastructure used internationally by violent Antifa cells and other far-left groups. Its services, as relayed by Decode39, include encrypted email and chat, web hosting, secure videoconferencing and streaming, anonymity tools, and the infrastructure behind the Noblogs platform. Treasury says the collective was designated for having "materially assisted" or provided technological support, goods or services in support of an act of terrorism. The designation specifically cites the Kurdistan Workers' Party (PKK), which both the United States and the European Union list as a terrorist organisation.

Infrastructure becomes the target

In an interview with Decode39, Beniamino Irdi, senior fellow at the German Marshall Fund and CEO of Highground, argues that the sanction itself matters less than the principle behind it. In his reading, this is the first time the logic of material support has been applied so openly and forcefully to the technology layer: Washington is weighing not just what an entity does, but what it enables others, including actors in third countries, to do through its services. The result is that infrastructure itself can become the object of a countermeasure, even when the provider is not an operational organisation in any traditional sense.

Sanctions that bite through third parties

Irdi expects the formal asset freeze to matter little in practice, since a small Italian association is unlikely to hold significant assets in the United States. The real leverage, he says, comes from de-risking: once a designation lands, banks, payment processors, domain registrars, hosting companies and connectivity providers tend to cut ties pre-emptively to protect their own compliance positions. As he frames it, an organisation can be pushed out of the services market with no court ruling in Italy and potentially no criminal proceeding ever opened. The coercive power lies in making it progressively impossible for the target to bank, host or be served anywhere.

A shift from perpetrators to enablers

Irdi links the broader shift to how hostile activity in Europe has evolved. After the mass expulsion of Russian intelligence officers operating under cover, he says Moscow has leaned increasingly on intermediaries and proxies: people recruited remotely, sometimes from criminal environments or in financial distress, paid in cryptocurrency and often unaware of who is really tasking them. That model buys deniability, and when operations run through chains of intermediaries, Irdi argues, it is natural for the response to move from perpetrators to enablers. He stresses that the U.S. designation does not claim A/I is controlled by Russia and should not be read that way; what carries over is the analytical habit of mapping the networks and tools that make operations possible.

The safeguards dilemma

The central problem, according to Irdi, is the gap between an intelligence assessment and the evidence a court would require. A designation of this kind may be intended to signal that infrastructure-level containment should spread to other countries, but if the criterion stays vague he warns it risks dividing the very allies Washington wants on side. He notes that the same infrastructure can serve a dissident, a journalist, a political activist or someone claiming responsibility for sabotage, and that A/I's practice of choosing projects for their political compatibility is, on its own, a thin basis for judicial action. The difficult line to draw, he argues, is between political affiliation, protest, ideological radicalism and concrete support for violence.

Why it matters

According to Decode39's framing, this is the first time U.S. counterterrorism sanctions have openly targeted a European provider of encryption and hosting rather than an operational group. It demonstrates how sanctions actually take effect in practice, through private-sector de-risking rather than courtroom proof, and it leaves Rome and Brussels out of step with Washington, since the collective appears on neither of their terrorist lists. For everyone running privacy-preserving infrastructure, it draws a new and still unsettled boundary around what counts as supporting terrorism.