U.S. Treasury Removes Sanctions on Three Figures Tied to Predator Spyware

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has removed three individuals from its sanctions list who were previously linked to the Intellexa Consortium and its Predator commercial spyware. This action effectively reverses part of the sanctions imposed in 2024 under the Biden administration.

Who was delisted

The three individuals whose sanctions were lifted are:

  • Merom Harpaz – previously described as a senior manager in the Intellexa network.
  • Andrea Nicola Constantino Hermes Gambazzi – previously linked to companies holding distribution rights to Predator.
  • Sara Aleksandra Fayssal Hamou – reportedly provided managerial services within Intellexa.

Official explanation

According to Treasury communications, the sanctions removal was carried out after the individuals submitted petitions for reconsideration and “demonstrated measures to separate themselves from the Intellexa Consortium.” The decision is described as part of normal administrative procedures.

Context of original sanctions

These executives were previously sanctioned because of their ties to Intellexa, a consortium of companies that created and marketed Predator — a form of commercial spyware capable of stealth surveillance via “zero-click” attacks. Earlier actions by the Treasury targeted executives and entities involved in developing, operating, and distributing Predator, amid concerns it was used to surveil U.S. officials, journalists, and others.

What remains sanctioned

The founder of Intellexa, Tal Dilian, remains on the U.S. sanctions list and was not delisted. Other individuals or entities previously sanctioned are also still subject to restrictions.

Reactions & implications

  • Human rights and digital freedom advocates have criticized the removals, warning that it could send the wrong message about accountability for misuse of surveillance tech.
  • The Predator spyware controversy has broader international implications, having been tied to reported surveillance operations in countries such as Greece and attempts by foreign governments to target U.S. lawmakers.