The PDF landed after midnight: a single procurement line naming Graphite. I read it and felt my phone shrink in my palm. You should feel that tightening too.
I’ve followed spyware stories long enough to tell you when a thread is unraveling. NPR reports that ICE has finally acknowledged it uses Graphite, confirming what many privacy researchers suspected.
At a staff briefing, a member of Congress asked bluntly whether ICE was deploying Graphite
That question drew a written response from ICE acting director Todd Lyons, which NPR reviewed and summarized. Lyons frames the program as a response to “the unprecedented lethality of fentanyl” and says he approved use of “advanced technological tools” to confront what he calls exploitation of encrypted platforms by transnational criminal organizations.
Does ICE use spyware like Graphite?
Yes, according to NPR’s reporting, the agency has acknowledged using the tool. That acknowledgment lands after years of reporting and document leaks that pointed to a contract between ICE and Graphite’s owner, Paragon.
A procurement file sat between two pages of redacted invoices
Public reporting from The Guardian and Wired shows the Paragon agreement was signed in 2024 under the Biden administration and underwent at least one White House review. The Guardian later reported the review was lifted and procurement records suggest the earlier Trump Administration made Graphite available to ICE.
How does Graphite work?
Research and reporting describe Graphite as a potent surveillance implant. It can hide on smartphones, record activity inside apps that use encryption, and remove itself to erase traces. In practice, it can sit on a device like a ghost, observing without obvious indicators, and then disappear when the job is done.
A warrant or a line on a contract is not the same as a device in a pocket
ICE tells Congress the tool is used in fentanyl-focused investigations. But lawmakers raised specific concerns about Graphite’s reach and oversight. Those concerns prompted Lyons’ letter, which was explicitly written in response to Democrats worried about the spyware’s use.
That justification—fighting fentanyl—has been used to justify other extreme actions. Reporting shows the administration framed maritime strikes and foreign detentions as part of the same campaign: boats were blown up, and a foreign head of state was taken into custody in the name of fentanyl enforcement (report; the head of state was not charged with fentanyl trafficking). That line of defense can read like a small paper umbrella in a hurricane when the stakes are civil liberties.
An aide handed me a stack of counsel letters and redactions
Democrats asked for limits; ICE provided a narrower public explanation. But public-safety claims and redacted procurements don’t remove the technical realities: implants that reach into encrypted apps and then self-delete complicate accountability. I’m telling you this because the tools and the legal cover are moving faster than public debate.
Is use limited to fentanyl cases?
ICE says yes, but documents and previous procurement patterns raise questions about scope and oversight. Paragon’s software has been used in broader intelligence and law-enforcement contexts elsewhere, and the clearance processes that let specialized vendors work with U.S. agencies are not always transparent to the public.
You should ask who sets the rules, who audits the activity, and how victims learn their phones were probed—but you should also watch how rapidly the explanations change when a new crisis emerges. Are we willing to accept that calculus?