The following is by Asha Rangappa, former FBI counterintelligence agent and current associate dean at Yale Law School. This was originally published at JustSecurity.org.
Asha is a great Twitter follow and recently launched a website.
The Trump-Russia saga has more characters than War and Peace and plot twists harder to follow than Game of Thrones. So making sense of the latest news — that the FBI had taken out not one, but two surveillance orders under the Foreign Intelligence Surveillance Act (FISA) on former Trump campaign chairman Paul Manafort — can be difficult to put into context. But in fact, this new piece of information actually can help connect the counterintelligence and criminal investigations that Special Counsel Robert Mueller is overseeing, and show how a FISA warrant may have played a role in each.
I have already provided a detailed description of the (onerous) process of obtaining a FISA order, and the legal standards it requires. The only thing to add in Manafort’s case is that since he is a U.S. person (or USPER, in intel slang), the standards to obtain a FISA warrant on him are slightly higher than the generic process I described in my earlier piece. First, the probable cause standard required the FBI to provide evidence that Manafort was “knowingly engaging in clandestine intelligence activities” (rather than merely being “an agent of a foreign power”)— in other words, that he wasn’t just acting on behalf of a foreign power, but that he was doing so with full knowledge that what he was doing involved spying. Second, in order to continue monitoring Manafort, the FBI would have been required to check in with the FISA court every 90 days and show that their surveillance had, in fact, produced foreign intelligence information. Only with this continuing, additional evidence would the FISA order be renewed for an additional 90 days at a time. Keeping these factors in mind, let’s look at what we know. We know that the FBI had one FISA surveillance order on Manafort on or about 2014. This was in relation to his consulting work on behalf of the pro-Russia ruling party in Ukraine at the time. We also know that the surveillance ceased at some point before Manafort joined President Trump’s campaign in 2016. It then recommenced at some point after that, based on his connections with Russian intelligence and evidence suggesting that he was encouraging them to interfere in the presidential election. That surveillance continued into at least early 2017. The “gap” covered the period of time when Manafort, Donald Trump Jr., and Jared Kushner met with Russians at Trump Tower to discuss — depending on whose version you believe — “adoptions” or incriminating information the Russians claimed to have on Hillary Clinton. Following along so far? Good.
Let’s look at the “gap.” According to reporting, the initial FISA surveillance ceased after a court found that the FBI was no longer collecting foreign intelligence based on that order. This likely would have occurred at one of the 90-day renewal points after the surveillance began. Now, one conclusion might be that there was no foreign intelligence activity actually happening — or perhaps that the basis for this order itself was somewhat flimsy. However, if the order had been renewed at least once since it commenced, which would be likely even if it began in late 2014 or early 2015, that was probably not the case: After all, in order to renew the order at any point prior to it ceasing, the FBI would have had to produce ongoing foreign intelligence collection.
I invite you to consider another possibility. If Manafort was already being developed by Russian intelligence since 2014, and was approached in a more concrete, operational way around summer 2016, then they would likely want him to begin communicating with them through other means than he was already using. If this happened, collection on the lines, accounts, or facilities targeted by the initial FISA order would go dry, and would explain why the surveillance ceased. In other words, there was no longer any foreign intelligence activity happening on the first FISA — but that’s because it was happening somewhere else.
(It’s worth noting here that a FISA order would not necessarily need to cover only phone lines, or even a single mode of communication; as long as the FBI could prove that the mode of communication was being used by the target and likely to produce foreign intelligence, multiple communication channels could be authorized in the same order — you don’t need to obtain a separate FISA warrant for a phone number and an email address, for example, as long as you can demonstrate that both belong to and are used by the target.)
That the first FISA order ceased because Manafort became “operational” is admittedly purely speculative. But based on my experience working against foreign intelligence targets, this would be consistent with the timeline in several respects. First, the June 2016 Trump Tower meeting has been characterized by many intelligence experts as a “test run” — an experiment to see how open members of the Trump campaign might be to engaging in some potentially illegal behavior in order to benefit the campaign. Having Manafort already on board would make sense in this scenario: Even if this might have been only an initial approach to Donald Trump, Jr. and Jared Kushner, the Russians would know they had at least one person in the campaign — Manafort — at that point who was “all in,” and could make the meeting less threatening for the newbies.
Second, it helps explain why a second FISA order was brought before the FISA court. It would make sense that after the initial FISA surveillance ceased and Manafort “went dark,” the FBI would be trying to determine what he was up to. We know that in this period the FBI obtained new intelligence that Manafort was in contact with the Russians and had enough evidence to substantiate a second FISA application. The new intelligence may have formed the basis to go back on the same lines or accounts as in the initial FISA. But if the FBI uncovered new channels or modes of communication that Manafort was using with the Russians, this could also be the reason for the second FISA warrant: Just because the FBI went up for a second time on the same target does not mean that they recommenced surveillance on the same channels as before. (This latter possibility implies some uncharacteristic operational sloppiness on the part of the Russians, but considering that Manafort was taking notes from the Trump Tower meeting on his iPhone and emailing directly with a Russian oligarch in code about offering secret briefings on the Trump campaign, this is not necessarily a stretch.)
Third, this theory would explain Mueller’s keen interest in Manafort in particular. Mueller’s investigation is first and foremost a counterintelligence investigation. Regardless of whether Don Jr. or Jared Kushner had any subsequent meetings or contacts with the Russians or colluded with them in their active measures, the FISAs suggest that Manafort holds the real keys to the kingdom. Namely, how was election interference plan conceived? What operational measures were involved? Was there any quid pro quo? Who else was in on it? This is to emphasize that Mueller may be just as — if not, more — interested in Manafort spilling the identities and methods of the Russians in this whole scenario as in those of any Americans members of the Trump campaign who were involved. After all, we know that with the Facebook search warrant that Mueller is potentially interested in pursuing Russians living in Russia who tried to disseminate disinformation in the U.S. He would surely be as interested in identifying and nailing the Russian operatives who participated in active measures to influence the election here in the States.
Which brings us to Mueller’s criminal investigation on Manafort. To get Manafort to talk, Mueller needs some, shall we say, “incentives.” The prospect of serious jail time for not cooperating is usually effective. The problem is, that for all of Manafort’s redflaggy behavior with the Ukranians and the Russians, there aren’t really a lot of laws against spying. There’s the Espionage Act, which relates to defense and classified information and doesn’t apply in the current scenario. And there’s the Foreign Agent Registration Act, which as Steve Vladeck explains is a procedural statute: People or entities designated as foreign agents must register if the Department of Justice asks them to, but as long as they comply they are out of the crosshairs of criminal prosecution. Manafort retroactively registered as a foreign agent in June.
Financial crimes, by contrast, carry significant penalties, particularly when multiple charges are added together. Here is where the FISA orders could have come into play again. It’s important to emphasize that the goal of using a FISA warrant is not to collect evidence of a crime; it’s to collect foreign intelligence information. However, since 9/11 and the passage of the USA PATRIOT Act, evidence of criminal activity that is obtained through the course of a FISA investigation can be used to open a criminal case, as long as a “significant purpose” of the FISA inquiry was to obtain foreign intelligence. Here, the FISA warrants on Manafort were based on his intelligence connections. But if he was engaging in financial shenanigans, related or unrelated to his alleged intelligence activities, signs of it may have become apparent during the FISA monitoring, allowing the FBI to open a separate criminal case on Manafort — which is where we are now.
We don’t know the content of the communications monitored under the FISA orders, which might really add the missing links to what connections, if any, existed between the Trump campaign and Russia. But the existence of the FISA warrants themselves on Manafort, and their timing, gives us a way to understand the facts so far. So even if, like me, you’ve never made it all the way through War and Peace (I don’t even watch Game of Thrones), you can still follow along with Mueller: There’s a method to his madness against Manafort.
Apparently it all flows from Manafort’s efforts to repair his financial position. Russian espionage often works this angle. It all depends of what they thought he had to offer? The majority of his messaging had to be encrypted, didn’t it? And staying objective, he could have been a double or triple agent. And does FISA lead to key logging, to circumvent the encrypted send characters?
Given enough time any encryption can be broken by brute force. So if you have weeks and a supercomputer, no problem.
Just realize that there is such an entity that has the experts and the expertise to accomplish this ona daily basis.