The Prisoner Currency

In January, Katsina State in northern Nigeria released 70 suspected bandits from prison. In exchange, roughly 1,000 kidnapped people came home. The deal was struck weeks after Nigeria's federal government banned ransom payments nationwide, making it a crime to pay cash for captives ^[1]. So the state paid in prisoners instead.

During Nigeria’s civil war, prisoners were exchanged, just as it happened in negotiations involving Boko Haram — Nasir Muazu

The security commissioner was not hiding the logic. He was naming it. The conversion was explicit: when the state forecloses financial payment, it reaches for the next currency available — political concession. The same mechanism operates in the cyber domain, and there the evidence comes from the attackers themselves. A negotiator for the Karakurt ransomware group, sentenced to more than eight years by the US Justice Department in May, admitted the group's operational logic without evasion.

the group needed to build a reputation as "destroyers" if victims refused to pay. — Deniss Zolotarjovs

Refused payment did not produce disengagement. It produced a reputation for destruction — a brand built on the promise that saying no would cost more than saying yes. The DOJ's prosecution of the negotiator layer itself, not just the hackers, is part of a widening state architecture designed to eliminate every channel through which ransom money flows ^[2]. The spectrum from that threat to its fulfillment is short. In April, the ShinyHunters group breached Rockstar Games, demanded payment, and when the company refused, published stolen files before the stated deadline ^[3]. The data was the leverage; the refusal was the trigger. At the far end of that spectrum sits the Iran-linked Handala group, which in March wiped 200,000 devices across 79 countries and never asked for money at all ^[4]. Handala framed the attack in explicitly political terms.

All the acquired data is now in the hands of the free people of the world, ready to be used for the true advancement of humanity and the exposure of injustice and corruption. — Handala

When financial extraction is off the table from the start, the attack is political by design — destruction as statement, not as leverage. The doctrine that produces these outcomes is not rhetorical. It is operational, and it is comprehensive. INTERPOL's Operation Synergia III dismantled more than 45,000 malicious servers across 72 countries ^[5]. The UK's Operation Destabilise took apart the crypto-laundering networks that converted ransomware proceeds into Tether stablecoins, cutting the plumbing that made digital ransom possible ^[6]. The European Union designated Russia a high-risk jurisdiction for money laundering, raising the cost of routing any payment through Russian infrastructure ^[7]. The United States has sanctioned Hamas and Muslim Brotherhood financial networks, targeting the sham charities and money exchangers that move funds to hostage-taking groups ^[8]. Nigeria's President Bola Tinubu has made the doctrine a national creed, expanding the military from eight to twelve divisions while declaring the state will not negotiate for ransom ^[9]. The architecture is real. That is what makes the perverse incentive more consequential, not less. The conversion from financial to political transaction is not total. Amnesty International documented at least 1,100 abductions across northern Nigeria in just four months of 2026.

Apart from killing people, gunmen are now on a rampage of abductions, largely for lucrative ransom. — Isa Sanusi

The Nigerian government itself, rejecting a foreign leader's characterization of the crisis as religious persecution, described the mass abductions differently.

Radical Islamists are responsible for this mass slaughter. — Donald Trump

Financial extraction has not disappeared. The conversion is a tendency visible at the margins where the doctrine bites hardest — not a completed transformation. But those margins are where the doctrine's logic is tested, and what happens there reveals the direction of travel. The Katsina prisoner release was not an anomaly in the mechanics of conflict resolution. In April, the Democratic Republic of Congo and the M23 rebel group exchanged prisoners — 311 from M23, 166 from the government — as part of a peace process ^[10]. The mechanism is the same one used in formal civil-war peace deals. What Katsina did was apply it to criminal banditry, and in doing so it blurred the line the doctrine was built to defend: the line between a criminal who extorts and a political actor who negotiates. The critics of the Katsina deal saw where the logic led.

a dangerous precedent — Abdullahi Kofar Sauri

The doctrine was built to delegitimate hostage-taking by starving it of cash. The pattern accumulating from Katsina to the dark web suggests it is doing the reverse: conferring on hostage-takers the status of adversaries to be negotiated with, not criminals to be starved — and that status, once conferred, is not easily revoked.