The modern spy does not need to cross a border in disguise. Sometimes, the border opens for him, the law protects him and the host country discovers the truth only after the damage is done.
A state can spend billions protecting its borders, fortifying its digital infrastructure, training its intelligence services and warning its citizens about foreign interference, only to discover that the most dangerous intruder may have arrived with official credentials, a diplomatic passport or a perfectly respectable business card. Welcome to the age of globalised espionage, where sovereignty is celebrated in speeches and quietly compromised in practice.
The problem is not espionage itself. States have spied on one another for centuries, and governments will continue doing so regardless of diplomatic declarations or international indignation. The problem is that the battlefield has changed while the legal architecture designed to manage it remains trapped in another century.
Diplomatic immunity was never intended to be a universal permission slip for criminal activity. Its purpose is to allow diplomats to perform their functions without intimidation, political persecution or arbitrary interference by the host state. The Vienna Convention on Diplomatic Relations established essential protections for international diplomacy, not a magical force field against accountability. Yet the distinction between protecting diplomatic functions and exploiting diplomatic privilege becomes increasingly uncomfortable when intelligence operations penetrate businesses, universities, research institutions, public administrations and the digital systems upon which ordinary citizens depend.
And who pays when the distinction collapses? Not the intelligence officer who returns home. Not the government that ordered the operation. The bill lands on the society whose trust, security and institutions have been compromised.
Modern espionage is no longer confined to someone photographing military installations from a suspiciously parked car. It can involve cyberattacks, commercial front companies, covert financing, recruitment of vulnerable individuals, theft of industrial secrets, sabotage of infrastructure and coordinated campaigns designed to undermine democratic confidence. The operative may be a diplomat, a business intermediary, a recruited insider or an anonymous figure behind a screen thousands of kilometres away. Sometimes the same operation combines all four.
This is the grey zone: activity deliberately designed to remain below the threshold that would trigger a clear military response while still inflicting strategic damage. Governments can deny responsibility, investigators struggle to establish attribution, and international institutions move at the speed of paperwork while digital evidence evaporates at the speed of a keyboard.
Meanwhile, the familiar ritual begins. A government announces an investigation. Another expresses outrage. Diplomats are summoned, expelled or exchanged. Press conferences multiply. Everyone insists that sovereignty must be respected. Then the machinery resumes, often with little more than a change of personnel.
Expelling a spy is not the same as dismantling the system that sent the spy. But proposing a new legal framework must not become an excuse for governments to grant themselves unlimited powers. That would be the other great absurdity: defending democracy by quietly dismantling its safeguards. If every suspicious foreign contact becomes a security threat, every researcher a potential agent and every journalist a convenient target for accusations of disloyalty, the supposed defence of sovereignty becomes a weapon against the very society it claims to protect.
The answer is not to abolish diplomatic immunity or abandon the Vienna Convention. Nor should governments be allowed to redefine espionage whenever political convenience demands it. Immunity protects international relations from arbitrary coercion; it does not erase the need for accountability. Any reform must preserve that distinction while addressing the realities of state-sponsored cybercrime, covert networks and hybrid operations.
International agreements should establish clearer procedures for investigating suspected intelligence-related crimes, preserving digital evidence, sharing information across jurisdictions and addressing abuses of diplomatic privileges. States should strengthen independent oversight, judicial review and safeguards against politically motivated prosecutions. Where immunity applies, credible allegations should trigger established diplomatic and legal procedures rather than either automatic impunity or arbitrary punishment.
There must also be consequences for states that repeatedly exploit the openness of societies they simultaneously seek to weaken. Carefully calibrated diplomatic measures, coordinated investigations and enforceable international standards would be more meaningful than theatrical declarations of outrage.
Of course, the governments most capable of influencing such reforms may also be those most reluctant to accept restrictions on their own intelligence services. That is the central hypocrisy of international security: states demand protection against foreign interference while reserving maximum freedom to interfere abroad.
The uncomfortable truth is that sovereignty in the twenty-first century cannot mean simply controlling territory. It must also mean protecting the institutions, information systems and public trust that allow a society to govern itself. A country whose infrastructure can be sabotaged, whose elections can be covertly manipulated and whose scientific knowledge can be systematically stolen may possess internationally recognised borders while losing control over essential parts of its future.
The spies will not disappear. Neither will the diplomats, the rivalries or the secret wars conducted behind respectable public language. But international law must stop pretending that yesterday's arrangements can automatically govern tomorrow's threats.
A diplomatic passport should facilitate diplomacy, not become an insurance policy against accountability. National security should protect citizens, not become a blank cheque for state power. And sovereignty should mean more than a flag, a border post and an indignant speech delivered after the damage is done.
Otherwise, we will continue performing the same tired ceremony: governments defending the principle of sovereignty in public while their intelligence services test its limits in private.
The spies will keep working. The lawyers will keep arguing. And ordinary citizens will keep discovering that the most sophisticated attack on their security may have arrived wearing a suit, carrying official papers and enjoying protections their own governments cannot easily challenge. That is not a failure of intelligence alone. It is a failure of political imagination. And the longer we refuse to confront it, the more expensive our respect for outdated assumptions will become.
