PIRA as a template of power: from insurgent strategy to Hybrid Threats

Historical Legacy and Birth of a Hybrid Actor

The Provisional Irish Republican Army (PIRA), formally established in December 1969 as a splinter faction of the original Irish Republican Army, stood at the epicenter of „The Troubles,“ a protracted conflict in Northern Ireland lasting three decades. The PIRA’s primary objective was unequivocal: to achieve a unified Ireland and terminate British rule in the six counties of Northern Ireland. To this end, the organization waged an intense and sustained insurgency campaign that included targeting British security forces, police, and civilian infrastructure across the region.

However, reducing the PIRA merely to a terrorist organization is analytically insufficient and potentially misleading for modern security assessments. The PIRA was never
a static entity; it underwent a rapid and profound evolution during the conflict, transforming from initially „amateur“ and „unorganized“ cells into one of the most resilient and complex non-state actors of the 20th century. Its lasting effectiveness lay precisely in its operational complexity: the ability to seamlessly interconnect disparate components—namely military insurgency, political mobilization, and organized crime—into a single, highly adaptive strategy.

The PIRA’s Multi-Domain Structure and Operational Imperative

Academic analysis increasingly classifies the PIRA as a sophisticated, multi-domain hybrid actor. This classification is substantiated by the systematic layering of its internal network, which was built on three core, mutually reinforcing pillars. First, the Military/Terrorist Dimension comprised the clandestine armed units and brigades responsible for carrying out violent operations. These ranged from bombings and assassinations to the deployment of sophisticated improvised explosive devices (IEDs). Analysis of the network connections explicitly categorized members by their brigade affiliation and participation in violent activities. Second, the Political Dimension (Sinn Féin) was crucial, as the PIRA maintained this political wing, to provide the movement with a public, legitimate voice. This structure allowed the organization to participate in the democratic process and gain political capital, which was essential for long-term survival and securing negotiating leverage. Finally, the Key Criminal Dimension was fundamental, as the longevity of the insurgency required consistent and vast funding. The PIRA’s structure, as revealed in network studies, included
a functional category explicitly dedicated to criminal operations, such as „thieves/kidnappers/drug smugglers“. This criminal activity was therefore not
a secondary or optional sideline for the PIRA but was, instead, a fundamental, structurally defined function, necessary for its long-term viability and the financing of its political and military objectives.

The PIRA thus transcended the traditional framework of terrorism by integrating political legitimacy with covert warfare and a professionalized criminal enterprise. The lasting legacy of the PIRA does not rest on its now largely irrelevant nationalist ideology, but rather in this complex operational model—a template that masterfully combined political legitimacy, covert military violence, and a professionalized criminal enterprise—offering critical lessons for understanding and countering contemporary criminal-hybrid threats facing the European Union.

The Dual Game of Power: The Symbiosis of „Armalite and the Ballot Box“

The operational genius of the PIRA was rooted in its dual strategy, succinctly summarized by the slogan „Armalite and the Ballot Box“. This strategy, formally adopted in the 1980s, did not present a choice between politics and violence, but rather an explicit adoption of parallel military and electoral campaigns. It serves as a historical precedent for two key modern hybrid warfare concepts: „Going Mainstream“ (political infiltration) and „Going Dark“ (decentralized operational security).

The „Ballot Box“ strategy initiated the transformation of Sinn Féin’s political wing from a „fringe anti-system protest organization“ into a fully engaged and ultimately dominant political force in Northern Ireland. Sinn Féin’s success, culminating in its institutionalization and gaining a legitimate seat at the negotiating table, is a textbook example of „Going Mainstream“. Crucially, academic analyses confirm the symbiotic relationship between the two wings: the „Armalite“ military campaign directly contributed to the mobilization of new voters in favour of Sinn Féin. Thus, violence was not an impediment to political ambitions; on the contrary, it actively generated political capital and leverage necessary to enforce demands.

Concurrently, as the political wing became more visible, the military wing had to „Go Dark“ to preserve its operational security and resilience. The PIRA abandoned its traditional hierarchy and transitioned to a semi-autonomous, decentralized „clandestine cell system“. The cells were small, typically numbering two to five people, and were strictly compartmentalized. The organization uncompromisingly adhered to the „need-to-know“ principle, thereby minimizing the flow of information and limiting damage from potential infiltration. Although the PIRA maintained the facade of a formal hierarchy externally, it functioned in practice as a „hollow hierarchy“, where important operational decisions were made decentrally at the local level. This „parallel organizational“ model was the core of the hybrid strategy: the covert, clandestine component created pressure and crisis, which the mainstream, legitimate component subsequently exploited to gain political power.

Operational Ingenuity: From Street Guerrilla Warfare to Economic Warfare

When analysing the tactical legacy of the PIRA, it is crucial to focus on the process
of tactical convergence– the study, adaptation, and replication of successful tactics by other actors. The thirty-year conflict in Northern Ireland functioned as an „open source“ laboratory for developing and testing urban guerrilla tactics. Although the PIRA’s early efforts were described as „amateur“, the organization rapidly underwent an „intense learning process“, resulting in operational art that was unmatched in its time.

A key element of this evolution was the establishment of a specialized „engineering department“, which professionalized the research, development, and production
of Improvised Explosive Devices (IEDs) and mortars, such as the sophisticated Mark 15 mortar. This department, safely located beyond the reach of British forces, was responsible for developing standardized, reliable, and safe devices for users, which drastically reduced the number of „own goals“ and increased the effectiveness
of operations.

However, the most significant tactical innovation was not the development of weapons itself, but the strategic shift towards economic warfare. The PIRA deliberately relocated its operations to „target-rich“ urban environments to maximize financial and psychological impact. The group began to target not only military and police objectives, but also economic infrastructure. This strategy culminated in attacks on the London financial centre – the 1992 bombing of the Baltic Exchange, and the 1996 attack on Canary Wharf. These attacks caused billions of pounds in damage and exposed the vulnerability of the UK’s financial arteries. The systemic impact was so profound that it led to market failure in the insurance sector, where terrorism risks became uninsurable. This situation forced the British government to take an unprecedented step: the creation of the state-backed reinsurance fund, Pool Re. The PIRA thus demonstrated that a non-state actor could trigger a systemic crisis and compel a state response by successfully attacking a key economic node.

This operational manual was not confined to Northern Ireland. Evidence points to the direct transfer of know-how, with PIRA experts providing „foreign training“ to FARC terrorists in Colombia, enabling them to execute sophisticated urban attacks that were previously „beyond their capacity“. Similarly, groups like Hezbollah, and Chechen rebels learned and emulated the tactics, perfecting IEDs and urban warfare strategies. In essence, the PIRA created and globally disseminated an „open-source manual“
for modern insurgency.

The Criminal Economy: The Bridge of the Crime-Terror Nexus

The crucial link connecting the PIRA to contemporary global threats is its systemic financing through organized crime. The PIRA’s long-term campaign was costly, and for its sustainability, it was essential to move away from reliance on external donations. The PIRA leadership recognized that it needed to transform the group into a „self-sustaining entity“ by establishing a „formidable black economy“, which served as the foundation of its „political economy“. This criminal activity was necessitated by the political strategy; profits were needed not only for weapon purchases but also to fund Sinn Féin’s increasingly expensive electoral campaigns.

The PIRA operated a highly diversified criminal portfolio, thereby fully establishing itself within the „crime-terror nexus“ framework. Its main sources of revenue were multi-faceted. The organization relied heavily on Racketeering and Extortion, which provided a low-risk and regular stream of income through activities like collecting „taxes“ from legitimate businesses and operating „security“ services. This stable income was supplemented by Smuggling and Fraud, specifically the extensive trafficking of commodities such as fuel, cigarettes, and alcohol often alongside social welfare fraud. Finally, Robbery, particularly armed robberies, was consistently described
as a „primary source“ of funding.

Critically, the PIRA not only committed crimes but also „provided goods and services to communities“. Its racketeering functioned as a parallel taxation system, and the „dirty money“ acquired was reinvested into the struggle: for purchasing weapons, „funding social networks,“ and „founding political parties“. The PIRA thus effectively constructed elements of a shadow state. This criminal operation culminated in the 2004 Northern Bank robbery, in which £26.5 million was stolen. The Independent Monitoring Commission (IMC) unequivocally attributed this sophisticated operation to the PIRA leadership and noted that Sinn Féin had to bear responsibility for this criminality. This incident also exposed a logistical problem: the PIRA suddenly had „so much cash they couldn’t process it“, demonstrating that its challenges were no longer those
of a terrorist group but had become the logistical issues of a drug cartel.

Hybrid Infiltration of Europe: The New Criminal Insurgency

The PIRA model – systemic infiltration, corruption, and targeted violence – is now being replicated in the heart of Europe with alarming efficacy by transnational criminal-hybrid actors. Recent EUROPOL reports on the Serious and Organised Crime Threat Assessment (EU-SOCTA 2025) identify the „changing DNA“ of organised crime
as a fundamental threat to the EU, with the key tactics of this threat being „destabilisation of society,“ „criminal exploitation of legal business structures,“ „corruption,“ and „violence“. This is an exact description of the PIRA operational model, applied globally.

Latin American drug cartels (including networks linked to the Mexican Sinaloa cartel and the Colombian Clan del Golfo) are implementing the PIRA strategy by focusing not merely on drug sales, but on the systematic infiltration and control of critical European infrastructure. Their primary targets are Europe’s „logistics hubs“, particularly maritime ports such as Algeciras and Valencia, which serve as gateways for massive cocaine imports.

Just as the PIRA used legitimate businesses (taxi services) as a cover, cartels today exploit Legal Business Structures (LBS), especially in the food sector, as fronts for mass smuggling and money laundering. Repeated record seizures of tons of cocaine hidden in containers of bananas from Ecuador exemplify this. This infiltration of legal economic chains constitutes a hybrid attack on the sovereignty of EU member states.

Cartels cannot operate in Europe alone. Therefore, they forge alliances with local criminal groups, particularly the Italian ‚Ndrangheta and Albanian networks, which provide crucial local infrastructure. Corruption is the main tool enabling the control of logistics hubs. ‚Ndrangheta members actively recruit „corrupt port workers“ and customs officials, who serve as „enablers“ and ensure containers pass checks.

This systemic infiltration is underpinned by the importation of extreme violence, the modern equivalent of the „Armalite.“ EUROPOL reports detail the involvement of gangs in „extortion, kidnapping, and extreme violence“, including the discovery of „torture chambers“ in Rotterdam and gangs in Marseille armed with automatic weapons. The use of teenage hitmen to settle scores on the Spanish coast demonstrates a level of brutality previously unseen in Europe. This is not merely crime, but a criminal insurgency aiming to seize control of strategic nodes on sovereign EU territory.

Strategic Conclusion: Resilience Against State Erosion from Within

The legacy of the Provisional Irish Republican Army for 21st-century European security does not lie in its ideology, but in its enduring and complex operational model. The threat to Europe today is not primarily traditional terrorism or conventional military takeover, but the slow and systematic erosion of the state from within. This erosion is executed by criminal-hybrid actors who, like the PIRA, combine clandestine violence, sophisticated logistics, the exploitation of LBS, and systemic political and administrative corruption to undermine the foundations of the rule of law.

The latest development revealed by EU-SOCTA 2025 presents an even more alarming dimension: the emergence of a „shadow alliance“. Criminal networks, which possess logistical infrastructure and the capacity to commit violence for hire, are now demonstrably operating as „proxies for hybrid threat actors“, such as Russia. These networks are hired to carry out destabilization operations (sabotage, arson, cyberattacks), blurring the final line between organized crime and geopolitical conflict.

The concluding recommendation must therefore be strategic, not merely descriptive. If the PIRA was the politics-leads-crime model (a political group adopting crime to fund its war), then the cartels represent the more dangerous crime-leads-politics model: criminal enterprises adopting terrorist and political tactics to protect their endless profits. Political goals, such as those of the PIRA, can eventually be negotiated; the endless pursuit of profit cannot.

Recommendations for Strategic Resilience: A fundamental strategic recalibration
of the threat is required. European institutions and member states must cease siloed threat separation, the fight against a drug cartel in the Port of Algeciras cannot be separated from the fight against Russian destabilization. This is a single, hybrid threat. Consequently, the EU and NATO must approach the fight against these criminal-hybrid actors with the same strategic seriousness, coordination, and resource commitment they dedicate to traditional terrorism or conventional warfare. This necessitates the adoption of counter-intelligence methods and the mapping of PIRA-style „hollow hierarchies“ to penetrate modern criminal networks. Furthermore, the defence
of economic sovereignty must be paramount. The key predicted battlefield will remain critical logistical infrastructure (ports, data centres, financial nodes). Europe’s future defence demands massive investment in protecting these LBS from infiltration and corruption, constituting, in essence, a preventive war against the erosion of the state from within.

 

Sources:

Cambridge Core. The Moral Parameters of Violence: The Case of the Provisional IRA | Journal of British Studies. (https://www.cambridge.org/core/journals/journal-of-british-studies/article/moral-parameters-of-violence-the-case-of-the-provisional-ira/EAAB34AD5B578D8113AC696F35764E28, accessed November 10, 2025).

criminologyjournal.org. Hybrid Threats: Cartel and Gang Links to Illicit Global Networks. (https://www.criminologyjournal.org/uploads/1/3/6/5/136597491/hybrid_threats.pdf, accessed November 21, 2025).

CSIS (2025). Tracking Transatlantic Drug Flows: Cocaine’s Path from South America Across the Caribbean to Europe. (https://features.csis.org/tracking-transatlantic-drug-flows-cocaines-path-from-south-america-across-the-caribbean-to-europe/, accessed November 25, 2025).

DTIC (2002). Guerrilla Warfare Tactics in Urban Environments. (https://apps.dtic.mil/sti/tr/pdf/ADA416603.pdf, accessed November 10, 2025).

Europol (2025). 6.5 tonnes of cocaine found hidden between bananas in Colombia and Spain. (https://www.europol.europa.eu/media-press/newsroom/news/65-tonnes-of-cocaine-found-hidden-between-bananas-in-colombia-and-spain, accessed November 17, 2025).

Europol (2025). EU-SOCTA 2025 – Europol – European Union. (https://www.europol.europa.eu/cms/sites/default/files/documents/EU-SOCTA%202025%20-%20Executive%20Summary.pdf, accessed November 22, 2025).

Europol (2025). Italian operation takes down corrupt port workers facilitating ‚Ndrangheta drug trafficking activities – Customs officer features among the arrested. (https://www.europol.europa.eu/media-press/newsroom/news/italian-operation-takes-down-corrupt-port-workers-facilitating-%E2%80%98ndrangheta-drug-trafficking-activities, accessed November 24, 2025).

Europol (2024). Leveraging legitimacy: How the EU’s most threatening criminal networks abuse legal business structures. (https://www.europol.europa.eu/sites/default/files/documents/Europol_report_-Leveraging_legitimacy-_How_the_EU_most_threatening_crim_networks_abuse_legal_business_structures.pdf, accessed November 23, 2025). 

Europol (2025). Marseille: 16 arrests in a crackdown on a network with ties to the Sinaloa cartel. (https://www.europol.europa.eu/media-press/newsroom/news/marseille-16-arrests-in-crackdown-network-ties-to-sinaloa-cartel, accessed November 15, 2025).

Europol (2025). The changing DNA of serious and organised crime. (https://www.europol.europa.eu/cms/sites/default/files/documents/EU-SOCTA-2025.pdf, accessed November 20, 2025).

Försvarshögskolan. When the boundaries blur between terrorism and organised crime. (https://www.fhs.se/en/swedish-defence-university/stories/2025-02-05-when-the-boundaries-blur-between-terrorism-and-organised-crime.html, accessed November 21, 2025).

Office of Justice Programs. FRAUD, EXTORTION, AND RACKETEERING: THE BLACK ECONOMY OF NORTHERN IRELAND. (https://www.ojp.gov/ncjrs/virtual-library/abstracts/fraud-extortion-and-racketeering-black-economy-northern-ireland, accessed November 17, 2025).

IISS (2024). The Expansion and Diversification of Mexican Cartels: Dynamic New Actors and Markets. (https://www.iiss.org/publications/armed-conflict-survey/2024/the-expansion-and-diversification-of-mexican-cartels-dynamic-new-actors-and-markets/, accessed November 18, 2025).

King’s Research Portal. The Political Economy of the Provos: Inside the Finances of the Provisional IRA – A Revision. (https://kclpure.kcl.ac.uk/portal/files/62491411/Inside_the_Finances_of_the_PIRA_RAINSBOROUGH_AcceptedJanuary2017_GREEN_AAM.pdf, accessed November 13, 2025).

National War College. Rethinking Intersections of Crime and Terrorism: Insights from Political Economies of Violence. (https://nwc.ndu.edu/Portals/71/Images/Publications/Rethinking%20Intersections%20of%20Crime.pdf?ver=EER5IvXMno2uhYmqM7aWhw%3D%3D, accessed November 19, 2025).

Pool Reinsurance. The IRAs Mainland Bombing Campaign and the Founding of Pool Re. (https://www.poolre.co.uk/terrorism-threat-publications/the-iras-mainland-bombing-campaign-and-the-founding-of-pool-re/, accessed November 11, 2025).

ResearchGate (2013). The PIRA, D-Company, and the crime-terror nexus. (https://www.researchgate.net/publication/233200828_The_PIRA_D-Company_and_the_crime-terror_nexus, accessed November 8, 2025).

Office of Justice Programs. FARC Gives Notice of an Urban Campaign. (https://www.ojp.gov/ncjrs/virtual-library/abstracts/farc-gives-notice-urban-campaign, accessed November 11, 2025).

RUSI. Geopolitics of Impunity: Transnational Organised Crime in the Context of the Rise of Global Authoritarianism. (https://www.rusi.org/networks/shoc/informer/geopolitics-impunity-transnational-organised-crime-context-rise-global-authoritarianism, accessed November 21, 2025).

Taylor & Francis Online (2025). Full article: Lethal Connections: The Determinants of Network Connections in the Provisional Irish Republican Army, 1970–1998. (https://www.tandfonline.com/doi/full/10.1080/03050629.2013.863190, accessed November 7, 2025).

Taylor & Francis Online (2025). Full article: The Crime-Terror Nexus and the Illicit Trade in Drugs. (https://www.tandfonline.com/doi/full/10.1080/1057610X.2025.2506555, accessed November 19, 2025).

Taylor & Francis Online (2023). Full article: The Impact of Diasporas on the Tactics of Rebel Groups: The Case of the IRA and Noraid. (https://www.tandfonline.com/doi/full/10.1080/1057610X.2023.2178079, accessed November 14, 2025).

The Archive. Hezbollah’s Strategy and Tactics in the Security Zone from 1985 to 2000. (https://archive.smallwarsjournal.com/jrnl/art/hezbollahs-strategy-and-tactics-in-the-security-zone-from-1985-to-2000, accessed November 12, 2025).

The Guardian (2025). Russia using criminal networks to drive increase in sabotage acts … (https://www.theguardian.com/technology/2025/mar/18/russia-criminal-networks-drive-increase-sabotage-europol, accessed November 27, 2025).

The Political Economy of PIRA Terrorism. Wavell Room. (https://wavellroom.com/2021/10/15/the-political-economy-of-pira-terrorism/, accessed November 18, 2025). 

UTEP. AN ANALYSIS OF HEZBOLLAH’S USE OF IRREGULAR WARFARE. (https://www.utep.edu/liberalarts/nssi/_files/docs/an-analysis-of-hezbollah-s-use-of-irregular-warfare-mulhern.pdf, accessed November 11, 2025).

UCL Discovery. Tactical Innovation and the Provisional Irish Republican Army. (https://discovery.ucl.ac.uk/1521069/3/Gill_Resub_Tactical%20Innovation%20and%20the%20Provisional%20Irish%20Republican%20Army%281%29.pdf, accessed November 10, 2025).

United Nations Office on Drugs and Crime. Drug trafficking and the financing of terrorism. (https://www.unodc.org/unodc/en/frontpage/drug-trafficking-and-the-financing-of-terrorism.html, accessed November 17, 2025).

Source of the picture: https://origins.osu.edu/milestones/december-2019-provisional-irish-republican-army

 

Written by Barbora Burjaková

44