France's Pegasus flirt reveals a deeper bargain with Israeli surveillance

A French media investigation published on 2026-07-16 establishes that France in 2019 weighed acquiring the Pegasus spyware made by Israel's NSO Group, even as the same tool was being used to monitor French officials on behalf of Morocco. The revelation, carried by France 24's English channel the same morning, lands in a security debate France has spent five years trying to outrun: who gets to sell the world's most intrusive surveillance software, and to whom.

The contradiction inside the procurement story is the point. Paris was at once a target and a would-be customer of the same product. That posture is not unusual among Western capitals; it is the default. It tells you something about how the modern surveillance trade actually works: the line between protector and purchaser blurs the moment the product becomes geopolitically valuable, regardless of diplomatic outrage at the next Pegasus scandal.

What the investigation actually says

France 24 reports that France briefly explored acquiring Pegasus in 2019, a year when Moroccan-linked operators were already deploying the spyware against French targets. The reporting does not yet specify which French agency initiated the outreach, who signed off, or whether any talks reached a contractual stage. What it establishes is the existence of an inquiry. In the surveillance trade, an inquiry alone is significant: sales of NSO technology require Israeli export licences and political clearance, so any European approach becomes, by definition, intergovernmental.

Morocco's alleged use of Pegasus against French officials has been an open sore in bilateral relations since 2021, when the Pegasus Project consortium identified Rabat among the operator countries surveilling phones belonging to French ministers, journalists, and advisers to then-president Emmanuel Macron. Paris summoned the Moroccan ambassador. Macron changed his phone. Five years on, the underlying product remains licensable, the disputes continue, and now the buyer side of the ledger appears to have included the very same republic that was being monitored.

Why sovereign buyers keep coming back

Pegasus is not unique in the toolkit of commercial intrusion software, but it remains the reference product: the best-marketed, most exported, most politically fraught. Its appeal to a state buyer is straightforward. Once installed on a target handset, the operator can read messages, turn on the microphone and camera, and exfiltrate data without the user doing anything. For a counter-intelligence service hunting cells across a former colonial footprint, that asymmetry is hard to replicate with domestic engineering.

The cost of that convenience is politics. NSO Group has been placed on the US Commerce Department's entity list since 2021. The European Parliament weighed a ban. Apple and Meta have sued. Yet France's reported 2019 interest predates the public reckoning, and it sits inside a longer French pattern of contracting Israeli-made security technology: drones, border sensors, cyber platforms. France is a NATO member, an EU heavyweight, and Israel's third-largest European trading partner in defence-adjacent goods. Surveillance software is part of that envelope.

A structural read

The bigger frame here is the corporatisation of state espionage. The modern intelligence procurement market is no longer the province of great-power sigints agencies building their own implants. Capability is bought, licensed, updated, and sometimes lost: when a tool is burned in a single target, as Pegasus has been repeatedly, the vendor sells the next operator access to the same vulnerability. Vendors sit at the centre of a market where states share customers, targets, and grievances in a rotating cast.

That market sits inside three political inheritances worth naming. First, the post-2011 Arab uprisings gave a generation of North African and Gulf intelligence services a reason to want off-the-shelf reach into opposition figures in Europe and the Gulf. Second, the global counter-terror consensus of the 2010s normalised the export of intrusive tools to regimes with patchy rights records. Third, the Israel-US defence relationship offered a private-sector export channel for capabilities that Western governments prefer not to build at home. The 2019 French enquiry, if confirmed in its specifics, is one node in that network, not an aberration.

What it costs, what comes next

The diplomatic cost of selling Pegasus into Morocco, the UAE, or Saudi Arabia has been priced in; both Israel and NSO have absorbed the reputational hit. What has changed less is the calculus on the buyer side. If France did explore acquisition in 2019 and walked away, the walking away is the story as much as the looking. The tool is still out there, other vendors are still selling comparable capability, and the demand from French, German, and British agencies to reach into encrypted handsets has not gone away. Watch for two confirmations in the weeks ahead: whether France 24's reporting identifies the agency that initiated the contact, and whether any 2019-era documentation surfaces from Israeli defence-export files. Either would anchor the political cost. Without it, this becomes one more entry in the long ledger of Western governments shopping in a market they publicly disavow.

The Pegasus file is not closed. Each new disclosure is at once a scandal and an advertisement, and the next government minister caught on a list will be reading these paragraphs with some professional interest.

This piece sits in Monexus's Africa-and-Europe coverage lane. Where most wire coverage has treated the Pegasus saga as a series of one-off disclosures, Monexus frames the recurring contradiction between buyer, victim, and vendor as the durable story.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/france24_en/24846
• https://t.me/france24_en/24817