Sovereign Digest: September 2026
Curated Insights on Sovereignty, Mobility, Privacy & Plan B
Your monthly claim to sovereignty — a sharp 10-minute read with morning coffee.
Get Sovereign Digest in your inbox: one email a month, no spam.
Missed August? Sovereign Digest: August 2026 (EN)
Events
Plan B Konference 2026 was a blast
Thank you to everyone who showed up, spoke, helped, and stayed for the hallway conversations. It worked. We enjoyed it. The aftermovie is up.
More photos and public keynotes will be published here
Global Mobility & Plan B
Germany may end dual citizenship to squeeze the AfD
CDU proposals include ending dual nationality, harder language tests, proof of financial independence, and extra “reject antisemitism” conditions. If you hold or plan a German passport plus another, watch this. Dual status is becoming a political lever again.
EU residents lose easy access to non-EU banks in January 2027
CRD VI Article 21c: from 11 January 2027 a third-country bank generally cannot take new deposits, loans or guarantees for an EEA resident unless it has a licensed branch in the country where you live. A German branch does not cover a client in Portugal. Residence triggers it, not citizenship. An EU citizen living in Paraguay is outside. A Brazilian with a Lisbon lease is inside. The UK and Switzerland count as third countries. Brokers, payment apps and crypto sit under other regimes. This rule is cash accounts, loans and guarantees.
Grandfathering cutoff was 11 July 2026. Do not amend, renew or add a product on an old file if you want it to stay old. List every non-EEA cash account this week and email the bank: given my residence, will you still service this after January — grandfathering, reverse solicitation, or an EU branch? Real residence outside the EEA is the clean exit.
UK capital is still walking
Hedge-fund manager Chris Rokos (~£2.6bn, ~£330m tax last year, third-highest UK taxpayer) left amid talk of further tax rises. Same pattern as last year: high earners vote with a suitcase.
A tax ID is not a domicile
Authorities check the first review hard. A number with no rent, no local spend, no contracts, no incoming/outgoing payments is dead paper. Keep a thin, real file. Presence has a shape.
US green card: one visit a year does not save it
Permanent residence means residing. Short annual entries trigger CBP questions on work, home and US tax filings and can go to immigration court for abandonment. A child born abroad to an LPR mother, under 2, entering with her on the first return after birth, can be admitted as an LPR but airline staff often do not know the rule.
Birthright citizenship is in court, and “born abroad to Americans” is not automatic
A Maryland judge blocked an August executive order aimed at narrowing birthright citizenship, including birth-tourism cases. Separately, children born overseas to US parents still have to clear physical-presence tests. Embassy, base, or flagged-ship births are common trap questions. Do not assume the 14th Amendment covers every edge case.
Quiz · Kids born abroad · Order blocked
US citizenship is a fiscal prison for people who live or invest abroad
Worldwide tax for life, FBAR/FATCA, PFIC, harder banking, expensive exit. The compliance load hits the middle class harder than the ultra-wealthy with a full advisor bench. Green-card holders should leave before becoming long-term residents if they want to avoid 877A exit tax.
Passport indexes miss the thing that matters on a bad day
Visa-free counts do not tell you who answers when you are arrested, robbed or stuck in a coup. EU citizenship is the rare case where consular help is a treaty right across 27 missions. Golden visas do not give that right. Dual nationals usually get no help inside the other nationality’s country. Caribbean CBI networks are thin and rest on discretionary Commonwealth backup.
Show the airline the passport you will enter on
A second passport only works if check-in, entry and exit stay aligned. Airlines push that document into Timatic and API. Immigration wants the same book in and out. Mix them and you get a refused boarding, an open visitor file, or a 90/180 clock you thought you had escaped. Enter and leave each country on one passport. Book the ticket in that name. Keep the other book closed. US citizens must use the US passport at the US border. EU citizens should use the EU passport into the Schengen area so EES and the 90/180 limit do not attach.
CBI that a minister can cancel is a rental, not a passport
Vanuatu revoked a citizenship with no conviction and little process. Antigua, Dominica, St Kitts, St Lucia and Nauru all have broad “disloyalty / disrepute / Cabinet may prescribe” cancellation language. Price the revocation clause before you wire the fee.
Citizenship routes are not equal
Birth and descent sit at the top. Naturalization and marriage next. Merit after that. Investment last. The book can look the same at the border. The revocation clause, the political risk and how a minister treats you do not.
Name collision can freeze every bank you have
Ricardo Gorski’s UAE accounts locked because “DotOne Group” matched an Iranian billionaire’s “Dot One.” Intermediary JPMorgan blocked wires he never chose. Cyprus/Swiss/Latvian rails kept the company alive. One bank, one name, one jurisdiction is a single point of failure.
High tax without high service is why skilled people leave
levelsio’s point: the safest countries on many indexes are often not the highest-tax ones, and Europeans will pay if the state actually delivers Singapore-grade competence. Europe mostly does not deliver at all. That is the push factor under every second-residency file.
Cheap-flight deals vanish before your feed shows them
Flight Whisper (Erik Sarissky) scores deals from blogs and its own crawler and re-checks every 15 minutes so you book while the fare is still live. Useful if you move a lot and hate missing the window.
News from Paraguay
421 foreigners naturalized in nine years, slow, judicial process, in person
2015–2023: 421 new citizens. Peak 82 in 2019. Top origins: Argentina 92, Brazil 46, Cuba 46, Bolivia 31. Only handful of people from Europe. Why? Due to not understanding the judicial process. Path: 3+ years permanent residency, file at the Supreme Court, personal appearance. Not a CBI product. Plan years, not months, forget to make this happen without physical presence.
Asunción adds Montevideo and Florianópolis
LATAM plans Asunción–Montevideo from 2027. GOL adds Florianópolis. LATAM frequencies rise to 37 weekly flights from Asunción.
VAT map still says 10%
Paraguay keeps 10% VAT / 1% on manufacturing-export. Neighbors sit at 18–22% and Brazil is talking 28%. Tax is not the whole country. It is the part you can measure.
Santiago ranked most livable capital in LatAm
2026 Global Livability Index: Santiago, Buenos Aires, Montevideo, Lima, Panama City, then Asunción. Use it as a vibe check, not a decision engine.
Grupo Vázquez now sits on ~39 companies
Rapid 2022–2026 roll-up across UENO Bank, Visión Banco, media (Canal 13, La Tribuna), fintech and agribusiness. Concentration of finance + media is a local-power fact. Know who owns the rails you use.
Latam
Argentina country risk jumped 21% in a month
JP Morgan Riesgo País up 13 straight sessions / +21.2% in August 2026. Politics, weak activity, unemployment and purchasing-power loss are the cited drivers.
Read more
Argentina wants 5-day evictions
Pending Ley de Inviolabilidad de la Propiedad Privada would cut occupation evictions from open-ended delay to five days. Still a bill. Still Argentina. Paper rights and street reality are different clocks.
Americas net-migration map: most of LatAm is yellow
UN migrant-stock 2024 map: blue = more immigrants, yellow = more emigrants. US/Canada plus parts of the Southern Cone receive. Most of the region sends. People vote with tickets.
Digital Privacy & Sovereignty
LG TVs scan your house and keep a microphone window open
Gamers Nexus work: network mapping of nearby devices, ACR on HDMI inputs, speech-to-text logs, mic open 10–15 seconds after talk, recording while the screen looks off. Put the TV on its own VLAN or pull the ethernet.
Comcast turned the router into a motion sensor
“WiFi Motion” logs movement from RF disruption across up to five devices. Fine print: Comcast may hand the logs to police on a warrant.
“No-logs” SplitVPN dumped 58 million connection records
Devices, servers, timestamps, IPs, account emails. User base heavy in Russia, Iran, India, Myanmar. Commercial VPN marketing is not a security model. Never trust, verify.
Apple Private Relay leaked real IPs — now patched
WebKit bypassed the proxy on iOS 26.6.1 / macOS 26.6.2.
Police bought vehicle-mounted cell-site simulators
US departments (Texas DPS, NYPD and others) purchased Cognyte FalcoNet units. Nearby phones are forced to connect. Location and identifiers collected without the owner knowing. Same family as Stingrays.
Delete the public copy of you
Opt out of Spokeo / Whitepages / BeenVerified. Google removal. Have I Been Pwned. Kill forgotten accounts. Wipe old posts. Alias emails. Pause Google activity. YourAnonOne frames it as a seven-day protocol. Calle shipped a tweet-delete app.
Data-broker list · 7-day protocol · Tweet-delete app
Grey man is matching the room, not buying 5.11 pants
The internet “tactical” kit is now a costume people recognize. In a city that means jeans, plain shirt, sneakers. If someone can describe you two seconds later as “the operator,” you failed.
Adversarial shirts vs AI cameras — and hidden “spymarks”
Simon Weckert’s digital-camouflage shirt aims to make computer vision mis-label the wearer. Separately: SynthID-style invisible marks in images/audio/text can turn every file into a tracker.
Visible watermarks are the easy layer
A small open-source remover exists for ordinary image watermarks. Invisible platform marks are a different problem.
Signal’s “Big Brother” page is the honest part
Signal publishes what governments ask for and what it can actually hand over: not messages, not contacts, not groups, not call history. The remaining hole is the phone number used to register.
WhatsApp accounts leak more than the chat
OSINT write-ups keep showing how much profile metadata sits on a number. Do not reuse a personal number for work, KYC, or throwaway accounts. You can learn a lot just from metadata.
Phone LED + AI as a hidden-camera check
Chosun’s English industry desk covered using a smartphone LED and AI to spot hidden lenses just for $7 — useful before you trust a rental, hotel, or Airbnb.
Scan a house with a phone, walk it in a browser
3D Gaussian Splatting turns a phone walkthrough into a photorealistic tour with no app and no agent. Freelancers already charge a few hundred dollars per scan. Remote due diligence just got cheaper.
Bitcoin & Digital Assets
A $1.5M hardware wallet cost a family their lives
Mexico / Edomex, 1 Sept 2026: musician Jonathan Meléndez (J.S.M.O.), his pregnant wife, their 3-year-old daughter, a 21-year-old woman and the family dog were killed in Zona Esmeralda, Atizapán. The six-year-old son survived. Fiscalía arrested two men; one was described as a business associate who used a relationship of trust to enter the home. Do not store large value at home. Do not tell people what you hold.
Bitget Hit by $351M Hack, Withdrawals Frozen as Probe Begins
Bitget confirms a $351.6M hot wallet breach, pauses withdrawals and says its $464M-plus User Protection Fund fully covers the loss.
Liquid network 4000 BTC exploit
Someone found an old software bug in Liquid and used it to create about 4,000 fake LBTC that was not backed by real bitcoin. They then withdrew most of that as real BTC from the Liquid reserve. After the attack they came forward and sent back 3,400 BTC; about 602 BTC is still missing. Liquid paused the network, patched the bug quickly, and other tokens on Liquid were not stolen, only the bitcoin backing was hit.
Maps, tools & rabbit holes
World IQ map — handle with gloves
A circulated national-average IQ map. It is a conversation piece, not a visa policy.
See the map
Most common last name, by country
Wang, Kim, García, Silva, Smith, Nguyen — the map is a reminder that “John Smith” is pretty good "grey man" strategy.
Europe remigration dots
Institute for Remigration map: each dot = 100 third-country nationals detected by authorities (Eurostat migr_eipre). Legal inflows are not on the map.
50 sites that eat an afternoon in a blink of an eye
FlightRadar24, MarineTraffic, Windy, Zoom Earth, old maps, live cables, museum collections. The open web is still larger than a feed.
Static HTML + Nostr + an AI builder
Juraj Bednár’s stack: describe a site, get static HTML on Nostr, edit design in place, bring your own key. No server in the usual sense. Cypherpunk web hosting. Nice job.
Osiris for a global-threat picture
Osiris as a dashboard of open-source threat intel rather than a people-search toy. Camera feed, aircraft tracking, critical infrasturcture, conflict zones, satelite tracking, malware threats. Useful if you already do OSINT for work. These applications give you the picture of global threats to your organization.
AI Reverse Image Search
Find places, people, duplicates, and more. Image searches across categories, facial recognition search, copyrights and original sources, reverse image search API.
Try it
E-mail OSINT
EmailOSINT turns a single email into a full digital profile: linked accounts, data breaches, Infostealer logs, and an AI synthesis of who's really behind it.
Read more
Get Sovereign Digest in your inbox
Subscribe to the Sovereign Digest newsletter. One email per month, zero spam, pure signal.
Subscribe to our Youtube channel — we will publish Sovereign Digest commentary on topics from this September edition. Send questions on Twitter if you want more detail on a specific item. We will cover it.
Stay sharp, stay mobile, stay private. See you next month.
Jan