Deep link open · 18 Oct 2026 Open the signal feed ↗

Essays · 6 minute read

One vendor at a time

Eleven days. That is how long Autistici/Inventati lasted after a Washington list named it, and before any Italian court said a word.

I am not here to chant that sanctions are wicked in the abstract. The narrower fact is uglier and more useful. A volunteer hosting collective in Tuscany died because a domain registry, a payment company, and a bank obeyed a United States terror list first. The open web, when it ends this way, does not end with a speech. It ends with a status field, a frozen account, and a compliance email.

What Washington put on paper

On 26 August 2026, the U.S. Treasury’s Office of Foreign Assets Control designated Autistici Inventati as a Specially Designated Global Terrorist under Executive Order 13224, as amended. The same action hit Palestine Action and Masar Badil. Treasury’s press release describes an Italy-based organisation that supplies hosting, encrypted email, chat and video tools, and the Noblogs platform.

The charge is not that the collective planted a bomb. The charge is “material” and “technological” support: that the pipes themselves count as aid. The text names, among others, alleged service to the Kurdistan Workers’ Party (PKK). Secretary Scott Bessent’s accompanying line was blunt enough: far-left extremists and their “enablers” should expect the full weight of America’s economic tools.

OFAC also issued General License 36, a wind-down window running to 25 September 2026. In plain terms, vendors were told they had roughly a month to finish cutting ties. Almost nobody waited for the month.

Autistici/Inventati, for those who never needed an @autistici.org address, is an Italian collective founded in 2001 and based in San Giuliano Terme, in the province of Pisa. For a quarter century it ran free, non-commercial mailboxes, blogs, lists and sites for movements, unions and awkward people who preferred not to live inside a Silicon Valley terms-of-service. Italian press coverage has put the scale at roughly sixteen thousand mailboxes, ten thousand blogs, five and a half thousand mailing lists and fifteen hundred websites. The collective itself has not published those figures; treat them as reported scale, not an official census. The point survives the rounding. A lot of ordinary political life sat on those pipes.

Who moved, and who did not

The sequence that followed is the argument.

Around 27 August, PayPal froze the donations account. On 28 August, autistici.org stopped resolving. Technical observers saw the classic registry hammer: serverHold, a status that makes a name invisible in the Domain Name System even while the machines behind it keep humming. The .org registry is Public Interest Registry, an American operator. Autistici’s own August campaign materials stressed a useful distinction: the servers were not necessarily seized; the map to them was. There is still no public PIR statement confirming it acted on a direct OFAC order. There is also no need for one. Once a designation lands, a U.S.-linked registry has every commercial reason to make the name go dark.

Then came the Italian bank. Banca Etica, which had held the association’s account since 2018 with a medium risk profile and no anti-money-laundering flags it cared to advertise, raised the risk and suspended activity around 1–2 September. On 4 September it terminated the contract unilaterally. Tens of thousands of euros remained frozen, according to secondary timelines.

The bank’s own press statement did something almost comic in its honesty. It condemned, firmly, the use of OFAC lists for political ends. It also explained why the account had to die anyway. Secondary sanctions, it said, could cut the bank off from American card networks and dollar intermediaries, wrecking cards and extra-euro payments for some 130,000 customers and members. No Italian court had ruled. The bank was not weighing the merits of Treasury’s Antifa story. It was weighing whether Visa still worked for everyone else.

On 6 September, nineteen days before Washington’s own wind-down date, Autistici/Inventati announced the shutdown. The statement, published on keepitfree.ai under the title “A/I shuts down – Stay human,” is short and oddly gentle. Every day online after 26 August had been a victory, it said; now they had to stop. Continuing would endanger users and anyone merely adjacent. They asked for no martyrs. They promised backup instructions, and warned that the domain had already vanished without notice. Closing line: stay human.

The court that never sat

Notice what is missing from that eleven-day film. An Italian judge. A European listing. A hearing where someone has to prove that running email for activists is the same species of act as funding a bomb. The designation is an American administrative act. Its practical force in Europe arrived through private actors who live inside American payment rails and American top-level domains.

EDRi, the European digital rights network, published a solidarity statement on 3 September signed by dozens of groups. They asked the EU to treat Council Regulation (EC) No 2271/96, the Blocking Statute originally built against extraterritorial Cuba and Iran measures, as a foundation for protecting civil society from third-country designations imposed without judicial process. They asked Italy to defend an organisation on its own soil. As of the reporting that followed the shutdown, those asks had not received an answer that changed the outcome. A statute on the shelf is not a registrar that keeps resolving, and it is not a bank that keeps the account open.

I will not pretend this is only about one radical host. The mechanism is boring and portable. If your name lives in a U.S.-jurisdiction registry, if your money moves through a U.S.-exposed processor, if your bank needs dollar correspondents, then a foreign list can erase you without ever convincing a local court. Location of the servers is almost a distraction. Autistici’s machines were in Europe. The lever that mattered first was the name on the door.

Stay human, stay specific

The collective’s farewell refuses heroics. That refusal is part of the story. They did not dare their users to keep donating into a frozen channel or keep publishing on a domain that might vanish again without warning. They chose the unglamorous exit: protect people, turn the lights down, leave.

So here is the claim again, smaller than a slogan and harder to shrug off. Autistici/Inventati did not lose a trial in Pisa. It lost a registry, a payment pipe, and a bank that preferred 130,000 working cards to one awkward client. The wind-down licence ran to late September. The vendors finished early.

The open web, if you still want the romantic phrase, ends like that. Not with a grand censor’s decree you can march against on Saturday. With one vendor at a time, each perfectly able to say it had no choice, each correct enough that the next one copies the file.

Stay human, they wrote. Also stay awake when the DNS goes quiet.