HSI Opens Project Whipple Shield, Using Warrantless Administrative Summonses to Take Union Financial and PAC Records Under a 'Domestic Terrorist Financing' Theory

Opening

Roughly two weeks after opening 2026-08-13–operation-puppet-master-hsi-infiltrates-minnesota-anti-ice-community, Homeland Security Investigations opened a second investigation: Project Whipple Shield, named for the Bishop Henry Whipple Federal Building, headquarters of the federal immigration operation in Minnesota.

Where Puppet Master targeted an activist network, Whipple Shield targeted the money — and the people who supported the targets. HSI’s stated purpose was to “uncover the funding sources behind the anti-ICE antifa ring targeting the Federal Whipple Building and the cell’s organizational structure.”

It obtained years of financial records from labor unions and nonprofits using administrative summonses — subpoenas issued by the agency itself, with no warrant and no judge.

What Happened / Key Facts

The escalation is the structure. Puppet Master, opened January 28 four days after a federal officer killed Alex Pretti, sought to “unmask the agitators conspiring to exploit the civil unrest to riot, destroy federal property, and assault personnel protecting these facilities.” Whipple Shield, opened roughly two weeks later, extended to “sophisticated, organized campaigns” supporting those accused. Charge a handful publicly, then use the resulting investigative authorities to map everyone connected to defending them.

Records taken without a warrant. Documented recipients of administrative summonses:

• SEIU — financial records spanning 2023 to 2026, including “wire transfers from various financial institutions to and from the SEIU’s bank account in Minneapolis”
• Communications Workers of America — “financial statements from the CWA pertaining to its donations and PAC spending”
• International Federation of Professional and Technical Engineers
• Voices for Racial Justice — a Minneapolis racial-justice training organization founded in 1993; HSI subpoenaed PayPal and Venmo for payments to and from it
• Sunrise Movement — the climate organization that held noise protests outside hotels housing immigration agents

A union’s political action committee spending is the most protected category of associational activity in American law. It was taken by agency summons, under a terrorism-financing theory, with no judicial officer in the loop.

“The Conspiracy” slide. HSI agents prepared a conspiracy diagram and presented it to the grand jury that returned a 94-page indictment. The diagram depicted 18 unions, political organizations and community groups as part of the conspiracy, linked by alleged overlapping membership with Direct Action Minnesota (DAMN). The AFL-CIO, the Minneapolis Federation of Educators, the Minnesota Association of Professional Employees, and SEIU Local 26 were placed inside an “antifa network” as “council members.”

Guilt by associational overlap, drawn as a chart, shown to the body that decides whether to indict.

The government’s characterization. Prosecutors framed the work as a “domestic terrorist financing” probe into “a well-funded and highly organized conspiracy among antifa militants in Minnesota to methodically impede Immigration and Customs Enforcement operations.” DAMN was described as a network of “violent opportunists” operating “both online and in person.”

The defense objection. Defense attorney Kevin Riach argues HSI obtained union financial records with “zero criminal predicate to do so”, that in all cases “the people or organizations being surveilled were engaging in First Amendment-protected activities,” and that the government “dreamed up a conspiracy” reaching far beyond the indicted defendants to major labor unions “with no evidence.”

Official response. Minnesota Attorney General Keith Ellison named both operations and called the surveillance “appalling and alarming,” describing it as directed at “Minnesotans for exercising their constitutionally protected, basic First Amendment rights.” DHS said it “doesn’t comment on the existence or status of ongoing investigations.”

Why It Matters

This is the half of the story the coverage under-reports. Operation Puppet Master got the headlines because undercover agents in church basements is a vivid image. Whipple Shield is the more consequential program: it reached organizations that were never accused of anything, took their banking and political-spending records without a judge, and rendered them to a grand jury as nodes in a terrorism conspiracy chart.

The predicate chain is the mechanism. Emptywheel traced it: Bondi’s high-profile “trophy arrests” supplied the conspiracy predicate for the Minnesota 15 indictment, which in turn supplied the investigative authorities for the broader infiltration. Prosecution operated as a surveillance-expansion wedge. Many of the underlying cases have since collapsed — at least eight prosecutions brought under the same directive were voluntarily dismissed — but the records they justified taking have already been taken.

Administrative summonses are the load-bearing tool. Not warrants, not grand jury subpoenas — agency-issued process requiring no judicial finding. The distinction is what makes the volume possible, and it is the thing least likely to survive scrutiny. It is also the thing most portable to the next jurisdiction.

It reached beyond Minnesota. The same investigation tasked HSI Detroit Metro Airport to put an undercover agent into a church sanctuary in Ann Arbor on two days’ notice — see 2026-04-08–hsi-undercover-operation-zion-lutheran-church-ann-arbor, where the agent received the collection basket, counted the cash, and logged the QR code on the donation slip. A church collection basket entered a financial investigation whose stated subject was terrorist financing.

Open Questions

• The full list of all 18 organizations on the grand jury “Conspiracy” slide
• Whether any recipient of an administrative summons has moved to quash, and with what result — checked 2026-08-20: no public quash motion located (CourtListener full-text + news sweep both return verified absence); notable contrast with the structurally identical Sept-Oct 2025 DHS subpoenas to Google/Meta, which four Doe plaintiffs did move to quash in N.D. Cal. See whipple-shield-class-level-harm-deploy-disposition
• Which financial institutions complied and whether any refused or notified their customers — checked 2026-08-20: no evidence found of any recipient organization notifying individual members/donors that their records were reviewed
• The statutory authority claimed for the administrative summonses, and whether it supports records unrelated to customs or immigration violations
• Whether comparable financial process issued in any other jurisdiction touched by this investigation
• Whether the 94-page indictment survives the pending challenge to its predicate

Deploy Disposition (human-layer note)

This entry’s harm is class-level, not individually nameable — see whipple-shield-class-level-harm-deploy-disposition for the full confirm-the-absence writeup. Every union-PAC donor and community-org Venmo/PayPal user in the 2023-2026 window is inside the dataset and does not know it; manufacturing an individual victim would misstate an indiscriminate mechanism as a targeting story. The available on-record human voice is institutional: CWA Local 7250 President Kieran Knutson, CWA President Claude Cummings Jr., Minnesota AFL-CIO President Bernie Burnham, and Minneapolis Federation of Educators’ Marcia Howard have all spoken on the record about their own organizations’ records being taken; SEIU co-signed a joint statement. IFPTE and Voices for Racial Justice have not yet been located making a standalone statement.

Cross-References

• 2026-08-13–operation-puppet-master-hsi-infiltrates-minnesota-anti-ice-community
• 2026-04-08–hsi-undercover-operation-zion-lutheran-church-ann-arbor
• 2025-12-04–bondi-weaponizes-tax-law-against-antifa
• 2026-01-12–mn-ag-ellison-sues-dhs-over-operation-metro-surge
• whipple-shield-class-level-harm-deploy-disposition