Ricardo Martinelli resides in a condo at the Atlantis, a luxury high-rise on Florida’s Biscayne Bay made famous by the TV series Miami Vice. A hefty, white-haired billionaire, Martinelli, 63, was viewed just a few years ago as one of Latin America’s most popular leaders: From 2009 until 2014, he was president of Panama. But now, though he’s living in high style, Martinelli is a fugitive from justice.

He fled his country on Jan. 28, 2015, hours before Panama’s Supreme Court announced a corruption investigation into his administration. Among the charges Martinelli faces is political espionage, with a possible prison sentence of 21 years, for illegally eavesdropping on the phones and emails of more than 150 people: Panamanian opposition leaders, journalists, judges, business rivals, cabinet members, U.S. Embassy officials, a Roman Catholic archbishop, and even a woman identified as Martinelli’s mistress.

Much of this alleged activity was made possible by the burgeoning business of private companies selling military-grade spyware. In 2011, the Wall Street Journal reported that the retail market for surveillance tools had increased in value from virtually nothing 10 years prior to around $5 billion annually. Yet the market functions largely unencumbered, and even since the National Security Agency eavesdropping scandal broke in 2013, U.S. policymakers have paid little attention to firms that sell surveillance equipment to foreign governments.

The scandal in Panama offers a unique window into how dangerous the espionage export business has become. Without restrictive controls, the risks the industry poses will only grow: More and more countries will acquire the tools to perpetrate corruption and abuse human rights.

* * *

Panamanian prosecutors are building a case against Martinelli that his lawyer, Rogelio Cruz, calls “Kafkaesque.” His client, who is seeking asylum in the United States, is innocent of all charges, Cruz claims. However, according to a 2009 diplomatic cable released by WikiLeaks, Martinelli demanded bugging equipment from the U.S. Drug Enforcement Administration soon after taking office; he intended to use it against security threats. The cable, prepared by Barbara Stephenson, then the U.S. ambassador to Panama, noted “Martinelli’s near-obsession with wiretaps.” The request was rejected, Stephenson wrote, because Martinelli “made no distinction between legitimate security targets and political enemies.” The cable concluded, “We believe that he has tasked several subordinates to obtain wiretap capacity by reaching out to other governments and the private sector.”

This information, it seems, was correct.

According to regional media, Martinelli paid at least $13.4 million for devices to monitor phones and tap into email and contact lists. (The PanAm Post has alleged that he dipped into a food program for the poor to cover the cost.) One of the companies Martinelli used was NSO Group Technologies, an Israeli intelligence firm owned by a U.S. outfit, Francisco Partners. According to NSO’s promotional material, its system “introduces a powerful and unique monitoring tool, called Pegasus, which allows remote and stealth monitoring and full data extraction from remote target[ed] devices via untraceable commands.” An internal memo from Italian malware vendor Hacking Team, made public last summer by WikiLeaks, notes that the tool sends a targeted phone “a silent sms [message] which exploits the device.” For an attack to work, the message merely needs to be read.