Europol-led operation targets more than 14,200 links connected to the Iranian regime’s Revolutionary Guards and affiliated extremist networks
A large-scale European security operation has targeted the online propaganda ecosystem of Iran’s Islamic Revolutionary Guard Corps (IRGC), resulting in the identification of more than 14,200 online links connected to the organization’s digital activities.
The coordinated crackdown was led by Europol through its EU Internet Referral Unit (EU IRU), following the European Union’s formal designation of the IRGC as a terrorist organization earlier this year.
According to Europol, the operation focused on disrupting the IRGC’s online infrastructure used for propaganda dissemination, recruitment, fundraising, and coordination with aligned extremist groups.
EU Terror Designation Opens Door for Broader Action
The IRGC, the regime’s most powerful military and security institution, was officially designated as a terrorist organization by the European Union on 19 February 2026 under Council Decision (CFSP) 2026/421.
European authorities stated that the designation enabled law enforcement agencies across the EU to take coordinated action against IRGC-linked entities and online activities operating within European jurisdictions.
The EU Internet Referral Unit, operating under Europol’s European Counter Terrorism Centre (ECTC), specializes in identifying and referring terrorist and violent extremist content online for removal and investigation.
Nineteen Countries Participate in Coordinated Operation
The operation involved authorities from 19 countries working in synchronized phases between 13 February and 28 April. Participating countries included Germany, France, Italy, Spain, Sweden, the Netherlands, Belgium, Austria, Greece, Portugal, Denmark, Finland, Czechia, Estonia, Hungary, Bulgaria, Bosnia and Herzegovina, Ukraine, and the United States.
Investigators monitored and referred IRGC-linked material distributed across major social media platforms, streaming services, blogs, and standalone websites.
According to Europol, the propaganda appeared in multiple languages, including Persian, Arabic, English, French, Spanish, and Bahasa Indonesia.
Propaganda Included Calls for Violence and AI-Generated Content
Authorities reported that the content ranged from ideological speeches promoting martyrdom narratives to highly politicized propaganda encouraging revenge attacks in the name of Iranian Supreme Leader Ali Khamenei.
Investigators also identified AI-generated videos glorifying the IRGC and extremist messaging tied to Tehran’s regional proxy networks.
The operation uncovered links between IRGC digital infrastructure and affiliated organizations, including Hezbollah, Hamas, and other Iran-backed militant groups.
Europol stated that studying the interconnected nature of IRGC-linked websites across different languages provided valuable insight into how the regime’s propaganda network amplifies extremist narratives globally.
Thousands of Accounts and Links Removed
Among the major outcomes of the operation was the restriction of the IRGC’s primary X account within the European Union. The account reportedly had more than 150,000 followers before being withheld across EU territories.
Thousands of additional online links were removed or placed under ongoing investigation for further takedown action.
Officials also discovered that the IRGC relied on hosting service providers across several jurisdictions, including Russia and the United States, allowing the network to maintain operational resilience despite international sanctions and restrictions.
Cryptocurrency Used to Sustain Online Operations
Investigators further revealed that the IRGC used cryptocurrency transactions to finance and expand its digital propaganda activities. Europol said this approach appeared designed to bypass traditional financial monitoring systems and sanctions enforcement mechanisms.
The agency warned that terrorist and extremist organizations are increasingly adapting to digital enforcement measures through decentralized financing, AI-generated media, and cross-platform dissemination strategies.
Europol Warns of Evolving Terrorist Threat Landscape
Europol described the operation as part of a broader European effort to counter terrorist activity online under the EU’s ProtectEU Internal Security Strategy.
The agency warned that extremist networks are becoming increasingly flexible and technologically adaptive, requiring sustained multinational coordination to limit their influence and operational reach.
Further analysis of these evolving threats is expected to be published in Europol’s upcoming EU Terrorism Situation and Trend Report (EU TE-SAT).
