What Happened
- The CIA published a Farsi-language guide on its public website and social media platforms (X, Instagram, YouTube) offering detailed instructions to potential informants inside Iran on how to safely contact the US spy agency.
- The guide's tips include using a VPN to circumvent Iranian internet restrictions, using disposable devices, employing private web browsers, deleting internet history, and accessing the CIA via its public website or on the darknet using identity-masking tools.
- The post received millions of views within hours of publication, reflecting both high domestic Iranian interest and the widespread international reach of the CIA's social media strategy.
- The guide was released as the US had assembled its largest Middle East military force in recent decades, with President Trump openly considering military strikes on Iranian nuclear facilities.
- The CIA's outreach coincides with fresh internal protests in Iran and the strategic degradation of Iran's proxy network across the region in 2024–2025.
Static Topic Bridges
Human Intelligence (HUMINT) and the CIA's Historical Operations in Iran
Human intelligence (HUMINT) refers to the collection of information by recruiting and running human sources (informants, agents) inside target countries. It is one of the primary intelligence disciplines alongside SIGINT (signals intelligence), IMINT (imagery intelligence), OSINT (open-source intelligence), and MASINT (measurement and signatures intelligence). The CIA has a long and consequential history of HUMINT operations in Iran: the 1953 AJAX/BOOT operation (jointly with UK's MI6) overthrew democratically elected PM Mohammad Mosaddegh and restored the Shah — an event that fundamentally shaped Iran's anti-American stance. After the 1979 Islamic Revolution, the CIA lost its extensive agent network in Iran; rebuilding HUMINT inside Iran has been a persistent intelligence priority. The Farsi-language social media guide represents a modern, low-cost, open-source approach to mass HUMINT recruitment — bypassing traditional tradecraft in favour of public digital outreach.
- HUMINT: Intelligence gathered through human sources; most sensitive and hardest to replace intelligence discipline.
- 1953 Operation AJAX/BOOT: CIA-MI6 coup overthrew Iranian PM Mosaddegh; installed Shah Mohammad Reza Pahlavi; foundational event in US-Iran hostility.
- 1979 Islamic Revolution: Iran hostage crisis (444 days); permanent rupture in US-Iran diplomatic relations; no US embassy in Tehran since 1979.
- CIA Darknet presence: CIA operates a .onion (Tor) address for secure anonymous contact, first established in 2019.
- OSINT: Open-source intelligence gathered from publicly available sources; increasingly central to modern intelligence.
Connection to this news: The CIA's public Farsi guide is an unusual departure from covert tradecraft — using social media virality to reach potential informants at scale, reflecting a shift in intelligence methodology in the social media era.
Internet Freedom, VPNs, and Digital Repression
Iran operates a national internet filtering system — colloquially referred to as "Iran's internet firewall" — that blocks access to major international social media platforms (including Twitter/X, Facebook, WhatsApp), foreign news sites, and politically sensitive content. Circumvention tools include VPNs (Virtual Private Networks), Tor (The Onion Router), and mirror sites. Following the 2022 Mahsa Amini protests — triggered by the death of Mahsa Amini in morality police custody — the Iranian government dramatically intensified internet shutdowns and restrictions. VPN usage in Iran surged to among the highest globally. The CIA's tips leverage this existing digital escape infrastructure that millions of Iranians already use. Freedom House's "Freedom on the Net" report consistently rates Iran as "Not Free."
- Iran's internet filtering: Blocks Twitter/X, Facebook, Instagram, WhatsApp; managed by the Committee Charged with Determining Offensive Content (CCDOC).
- VPN: Encrypts internet traffic and masks the user's real IP address; widely used in Iran for bypassing censorship.
- Tor (The Onion Router): Anonymity network; routes traffic through multiple encrypted relays; used for darknet access.
- Mahsa Amini protests (September 2022): Triggered by morality police killing; largest protests since 1979; internet widely shut down.
- Freedom House Iran rating: "Not Free" — one of the world's most restrictive internet environments.
- IRGC (Islamic Revolutionary Guard Corps): Iran's security organisation that monitors online dissent.
Connection to this news: The CIA's guide exploits the digital infrastructure of circumvention (VPNs, Tor) that Iranian citizens already use to access blocked content — lowering the barrier for potential informants to make secure contact.
Intelligence Agencies and Strategic Covert Operations
Intelligence agencies conduct covert operations — activities designed to influence foreign governments, events, or persons in ways that are not officially acknowledged. Major intelligence agencies include: CIA (US), MI6/SIS (UK), Mossad (Israel), FSB/SVR (Russia), MSS (China), RAW (India), ISI (Pakistan), BND (Germany), DGSE (France). The CIA operates under the National Security Act (1947) and the Intelligence Authorization Act; covert actions require a Presidential Finding (signed by the President authorising the specific operation). Israel's Mossad has conducted extensive operations against Iran's nuclear programme, including assassinations of nuclear scientists (2010–2012, 2020) and the 2010 Stuxnet cyberattack (jointly with US) that damaged Iranian centrifuges. India's RAW (Research and Analysis Wing), established in 1968, is India's primary external intelligence agency.
- CIA (Central Intelligence Agency): US foreign intelligence service; established 1947 under the National Security Act.
- Presidential Finding: Legal requirement before CIA undertakes covert action abroad.
- Mossad (Israel): External intelligence; has conducted assassinations of Iranian nuclear scientists — notably Mohsen Fakhrizadeh (November 2020).
- Stuxnet (2010): US-Israeli cyberweapon that sabotaged Iranian uranium centrifuges at Natanz; first known state-sponsored cyberweapon.
- RAW (India): Research and Analysis Wing; established 1968; reports to Prime Minister's Office; India's foreign intelligence agency.
- ISI (Pakistan): Inter-Services Intelligence; Pakistan's primary military intelligence agency.
Connection to this news: The CIA's Farsi guide is a covert influence/recruitment operation conducted through overt channels — an innovation in intelligence methodology that uses public social media to recruit clandestine sources.
Key Facts & Data
- February 24, 2026: CIA released Farsi-language informant guide on social media (X, Instagram, YouTube) and CIA's public website.
- Millions: Views the post received within hours of publication.
- VPN, Tor (darknet), disposable devices, private browsing: Key tips in the CIA guide for potential informants.
- 1979: Last year the US had a functioning embassy in Tehran; diplomatic relations severed since the hostage crisis.
- 1953: CIA-MI6 Operation AJAX overthrew Iranian PM Mosaddegh — a founding grievance in Iranian anti-American ideology.
- 440 kg at 60% purity: Iran's uranium enrichment stockpile as of early 2026 — sufficient for ~10 weapons if fully enriched.
- Mahsa Amini (2022): Protests that led to major Iranian internet shutdowns and surge in VPN usage.