Iran Expands Covert Influence Network Inside Turkey After Israel War
On 5 May, new reporting indicated Iran’s Quds Force is intensifying efforts to activate sleeper cells and recruit multi‑national operatives in Turkey. The network is reportedly tasked with intelligence collection and potential targeting of U.S. and Israeli interests since the June 2025 Iran‑Israel conflict.
Key Takeaways
- Intelligence from 5 May points to stepped‑up Iranian covert activity in Turkey by the IRGC Quds Force.
- Tehran is allegedly activating sleeper cells and recruiting Turks, Arabs, Afghans, and Pakistanis for surveillance and potential attacks on U.S. and Israeli targets.
- Some recruits are reportedly motivated by religion, while others accept payment, indicating a mixed ideological and mercenary base.
- The effort appears linked to Iran’s strategy following the June 2025 conflict with Israel, seeking leverage against regional adversaries.
- Expanded Iranian operations in Turkey heighten terrorism, espionage, and diplomatic risks in a key NATO member state.
On 5 May 2026, fresh intelligence surfaced indicating that Iran’s Islamic Revolutionary Guard Corps (IRGC) Quds Force has significantly intensified its covert influence and operational networks inside Turkey. According to this reporting, the Quds Force has been moving in recent weeks to activate dormant sleeper cells and recruit new operatives drawn from Turkish nationals and diaspora communities, as well as from Arab, Afghan, and Pakistani populations residing in or transiting through Turkey.
The objective of this expanded network, which has reportedly grown since the Iran‑Israel conflict of June 2025, is twofold: to collect intelligence on Israeli and U.S. assets and activities in Turkey, and to establish latent capabilities for potential attacks against those interests if Tehran decides to escalate.
Background & context
Since the major confrontation between Iran and Israel in mid‑2025, Tehran has sought asymmetric ways to pressure both Israel and its Western backers beyond direct missile and drone exchanges. Iran has a history of using Quds Force and proxy networks to conduct operations on foreign soil, sometimes via front organizations or criminal intermediaries.
Turkey occupies a critical geographic and political position in this context. As a NATO member with longstanding economic and political ties to both Iran and the West, it hosts significant diplomatic, commercial, and intelligence activity. It is also a transit hub for regional movements, including refugees, business travelers, and clandestine operatives.
Iranian networks in Turkey have previously been linked to plots against Israeli tourists, dissidents, and shipping, as well as surveillance of U.S. military and diplomatic facilities. The new wave of activity reported on 5 May suggests a deliberate post‑2025 scaling up, likely driven by Tehran’s desire for contingency options amid ongoing regional volatility.
Key players involved
The IRGC Quds Force, Iran’s external operations and expeditionary arm, is the central actor. Within Turkey, its activities typically involve a blend of Iranian intelligence officers operating under diplomatic or commercial cover, local assets, and non‑state intermediaries.
The recruitment effort reportedly targets a diverse pool: Turkish citizens who may be susceptible to ideological narratives or financial incentives; Arab expatriates and migrants; Afghans and Pakistanis, some of whom may have prior militant experience or connections. The mixed profile of recruits—some motivated by religion, others by money—gives the network potential flexibility but also vulnerabilities to infiltration.
Potential targets include U.S. diplomatic and military facilities, Israeli diplomatic missions and commercial interests, Israeli and Jewish community sites, and possibly infrastructure used by Western companies. Turkish security and intelligence services, which have previously rolled up Iranian cells, will be key counter‑actors.
Why it matters
The reported expansion of Iranian covert capabilities in Turkey carries several layers of risk. For Turkey, it raises the threat of terrorist incidents, assassinations, or sabotage on its soil, which could damage tourism, foreign investment, and domestic stability. It also poses a challenge to Ankara’s efforts to balance relations with Iran, the U.S., Israel, and Arab states.
For the U.S. and Israel, the development represents a potential expansion of the threat envelope. Operations launched from Turkey, a country with extensive air links and relatively accessible borders, could be harder to pre‑empt than those originating from more tightly surveilled states. Even if most activity remains at the level of intelligence collection, the latent capacity for rapid escalation is concerning.
Regionally, the deployment of Quds Force networks into a NATO country underscores Iran’s willingness to extend its confrontation with Israel and the U.S. into new theaters. It also risks friction with Turkish authorities, who have at times cooperated with Tehran but are sensitive to external intelligence activities that infringe their sovereignty.
Regional/global implications
If Turkish security services act decisively against suspected Quds Force networks, bilateral tensions with Iran could rise, potentially affecting trade, energy transit, and coordination on issues like Syria and border security. Conversely, if Ankara is perceived as tolerating or insufficiently countering Iranian activity, it could draw criticism from NATO partners and Israel.
The prospect of Iranian‑linked plots in Turkey may also drive changes in Western travel advisories, corporate risk assessments, and security postures around diplomatic and commercial hubs in Istanbul, Ankara, and coastal tourism centers.
More broadly, the development illustrates how the aftershocks of the 2025 Iran‑Israel conflict continue to reshape intelligence and covert action landscapes across the region, with third countries becoming contested spaces for competing networks.
Outlook & Way Forward
Additional Iranian efforts to build and activate networks in Turkey are likely, given Tehran’s strategic incentives and history. However, Turkey’s intelligence community has both capability and incentive to detect and disrupt such activity. Expect increased counterintelligence operations, quiet arrests, and possible public announcements of foiled plots in the coming months.
The U.S. and Israel will likely intensify intelligence sharing with Turkey, providing leads on suspected operatives and front organizations. Diplomatic engagement may quietly pressure Ankara to prioritize dismantling Quds Force infrastructure, especially near Western and Israeli assets.
Indicators to watch include public exposure of Iranian networks by Turkish authorities, shifts in Turkish‑Iranian rhetoric, changes in security levels at Western and Israeli facilities in Turkey, and any attempted or successful attacks linked back to Iranian operatives. A major incident on Turkish soil tied to Iran would significantly raise regional tensions and could prompt overt retaliatory measures, potentially drawing Turkey more deeply into the broader confrontation between Iran and its adversaries.
Sources
- OSINT