Islamic Republic–Linked Influence Architecture Targeting Western Perception

Methods and Actor Typologies Used by the Islamic Republic to Influence Western Public Opinion (2023-2026)

Research Context

This report represents the second phase of the investigation into foreign-linked influence activity associated with actors aligned with the Islamic Republic of Iran. While the first phase established the structural foundations of the network through quantitative analysis of 7,924 account records, this phase builds upon those findings by refining actor typologies, examining narrative objectives across crisis contexts, and analyzing how influence mechanisms operate within Western information environments. The analysis should therefore be understood as a continuation and expansion of the initial dataset rather than a separate investigation.

1. Conceptual Introduction: Narrative Manipulation as an Instrument of Power

Narrative manipulation refers to the systematic shaping of how events, actors, and outcomes are perceived rather than altering the events themselves. In contemporary information environments, power is increasingly exercised through control of interpretation, legitimacy, and emotional framing rather than direct censorship alone.

In authoritarian influence operations, narrative manipulation serves three primary strategic functions:

Unlike disinformation, which relies on falsity, narrative manipulation often operates using selective truth, emphasis, omission, and framing, making it more resilient to fact-checking and more difficult to attribute.

2. Scope and Objective

This research summarizes methods and actor configurations employed by the Islamic Republic of Iran to influence, distort, and control public perception in Western information environments over the past three years.

The analysis is grounded in large-scale OSINT analysis of X (formerly Twitter) and builds on Golden Owl's prior identification of coordinated, state-aligned influence infrastructure consisting of more than 7,500 unique accounts.

The focus of this section is how narrative control is operationalized, rather than reiterating network scale already established in previous findings.

3. Methodology

3.1 Research Design

This study employed a multi-phase open-source intelligence (OSINT) methodology combining quantitative network analysis with structured qualitative content review.

The research evolved in two analytical layers:

The objective was to identify role-based actor architecture, activation timing, and narrative manipulation methods, rather than assess isolated posts.

3.2 Phase 1: Quantitative Network Classification

The initial dataset consisted of:

Accounts were drawn from two interconnected datasets:

Quantitative Role Distribution

Additional quantitative indicators included:

These metrics formed the empirical basis for structural role identification.

3.3 Phase 2: Expanded Actor Typology Through Qualitative Analysis

While Phase 1 established the macro-structure of the network through quantitative classification, it did not fully capture nuanced actor roles such as embedded influencers, opposition-positioned agents, or intelligence-gathering accounts.

To refine and expand the classification framework, researchers conducted structured manual qualitative analysis of:

This qualitative layer covered over 10,000 individual posts published between 2023 and 2026.

Content reviewed included:

Manual analysis enabled the identification and refinement of expanded actor categories, including:

3.4 Phase 3: Crisis-Based Activation Analysis

Content sampling was conducted across:

For each period, researchers examined:

Additionally, tens of intelligence-gathering accounts were examined, particularly those exhibiting elevated interaction patterns immediately following crisis events.

Content was analyzed in Persian and English.

3.5 Analytical Procedure

The analysis followed a structured, repeatable process:

3.6 Intelligence-Gathering Account Assessment

Additionally, researchers analyzed more than 40 accounts classified as intelligence-gathering. These accounts were identified based on the following behavioral indicators:

These accounts were analyzed separately to avoid conflating influence activity with intelligence collection functions and to preserve analytical distinction between narrative-shaping actors and information-gathering roles.

3.7 Limitations

This research relies exclusively on open-source data and observable behavior. No claims are made regarding internal command structures, direct state tasking, or individual intent beyond what can be inferred from reproducible patterns.

The classifications used reflect analytical roles, not legal determinations or definitive attribution.

3.8 Methodological Rationale

By combining large-scale behavioral analysis with deep manual content review across multiple crisis contexts, this methodology enables identification of systemic narrative manipulation techniques while minimizing reliance on isolated examples or speculative attribution.

This approach prioritizes pattern consistency, temporal correlation, and functional role analysis, which are more robust indicators of influence operations than content polarity or volume alone.

4. Findings

4.1 Actor Architecture: A Diversified Virtual Influence Army

Modern influence operations rarely rely on uniform actors. Instead, they deploy heterogeneous role-based ecosystems, where each actor category performs a specific psychological or structural function within the information environment. This diversification increases resilience, deniability, and reach across demographic and ideological boundaries.

4.1.1 Direct Supporters

Accounts that openly support regime leadership, policies, and ideological narratives.

This category divides into two empirically distinct subtypes:

Real individuals expressing genuine belief, identity alignment, or perceived personal interest. These accounts show consistent ideological framing over time and largely organic engagement patterns.

Accounts exhibiting amplification behavior, posting frequency anomalies, or coordination indicators. Their function is volume, repetition, and visibility rather than persuasion.

Operational role:

Establish baseline narrative presence and normalize regime-aligned discourse.

4.1.2 Embedded Influencer Accounts (Narrative Reservists)

Embedded influencer accounts function differently from conventional propaganda actors. Their primary value lies in trust accumulation during non-political periods, enabling later intervention without triggering suspicion.

Accounts that do not normally engage in political discourse and instead build audiences through:

• viral or meme-based posts

• erotic, provocative, or contradictory material

• entertainment-oriented engagement

Key characteristics:

During crises, these accounts activate selectively, presenting regime-aligned framing as personal opinion, emotional reaction, or "reasonable moderation."

Operational role:

Narrative normalization and demographic-specific persuasion at critical moments.

4.1.3 Opposition-Positioned Agents

Opposition-positioned agents exploit identity proximity rather than ideological distance. By appearing aligned with protest movements, they gain access to trust networks otherwise inaccessible to overt regime supporters.

Accounts that present themselves as opposition voices but act to redirect, fragment, or neutralize mobilization during high-risk periods.

Observed subtypes:

Accounts openly engaging in opposition discourse while subtly introducing defeatism, misdirection, or internal conflict narratives.

Accounts that embed within protest or activist communities, gain trust, and intervene during escalation phases to dilute momentum or reframe objectives.

Operational role:

Opposition containment through internal disruption rather than external attack.

4.1.4 Celebrity Asset Operations

Celebrity influence leverages parasocial trust, where audiences perceive familiarity and authenticity independent of political expertise.

Public figures with large followings activated selectively during crises.

Observed mechanisms include:

Content typically avoids explicit regime endorsement, instead promoting:

• ambiguity

• "both-sides" framing

• calls for de-escalation beneficial to regime survival

Operational role:

High-credibility narrative intervention with minimal overt alignment.

4.1.5 Academic and Journalist Asset Operations

Academic and journalistic assets function through epistemic authority, shaping what is perceived as reasonable, complex, or credible.

Use of academics, analysts, and media figures to legitimize preferred narratives through argumentation rather than propaganda.

Common patterns:

Notably, some accounts appear critical of the regime while still advancing narratives that ultimately serve regime objectives.

Operational role:

Elite discourse shaping and policy-adjacent influence.

4.1.6 Intelligence-Gathering Accounts

Influence operations frequently combine persuasion with counter-opposition intelligence collection.

Accounts that do not participate in narrative shaping but focus on information collection.

Behavioral indicators include:

Operational role:

Identification of real individuals behind anonymized opposition accounts, enabling harassment, intimidation, or offline targeting.

4.2. Content Manipulation Methods

Content manipulation methods are designed to operate across emotional, cognitive, and temporal dimensions. Rather than persuading audiences directly, these techniques aim to reshape the environment in which interpretation occurs.

The qualitative expansion phase demonstrated consistent alignment between observed content manipulation methods and the four primary narrative objectives identified in the initial quantitative research: anti-Pahlavi campaigns, anti-Semitic framing, regime glorification and reformability narratives, and the elevation of MEK and separatist alternatives.

4.2.1 Hashtag Distortion

Deliberate creation of near-identical hashtags differing by one or two characters to fragment discourse and weaken visibility of genuine movements.

Observed most frequently during periods of mass mobilization.

4.2.2 Discrediting Through False Expectation

Use of exaggerated casualty figures, premature victory claims, or imminent collapse narratives to generate false hope, followed by disillusionment and disengagement.

4.2.3 Sentimental Neutralization

Promotion of emotionally resonant but politically inert actions during moments requiring collective mobilization (e.g., symbolic art, poetry, passive reflection).

Effect:

Emotional discharge without strategic pressure.

4.2.4 Provocation and Rebelious Framing

Encouragement or amplification of vandalism and aggressive acts, followed by portrayal of the opposition as violent or illegitimate.

4.2.5 Fear-Based International Destabilization Framing

Promotion and amplification of narratives portraying Iran as on the verge of fragmentation and regional chaos, with the explicit or implicit aim of influencing Western risk perception.

Observed tactics include:

Effect:

Shifts external stakeholder focus from legitimacy and human rights toward containment, stability, and risk aversion.

4.2.6 Trivialization of Political Concepts

Systematic misuse of terms such as "democracy," "freedom," "unity," and "solidarity," redefining them situationally to align with regime interests.

Simultaneously, labels such as "dictatorship," "censorship," or "aggression" are applied to opposition actors.

4.2.7 Normalcy and Freedom Signaling

Systematic dissemination of content portraying daily life in Iran as normal, stable, and unconstrained, particularly during periods of widespread unrest.

Common themes include:

Effect:

Narrative dilution aimed at reducing perceived urgency, legitimacy, and mass character of revolutionary movements.

4.2.8 False Authority Construction

Artificial elevation of selected opposition figures through likes, reposts, and follower inflation to present them as leaders or consensus voices.

4.2.9 Distraction Through Scandal Amplification

During crisis periods, coordinated amplification of sensational, scandalous, or emotionally charged but politically unrelated content.

This content typically:

Effect:

Temporal displacement of attention away from regime-critical narratives at decisive moments.

4.2.10 Dehumanization of Anonymity

Delegitimization of anonymous opposition accounts by framing anonymity as proof of dishonesty, foreign manipulation, or cowardice - despite anonymity being a rational safety measure under repression.

4.2.11 Claim Reduction and Demand Reframing

Deliberate narrowing of opposition demands to non-existential grievances in order to neutralize revolutionary legitimacy.

Observed reframing includes:

Effect:

International misinterpretation of movement objectives, leading to inadequate political, media, and policy responses.

5. Analytical Conclusion: Consequences of Narrative Manipulation

Narrative manipulation does not merely distort perception; it reshapes decision-making environments. When sustained at scale, it alters how legitimacy, urgency, and risk are evaluated by the public, media institutions, digital platforms, and policymakers.

Unlike isolated misinformation events, structured narrative manipulation operates cumulatively. It influences which voices gain visibility, which frames dominate discussion, and which interpretations appear reasonable or extreme. Over time, this reconfiguration of interpretive space affects not only public discourse but also institutional responses.

The consequences observed include:

Reduced Visibility During Reported Massacres

One of the most consequential impacts identified in this research concerns the reduction of international visibility during January 2026, a period in which multiple independent media outlets described events as massacres and reported that tens of thousands of individuals were killed, injured, detained, or subjected to severe state violence. While precise figures remain difficult to independently verify due to communication restrictions, the scale and severity of violence were widely documented.

During these period, authorities imposed large-scale internet shutdowns and communication restrictions, significantly limiting the ability of ordinary citizens to document events. At the same time, coordinated narrative activity intensified across external information environments.

The observed narrative patterns included:

These patterns were consistently aligned with messaging that appeared aimed at reducing the perceived popularity of the opposition-supported "Lion & Sun Revolution" and limiting the visibility of voices from people in Iran within international discourse.

In this context, social manipulation functioned not merely as an informational tactic but as a political instrument. By shaping external perception during communication blackouts and diplomatic signaling phases, narrative manipulation appears to have contributed to diminished international visibility and reduced policy urgency at critical moments.

This dynamic does not require proof of centralized command over every account involved. Rather, it demonstrates how coordinated framing and amplification, operating across borders, can materially influence how severe events are interpreted abroad when independent verification is constrained.

Continuity with Prior Quantitative Findings

The expanded qualitative analysis conducted in Phase 2 confirmed the core content objectives identified in the initial large-scale quantitative research. Across crisis periods and actor categories, the same strategic narrative themes persisted consistently.

Qualitative analysis of the results of the Phase 1 with detailed investigation of more than 10,000 posts from over 200 high-impact accounts reaffirmed the presence of the following primary content objectives:

The persistence of these themes across both quantitatively identified network actors and manually reviewed high-impact accounts indicates structural continuity rather than episodic messaging. While actor roles and delivery mechanisms adapted across crisis contexts, narrative objectives remained stable.

Crucially, the most effective mechanisms identified in this research are not overt propaganda tools but latent, trust-embedded actors and framing strategies that activate selectively during moments of maximum impact. These actors often operate within normal social, cultural, or professional environments, making detection more complex than identifying automated amplification alone.

The architecture documented in this study demonstrates that influence activity extends beyond content production. It involves:

As a result, countermeasures focused solely on bot detection or content removal are insufficient. Effective response requires attention to:

Understanding these structural elements is a prerequisite for building resilient information ecosystems. Platforms, policymakers, researchers, and civil society actors must evaluate influence operations as adaptive systems rather than isolated incidents.

Narrative environments shape policy environments. When manipulation persists unaddressed, strategic perception gaps may emerge between events on the ground and their interpretation abroad. The long-term consequence is not only informational distortion but altered geopolitical decision-making grounded in reframed reality.

End of Document - Islamic Republic-Linked Influence Architecture Targeting Western Perception