Log In Get Started
Economy March 9, 2026

U.S. Flags Encrypted Radio Traffic Tied to Iran That Could Signal Activation of Overseas Sleeper Cells

Federal alert urges law enforcement to monitor unusual encrypted transmissions relayed internationally after the reported death of Iran's supreme leader

By Ajmal Hussain
U.S. Flags Encrypted Radio Traffic Tied to Iran That Could Signal Activation of Overseas Sleeper Cells

A federal alert circulated to U.S. law enforcement agencies identifies encrypted radio transmissions believed to have come from Iran and relayed across several countries shortly after the reported killing of Ayatollah Ali Khamenei. The communications appear encoded for recipients holding a specific decryption key and could be intended to instruct or activate sleeper assets operating outside Iran. Authorities say the content cannot yet be determined and that there is no single identifiable location under threat, but they are advising heightened monitoring of suspicious radio-frequency activity.

Key Points

  • A federal alert reported encrypted transmissions believed to have originated in Iran and relayed internationally shortly after the reported death of Ayatollah Ali Khamenei.
  • The intercepted signal was encoded and appears intended for clandestine recipients holding the encryption key - consistent with messages used to direct sleeper assets without internet or cellular networks.
  • Authorities say the contents cannot yet be determined and there is no identified operational threat to a specific location, but law enforcement has been advised to increase monitoring of suspicious radio-frequency activity.

A federal government alert distributed to law enforcement agencies has flagged encrypted transmissions believed to originate in Iran that may serve as an operational trigger for clandestine personnel positioned abroad.

According to the alert, preliminary signals analysis found a coded transmission likely of Iranian origin that was rebroadcast across multiple countries in the period following the reported death of Ayatollah Ali Khamenei. The alert links the timing of the transmission to the death, which occurred in a U.S.-Israeli attack on Feb. 28, and highlights the international routing of the signal.

Investigators who reviewed the signal said the intercepted transmission was encoded and appeared directed to covert recipients in possession of the corresponding encryption key. The alert describes this as the type of message designed to convey instructions to operatives or prepositioned sleeper assets without using internet or cellular networks, relying instead on radio-frequency pathways.

Officials noted the transmissions could be intended to activate or give operational instructions to sleeper assets that are operating outside the originating country. At the same time, the alert emphasizes that its authors cannot yet determine the precise contents of the intercepted communications.

The notice also pointed to the emergence of a previously unseen station exhibiting international rebroadcast characteristics. That development, the alert said, is the basis for recommending increased situational awareness among law enforcement and related agencies.

While the alert stops short of identifying an immediate operational threat to a specific location, it directs agencies to intensify monitoring of suspicious radio-frequency activity and related indicators. The guidance focuses on detection and awareness rather than signaling a confirmed, localized attack plan.

Given the current limits on content analysis, the alert underlines uncertainty about intent and contents while urging vigilance in tracking atypical signal patterns and rebroadcast behavior across borders.

Contextual note: The information in the alert is based on preliminary signals analysis communicated to law enforcement; authorities have not publicly released decrypted content or attributed operational orders to any identified individuals or groups.

Risks

  • Uncertainty about the decrypted content of the transmissions - this limits actionable intelligence and maintains ambiguity for security planners.
  • Potential activation or instruction of prepositioned sleeper assets operating outside the originating country - this creates monitoring and resource allocation demands for law enforcement and security services.
  • Cross-border rebroadcasting of coded signals complicates attribution and response, affecting international monitoring efforts and communications-security sectors.

More from Economy

Barclays Says Private Credit Strains Fall Short of a 2008-Style Crisis Mar 22, 2026 Persistent Middle East conflict and energy shock weigh on fragile equities rally Mar 22, 2026 Israel Orders Destruction of Bridges Over Litani River, Increases Home Demolitions Near Lebanon Border Mar 22, 2026 Paper Wealth Favors Eurozone, Financial Wealth Tilts Toward U.S., UBS Says Mar 22, 2026 China Pledges Greater Market Access and More Balanced Trade After Record Surplus Mar 22, 2026