How Iran Is Outsourcing Violence

Key Takeaways

• Iran uses biker gangs and crime syndicates for overseas attacks
• Outsourced model reduces Tehran’s direct attribution risk
• Western intelligence faces fragmented threat landscape and slower attribution
• Legal tools struggle to prosecute state‑linked criminal proxies
• Policy calls for tighter law‑enforcement and security agency coordination

Pulse Analysis

Since the early 2000s the Islamic Revolutionary Guard Corps (IRGC) relied on ideologically aligned militias such as Hezbollah to project power abroad. Recent investigations, however, reveal a pronounced pivot toward the criminal underworld. Biker gangs, organized‑crime cells and freelance hitmen are being hired to execute low‑profile attacks, from fire‑bombing ambulances in London to contract killings in the United States. Analysts describe the shift as a ‘gig‑economy’ model of state‑sponsored violence, where Tehran pays per operation, keeping its fingerprints deliberately vague.

The operational upside for Iran is clear. Criminal actors already possess the logistics, weapons expertise and willingness to operate in legal gray zones, allowing Tehran to expand its reach without exposing senior officials. This indirect chain of command complicates traditional counter‑terrorism playbooks that depend on hierarchical mapping. Attribution now requires cross‑jurisdictional forensic work, and prosecutors often lack the statutory basis to charge a foreign state for crimes committed by private contractors. Consequently, deterrence erodes as the cost‑benefit calculus for Iran improves.

For Western security services the emerging threat demands a hybrid response. Intelligence agencies must fuse terrorism analysis with organized‑crime intelligence, sharing data across national borders and between law‑enforcement and national‑security entities. Legal frameworks need updating to treat state‑directed criminal proxies as a distinct category, enabling asset freezes and extradition even when direct orders are untraceable. Failure to adapt could embolden Tehran to weaponize the global black market further, raising the risk of attacks on diaspora communities, critical infrastructure, and democratic institutions worldwide.