Understanding Iran’s Proxy Network: A Field Intelligence Assessment

Iran’s Islamic Revolutionary Guard Corps-Quds Force (IRGC-QF) has spent four decades constructing one of the most sophisticated non-state proxy networks in modern geopolitics. Understanding this network is essential for policymakers, security professionals, and anyone operating in or adjacent to the Middle East region.

The Architecture of the Network

The IRGC proxy network operates on a hub-and-spoke model, with Tehran providing financing, training, weapons, and strategic direction to affiliate organizations across Lebanon, Iraq, Syria, Yemen, Gaza, and increasingly in West Africa and Latin America. The principal organizations include Hezbollah (Lebanon), Kata’ib Hezbollah (Iraq), the Houthis (Yemen), and Palestinian Islamic Jihad (Gaza).

Financing Mechanisms

US Treasury Department designations and declassified intelligence assessments reveal a multi-layered financing architecture that includes direct budget transfers from the IRGC, proceeds from Iran’s oil smuggling operations, cryptocurrency networks, and front companies operating in Turkey, Iraq, and the UAE. Lugals analysts have tracked several of these financial pathways through open-source intelligence.

Operational Patterns in 2025–2026

The past 18 months have seen a significant evolution in proxy tactics. There has been increased use of commercial drone technology, adoption of encrypted communications platforms, and growing coordination between previously siloed proxy groups. The October 7, 2023 Hamas attack represented the largest coordinated proxy operation in decades and has since reshaped the strategic calculus across the network.

Implications for US and Regional Security

The network presents a persistent and evolving threat to US personnel and interests in the Middle East, to Israeli security, and to Gulf state stability. Organizations with operations in the region should incorporate proxy network threat modeling into their security assessments.