Adversary Intelligence — 2026-05-23

Classified Dossier Reveals IRGC Officers Operating in EU Under Diplomatic Cover

BLUFDespite damning allegations, formal expulsion of any named Iranian attaché remains unlikely before year-end 2026, leaving IRGC officers entrenched under diplomatic cover while EU capitals prioritize fragile negotiating channels over enforcement.

A classified dossier seen by Euractiv alleges that Iranian military attachés posted across EU capitals are active IRGC officers operating under diplomatic cover 12, creating a direct contradiction with the EU's February 19, 2026 formal designation of the IRGC as a terrorist organization under Council Decision (CFSP) 2026/421. The document names Mohammad Naghizadeh, Iran's military attaché in Poland, as an active IRGC member and recommends sanctions and expulsions targeting Iranian attachés and diplomats linked to the organization 12. The dossier further alleges that IRGC commander Ahmad Vahidi now serves as Iran's de facto decision-maker following Khamenei's death, with the Guards controlling the security apparatus, parliament, and strategic negotiations with Washington 13. German MEP Hannah Neumann warned Wednesday that IRGC networks remain "up and running in some member states" 2.

Analysis
Formal expulsion of any named Iranian military attaché is unlikely before year-end 2026: several EU capitals have signaled reluctance to foreclose diplomatic channels, and structural incentives have shielded accredited Iranian military personnel from formal action. The concurrent claim that IRGC commander Vahidi now functions as Tehran's de facto decision-maker, if accurate, means nuclear negotiations and proxy posture reflect Guards priorities rather than foreign ministry pragmatism, compounding the stakes of EU inaction. Moderate confidence rests on a single classified document seen by one outlet, uncorroborated by signals intelligence or independent governmental confirmation. The dossier may instead reflect Iranian opposition-in-exile sourcing or a single allied service seeking to accelerate EU action. Should at least one expulsion occur, EU foreign ministers gain precedent for coordinated bloc-wide action; absent that, Tehran can credibly treat the February designation as a legal formality without operational consequence.

3 sources

Exclusive: Suspected IRGC operatives retain diplomatic cover in EU - Euractiv
Dossier: Suspected Terrorists Working in EU Under Diplomatic Cover - European Conservative
Suspected IRGC operatives retain diplomatic cover in EU - Maryland Coordination and Analysis Center (MCAC)