Bahrain uncovers Iran’s latest subversion network

By Andre Pienaar

The Kingdom of Bahrain announced on 09 May 2026 the dismantling of an Iranian-directed network of 41 operatives inside the country, with a further 11 handlers identified in Iran serving as the conduit between the cell and the Islamic Revolutionary Guard Corps (IRGC).

The Interior Ministry’s statement the following day, 10 May, was striking for its specificity: the network was rooted in the residue of the dissolved Islamic Scholars Council (ISC) and its followers, and was charged with forming a terrorist group, financing terrorism, spying for Iran, contacting terrorist organisations in Iraq and Lebanon, and receiving military training.

The cell, Manama said, had infiltrated kindergartens, schools, religious seminaries, charities and maatems, and had captured the sermons of clerics and chanters in mosques and at religious occasions through intimidation.

This was not the kind of bomb-throwing cell Bahrain has dismantled at intervals since 2011. It was a sophisticated hybrid warfare network, and its disruption by the Bahraini authorities tells us as much about how the IRGC operates globally as it does about Tehran’s persistent subversion of Bahrain.

The architecture of the plot

The pattern Manama described is the Hezbollah model imported wholesale. The cell did not present itself as an armed faction. It disguised its objectives by embedding itself inside the institutions through which a community’s children are educated, its charities are funded, its religious authority is mediated and its public sermons are delivered.

The Bahraini Interior Ministry’s framing was that the operation aimed to cultivate loyalty to the IRGC and to the doctrine of Wilayat al-Faqih — the guardianship of the Islamic jurist on which Khomeini’s 1979 system rests — at the expense of national loyalty, while collecting funds destined for Iran to finance further terrorism.

Two features of the network deserve particular attention.

First, the principal target was Bahrain’s own Shia community. The Ministry made clear that the cell’s coercion fell on Shia clerics, chanters and community leaders who declined to accept its political direction.

Second, the existence of 11 named clandestine intelligence handlers inside Iran, operating as the connective tissue between the IRGC and its Bahraini agents, almost certainly reflects intercepted communications the Bahraini services have not yet made public. It also reveals the scale of the operation and fits the modus operandi of IRGC operations worldwide, including the plot to assassinate President Trump.

Iran’s persistent campaign against Bahrain: from the brigades to the seminaries

The 41-person cell is the latest layer of an Iranian campaign against Bahrain that stretches back four decades.

In 1981, Tehran sponsored the Islamic Front for the Liberation of Bahrain coup attempt, the first IRGC-enabled action in the Gulf monarchies.

In 2018, Manama announced the arrest of 116 members of an IRGC-built network that bound together Saraya al-Ashtar, Saraya al-Mukhtar and Saraya al-Muqawama al-Sha’biya under one umbrella, charged with plotting to assassinate officials and target oil infrastructure.

Saraya al-Ashtar, the al-Ashtar Brigades, emerged from the 14 February Youth Coalition in 2013, received explosives training and weapons from the IRGC’s Quds Force, and was listed as a Foreign Terrorist Organisation by the United States in 2018.

The current hybrid warfare cell draws on individuals associated with the dissolved Islamic Scholars Council. The ISC was the clerical body founded in 2004 under Sheikh Isa Qassim that the Bahraini administrative court ordered liquidated on 29 January 2014, finding it had engaged in political activity threatening state security. Qassim was stripped of citizenship in 2016.

Bahrain is now presenting evidence that the network of radical clerics and their extremist lay followers did not disband but instead went underground, professionalised, and accepted IRGC command and control as the price of operational survival. The 41 detained on 09 May represent the underground continuation of an extremist institution Bahrain dissolved twelve years ago.

Bahrain’s counter-terrorism strategy has had to be proactive and decisive in the face of Iran’s persistent campaign of terrorism and subversion targeting its small Arab neighbour.

On 28 April 2026, the High Criminal Court sentenced two Afghan nationals and three Bahraini citizens to life imprisonment for coordinating with the IRGC to surveil sensitive sites, with 25 further defendants given ten-year terms for supporting Iranian operations. The Interior Ministry the previous day stripped 69 individuals of their citizenship.

In early May, Bahrain then issued sentences of up to three years against fourteen further defendants in seven cases tied to Iranian attacks on the country. Earlier waves on 12 March and 15 March produced arrests of citizens accused of using high-resolution photographic equipment to capture vital sites and transmit coordinates to the IRGC via encrypted software.

Wilayat al-Faqih as the organising principle

It is impossible to read the Bahraini disclosure without recognising the extremist doctrine that inspires the subversion and terrorism. Wilayat al-Faqih — the principle that sovereignty over Shia Muslims everywhere belongs to the most learned jurist serving as Supreme Leader in Tehran — is the foundation of Iranian foreign policy. It is the constitutional claim from which the IRGC’s extraterritorial aggression follows.

The Quds Force exists, on the regime’s own logic, to defend a transnational Shia commonwealth whose head is in Tehran. Every Shia community outside Iran is therefore, in this conception, both a potentially loyal subject and a potentially recruitable asset.

Bahrain is a priority target for the IRGC. It is the Gulf state with a Shia population ruled by a Sunni royal house. It has been the laboratory in which the IRGC has tested, since 1981, the proposition that demography can be radicalised into regime change and violent revolution.

The 09 May disclosures show that the assault continues. Tehran’s bet is no longer that street insurrection of the 2011 type can topple the Al Khalifa family, but that the capture and subversion of community institutions — kindergartens, seminaries, charities and sermons — can produce a politically detached Shia constituency whose loyalty to the Iranian project exceeds its loyalty to the Bahraini state. That was also Hezbollah’s strategy in Lebanon.

Bahrain in the IRGC’s worldwide terrorist operations

The 41-person IRGC cell uncovered in Bahrain is not an isolated operation. It forms part of a pattern of worldwide IRGC operations that has escalated over the past eighteen months across four continents.

In the United Kingdom, Director General Sir Ken McCallum disclosed in October 2025 that MI5 had tracked more than twenty potentially lethal Iran-backed plots in the year since his previous threat update, doubling the running total of twenty plots accumulated between January 2022 and October 2024. The targets included Iran International journalists, Jewish community sites and dissidents. The operational method, as both MI5 and the Independent Reviewer of State Threat Legislation have observed, relies on local criminals and proxies rather than Iranian nationals on the ground. In March 2026, UK counter-terrorism police arrested four men in London — one Iranian and three British-Iranian — over surveillance of Jewish community targets.

In Australia, the government on 27 November 2025 listed the IRGC as a state sponsor of terrorism, the first ever listing under new legislation passed for the purpose, after ASIO concluded that the IRGC had orchestrated the October 2024 arson attack on Lewis’ Continental Kitchen in Sydney and the December 2024 firebombing of the Adass Israel Synagogue in Melbourne. Both attacks targeted the Jewish community in an attempt to sow division. Australia expelled the Iranian ambassador in August 2025, its first such expulsion since the Second World War.

In November 2023, German authorities raided 54 locations connected to the Hamburg-based Islamic Center of Hamburg (IZH), an IRGC-sponsored network involved in the illegal surveillance and reconnaissance of potential terrorist targets. As of early 2026, Germany continued to push for the rapid and legally binding implementation of an EU-wide terrorist designation of the IRGC.

The 41-person Bahraini hybrid warfare cell completes a global picture in which the IRGC operates simultaneously through institutional infiltration in Shia communities and through criminal-proxy terrorist and assassination programmes in Western capitals. The tactics of terrorism and subversion vary, but the extremist doctrine — that the Supreme Leader’s authority is extraterritorial and the IRGC is its enforcement arm — does not.

Why now: the hybrid warfare cell and the missiles

The timing of the Bahraini disclosure cannot be separated from the war.

Since 28 February 2026, when Operation Epic Fury opened with nearly 900 US-Israeli strikes on Iranian targets in twelve hours, Iran has fired hundreds of missiles and drones at Bahrain in particular.

The opening salvo struck Naval Support Activity Bahrain in Juffair, the headquarters of the US Fifth Fleet, and the surrounding civilian neighbourhood. Subsequent waves have hit the BAPCO refinery complex, killed a Bahraini woman in Seef with drone debris, struck Sheikh Isa Air Base, set fire to fuel depots in Muharraq Governorate, and damaged an Amazon Web Services data centre that the IRGC publicly claimed responsibility for. By Bahraini official count, 174 missiles and 391 drones had been intercepted by early April.

The 09 May arrests are Bahrain’s domestic counterpart to its air defences. The IRGC’s expectation in any extended conflict is that sleeper assets will be activated as a second front: surveillance of US and Bahraini military and energy infrastructure, sabotage of telecommunications, financing flows out of the country, and ideological mobilisation of any sympathetic constituency.

Bahraini security officials framed recent arrests as pre-emptive action against IRGC attempts to exploit the regional conflict to activate sleeper cells and recruit foreign operatives for sabotage. The 41-person network — embedded, radicalised, financially connected and managed through clandestine intelligence handlers across the strait — is precisely the type of asset Tehran would seek to activate now.

That is also why the case will be tried as terrorism rather than political opposition. The criminal liability now spans terrorist-group formation, terrorism financing, espionage in wartime, acceptance of military training abroad, and culpability for Iranian attacks on Bahraini civilians using missiles and drones.

Implications

Three implications flow from Bahrain’s deft counter-terrorism operations for its allies.

The first is that subversion is the IRGC’s preferred long-cycle instrument. Western counter-terrorism efforts remain focused on preventing kinetic terrorist plots. MI5 tracks lethal conspiracies; it is far harder to track radicalising sermons, the infiltration of charities and the capture of seminaries, which produce recruits and operatives years later. Bahrain’s experience is therefore a case study in how to identify and dismantle clandestine subversive infrastructure. The methodology of the Bahraini Interior Ministry’s investigation deserves close study by allies.

The second is that the IRGC’s operations against the Shia communities it claims to defend should reframe Western public discourse. Reflexive characterisations of Iranian-directed cells as “Shia opposition” risk providing cover for IRGC terrorist operations in Bahrain, Lebanon and Iraq that target Shia clerics and communities unwilling to subordinate themselves to Tehran.

The third is the urgent case for the full proscription of the IRGC by the United Kingdom and the European Union. The evidence produced by Bahrain on 9 and 10 May is one more entry in a body of evidence that long ago crossed the threshold required for designation.

Bahrain has, with characteristic precision, shown what an IRGC cell looks like when it is camouflaged to avoid appearing as an armed militia. Its disclosure deserves close reading for the lessons it offers our own national security.