U.S. intelligence officials have intercepted encrypted communications believed to have originated in Iran, prompting a federal alert warning that the transmissions could serve as an "operational trigger" for sleeper cells operating abroad. The alert, reviewed by ABC News, was issued to law enforcement agencies shortly after the death of Iran's supreme leader, Ayatollah Ali Khamenei, who was killed Feb. 28 during a joint U.S.-Israeli strike.
The transmission was sent to multiple countries. According to the federal alert, preliminary signals analysis determined the communications were "likely of Iranian origin" and directed at "clandestine recipients" described as "covert operatives or sleeper assets."
The alert's language is worth reading carefully:
While the exact contents of these transmissions cannot currently be determined, the sudden appearance of a new station with international rebroadcast characteristics warrants heightened situational awareness.
That is the intelligence community telling every cop, every field office, and every allied service to wake up.
The federal alert states there is "no operational threat tied to a specific location." It does not identify a target city, a target country, or a specific plot. What it does say is that the intercepted communications could "be intended to activate or provide instructions to prepositioned sleeper assets operating outside the originating country."
In plain English: Iran may have just sent a go-code to operatives already embedded in Western nations. We don't know where. We don't know exactly what the message said. But the pattern of the transmission, its timing, and its broadcast characteristics were alarming enough to trigger a formal warning to every law enforcement agency in the country.
The alert urges law enforcement agencies to increase monitoring of suspicious radio-frequency activity. That directive alone signals the seriousness with which authorities are treating this intercept.
This did not happen in a vacuum, Newsmax World reported. Following the U.S. and Israeli strikes on Iran, law enforcement officials raised concerns that sleeper cells positioned throughout Western countries could be activated for retaliatory attacks. Khamenei's death was not an abstraction. It was the elimination of the central figure of the Iranian regime, and the regime's proxies and covert networks were always going to respond.
For years, intelligence professionals have warned that Iran maintains a network of operatives across the West. Not hypothetical operatives. Prepositioned ones. People already in place, already embedded in communities, waiting for the signal. The intercepted transmission fits the exact profile that counterterrorism analysts have long described as the nightmare scenario: a decentralized activation order sent in the aftermath of a decapitation strike.
The question is no longer whether Iran has the infrastructure. It is whether that infrastructure just received its instructions.
The federal alert calls for "heightened situational awareness." That is bureaucratic language for a reason. Intelligence agencies deal in probability, not certainty, and the alert is careful to note that the assessment rests on preliminary signal analysis. The transmission is "likely" Iranian. The purpose "could" be activation. No specific threat location has been identified.
None of that should be comforting. The absence of a confirmed target is not the same as the absence of a threat. It means the threat is diffuse, which in many ways is harder to defend against than a single identified plot. A bomb threat to one building can be evacuated. A potential activation order to sleeper cells across multiple Western countries requires an entirely different posture.
This is the reality of dealing with a state sponsor of terrorism that has spent decades building asymmetric capabilities precisely for moments like this. Iran knew that a confrontation with the United States and Israel could one day cost its leadership. It was prepared accordingly. The intercept suggests those preparations may now be in motion.
Law enforcement agencies across the country are now on heightened alert. Monitoring of suspicious radio-frequency activity is being ramped up. Allied nations, presumably among the "multiple countries" that received the transmission, are watching their own networks.
The strike that killed Khamenei was a decisive act. What follows requires equal decisiveness in a different domain: the quiet, grinding work of counterintelligence, of monitoring, of making sure that whatever instructions were transmitted never reach execution. The signal went out. The question now is whether the West moves faster than the people who received it.
