Introduction
In January 2026, a surge of pro-monarchy slogans flooded social media. Videos circulated widely showing protesters chanting, “This is the final battle, Pahlavi returns.”
At first glance, the movement appeared organic — a grassroots shift toward restoring the monarchy.
However, a digital forensic investigation suggests something very different: the narrative may not have originated from Iran’s streets, but from the regime’s own cyber infrastructure.
Digital Forensics and the “Iran Android App” Connection
According to findings attributed to Treadstone 71’s investigation, hundreds of aggressive monarchist accounts on X (formerly Twitter) were posting via the “Iran Android app.”
This connection method is reportedly inaccessible to ordinary Iranian citizens. It is said to be reserved for users operating through:
- White SIM cards
- State-controlled, unfiltered internet infrastructure
- Restricted regime-linked access channels
If accurate, this would indicate that these accounts were not grassroots activists, but coordinated operators with privileged access.
The Sock Puppet Network
A report referenced by the French newspaper Le Figaro describes what appears to be a vast “sock puppet” network — fake identities designed to simulate mass public support.
According to cited forensic data, more than 95% of the so-called “crown accounts” were allegedly inauthentic.
This suggests that what appeared to be widespread public enthusiasm may have been a structured influence campaign rather than a spontaneous social movement.
Why Would the Regime Promote a Monarchist Narrative?
The key strategic question is: why would the Islamic Republic amplify monarchist messaging?
The analysis presented suggests a strategic motive:
By elevating a controlled or polarizing alternative, the regime can:
- Fragment opposition forces
- Prevent the emergence of a unified democratic alternative
- Redirect public frustration toward ideological nostalgia rather than systemic change
One state-affiliated media editor was quoted as stating:
“Reza Pahlavi is essentially a project of the Islamic Republic. As long as he remains in the picture, no genuine opposition can emerge.”
If true, this would represent a sophisticated containment strategy.
Manufacturing the Past to Control the Future
By fabricating a “return to the past,” the regime may be shielding itself from the possibility of a future-oriented democratic transition.
If the investigation’s claims hold, the slogans were scripted, the amplification was artificial, and the ultimate beneficiary was the Islamic Republic itself.
In this context, the monarchist wave functions as a Trojan Horse — a seemingly oppositional force that ultimately stabilizes the very system it claims to challenge.
Conclusion
The events of January 2026 underscore a new reality in modern political struggle: repression is no longer the only tool of authoritarian systems. Narrative engineering, digital infiltration, and synthetic opposition may be equally powerful.
As information warfare becomes more advanced, distinguishing authentic grassroots movements from coordinated influence operations is becoming increasingly difficult — and increasingly critical.