The “Metronome” Deception: Forensic Evidence Reveals IRGC Runs Massive Bot Armies to Amplify Reza Pahlavi

In one of the most significant exposes regarding the Iranian political landscape in the digital age, the US-based cyber intelligence firm Treadstone 71 has released a technical report that shatters the narrative of “online popularity” surrounding Reza Pahlavi, the son of the former Iranian dictator. The report, backed by irrefutable digital forensic evidence, reveals that the Islamic Revolutionary Guard Corps (IRGC) and the Ministry of Intelligence (MOIS) are behind a massive network of automated bots designed to artificially inflate Pahlavi’s profile, aiming to hijack the trajectory of the popular uprising and distract from the democratic alternative.

This is not mere speculation; it is mathematical proof. The investigation uncovered hundreds of thousands of accounts “born” at the exact same second, operating with a mechanical precision impossible for human beings.

Un ancien otage dénonce l’hypocrisie de Téhéran et le train de vie confortable des enfants de hauts responsables du régime iranien #IranProtests #IranRevolution #FreeIran2026 #No2ShahNo2Mullahshttps://t.co/6M9WLUSG1p

— Iran Focus (@Iran_Focus) January 27, 2026

The “Metronome Heartbeat”: A Forensic Impossibility

At the core of the report is the discovery of a technical pattern Treadstone 71 terms the “Metronome Heartbeat.” In analyzing data from hundreds of thousands of accounts promoting the monarchy and attacking the Iranian Resistance, cyber experts found a statistical anomaly that serves as a digital smoking gun:

• Over 356,000 accounts were created at time intervals matching with millisecond precision.
• These accounts were not created randomly, as human users would sign up. Instead, they were generated at the exact “00” second of every minute, in rigid 60-second intervals.

The report states unequivocally: “Humans do not sign up like clockwork. Bots do!”. This specific “fingerprint” confirms that the operation was programmed via automated scripts, likely running on server farms managed by state-level actors.

Anatomy of a Mirage: 9 out of 10 Accounts are Fake

The report delves into the specifics of this “cyber farm” working in favor of Reza Pahlavi, revealing that the numbers often cited as proof of his support are nothing more than a digital mirage:

1. Staggering Fake Rates: Forensic analysis of Instagram accounts promoting Pahlavi revealed that approximately 90% (specifically 88.6% in the studied sample) were fake bot accounts.
2. The “Proxy” Campaign: The highly publicized “Man Vekalat Midaham” (I give my proxy) campaign, which urged Iranians to designate Pahlavi as their representative, was the product of “Deceptive Amplification.” The report found that the vast majority of hashtags and engagement for this campaign were driven by these automated accounts triggered at specific times.

Characteristics of the IRGC Cyber Army

Treadstone 71 provided a detailed breakdown of the characteristics that identify these accounts, making it easier for observers to spot the deception:

• Alphanumeric Names: Accounts often use randomly generated handles (e.g., user847392), indicative of auto-generation scripts.
• Missing Identity: Most accounts lack real profile photos or use generic stock images.
• follower/Following Ratio: These bots typically follow a high number of accounts to boost others’ numbers but have zero or very few followers themselves.
• Creation Spikes: The report mapped massive spikes in account creation that coincided with specific political events (e.g., June 2022, September 2022, January 2023), confirming they are switched on and off centrally.

The Strategic “Why”: Why Does the Regime Support the Shah’s Son?

This leads to the critical question: Why would the IRGC and the regime’s intelligence apparatus build a cyber army to support the son of the deposed Shah?

The answer lies in the strategy of “Controlled Opposition.” The report and subsequent political analysis suggest several key objectives for the regime:

1. Marginalizing the Democratic Alternative:

The regime understands that its existential threat comes from organized, democratic forces like the NCRI and the Resistance Units. By artificially inflating Reza Pahlavi, the regime creates a “straw man” opposition. They aim to convince the West and the internal population that the only alternative is a return to the past, thereby overshadowing the forward-looking democratic movement.

105e semaine de la campagne « des mardis contre les exécutions » dans 56 prisons iraniennes #IranProtests #IranRevolution #FreeIran2026 #No2ShahNo2Mullahshttps://t.co/TJvBmhcFhb

— Iran Focus (@Iran_Focus) January 27, 2026

2. Sowing Division:

These bots do not just praise Pahlavi; they are programmed to launch vicious, coordinated attacks against other revolutionary forces. The report notes this behavior creates a “toxic polarization” in the online space, designed to exhaust real users and fracture the unity of the opposition.

3. Distorting the Uprising’s Narrative:

While the streets chant “Down with the Oppressor, be it the Shah or the Leader (Khamenei),” the cyber army floods social media with pro-monarchy slogans. This distorts the true demands of the revolution and serves the regime’s narrative that the protesters are merely seeking a return to dictatorship, which helps the regime justify its crackdown.

Deceptive Amplification: Manufacturing Consent

The report explains “Deceptive Amplification” as a psychological warfare technique. Social media algorithms prioritize content with high engagement. When 350,000 bots interact with a Pahlavi post simultaneously, platforms like X (Twitter) and Instagram promote it as a “trend” to millions of real users.

In doing so, the IRGC creates a “false reality,” misleading Western journalists and policymakers into believing there is groundswell support for the monarchy, when in fact, the noise is generated by server racks in Tehran.

Conclusion: The Mask Falls

The Treadstone 71 report confronts the international community, tech giants, and the Iranian public with a stark reality: The so-called online popularity of Reza Pahlavi is an intelligence operation run by the very regime the people are trying to overthrow.

The astronomical follower counts and trending hashtags are digital smoke and mirrors. They are designed to obscure the truth that the Iranian people reject the “Mullahs’ dictatorship” just as firmly as they reject a return to the “Shah’s dictatorship.”

This revelation places a burden on platforms like Meta and X to remove these accounts for violating policies on “Coordinated Inauthentic Behavior,” and serves as a warning to the world not to mistake the noise of IRGC bots for the voice of the Iranian people. The truth of Iran is written in the streets by the blood of protesters, not in the algorithms of the regime’s cyber squads.