IRGC-Linked Iranian Arrests Surge at Northern Border

June 27, 2026

By Alerts USA Threat Journal

U.S. officials report a marked increase in attempts by Iranian nationals to enter the country illegally via the northern border with Canada. DHS Secretary Mullin highlighted the trend in an interview with Fox News, where he notes daily increases in arrests of Iranian nationals, many with direct ties to Iran’s Islamic Revolutionary Guard Corps, or IRGC.

This surge coincides with the aftermath of 2026 U.S.-Israeli strikes on Iranian nuclear and leadership targets. Tehran responded by threatening to target Americans “anywhere,” including inside the homeland. While degraded proxy networks have limited large-scale operations, the threat clearly persists.

The IRGC has a documented history of targeting the U.S. homeland through proxies, criminal surrogates, cyber operations, and lone actors. According to a 2025 report from the Combating Terrorism Center at West point, in the past five years alone, authorities have disrupted at least 17 Iranian-linked domestic terror plots, including assassination attempts on U.S. officials and surveillance of dissidents.

Threat Landscape

IRGC-affiliated individuals present risks of espionage, facilitation of attacks, or activation of sleeper networks. Particular concern surrounds major summer events, most notably the America 250 commemorations and the 2026 FIFA World Cup. And as expected, authorities are not taking any chances. As a result, several members of the management and support staff traveling with the Iranian national soccer team for the FIFA World Cup were denied entry due to IRGC affiliations.

Broader risks include cyber disruptions by pro-Iran hacktivists, lone-actor attacks inspired by regime rhetoric, and proxy operations leveraging diaspora or criminal networks. DHS has issued updated advisories on the heightened threat environment, warning of possible retaliation against U.S. persons and infrastructure. As a reminder, the June 2025 National Terrorism Advisory System (NTAS) bulletin — prompted by an earlier 12-day conflict between Iran and Israel — highlighted similar risks. Although that bulletin has expired, the underlying threat has not diminished.

U.S. countermeasures include intensified northern border patrols, enhanced vetting in coordination with Canadian partners, and sustained interior enforcement by ICE. Law enforcement and intelligence professionals should prioritize monitoring Iranian nationals and dual citizens with recent travel through third countries (such as Canada, Turkey, or the UAE), unexplained wealth or financial transactions potentially linked to IRGC funding streams, associations with known proxy networks like Hezbollah, and indicators of pre-operational surveillance targeting critical infrastructure, government officials, or diaspora dissidents.