The Forensic Record

The Electrodes

In a Tehran morgue in January 2026, a forensic photograph captured what would become the massacre’s most damning piece of evidence: a young man — known to investigators only by a case number, his identity one of thousands the regime worked to erase — with a fatal gunshot wound through his face and cardiac monitoring electrodes still attached to his chest. An IV line, taped to his arm, trailed from the needle to where the bag had been torn away.

The electrodes prove he was under medical care before the fatal wound. If he had died in the street, no doctor would have attached monitoring equipment to a corpse. The IV proves he was receiving treatment — fluids, possibly medication. The gunshot through the face, at close range, was fired after the monitoring began.

This is not an inference. It is forensic logic of the kind that courts accept. The evidence tells a sequence: wounded in the street, transported to hospital, treated by doctors, extracted from care, and executed. The medical equipment is the timestamp. The bullet is the signature.

This pattern — treatment followed by execution — was not isolated. Across Tehran, Karaj, and Mashhad, morgue photographs show the same configuration: fatal wounds on bodies that bear the marks of prior medical intervention. The hospitals that were supposed to be sanctuaries were transformed into the last station on an execution pipeline.

This article documents what the evidence shows. Not what the regime claims. Not what the opposition estimates. What the physical, documentary, and testimonial record can support when held to the standard of future accountability.

The Order

The chain of command that produced the massacre is documented through a combination of leaked internal communications, forensic analysis of operational patterns, and intelligence assessments. Each link connects the person who gave the order to the person who pulled the trigger.

Link One: The Supreme Leader. On January 9, 2026, Ali Khamenei issued a direct directive to the Supreme National Security Council: “crush the protests by any means necessary.”¹ This language — confirmed through multiple intelligence channels — was interpreted by field commanders as a blanket waiver of all rules of engagement. In the legal framework of the Islamic Republic, the Supreme Leader’s word supersedes all statutory and constitutional constraints. The directive was, functionally, a death warrant for the nation’s streets.

Link Two: The SNSC. The Supreme National Security Council operationalized Khamenei’s directive into specific “live fire” commands. These were transmitted to field commanders as actionable military orders, not policy guidance. The SNSC served as the translation layer between a political decision and a military operation.

Link Three: The Three Branches. Intelligence indicates that the heads of the Judiciary, Parliament, and the Executive branch had “explicit knowledge” of the operation and provided prior approval before the killing began.² This implicates the entire civilian administration alongside the security apparatus. The massacre was not a rogue military operation. It was state policy, endorsed at every level.

Link Four: The Crisis Headquarters. The standard provincial security apparatus was bypassed. A centralized “Crisis Headquarters” — controlled by IRGC Intelligence (SAS) and the Office of the Supreme Leader — took direct command of operations nationwide. This structure eliminated the normal chain of provincial governors and security councils, concentrating authority in the hands of the IRGC’s intelligence directorate.

Link Five: The Field. Senior IRGC commanders disseminated the doctrine of Al-nasr bil-ru’b — “Victory through Terror” — in operational field briefings. This was not an improvised escalation. It was a named doctrine, distributed through command channels, that explicitly authorized the level of violence documented in the following sections.

The classification of protesters as “terrorists” and “agents of foreign arrogance” completed the legal architecture. This language — echoing Khomeini’s 1988 fatwa that categorized political prisoners as mohareb (those who wage war against God) — stripped protesters of citizenship protections. Under this classification, killing an unarmed teenager was not murder. It was counter-terrorism. The legal fiction was the final link in the chain — the one that turned policy into permission.

The Methods

The methods documented across multiple cities follow consistent patterns, indicating centralized planning rather than localized improvisation.

DShK Heavy Machine Guns. Weapons designed for anti-aircraft and anti-materiel use — typically mounted on vehicles or tripods, firing 12.7mm rounds capable of penetrating armored vehicles — were deployed against pedestrian crowds. In Kermanshah, this weapon was responsible for the majority of the approximately seven hundred deaths, including three hundred dead-on-arrival patients admitted to a single hospital in a single night.³ The deployment of anti-aircraft weapons against unarmed civilians is a doctrinal choice: maximum lethality, maximum terror.

Laser-Targeted Snipers. Systematic sniper operations used laser targeting to mark specific individuals — protest leaders, anyone filming with a phone, anyone coordinating crowd movements. Snipers operated from elevated positions: rooftops, mosques, government buildings, and in Tehran, from Police Station 126. The targeting of individuals who were documenting the violence served a dual purpose: eliminating witnesses and suppressing the creation of evidence.

“Finishing Shots” (Coup de Grâce). A recurrent pattern across multiple cities: individuals wounded on the street were shot again at close range to ensure death. The pattern was observed both in street settings and within medical facilities. Sam — a teenager shot in the back of the head during a Tehran protest, hospitalized with cardiac monitors and IV lines, then extracted from his bed by security forces and executed with a second bullet through the face while his father Parviz searched for him — represents the documented archetype of this method. His father found him in a morgue. The medical equipment was still attached.

The Ambulance Pipeline. Security forces commandeered ambulances for two purposes: transporting troops past barricades (ambulances were not stopped at protest lines) and abducting wounded protesters from the streets before they could reach hospitals. In western Tehran, agents executed a semi-conscious patient inside an ambulance in the presence of the medical crew. The weaponization of medical transport — the conversion of the ambulance from rescue vehicle to execution chamber — represents a complete abrogation of medical neutrality.

Consider the implications. In any country, when a person is injured, the instinct is to call an ambulance. In January 2026, in Iran, the ambulance was the last thing a wounded protester wanted to see. The vehicle that in every other context means help is coming had been converted into its opposite. Parents told their children: if you are hurt, do not go to the hospital. That sentence — spoken by mothers and fathers to their sons and daughters — is the measure of what the regime’s methods destroyed.

The Rasht Fire Trap. In Rasht, security forces surrounded the Grand Bazaar, set it ablaze, and shot those who fled the flames. Fire trucks were physically prevented from reaching the scene. Victims were forced to choose between burning and gunfire. An estimated twenty-five hundred died. The method — creating a sealed “kill box” using fire and firearms — required advance planning, multiple units operating in coordination, and deliberate interference with emergency services.

The Geography

Regional Casualty Estimates

City / Region Estimated Deaths Signature Method
Tehran Thousands (aggregate) Rooftop snipers, hospital executions, Kahrizak morgue overflow
Karaj / Fardis ~3,000 Bulldozers clearing bodies, indiscriminate truck loading
Rasht ~2,500 Bazaar fire trap — shot fleeing flames, fire trucks blocked
Isfahan / Najafabad ~2,000 Heavy weapons in historic centers
Mashhad ~1,800 Fatemiyoun deployed around Imam Reza shrine
Kermanshah ~700 DShK machine guns; 300 DOA at one hospital in one night
Gorgan ~400 Intensive northern suppression

City / Region	Estimated Deaths	Signature Method
Tehran	Thousands (aggregate)	Rooftop snipers, hospital executions, Kahrizak morgue overflow
Karaj / Fardis	~3,000	Bulldozers clearing bodies, indiscriminate truck loading
Rasht	~2,500	Bazaar fire trap — shot fleeing flames, fire trucks blocked
Isfahan / Najafabad	~2,000	Heavy weapons in historic centers
Mashhad	~1,800	Fatemiyoun deployed around Imam Reza shrine
Kermanshah	~700	DShK machine guns; 300 DOA at one hospital in one night
Gorgan	~400	Intensive northern suppression

The geographic distribution reveals a nationwide operation, not a localized crackdown. The simultaneous deployment of heavy weapons across seven major population centers — each with distinct methods adapted to local conditions — indicates pre-positioning of forces and equipment before the Zero Hour orders were transmitted.

The Five Numbers

The central forensic challenge of January 2026 is the death toll. The disparity between sources is not an accident — it is produced by the regime’s strategy of evidence destruction.

The Forensic Floor: 6,634–6,964 (HRANA). The Human Rights Activists News Agency counts only what can be fully verified: a name, a biographical profile, a confirmed manner of death. This is the minimum. It represents people whose identities survived the regime’s efforts to erase them. The Iran International “Truth Registration Map” has independently verified eleven hundred and forty-one profiles with complete biographical data.⁴ The forensic floor is conservative by design — a legal document, not an estimate.

The Clinical Count: 16,500–30,304 (Sunday Times / 80+ doctors). Over eighty medical professionals — doctors, nurses, and hospital administrators across Iran — compiled registry data of bodies that passed through their facilities during January 8–9. The thirty-thousand figure represents registered hospital admissions of deceased persons in a forty-eight-hour window. It does not include those who died and were never brought to medical facilities. The clinical count is an undercount of total deaths but an overcount relative to verified identities.

The Bureaucratic Ceiling: 36,500 (leaked IRGC internal reports). A January 11 report submitted to the SNSC cited twelve thousand dead — three days after the massacre. An Interior Ministry update on January 24 raised the figure to over thirty-six thousand five hundred.⁵ These are not estimates. They are internal state documents — the regime’s own accounting of what it did, compiled for security planning purposes. Authoritarian governments that kill their citizens frequently maintain accurate internal records while publishing falsified external numbers.

The Official Figure: 3,117 (Iranian government). The regime’s number excludes anyone classified as a “rioter” (the regime’s term for protester) and likely includes security force casualties. It represents a political communication strategy, not a forensic assessment.

The UN Estimate: 20,000+ (Special Rapporteur). An aggregation of available credible reports. It falls in the middle range and carries the authority of the United Nations but the limitations of a summary assessment made under information warfare conditions.

The “Dark Figure” — the statistically significant number of deaths that exist in no record — is produced by specific mechanisms: mass burials (documented in Karaj), body snatching from hospitals before families could identify their dead, and “bullet fees” (charges levied on families to recover bodies, creating financial barriers to documentation). The regime’s approach represents inverted incentivization: unlike the Iran-Iraq War, where martyrdom was celebrated and death was meticulously recorded, in 2026 death is concealed and records destroyed.

1988 and 2026

Two Massacres, One Regime

1988 Prison Massacres 2026 Street Massacres
Legal basis Fatwa by Khomeini Directive by Khamenei
Decision body ”Death Commissions” (3-person panels) SNSC / Crisis Headquarters
Method Hanging (in prisons, in secret) Direct fire, hospital executions (in streets, in public)
Disposal Mass graves (Khavaran) Mass burials, body snatching, “bullet fees”
Information control Total media blackout (pre-internet) Digital blackout / Starlink jamming
Scale ~3,800–30,000 (disputed) ~6,600–36,500 (disputed)

	1988 Prison Massacres	2026 Street Massacres
Legal basis	Fatwa by Khomeini	Directive by Khamenei
Decision body	”Death Commissions” (3-person panels)	SNSC / Crisis Headquarters
Method	Hanging (in prisons, in secret)	Direct fire, hospital executions (in streets, in public)
Disposal	Mass graves (Khavaran)	Mass burials, body snatching, “bullet fees”
Information control	Total media blackout (pre-internet)	Digital blackout / Starlink jamming
Scale	~3,800–30,000 (disputed)	~6,600–36,500 (disputed)

The shift from secret to public is the critical evolution. In 1988, the regime killed in prisons and buried at Khavaran in the middle of the night. It wanted the killing to remain invisible — a state secret that families whispered about for decades. In 2026, the regime killed with DShK machine guns on city streets in daylight. It used bulldozers in neighborhoods where residents watched from windows. It deployed foreign fighters who did not speak Farsi in cities where everyone noticed.

The shift marks a regime that has abandoned the pretense of legitimacy. It no longer seeks to govern through a social contract, however fictional. It governs through the psychology of visible trauma — a “public secret” that everyone witnessed and no one is permitted to name. The message is not we didn’t do it. The message is we did it, and we will do it again.

The Detention System

The forty-eight hours of street killing were followed by a systematic campaign of mass incarceration designed to eliminate the uprising’s organizational capacity and terrorize survivors into silence.

Over forty-two thousand people were arrested. Schools, stadiums, and government buildings were repurposed as temporary detention facilities to process the volume. In Kerman and other provincial cities, detainees — including children as young as fourteen — were held in unmarked warehouses and shipping containers along roads like Zangiabad Road. These sites exist outside the judicial system. Detainees held in them legally “do not exist” — they have no access to lawyers, no registration in court systems, and no protection against enforced disappearance.

Credible reports from Kermanshah and other regions document the rape of detainees, including minors, as a systematic tool of interrogation and humiliation. Detainees report forcible injection of unknown substances, leading to comas or death — including the case of a sixteen-year-old girl held in an Isfahan detention facility, whose family was denied access and whose condition remains unknown.

On February 8, the Judiciary Chief announced that protest detainees would be excluded from the traditional Supreme Leader anniversary pardons — classifying thousands as permanent enemies of the state.⁶ Reports of “secret executions” and lethal injections suggest a policy of quiet elimination designed to avoid the political costs of public hangings while achieving the same result.

The Honest Ledger

The forensic record presented here must be held to its own standard.

The death toll range — six thousand six hundred to thirty-six thousand five hundred — is wide. The lower bound is rock-solid: verified names, confirmed deaths, biographical documentation that can withstand legal scrutiny. The upper bound comes from leaked internal regime documents whose authenticity has been assessed as high by independent analysts. The true number falls somewhere in this range, and anyone who claims to know the precise figure is performing advocacy, not forensics.

The chain of command is documented but not yet adjudicated. The leaked communications, intelligence assessments, and forensic patterns presented here constitute evidence — not convictions. Courts have not yet heard these cases. International legal mechanisms — universal jurisdiction trials following the Swedish Noury precedent, potential ICC pathways, the extended UN Fact-Finding Mission — are in various stages of development. The CIJA model developed in Syria offers a framework: document the chain from the individual who fired the weapon to the individual who authorized the operation, preserving linkage evidence that connects the physical act of killing to the command authority.⁷

The January 11 IRGC report — which cited twelve thousand dead three days after the massacre — is the single most important piece of linkage evidence identified to date. It proves state knowledge of the scale at the highest levels of command. It connects the Crisis Headquarters to the field. It is the thread that, if pulled in a court of law, unravels the chain from the sniper on the rooftop to the Supreme Leader who authorized the operation.

The forensic record waits. It is patient. It does not expire. The photographs from the Tehran morgue — the electrodes, the IV lines, the close-range bullet wounds — are timestamped evidence that will outlast the regime that created them. The bodies have been buried or hidden. The evidence has been preserved.

When the court is built, the record will be ready.

FDD, “Tehran Regime Fears Defections as Iran’s Nationwide Movement Defies Containment,” analysis, January 12, 2026 ↩
Iran HRM, “Evidence-Based Report and Documentation: Targeted Killings, Summary Executions,” February 4, 2026 ↩
The Guardian, “Disappeared Bodies, Mass Burials and ‘30000 Dead’: What Is the Truth of Iran’s Death Toll?,” January 27, 2026 ↩
Iran International, “Thousands of Protest Deaths Missing from Iran’s Official Tally,” February 2, 2026 ↩
Iran International, “Over 36,500 Killed in Iran’s Deadliest Massacre, Documents Reveal,” January 25, 2026 ↩
Iran International, “Iran Bars Protest Detainees from Annual Pardons, Judiciary Chief Says,” February 8, 2026 ↩
European Journal of International Law, “Entrepreneurial Justice: Syria, the Commission for International Justice and Accountability,” vol. 30, no. 4, 2019 ↩