The Phone in the Rubble
Maneli Mirkhan, founder of the pro-democracy organization DORNA, described the scene in an interview with Euronews Persian. A taxi driver in Tehran picked up a passenger — a Basij commander, still in partial uniform. Mid-ride, the commander took out his mobile phone and hurled it into the rubble of a bombed building.
The logic was precise. Iranian security forces track their personnel through their devices. When a bomb destroys a building, the regime checks for phone signals in the debris to identify casualties. By disposing of his phone in a bombed-out ruin, the commander was manufacturing his own death — creating a digital corpse so the regime would stop looking for a living deserter.1
He was not alone. Mirkhan described “defection and collapse” driven by “moral fatigue” and “a lack of clear command.” Euronews Persian corroborated: Basij members were hiding under bridges. Security officers were disguising themselves as women to evade Israeli targeting. The instruments of repression were discarding their identities to survive.2
The behavior was rational. By March 9, 2026 — ten days into Operation Epic Fury — the regime could no longer guarantee three things that every enforcer requires: safety from external attack, payment for services, and confidence that the institution they serve will survive. The first was destroyed by bombs. The second was destroyed by a precision strike on a bank. The third was destroyed by the death of the Supreme Leader and the invisible succession of his wounded son.
This is the story of the second factor — the financial decapitation of a regime — and why it may prove more decisive than any missile.
The Single Point of Failure
Bank Sepah is Iran’s oldest financial institution, founded in 1925. The US Treasury designated it as the “financial backbone” of Iran’s ballistic missile program in 2007. The UN Security Council sanctioned it the same year. The EU followed months later.3
In 2020, the regime consolidated its military banking — merging Ansar Bank (created to serve IRGC personnel), Mehr Eqtesad Bank (which paid “the equivalent of hundreds of millions of dollars each year” to the Basij), and Hekmat Iranian Bank into Bank Sepah. The merger was intended to streamline and strengthen the military-financial system.4
It created a catastrophic single point of failure.
After the consolidation, Bank Sepah processed salary payments for every branch of Iran’s security apparatus: the IRGC’s 190,000 active personnel, up to 450,000 registered Basij militia, the regular Artesh military, and all associated defense entities. One bank. One data center. One building on Haghani Street in northern Tehran.
Coverage of the war focuses on explosions — the spectacle frame — while the financial warfare reshaping the country goes unreported. The Bank Sepah strike killed fewer people than a single airstrike on a military base. It may prove more decisive than all of them combined.
The Two-Day Kill
The destruction of Bank Sepah was not a single strike. It was a sequenced two-phase cyber-kinetic operation — a new category of warfare that fuses digital and physical attack.
Day 1 — March 10: Predatory Sparrow — a pro-Israel hacktivist group widely assessed by cybersecurity firms as linked to Israeli military intelligence — announced it had “destroyed all data” at Bank Sepah. Both Bank Sepah and Bank Melli experienced simultaneous disruptions. Online banking went offline. ATMs failed. The disruption cascaded to Kosar Bank and Ansar Bank — both IRGC-linked — and degraded Iran’s gas station payment network, which relies on Bank Sepah for transaction processing.5
Day 2 — March 11, approximately 1:00 AM: While the systems were still down from the cyber attack, a precision missile struck Bank Sepah’s digital security center on Haghani Street. The building was destroyed. Several overnight employees were killed — they had been processing military salary payments ahead of Nowruz, the Persian New Year on March 21.6
The sequencing was the innovation. The cyber attack on Day 1 corrupted data and disrupted digital defenses. The kinetic strike on Day 2 destroyed the physical infrastructure needed for recovery. Former NSA cyber chief Rob Joyce warned: “Cyber-forensics teams must first regain network access before assessing damage or restoring back-ups — a process that can take weeks if attackers also corrupted disaster-recovery sites.” At least two other IRGC-linked data centers in Tehran had already been struck around March 5.7
Recovery timeline: weeks or months. Not days.
Digital Apartheid
The Bank Sepah strike did not occur in isolation. It detonated inside an economy that had already been severed from the digital world.
Since February 28, Iran’s internet connectivity had collapsed to between one and four percent of normal — confirmed by NetBlocks, Cloudflare Radar, and Georgia Tech’s IODA project. This was not caused by military strikes. It was a deliberate government shutdown — the regime cutting its own population off to suppress protest coordination and information flow.8
The shutdown revealed a two-tier system that Bruce Schneier of Harvard called “digital apartheid.” Approximately sixteen thousand privileged SIM cards — “white SIMs” — were issued to government officials, security forces, and approved journalists, providing unrestricted global internet access. Ninety million Iranians got nothing.9
The Digital Collapse
Indicator Impact Internet connectivity 1-4% of normal Financial transactions (digital) 85% of economy — offline Online sales Down 80% Tehran Stock Exchange Lost 450,000 points in 4 days Daily ATM withdrawal limit 3,000,000 rials (~$1.83) Tipax courier (320,000 daily shipments) “Fewer than a few hundred per day” Economic cost of shutdown $35.7 million per day Privileged “white SIM” cards ~16,000 (for 90 million people)
Iran’s Communications Minister Sattar Hashemi acknowledged the cost — $35.7 million per day — and admitted that hardliners’ demand to rely solely on domestic internet was a “bitter joke.” The regime’s own intranet — the National Information Network — initially crashed under the shutdown’s implementation. They broke their own backup system.10
No comparison exists. No country with Iran’s level of digital integration — eighty-five percent of financial transactions were digital — has experienced a shutdown of this duration. The closest parallels — Myanmar, Sudan — had digital economies a fraction of Iran’s size.
The Price of Rice
The financial and digital collapse cascaded directly into daily survival.
Iran was already in acute food crisis before the first bomb fell. The Iranian parliament’s own Research Center reported in December 2024 that fifty percent of the population could not meet minimum caloric intake — 2,100 calories per day. Average caloric intake had declined from 2,700 in 2011 to below 2,100 by 2024.11
The regime’s wartime decisions made it worse — the internet shutdown crashed supply chains, the Hormuz closure cut imports, and capital controls froze payments.
Food Prices (Year-over-Year, November 2025)
Item Increase Bread +100% Rice +155% Beans +255% Fruit and nuts +108% Milk, cheese, eggs +49% Red meat ~1 million tomans/kg ($6.80 — a quarter of monthly minimum wage per kilogram)
Imagine waking up to find your bank account frozen — no notice, no timeline, no explanation. Now imagine that your government did it deliberately, and that every ATM in your city dispenses a maximum of $1.83 per day. That is daily life for ninety-three million people.
The minimum wage stands at 104 million rials per month — approximately $71 at March 2026 exchange rates. Workers spend sixty-five percent or more of that on food alone. Per capita red meat consumption has fallen forty percent over the past decade. Two million students had already dropped out of school due to economic crisis before the war began.12
The regime’s closure of the Strait of Hormuz eliminated Iran’s remaining maritime trade. Russia has become a food lifeline — Iran tripled Russian wheat imports between July 2025 and January 2026, reaching 1.7 million tonnes. The Caspian Sea route bypasses the closed strait. Land borders with Turkey, Armenia, and Turkmenistan remain open. But these corridors cannot replace the volume that Hormuz carried.13
Can the Bonyads Pay?
The regime’s economic empire — the bonyad system of tax-exempt foundations that sit atop enterprises accounting for twenty to forty percent of GDP — theoretically holds wealth that could substitute for Bank Sepah.
Setad, controlled by the Supreme Leader’s office, holds an estimated $95 billion in assets across thirty-seven companies. The IRGC’s Khatam al-Anbiya conglomerate has $22 billion in contracts. The total IRGC-affiliated economic holdings — including bonyads, military contractors, and state-linked enterprises — sit on top of an estimated twenty-five to forty percent of Iran’s GDP. But this is parasitic ownership, not productive capacity: the construction workers, engineers, and dock workers who generate this output would keep working under different management. The IRGC extracts from the economy; it does not constitute it.14
But bonyad wealth is real estate, construction contracts, mining operations, and industrial holdings. Converting those assets into cash requires functioning financial infrastructure — the same infrastructure that has been destroyed. Senior commanders may self-fund personal security for weeks using stashed hard currency. They cannot sustain payroll for hundreds of thousands of Basij and IRGC personnel through property sales processed by banks that no longer exist.15
The historical parallel is instructive. When the Soviet military stopped receiving reliable pay in the early 1990s, a 1992 survey found over eighty percent of soldiers held prohibited side jobs. Over four thousand cases of arms theft were recorded in 1992 alone. The “ghost soldier” phenomenon emerged — commanders claiming more soldiers than existed to collect their pay. The Iraqi army’s collapse in 2003 followed the same pattern: troops were “not truly loyal… but simply wanting a paycheck.” When the paycheck stopped, the army melted.16
Hudson Institute analyst Zineb Riboua identified the trigger point: “Problems will begin to cascade when the IRGC’s payday comes.” That payday — Nowruz military bonuses — was scheduled for March 21. Bank Sepah was struck on March 11 while processing those exact payments.
The Honest Part
The financial war has a humanitarian cost — but honest accounting requires separating what the coalition did from what the regime did to its own people.
The Bank Sepah strike destroyed the military payroll system. That is the coalition’s action. What followed was largely the regime’s: banks including Bank Melli locked customer accounts and disabled withdrawals nationwide — not because the coalition ordered it, but because the regime imposed capital controls to prevent a bank run. The IRGC warned civilians to stay at least one kilometer from all bank branches, transforming every bank into a potential target. The rial fell twelve percent in a single day. Retired military personnel and government workers lost access to their savings.1718
The internet shutdown — which crashed the digital economy, overwhelmed hospitals by destroying internet-dependent coordination, and left ninety million people unable to process a payment — was the regime’s deliberate decision, not a consequence of the strikes. The Lancet published a 2026 paper documenting the medical impact. Professor Djavad Salehi-Isfahani of Virginia Tech estimated the economy is running at fifty percent capacity.19
The pattern is consistent across every dimension of this crisis: the coalition strikes damage military infrastructure, and the regime’s response amplifies the civilian suffering by orders of magnitude. The internet blackout, the capital controls, the Hormuz closure that cut off the country’s own trade, the importation of foreign militias for the January massacre — at every turn, the regime chose its own survival over its people’s.
The Bank Sepah strike did not kill a single IRGC fighter. It attacked the mechanism that pays them — and by every indication, it is working. Basij members are faking their own deaths. Reserve mobilization has failed. Officers are abandoning posts. The IRGC cannot sustain a fighting force that it cannot pay, and the financial infrastructure needed to resume payments has been physically destroyed.
But the regime’s response — locking civilian accounts, shutting down the internet, warning people away from banks — ensured that the same ninety-three million people the IRGC was supposed to protect absorbed the worst of the impact. The strike targeted the oppressors. The regime made sure the oppressed paid alongside them. That pattern — the Islamic Republic using its own population as a cost buffer — is not a side effect of the war. It is the regime’s governing philosophy, visible in every decision it has made for forty-seven years.
This article is part of Five Fractures. For the military dimension of the collapse, see Two Armies. For Iran’s remaining strategic leverage, see Four Hundred Ships.
Footnotes
-
Maneli Mirkhan, founder of DORNA, interview with Euronews Persian, March 9, 2026; Algemeiner corroboration ↩
-
Euronews Persian on Basij concealment tactics, March 2026 ↩
-
U.S. Treasury (OFAC) designation of Bank Sepah, Executive Order 13382, January 2007; UNSC Resolution 1737; EU designation April 2007 ↩
-
U.S. Treasury designations of Ansar Bank (“financial and credit services to IRGC personnel”) and Mehr Eqtesad Bank (Basij payments) ↩
-
Predatory Sparrow attribution: CyberScoop, The Record, TechCrunch; Bank disruption timeline via Iranian media and Bloomberg ↩
-
Jerusalem Post, Bank Sepah strike details; Iran International reporting on employee casualties ↩
-
Rob Joyce, former NSA cyber chief, on recovery timeline; Bloomberg on additional data center strikes ↩
-
NetBlocks CEO Alp Toker on government-imposed shutdown; Cloudflare Radar and Georgia Tech IODA data ↩
-
Bruce Schneier (Harvard), “digital apartheid” assessment, Foreign Policy; white SIM system via Iranian media ↩
-
Sattar Hashemi, Iran’s Communications Minister, acknowledgment of economic cost and domestic internet failure ↩
-
Iranian Parliament Research Center, December 2024; caloric intake decline data via World Bank ↩
-
Food price data: Statistical Center of Iran; minimum wage: Iranian Ministry of Labor; student dropout: Iranian media ↩
-
Russian wheat imports via Reuters; Caspian route and land border status via multiple sources ↩
-
Setad valuation: Wionews; Khatam al-Anbiya: IRGC financial analysis; Clingendael Institute on GDP share ↩
-
Financial infrastructure dependency analysis via FDD and banking sector assessments ↩
-
Soviet military survey data; Iraqi army collapse: multiple sources; “not truly loyal” assessment via Rand and CPA documentation ↩
-
Bank lockdowns and ATM queues: Regtechtimes, Iranian media; rial data via currency exchanges ↩
-
IRGC warning on bank proximity: Iranian media, confirmed via multiple outlets ↩
-
Displacement: NPR; The Lancet 2026; Salehi-Isfahani (Virginia Tech) economic capacity assessment ↩