'Long Arms'…Cross-border Cyber Blackmail Crimes without Effective Deterrence

Asharq Al-Awsat Investigated Cases Related to 5 Countries

'Long Arms'…Cross-border Cyber Blackmail Crimes without Effective Deterrence
TT

'Long Arms'…Cross-border Cyber Blackmail Crimes without Effective Deterrence

'Long Arms'…Cross-border Cyber Blackmail Crimes without Effective Deterrence

Egyptian Engineer Mohamed Ahmed, 40, was on annual leave abroad with his family in July 2021 when he received an email from an official in the administration of his 7-year-old son's school, informing him of the need to "communicate immediately for an urgent and important matter."

In remarks to Asharq Al-Awsat, the man said he was surprised by the urgency of the message, especially as his son was with him on his vacation. When he contacted the school administration, the official told him that they had received warning letters accompanied by a picture of his son that included “accusations and abuse against the family and the child, as well as extremely serious health allegations against them,” which usually cause stigma in Arab societies.

Between the Arab country, where engineer Mohamed Ahmed works (and still does), and his birthplace in Egypt (from where it was later proven that those messages were issued, and the judicial authorities accused a woman of being behind them), the man lived through episodes of cross-border crimes, including “death threats, financial blackmail, defamation, insults and slander”, which took him nearly 10 years to prove.

But the man is not a single case. Asharq Al-Awsat investigated similar crimes and documented them by interviewing the victims, reviewing official investigations, attending trials, hearing the testimonies of activists and verifying incidents that took place in more than 5 countries, most of them in the Arab region, as well as victims from other Arab countries who later declined to participate in the investigation, for fear of stigma, despite their initial approval.

The investigation reveals that the perpetrators relied on “being outside the borders of the country” where the crime took place, using “long electronic arms,” and taking advantage of “the difficulty of prosecution.”

"The investigation reveals that the perpetrators relied on being outside the borders of the country where the crime took place, using long electronic arms, and taking advantage of the difficulty of prosecution."

The investigation also shows exploitation of a loophole represented by “the absence of a specialized regional executive entity (Arab at least), for the effective deterrence, prosecution, and exchange of information in transnational cyber-extortion crimes,” according to activists and officials in several countries, despite the presence of an “Arab Convention to Combat Information Technology Crimes” dating back to 2010, ratified by 11 countries.

Eng. Ahmed was “shocked” that the blackmail he was subjected to since 2013 extended to his son. His problem began about a decade ago when he received extensive calls from relatives and friends stating that they had received messages (via Facebook) containing “insults, slander, and defamation” related to his person. He recalls: “My acquaintances were embarrassed to inform me of the messages because of the low quality and ugly language.”

The man was an “ideal victim,” as he put it, and says that the perpetrator “took advantage on my residence outside the country, as well as my inability to easily prove that a crime had been committed against me, and that at a time (late 2013) the issue of prosecuting information technology crimes was not common.” He adds sadly: “I remember that I used to receive 50 to 60 calls or messages daily informing me that my acquaintances had received these heinous abuses.”

In 2002, Egypt established a department affiliated with the Ministry of the Interior to “combat computer crimes,” but it continued to operate in a semi-centralized manner in the capital. Then, it expanded over time through regional offices that serve geographical areas covering more than one governorate. In April 2021, the Interior Ministry announced that citizens were now able to submit reports regarding cybercrimes to all security directorates in any Egyptian governorate.

For nearly 7 years, and during most of his annual vacations in Egypt, Eng. Ahmed was trying to write a report against the account that was accusing him of insults, but did not succeed “because of his presence outside the country,” as he put it, and his inability for years to quickly and urgently prove the crime had occurred. (Asharq Al-Awsat refrains from explaining the technical details used to prove the crime that the writer of the investigation reviewed in detail, in order to avoid illegal re-exploitation.)

The accused is outside our borders!

The issue of threatening the engineer’s son was central to his move in pursuing the woman accused of blackmailing him. Especially after the school administration informed him that it had notified the police of the Arab country in which it is located of the letters it had received. The officials informed the father (after his return from his vacation) that they had verified that the letters received by the school were from “outside their borders,” and therefore “they would not be able to take additional steps,” as he said.

Later, the “blackmailer” escalated her attack, “asking for money”, according to the official indictment against her, and broadcast the offensive content to the parents of the son’s classmates at school, further exacerbating his “harsh” experience, as he describes it.

As the pressures grew, the man was forced, as he told Asharq Al-Awsat, to take emergency leave from work for days and incur “large financial costs” to come to Egypt more than once to fulfill “a number of technical and legal requirements necessary to prove the crime” and file a lawsuit against the perpetrator.

Before the court

Inside the Mansoura Criminal Court in Dakahlia Governorate (135 kilometers north of Cairo), Asharq Al-Awsat attended the trial session of the accused in the case of engineer Mohamed Ahmed, where investigations indicated that the woman “used defamation and blackmail with more than 10 other victims inside and outside Egypt,” in addition to Engineer Ahmed.

At the end of one of the sessions that the accused attended after her arrest, Lawyer Ahmed Al-Bakri, who is the legal attorney of engineer Ahmed, spoke to Asharq Al-Awsat, saying that the “pattern of that crime was innovative, because the perpetrator did not have special images or shameful facts, but only relied on information provided by social media sites, tracked the victim’s accounts and acquaintances, and focused on expanding the scope of defamation by messaging them.”

Based on this blackmailing case, which took place between two countries, Al-Bakri believes that there is a practical need to task the embassies with submitting complaints and reports related to electronic crimes, if the perpetrator had the same nationality of the victim, even if the latter resided in a different country.

If this proposal has merit...what about the cases in which the victim holds the nationality of one country and resides in it, while the perpetrator has a different nationality and residence?

Baghdad and Damascus... and between them, Berlin

Between three elements was the case of the Iraqi woman Shams (her nickname). Her blackmailer holds “Syrian nationality” and resides in “Germany,” according to what he told her, while she lives in one of the governorates of Iraq.

Mrs. Shams (32), a divorced mother of five children, spoke to Asharq Al-Awsat on condition of anonymity for fear that she would be exposed to danger.

She said: “Like everyone, I have accounts on social media, and through them, in early 2021, I met a person who told me that he was a Syrian refugee residing in Germany. Over time, the conversation between us developed and he proposed to marry and come to Iraq to get engaged and take responsibility for my children.”

She added: “I decided to talk to him and we got to know each other.” In a very low voice, which forced her to record her message twice, Mrs. Shams spoke, justifying the matter by saying that she feared being heard by a member of her family, whom she described as “extremist” and who resides with her due to her separation from her husband.

Over time, “his (the blackmailer’s) intentions began to appear, but he did not blackmail me financially, but rather with my private photos to force me to do what he wanted, otherwise he threatened to publish these photos,” the woman recounted.

With pain that resounded in her stuttering words, Shams narrates that, under the weight of fear, she tried to calm the blackmailer, “but to no avail... He started asking me for ‘some nice things’, and unfortunately I started doing everything he wanted, for a period of 6 months.”

However, things developed, and the woman was surprised that her blackmailer, according to her words, “began asking me to perform satisfactory sexual acts related to my five-year-old daughter... Then I fought with him and blocked him.”

Despite the risk of defying tribal norms and the fear of stigma if her problem was exposed, Shams tried to carefully follow the legal path to stop the threat. She says: “I called the (community police) in the governorate in which I live, and they could not help me because he (i.e. the blackmailer) was outside Iraq, and also communicated with National Security, and reached the same obstacle.”

Iraq has not yet been able to pass a law to combat cybercrimes, although a draft law was already submitted to Parliament 12 years ago and was subject to amendments. However, Iraqi executive authorities are tasked with confronting some cybercrimes and the blackmail associated with them, including the “Iraqi Community Police.”

According to an official statement, an annual increase in electronic blackmail crimes is observed in Iraq, amounting in 2021 to about 1,950 cases handled by the community police, said Brigadier General Ghaleb Al-Attiyah, the former commander of the Iraqi community police, in remarks to Asharq Al-Awsat. (He left his position in October).

The particularity of Iraqi society leaves its mark on the way extortion crimes are treated, since “most of the victims are women, especially children,” according to Al-Attiyah, who explained that the “seriousness of the matter is that these incidents in Iraqi society develop into what is known as crimes of honor killing, or killing to wash away shame, or suicide, not to mention girls running away from their families for fear of their lives.”

Al-Attiyah attributed the increase in electronic blackmail crimes to several reasons, including “the absence of a law on cybercrime, and reliance on the existing penal code dating back to the 1960s.”

When asked by Asharq Al-Awsat about the mechanism followed if the perpetrator was outside the borders of Iraq, he answered: “Certainly, in our work, we face many (transnational) cases... but frankly, we were able to address some of the incidents through (personal relationships) with officers in Arab countries... but this issue is difficult (...) and some routine procedures for tracking and prosecuting allow criminals to get away.”

A new obstacle hindered the attempts of Iraqi Shams to break free from the shackles of blackmail. If there is no developed local deterrent law that protects her if the perpetrator is residing in her country... then what if she faces a blackmailer from outside the borders?... And what did she proceed?

“Resist”

Luck was on Mrs. Shams’ side, as when she told a friend about her problem, he advised her to resort to the “Resist Initiative to Combat Electronic Blackmail.” The “Resist” volunteer initiative operates through electronic platforms on social media, and aims to “provide support” to victims.

“Resist” volunteers obtained enough information about the blackmailer’s identity. When they informed him that they would contact the German authorities if he did not stop the blackmailing immediately, he complied and ended his threats.

Despite its success in supporting the Iraqi woman, the founder of “Resist,” human rights activist Mohammad Al-Yamani, told Asharq Al-Awsat: “We realize that it is not possible to fully rely on the efforts of activists in transnational blackmail cases, as the movement and coordination of the official police and judicial authorities has more impact and is more legal.”

“Resist” receives many complaints related to blackmail crimes and undertakes “directing victims to available legal paths, and completing the collection of required incriminating evidence through a legal support team,” according to its founder, who admits that “transnational electronic crimes are very difficult due to the technical and legal obstacles resulting from the absence of regional and international coordination in this field, compared, for example, to exchanging information between countries quickly and intensively in the case of money crimes or terrorism.

Al-Yamani calls for implementing agreements pertaining to electronic crimes between Arab countries as a “first stage,” and says: “An executive body must be established (similar to Interpol) to exchange information and prosecute criminals in electronic blackmail cases to protect victims.”

An Arab diplomat and a third party

Through the door of taking pride in the word, paying attention to the gesture, and staying away from what could stain the diplomatic suit, blackmailers of a unique type exploited a weak point in the life of an Arab diplomat, and through arenas and communications that took place in more than one country, including (his workplace), they turned their past electronic weapons on the man, in an incident that was documented and whose details were shared with by activist Mohammad Al-Yamani, without revealing names or identities.

Things appeared to be almost normal. The Arab diplomat worked in one of the countries, and in one way or another, “he became involved with his female citizen, who was residing in the same country where he worked. After a while, that woman threatened him with publishing the conversations and pictures she obtained in the context of their relationship, and asked him for financial compensation.”

The Arab diplomat responded “twice” to the blackmail. In the third time, he thought about resorting to the judiciary but later backed down after he learned that because of his situation, he must notify his country’s foreign ministry and embassy, which consequently means the case will be exposed and his professional future may be at risk.

But the surprise was that the two parties to the blackmail crime were not just two residents of the same country, as the Arab diplomat believed, and the victim discovered that “the perpetrator, who had left the crime scene for her home country to escape a potential prosecution, had carried out the operation on behalf of (a third party).”

This third party was none other than “the diplomat’s wife, who had a dispute with him and resided in their hometown. She (i.e. his wife) instigated the blackmailer from afar, taking advantage of her distance from the crime scene and the difficulty of prosecuting her internationally, to tighten the screws on the man with the aim to obtain divorce and financial gains, Al-Yamani recounted.

Fraud and impersonation

In late December 2021, Egyptian student at Ain Shams University, Shorouk Fouad (27), received a message via the Messenger application showing a photo of a person wearing clothes similar to the Egyptian police uniform.

The message included a claim from the sender that he “works as an officer,” and that he had received a report against her, accompanied by some pictures of her, according to what Shorouk told Asharq Al-Awsat.

In a stressful and confusing manner, the blackmailer pressured the Egyptian girl, who recounted: “He asked me to quickly send my data and pictures so that he would start moving to resolve the issue of the report in an amicable manner, and so that it would not reach my family. Under the pressure of fear and tension, I sent him my data, my location, and my photos.”

The relationship took immediately a different turn as soon as the sender obtained the girl’s data and photos. He began to blackmail her for the purpose of “establishing a relationship,” according to what she says, otherwise he would expose her in front of her family. Shorouk confirms that her blackmailer, in further threatening her, “actually created pages on social media” using her photos.

Shorouk, and her family, who supported her after learning of what had happened, thought that filing a police report would prosecute the accused and end a nightmare that had long exhausted them, but instead received a shocking news.

The first thing that awaited the girl was that “officials from the Qalyubia Security Directorate and officers from the Internet Investigations” told her, according to her account, that he (i.e. the blackmailer) “is impersonating an officer, and that officers are prohibited from posting pictures in uniform on any social networking site.” The second surprise was that the blackmailer who spoke to her in an “Egyptian dialect” was communicating with her “via a phone number belonging to a Libyan telecommunications company.”

In addition to the psychological pressure, the girl suffered the loss of her engagement after problems arose with the young man she was in a relationship with. Regarding the pursuit of her blackmailer, “the only report she was able to file was dated January 4, 2022, at the Qalyubia Security Directorate,” which serves its place of residence. It included her accusation of the blackmailer of impersonating her on Facebook, while saying that she “was informed that no action could be taken against other crimes, because the phone number is not Egyptian.”

...But can anyone obtain a Libyan phone number without his data being available to service providers?

In an effort to investigate Shorouk’s case, Asharq Al-Awsat obtained the phone number through which the Egyptian girl said she received blackmail messages. Based on its key number, the author of this investigation could prove that it belonged to a specific company that provides mobile phone services in Libya. He sent an inquiry to the company, asking whether it was possible for a person to buy a line belonging to the company without proof of his identity... An official in charge of the company’s accounts on social media stated that the rules for purchasing its lines include “providing the national number and proof of identity.” (ID card or passport).

When we asked the company official about the possibility of a non-Libyan citizen purchasing a line, he said that in that case it was necessary to “present a valid passport and a valid residence certificate.”

Determining the identity of the owner of the line, or at least the person who sold it to its current user, then seems possible, as Egypt and Libya signed, along with other countries, in 2010 the “Arab Agreement to Combat Information Technology Crimes.”

The agreement stipulates the provision of technical and legal assistance and the extradition of criminals in a number of criminal cases, including “sexual exploitation.” While Egypt ratified the convention in 2014, Libya, which is rife with political conflicts, is yet to endorse it.

Libyan women under threat

Does the situation seem different from the case of the Egyptian Shorouk in Libya, for example? Libyan human rights activist Khadija Al-Bouaishi tells us that she was “a witness and a supporting party for a number of Libyan women who fell victim to blackmail by a perpetrator in another Arab country. They were asked to send sums of money, otherwise... he (the blackmailer) threatened to publish their pictures and information and say that they practice witchcraft.”

Once again, due to the failure to activate international prosecutions, the attempts of these Libyan women to take the legal course against their blackmailer, who resides in another country, were shattered. Al-Bouaishi attributes the matter to “weak legislation, the absence of technical qualifications, and the lack of a local security apparatus specialized in combating cybercrimes.”

“Thus, many obstacles hinder the prosecution of blackmailers inside the country, and the cases are also more complex and almost impossible if the perpetrator is outside Libya,” she remarked.

Crimes without confrontation... and a rare experience for the Interpol

As technological crimes rely on unconventional means, they do not require a confrontation between the perpetrator and the victim, which guarantees relative safety for the perpetrators, and enable them to some degree to hide and evade prosecution, especially when their activities occur across borders,” Former Assistant Minister of the Interior for Information Technology and Internet Crimes, Major General Mahmoud Al-Rashidi, told Asharq Al-Awsat.

The main feature in cases of electronic blackmail, according to Al-Rashidi, is that some “perpetrators rely on exhausting the victims by directing intense abuse based on artificial information with the aim of subjecting the targets to blackmail.”

The Interpol places cybercrime among its areas of competence, noting that criminals adopt new techniques to commit attacks against governments, companies and individuals, and that crimes do not stop at borders, whether they were physical or virtual and cause damage and pose threats to victims around the world.

The Interpol press office did not respond to questions sent by Asharq Al-Awsat to find out the extent of its participation in operations to pursue, seize, or exchange information in transnational electronic blackmail crimes, especially in Arab countries.

However, a rare experiment carried out by the organization in 2014 resulted in the arrest of 58 people within organized crime networks operating from the Philippines, and which was behind “sexual blackmail” cases, including the case of Scottish teenager Daniel Perry (17), who committed suicide in 2013 after falling victim to an extortion attempt on the Internet.

According to Interpol, this operation was the first of its kind, and witnessed the participation of police agencies in Scotland, Hong Kong, Singapore, and the Philippines, as well as the US National Security Investigations Division, in a process funded by the United Kingdom’s Foreign and Commonwealth Office.

Despite the Arab precedence in establishing a convention to combat transnational information crimes, these crimes are happening and will continue to occur, until the right mechanisms are put into effect and executive entities are formed to overcome obstacles that hinder its implementation. Only then may hundreds and perhaps thousands of victims be saved from extremely bad fates that begin with defamation and stigma and sometimes end with murder.



Key Details of Greenland’s Rich but Largely Untapped Mineral Resources

Houses covered by snow are seen on the coast of a sea inlet of Nuuk, Greenland, on Monday, Jan. 12, 2026. (AP)
Houses covered by snow are seen on the coast of a sea inlet of Nuuk, Greenland, on Monday, Jan. 12, 2026. (AP)
TT

Key Details of Greenland’s Rich but Largely Untapped Mineral Resources

Houses covered by snow are seen on the coast of a sea inlet of Nuuk, Greenland, on Monday, Jan. 12, 2026. (AP)
Houses covered by snow are seen on the coast of a sea inlet of Nuuk, Greenland, on Monday, Jan. 12, 2026. (AP)

The Danish and Greenlandic foreign ministers will meet US Vice President JD Vance and Secretary of State Marco Rubio on Wednesday after President Donald Trump recently
stepped up threats to take over Greenland.

The autonomous territory of Denmark could be useful for the ​United States because of its strategic location and rich mineral resources. A 2023 survey showed that 25 of 34 minerals deemed "critical raw materials" by the European Commission were found in Greenland.

The extraction of oil and natural gas is banned in Greenland for environmental reasons, while development of its mining sector has been snarled in red tape and opposition from indigenous people.

Below are details of Greenland's main mineral deposits, based on data from its Mineral Resources Authority:

RARE EARTHS
Three of Greenland's biggest deposits are located in the southern province of Gardar.

Companies ‌seeking to ‌develop rare-earth mines are Critical Metals Corp, which bought the ‌Tanbreez ⁠deposit, ​Energy Transition Minerals, ‌whose Kuannersuit project is stalled amid legal disputes, and Neo Performance Materials.

Rare-earth elements are key to permanent magnets used in electric vehicles (EV) and wind turbines.

GRAPHITE
Occurrences of graphite and graphite schist are reported from many localities on the island.
GreenRoc has applied for an exploitation license to develop the Amitsoq graphite project.
Natural graphite is mostly used in EV batteries and steelmaking.

COPPER
According to the Mineral Resources Authority, most copper deposits have drawn only limited exploration campaigns.

Especially interesting are the underexplored areas ⁠in the northeast and center-east of Greenland, it said.

London-listed 80 Mile is seeking to develop the Disko-Nuussuaq deposit, which has ‌copper, nickel, platinum and cobalt.

NICKEL
Traces of nickel accumulations are numerous, ‍according to the Mineral Resources Authority.

Major miner ‍Anglo American was granted an exploration license in western Greenland in 2019 and has ‍been looking for nickel deposits, among others.

ZINC
Zinc is mostly found in the north in a geologic formation that stretches more than 2,500 km (1,550 miles).

Companies have sought to develop the Citronen Fjord zinc and lead project, which had been billed as one of the world's largest undeveloped zinc resources.

GOLD
The most prospective ​areas for gold potential are situated around the Sermiligaarsuk fjord in the country's south.

Amaroq Minerals launched a gold mine last year in Mt Nalunaq in ⁠the Kujalleq Municipality.

DIAMONDS
While most small diamonds and the largest stones are found in the island's west, their presence in other regions may also be significant.

IRON ORE
Deposits are located at Isua in southern West Greenland, at Itilliarsuk in central West Greenland, and in North West Greenland along the Lauge Koch Kyst.

TITANIUM-VANADIUM
Known deposits of titanium and vanadium are in the southwest, the east and south.

Titanium is used for commercial, medical and industrial purposes, while vanadium is mainly used to produce specialty steel alloys. The most important industrial vanadium compound, vanadium pentoxide, is used as a catalyst for the production of sulfuric acid.

TUNGSTEN
Used for several industrial applications, tungsten is mostly found in the central-east and northeast of the country, with assessed deposits in the south and west.

URANIUM
In 2021, ‌the then-ruling left-wing Inuit Ataqatigiit party banned uranium mining, effectively halting development of the Kuannersuit rare-earths project, which has uranium as a byproduct.


The West Bank Football Field Slated for Demolition by Israel

Israeli army bulldozers pass buildings during a military operation in Nur Shams refugee camp, near the West Bank city of Tulkarem, 12 January 2026. (EPA)
Israeli army bulldozers pass buildings during a military operation in Nur Shams refugee camp, near the West Bank city of Tulkarem, 12 January 2026. (EPA)
TT

The West Bank Football Field Slated for Demolition by Israel

Israeli army bulldozers pass buildings during a military operation in Nur Shams refugee camp, near the West Bank city of Tulkarem, 12 January 2026. (EPA)
Israeli army bulldozers pass buildings during a military operation in Nur Shams refugee camp, near the West Bank city of Tulkarem, 12 January 2026. (EPA)

Israeli authorities have ordered the demolition of a football field in a crowded refugee camp in the occupied West Bank, eliminating one of the few ​spaces where Palestinian children are able to run and play.

"If the field gets demolished, this will destroy our dreams and our future. We cannot play any other place but this field, the camp does not have spaces," said Rital Sarhan, 13, who plays on a girls' soccer team in the Aida refugee camp near Bethlehem.

The Israeli military ‌issued a demolition ‌order for the field on ‌December ⁠31, ​saying ‌it was built illegally in an area that abuts the concrete barrier wall that Israel built in the West Bank.

"Along the security fence, a seizure order and a construction prohibition order are in effect; therefore, the construction in the area was carried out unlawfully," the Israeli military said in a statement.

Mohammad Abu ⁠Srour, an administrator at Aida Youth Center, which manages the field, said the ‌military gave them seven days to demolish ‍the field.

The Israeli military ‍often orders Palestinians to carry out demolitions themselves. If they ‍do not act, the military steps in to destroy the structure in question and then sends the Palestinians a bill for the costs.

According to Abu Srour, Israel's military told residents when delivering ​the demolition order that the football field represented a threat to the separation wall and to Israelis.

"I ⁠do not know how this is possible," he said.

Israeli demolitions have drawn widespread international criticism and coincide with heightened fears among Palestinians of an organized effort by Israel to formally annex the West Bank, the area seized by Israel in the 1967 Middle East war.

Israel accelerated demolitions in Palestinian refugee camps in early 2025, leading to the displacement of 32,000 residents of camps in the central and northern West Bank.

Human Rights Watch has called the demolitions a war crime. ‌Israel has said they are intended to disrupt militant activity.


In 'Big Trouble'? The Factors Determining Iran's Future

In this frame grab from video taken by an individual not employed by The Associated Press and obtained by the AP outside Iran shows people blocking an intersection during a protest in Tehran, Iran, Thursday Jan. 8, 2026. (UGC via AP)
In this frame grab from video taken by an individual not employed by The Associated Press and obtained by the AP outside Iran shows people blocking an intersection during a protest in Tehran, Iran, Thursday Jan. 8, 2026. (UGC via AP)
TT

In 'Big Trouble'? The Factors Determining Iran's Future

In this frame grab from video taken by an individual not employed by The Associated Press and obtained by the AP outside Iran shows people blocking an intersection during a protest in Tehran, Iran, Thursday Jan. 8, 2026. (UGC via AP)
In this frame grab from video taken by an individual not employed by The Associated Press and obtained by the AP outside Iran shows people blocking an intersection during a protest in Tehran, Iran, Thursday Jan. 8, 2026. (UGC via AP)

Over two weeks of protests mark the most serious challenge in years to Iran's theocratic leadership in their scale and nature but it is too early to predict the immediate demise of the Iranian republic, analysts say.

The demonstrations moved from protesting economic grievances to demanding a wholesale change from the clerical system that has ruled Iran since the 1979 revolution that ousted the shah.

The authorities have unleashed a crackdown that, according to rights groups, has left hundreds dead while the rule of supreme leader Ali Khamenei, now 86, remains intact.

"These protests arguably represent the most serious challenge to Iran in years, both in scale and in their increasingly explicit political demands," Nicole Grajewski, professor at the Sciences Po Centre for International Studies in Paris told AFP.

She said it was unclear if the protests would unseat the leadership, pointing to "the sheer depth and resilience of Iran's repressive apparatus".

The Iranian authorities have called their own counter rallies, with thousands attending on Monday.

Thomas Juneau, professor at the University of Ottawa, said: "At this point, I still don't assess that the fall of the regime is imminent. That said, I am less confident in this assessment than in the past."

These are the key factors seen by analysts as determining whether Iran’s leadership will hold on to power.

- Sustained protests -

A key factor is "simply the size of protests; they are growing, but have not reached the critical mass that would represent a point of no return," said Juneau.

The protest movement began with strikes at the Tehran bazaar on December 28 but erupted into a full-scale challenge with mass rallies in the capital and other cities from Thursday.

The last major protests were the 2022-2023 demonstrations sparked by the death in custody of Mahsa Amini who had been arrested for allegedly violating the dress code for women. In 2009, mass rallies took place after disputed elections.

But a multi-day internet shutdown imposed by Iranian authorities has hampered the ability to determine the magnitude of the current demonstrations, with fewer videos emerging.

Arash Azizi, a lecturer at Yale University, said "the protesters still suffer from not having durable organized networks that can withstand oppression".

He said one option would be to "organize strikes in a strategic sector" but this required leadership that was still lacking.

- Cohesion in the elite -

While the situation on the streets is of paramount importance, analysts say there is little chance of a change without cracks and defections in the security forces and leadership.

So far there has been no sign of this, with all the pillars of Iran from parliament to the president to the Revolutionary Guards (IRGC) lining up behind Khamenei's defiant line expressed in a speech on Friday.

"At present, there are no clear signs of military defections or high-level elite splits within the regime. Historically, those are critical indicators of whether a protest movement can translate into regime collapse," said Sciences Po's Grajewski.

Jason Brodsky, policy director at US-based group United Against Nuclear Iran, said the protests were "historic".

But he added: "It's going to take a few different ingredients for the regime to fall," including "defections in the security services and cracks in the Islamic republic's political elite".

Israeli or US military intervention

US President Donald Trump, who has threatened military retaliation over the crackdown, announced 25 percent tariffs on Monday against Iran's trading partners.

The White House said Trump was prioritizing a diplomatic response, and has not ruled out strikes, after having briefly joined Israel's 12-day war against Iran in June.

That war resulted in the killing of several top Iranian security officials, forced Khamenei to go into hiding and revealed Israel's deep intelligence penetration of Iran.

US strikes would upend the situation, analysts say.

The Iranian foreign ministry said on Monday it has channels of communication open with Washington despite the lack of diplomatic relations.

"A direct US military intervention would fundamentally alter the trajectory of the crisis," said Grajewski.

Juneau added: "The regime is more vulnerable than it has been, domestically and geopolitically, since the worst years of the Iran-Iraq war" that lasted from 1980-1988.

- Organized opposition -

The US-based son of the ousted shah, Reza Pahlavi, has taken a major role in calling for protests and pro-monarchy slogans have been common chants.

But with no real political opposition remaining inside Iran, the diaspora remains critically divided between political factions known for fighting each other as much as the Iranian republic.

"There needs to be a leadership coalition that truly represents a broad swathe of Iranians and not just one political faction," said Azizi.

- Khamenei's health -

Khamenei has now been in power since 1989 when he became supreme leader, a post for life, following the death of revolutionary founder Khomeini.

He survived the war with Israel and appeared in public on Friday to denounce the protests in typically defiant style.

But uncertainty has long reigned over who could succeed him, with options including his shadowy but powerful son Mojtaba or power gravitating to a committee rather than an individual.

Such a scenario between the status quo and a complete change could see "a more or less formal takeover by the Revolutionary Guards", said Juneau.