Behind the Blackout: Iran's 30-Day Internet Shutdown, the War It Conceals, and the 92 Million Left in the Dark

On the morning of February 28, 2026, Cloudflare Radar recorded a 98% collapse in HTTP traffic from Iran — a near-instantaneous digital disappearance coinciding with the first wave of joint U.S.-Israeli military strikes [1]. Thirty days later, connectivity remains at approximately 1% of normal levels [2]. An estimated 92 million Iranians are cut off from the global internet, unable to contact family members, run businesses, or access independent news about the war unfolding around them [3].

Israeli officials say the blackout is not merely censorship — it is, they argue, a deliberate effort to conceal the physical destruction inflicted by military strikes and to prevent domestic unrest [4]. Iranian authorities have offered no public justification beyond vague references to national security. The truth likely encompasses both claims — and neither fully explains the scale of what is now the longest sustained internet shutdown ever imposed on a country of Iran's size and connectivity level [5].

The Scope of the Blackout

The February 28 shutdown was not Iran's first in 2026. On January 8, authorities severed internet access nationwide as protests triggered by an economic crisis intensified across the country, reducing traffic to near zero by the following morning [6]. That blackout lasted approximately 21 days before a partial restoration on January 28, though severe restrictions remained, with most users limited to a whitelist of pre-approved domestic websites [7].

When the U.S.-Israeli strikes began a month later, connectivity — already hobbled — dropped from roughly 50% to 4%, then to 1% within days [8]. It has stayed there since.

Source: NetBlocks

Data as of Mar 30, 2026CSV

The current shutdown far exceeds Iran's previous blackouts in both duration and severity. The November 2019 protests triggered a six-day near-total shutdown that cut approximately 96% of traffic [9]. The 2022 Mahsa Amini protests produced intermittent disruptions over roughly 12 days [10]. The current blackout has lasted 30 days and counting, with no indication of when — or whether — authorities plan to restore access [2].

Source: NetBlocks / OONI

Data as of Mar 30, 2026CSV

Cloudflare Radar data shows traffic "close to zero across all major regions," with Tehran, Fars, Isfahan, Alborz, and Razavi Khorasan experiencing near-complete shutdowns [1]. NetBlocks confirmed the shutdown is government-enforced rather than a byproduct of infrastructure damage from the strikes — IPv4 routes remain available, and small amounts of DNS traffic continue to pass through, indicating a deliberate filtering regime rather than physical destruction of network equipment [8].

What the Strikes Hit — and What the Blackout Hides

The joint U.S.-Israeli offensive, launched during nuclear negotiations, struck military bases, government facilities, and command centers across Iran [11]. A Washington Post investigation using commercial satellite imagery found that four key ballistic missile manufacturing locations and at least 29 launch sites sustained damage in the first four weeks of strikes [12]. Satellite images also showed fresh damage to Iran's Natanz nuclear facility complex [13].

But the blackout makes independent verification from inside Iran extraordinarily difficult. Israeli officials told Fox News that the internet shutdown is "not only restricting information from leaving Iran but also preventing citizens from organizing internally, at a time when pressure on the regime is mounting" [4]. Multiple Israeli sources described the blackout as evidence that the regime has more to hide than it acknowledges — a framing that serves Israel's strategic interest in demonstrating the effectiveness of its strikes.

Human Rights Watch noted that the shutdown "hampers journalists and human rights monitors from documenting potential laws of war violations by all parties" — a formulation that applies to both Iranian government abuses and the conduct of the striking forces [14]. HRW also reported that Iranian authorities have used the information vacuum to conceal what independent monitors describe as an escalating crackdown, with the UN Fact-Finding Mission on Iran citing "credible reports that thousands of people have been killed" since protests erupted in late December 2025 [15].

Iran itself reports damage to at least 120 historical sites from U.S.-Israeli strikes [11], and Al Jazeera documented strikes affecting schools and hospitals [16]. The blackout prevents independent corroboration of these claims as well, creating an information vacuum that all parties can fill with their preferred narratives.

The Architecture of Disconnection

Iran's ability to sever internet access for 92 million people rests on infrastructure built over more than a decade. The centerpiece is the National Information Network (NIN, known in Farsi as the "Shoma"), a state-controlled intranet designed to host domestic versions of essential services — banking, e-commerce, government portals — while routing all international traffic through a small number of chokepoints that authorities can shut off at will [17].

In January 2026, Iran International reported that the kill-switch project was in its "final stages," built on a Huawei-based platform and managed through a company called Ayandeh Afzay-e Karaneh, operating under the ArvanCloud umbrella [17]. The project is estimated at $700 million to $1 billion, with equipment delivered covertly by Huawei in 24 shipping containers. The data center is located beneath a building in Pardis IT Town, roughly 20 kilometers northeast of Tehran, in a facility designed to be resistant to missile strikes [17].

Chinese telecommunications firms Huawei and ZTE have been central to building this infrastructure. A report from Radio Free Europe documented how Chinese firms supplied not just networking equipment but internet filtering and surveillance technology integrated into city-level monitoring systems [18]. The system enables what Filterwatch described as "Absolute Digital Isolation" — a whitelist-based model where only security-cleared individuals and organizations can access the global internet [7].

The Carnegie Endowment for International Peace described the result as a "tiered access system" — a "white SIM" infrastructure granting unfiltered internet to government officials, state media figures, and regime-approved voices while civilians remain disconnected [19]. Iranian Foreign Minister Abbas Araghchi appeared on CBS News via Zoom while millions lacked connectivity, justifying his access by stating "because I'm the voice of Iranians" [19].

No parliamentary oversight mechanism governs the shutdown. The Supreme Council of Cyberspace, which reports to the Supreme Leader's office, holds effective authority over internet policy, and shutdown orders have historically been issued by the Supreme National Security Council without legislative approval [3].

Economic Devastation

Iran's own Minister of Communications acknowledged the shutdown costs the economy $35.7 million per day, while NetBlocks estimated the figure at $37 million [20]. Over 30 days, that amounts to more than $1.1 billion in losses from the current blackout alone — comparable to the total estimated cost of the 2019 shutdown, which NetBlocks pegged at over $1.5 billion [9].

Source: NetBlocks / Iran Ministry of Communications

Data as of Mar 30, 2026CSV

The damage extends across sectors. Online sales fell 80% during the January shutdown [20]. The Tehran Stock Exchange lost 450,000 points over four days, with 130 trillion tomans in daily trading volume evaporating [20]. Financial transactions dropped by 185 million in January alone [20]. The head of the Iran-China Chamber of Commerce criticized the limited access granted to registered merchants — 20 minutes of supervised internet per day — as "only enough to check a few emails" [20].

For ordinary Iranians, the consequences are immediate and personal. Foreign trade, which depends on internet-based price negotiations, invoice processing, and shipping coordination, has been effectively paralyzed [20]. Small business owners who built livelihoods on Instagram and Telegram have watched their income disappear [20]. Al Jazeera reported that the combination of military strikes and internet blackout has compounded an already severe economic crisis, with inflation running at 32.5% as of 2024 World Bank data — and likely higher now given wartime disruptions [16].

Source: World Bank Open Data

Data as of Dec 31, 2024CSV

The International Response — and Its Limits

The international response has been vocal but largely toothless. UN human rights experts stated that "any path forward must be grounded in the rule of law, the will of the Iranian people, and full accountability for the violation of international law, by all parties" [21]. The UN Fact-Finding Mission on Iran called for "immediate restoration of internet access" [15]. Human Rights Watch argued that blanket shutdowns violate the principles of necessity and proportionality under international human rights law, and cited UN experts' 2015 Joint Declaration that communication "kill switches" can never be justified, even during armed conflict [14].

Amnesty International warned that the shutdown "hides violations in escalating deadly crackdown on protesters" [22]. Article 19, a freedom-of-expression organization, stated that the "communication blackout puts lives at risk" by cutting access to information about strike locations and medical care [23].

Yet no concrete enforcement mechanism exists. The International Telecommunication Union has no authority to compel member states to restore connectivity. The Global Network Initiative's principles are voluntary. And while international humanitarian law prohibits attacks on civilian infrastructure, there is no established legal framework specifically classifying internet shutdowns as a violation during armed conflict — a gap that advocates have long identified but that states have shown little appetite to close [14].

The Authoritarian Playbook: Precedents and Patterns

Iran's blackout fits a well-documented pattern. Freedom House described it as part of an "authoritarian playbook" in which regimes that control internet distribution infrastructure impose shutdowns to manage information during crises [24].

Russia expanded internet censorship after its 2022 invasion of Ukraine, deploying new filtering technology to create what Freedom House called "a more sanitized domestic internet" — though Russia's controls have been less absolute than Iran's, relying more on selective blocking than total shutdowns [24]. Myanmar's military junta imposed prolonged regional shutdowns following the February 2021 coup, with documented increases in maternal mortality and gender-based violence in affected areas [25]. In Sudan, a 36-day blackout during the 2019 Khartoum massacre paralyzed ambulance dispatch and blood donation systems, contributing to hundreds of preventable deaths [25].

The evidence from these cases is mixed on whether shutdowns achieve their stated aims. They do succeed in limiting the flow of real-time information domestically in the short term. But they consistently accelerate international condemnation, and in several cases — including Iran's own 2019 and 2022 protests — they have intensified public anger rather than quelling it. The Carnegie Endowment analysis observed that each successive Iranian protest cycle (2019, 2022, 2026) has drawn "broader social coalitions — from urban poor to merchants — leaving the regime's genuine support base shrinking" [19]. The external military pressure from U.S.-Israeli strikes, paradoxically, provides ideological cover, allowing authorities to "present themselves as victims of imperialism rather than oppressors of their own population" [19].

Circumvention: Starlink, VPNs, and the Cat-and-Mouse Game

Iranians have not accepted disconnection passively. VPN app downloads surged 500% in the days following the initial restrictions [26]. But unlike previous shutdowns, Iran's 2026 infrastructure is designed to defeat standard circumvention tools. Rather than simply blocking VPN endpoints, authorities have destabilized encryption negotiation itself — DNS-based blocking prevents VPN software from resolving servers, HTTP-level filters detect and drop known VPN signatures, and protocol whitelists eliminate many tunneling methods [26].

Effective evasion now requires multi-layer obfuscation: wrapping VPN traffic in innocuous HTTPS streams, using pluggable transports, or tunneling through allowed content delivery networks [26]. Al-Monitor reported an ongoing "cat and mouse" game between Iranian censors and VPN developers deploying increasingly sophisticated countermeasures [27].

Starlink satellite internet has emerged as the most significant circumvention tool, with independent reports confirming that covert satellite dishes were activated across Iran during the blackout [28]. Starlink subscription fees for Iranian users were reportedly waived in mid-January [3]. But Iran has responded aggressively: large-scale GPS signal jamming has produced an estimated 30% packet loss for Starlink connections, with some areas experiencing 80% loss [26]. Under Iranian law, users and owners of Starlink terminals face prison sentences of up to 10 years or execution [26].

The effectiveness of these measures remains partial. Rest of World reported that Iran's shutdown "crippled" but did not eliminate Starlink access, and diaspora networks continue to serve as information conduits, relaying news and images through encrypted messaging apps when connections briefly materialize [28].

What Comes Next

Thirty days into the blackout, three dynamics are converging. The military campaign continues, with satellite imagery revealing ongoing damage to Iran's missile infrastructure [12]. The economic toll compounds daily, now exceeding $1 billion by conservative estimates [20]. And 92 million people remain largely cut off from the outside world, dependent on a state-controlled intranet for whatever information the government chooses to provide [3].

The blackout serves multiple masters. It limits documentation of strike damage — serving Israeli and American interests in controlling the narrative around military effectiveness, while simultaneously serving Iranian interests in concealing the extent of destruction. It suppresses domestic dissent at a moment when the regime faces both external military pressure and internal legitimacy crises. And it consolidates the infrastructure of permanent digital control that Iran has been building for years, with the wartime emergency providing justification for measures that may outlast the conflict itself.

The Lancet published an analysis noting that internet shutdowns in Iran directly threaten the right to health, cutting access to telemedicine, pharmaceutical supply chains, and emergency coordination [29]. The Bulletin of the Atomic Scientists warned that Iran's shutdown "tells a larger story" about the global rise of digital repression [30]. And Chatham House observed that the shutdown "signals a new stage of digital isolation" — one that may prove difficult to reverse even after the immediate crisis passes [31].

Whether this blackout ends the way previous ones did — with a gradual, grudging restoration of restricted access — or whether it marks the permanent establishment of Iran's "Barracks Internet" model depends on factors that remain as opaque as the country itself has become.