Inside Iran’s Digital Underground: How 92 Million Citizens Fight the World’s Most Sophisticated Internet Blackout

Iran imposed a near-total internet blackout on January 8, 2026, severing 92 million citizens from the global internet at 4% connectivity—yet within days, circumvention tool usage surged sevenfold as a digital resistance network mobilized with unprecedented scale and sophistication.

The shutdown came as authorities violently suppressed nationwide protests, costing the economy $35.7 million per day according to Iran’s Communications Minister. But this was no ordinary blackout. Unlike previous shutdowns that left Iran’s domestic intranet functional, the 2026 blackout disrupted local infrastructure as well, with mobile networks, text messaging services, and landlines disabled—even Starlink was blocked.

What makes this moment unprecedented is not the regime’s capacity for repression, but the Iranian people’s capacity for circumvention. The 2022 Mahsa Amini protests—sparked by the death of a 22-year-old Kurdish woman in morality police custody—served as a catalyst for this underground network’s maturation. Those protests were described as ‘unlike any the country had seen before,’ the ‘biggest challenge’ to the government since the Islamic Revolution in 1979, according to various sources.

The Architecture of Control

Iran’s censorship apparatus represents what researchers call a ‘stealth blackout’—a multi-layered system combining deep packet inspection, DNS poisoning, protocol whitelisting, and centralized border gateway filtering. The regime injected false DNS responses, parsed and filtered HTTP requests, intercepted TLS handshakes by SNI, and enforced a country-wide protocol whitelist, with all these controls imposed at a single national gateway.

The technical sophistication is staggering. A centralized system intercepts web traffic and redirects forbidden requests to a government-owned block page at the private IP 10.10.34.34, while filters inspect HTTP hostnames and URL keywords, injecting censorship pages or TCP resets for banned content. During the June 2025 war with Israel, researchers documented how Iran’s network uses a strict protocol whitelist: only DNS, HTTP, and HTTPS are forwarded, while all other traffic is silently dropped.

This creates what one arXiv research paper calls an ‘imperceptible shutdown’—Iran remained globally reachable via BGP routing, yet domestic users were effectively isolated. The regime even surgically removed social features from domestic platforms, disabling comment sections on news sites and chat boxes in online marketplaces.

The Resistance Toolkit

Against this apparatus, Iranians have built a sophisticated counter-infrastructure. When the 2026 blackout began, VPN app downloads surged nearly sevenfold, with Iranians using Tor Snowflake, Psiphon, and other tools. During the 2018 Telegram ban, Psiphon usage surged 10-fold, reaching a peak of 14 million daily users, representing a remarkable one-third of Internet users in the country.

Starlink emerged as a game-changer during the January protests. An Iranian official estimated tens of thousands of Starlink receivers in the Islamic Republic, with some being used to share videos, photos and other reporting on the protests. One verified video showed a man riding in the passenger seat of a car on an Iranian highway with a Starlink device in the vehicle, scrolling through his Instagram feed.

The regime responded with jamming. Since its 12-day war with Israel in June 2025, Iran has been disrupting GPS signals, likely in a bid to make drones less effective—Starlink receivers use GPS signals to position themselves to connect to a constellation of low-orbit satellites. According to Miaan Group, BeePass VPN was providing access to over half a million daily users inside Iran at the start of the war, while the Ceno Browser saw active peers surge from 600 on June 13 to nearly 8,000 by July 11.

The Economic Carnage

The shutdowns have devastated Iran’s digital economy. Economists estimate Iran’s digital economy generates roughly 30 trillion rials (about $42 million) a day, with the Tehran Chamber of Commerce estimating that at least 500,000 Instagram-based shops operate in Iran, supporting around one million jobs whose sales effectively drop to zero without internet access.

Freelancers—a critical segment earning foreign currency—were hit particularly hard. Freelancers across Iran lost foreign contracts and saw income dry up during January’s internet shutdown, with internet throttled for 20 days and now far harder to access than before the shutdown. One electrical engineer told Iran International: ‘The internet is not stable enough for me to confidently take on projects, and transferring money has become so complicated that the losses outweigh the income.’

The broader economy collapsed under the weight of disconnection. Online sales fell by 80% during the Internet shutdown, while the Tehran Stock Exchange overall index lost 450,000 points over a four day period, and 130 trillion tomans daily, with the number of financial transactions in Iran dropping by 185 million in January 2026.

Digital Apartheid: The White SIM Scandal

Perhaps the most damning revelation of Iran’s digital control came in November 2025, when a Twitter/X feature update exposed what Iranians call ‘white SIM cards’—privileged mobile lines where unrestricted access is granted to a select group, exposing accounts that support censorship yet personally enjoy unrestricted access, such as hardline lawmakers who support Internet restrictions for the public, state news agencies, businesses, academics, and journalists.

The scandal sparked fury. As one analyst described it to Iran International, many characterized the system as ‘digital apartheid’ or a ‘caste-based internet’ that rewards political loyalty and entrenches inequality. In response, the Iranian regime ordered white SIM cards belonging to journalists and regime loyalists with uncensored internet access to be disabled in December 2025—though skepticism remains about enforcement.

International Advocacy Gains Traction

Global organizations have mobilized around Iran’s digital isolation. Access Now, which was founded in 2009 immediately after the contested Iranian presidential election sparked widespread protests, has documented Iran’s censorship techniques extensively. NetBlocks, the internet monitoring organization, has become the authoritative source for real-time shutdown data, estimating each day of an internet shutdown in Iran costs the country over $37 million based on indicators from the World Bank and the International Telecommunication Union.

In December 2025, the EU and US pressed tech giants to fund open-source VPN and censorship-bypass projects, expand encrypted communication features and develop in-app proxies to keep users connected during outages. The US Congress introduced the FREEDOM Act, aimed at helping Iranians circumvent internet blackouts, with the first time the US Government will be statutorily required to pursue a strategy to promote internet freedom in Iran.

The Post-Amini Digital Battlefield

The Mahsa Amini protests fundamentally altered Iran’s digital resistance. Authorities activated the National Information Network to sever Iran’s connection to the global internet, impose digital curfews, and launch targeted blackouts, shutting down VPNs and using CCTV footage to identify and arrest demonstrators—creating a Surveillance state that is in part a product of the protests.

Yet Iranians adapted. Authorities shut down the internet as soon as protests began, but Iranians were equally quick to find different routes to stay online, drawing on learned experiences from previous protests and different conditions of access this time, explained Mahsa Alimardani, senior researcher at Article 19.

The resistance has become institutionalized. During the January 2026 blackout, Iranian diaspora internet users ran applications to share part of their bandwidth in an attempt to help users inside Iran circumvent the blackout. A project called ‘Narrative of the Blackout’ was launched so that people who had access only to the national network could share descriptions of problems caused by lack of internet access, with the response very high and many reputable media outlets covering these stories.

What to Watch

Iran’s shutdown strategy is evolving into a permanent architecture. Reports emerged that the regime has been investing in long-term digital infrastructure projects, such as building its own satellite network and expanding local server farms, which could make it harder for users inside Iran to circumvent the internet blackout.