// FILE Nº 002 — SEASON ONE
Was It Mossad? Probably Not.
An explosion tears through a warehouse outside Tehran. Within hours, social media has rendered its verdict: Mossad. No investigation, no evidence chain, no claim of responsibility — just the vibe of it, plus a reply guy saying "this has Mossad written all over it." Sometimes the verdict is right. Dubai 2010 was Mossad, per Dubai's own police investigation. The 2007 Syria reactor strike was Israeli, confirmed in 2018. But the verdict is delivered the same way whether or not it's true, and that's the problem. This piece is about that reflex — who feeds it, and how to resist it.
The incentives to say "Mossad"
Attribution is a claim made by someone, and every claimant has interests. Here's who benefits when a mysterious explosion, assassination, or cyber incident gets credited to Israeli intelligence.
Iran's incentive. When an Iranian official blames the Mossad for a dead nuclear scientist or a sabotaged facility, consider what that blame displaces: accidents, internal sabotage, rival factions, incompetence. A foreign super-spy is a far more convenient explanation for a domestic audience than a sloppy safety regime. The blame also internationalizes the threat — this is my analysis, but the pattern is consistent enough across Iranian state media that it's worth treating official Iranian attributions as strategic communications first and evidence second.
Israel's incentive. This is the uncomfortable one. Israel does not correct false attributions, because the mystique is free deterrence. Remember Lieberman's line from the Dubai affair: "Israel never responds, never confirms and never denies." That policy doesn't just protect real operations; it lets imagined ones accrete to the legend. Every explosion someone else's imagination assigns to Mossad makes Mossad look more capable at zero operational cost. My read: correcting the record would buy Israel nothing and cost it the aura.
The journalist's incentive. The exciting story outsells the boring one. A gas-leak explosion is local news; "Mossad sabotage" is international news. Anonymous "intelligence sources" are easy to quote and hard to check — and genuine Mossad operations really have happened, which gives every new claim the veneer of a pattern.
The public's incentive. A hidden hand is cognitively satisfying. Randomness is not. Attributing chaos to a competent, shadowy actor restores a sense of order: somebody is in control, even if it's the other side's somebody.
What genuine attribution looks like
Contrast the vibe-based verdict with Dubai. Dubai police didn't tweet a theory; they built a case: 26 named suspects on surveillance video, passports from five countries cross-checked against real citizens, two local Palestinians arrested for logistical roles, Interpol notices. That's an evidence chain. The Orchard strike got the same treatment in reverse: years of circumstantial reporting, an IAEA technical finding, eventually an official admission. Real attributions leave paper trails. Fake ones leave vibes.
The reader's toolkit: four questions
Before believing any "Mossad did it" claim, run these:
1. Who benefits from the claim? Is the claimant a government deflecting blame, a media outlet selling excitement, or an investigator with evidence? Iran pointing at Israel, and Israel saying nothing, are both moves in a game — not testimony. 2. What's the evidence chain? Named investigators, physical evidence, verifiable documents — like Dubai's — or anonymous "sources familiar with the matter" and a photogenic fireball? 3. Who actually claimed responsibility — or, more tellingly, who pointed the finger? A police investigation that names suspects is categorically different from a state media editorial, a Telegram channel, or a retired general speculating on television. 4. Does it fit known capabilities AND known interests? Both halves matter. Mossad genuinely conducts covert operations inside Iran — that's capability. But Mossad blowing up a random warehouse with no discernible strategic value, at a moment of delicate diplomacy, fails the interests test. Capabilities without interests is fan fiction.
The takeaway
The Mossad is real, and it really does do covert operations — which is exactly why sloppy attribution is so tempting and so dangerous. Treat every attribution as a claim made by an interested party, run the four questions, and remember: the most common author of "Mossad did it" is not the Mossad.
// Sources
Sources & grounding:
- Dubai 2010 and the "policy of ambiguity" doctrine: Wikipedia, "Mahmoud al-Mabhouh"; KUNA, Feb. 18, 2010; EBSCO Research Starters.
- Orchard confirmation and IAEA finding: Globes, March 21, 2018; NPR Illinois, March 21, 2018.
- All incentive claims are my analysis inferred from documented patterns; Iranian official attributions of sabotage to Israel are public record via Iranian state media.
Get the next file first
One operation per issue, straight to your inbox — with the record and the legend kept separate.
Join the briefing