Close
newsletters Newsletters
X Instagram Youtube

From infiltration to espionage: Decoding FETO’s hostile operations

Terrorist group FETO ringleader Fetullah Gulen died in October 2024 in the US. (Collage by Türkiye Today)
Photo
BigPhoto
Terrorist group FETO ringleader Fetullah Gulen died in October 2024 in the US. (Collage by Türkiye Today)
July 16, 2026 02:50 PM GMT+03:00

Ten years ago, on the night of July 15, millions of citizens in Türkiye witnessed a violent coup attempt that threatened the constitutional order. Beyond its immediate military expression, the coup attempt exposed a highly complex security challenge in modern statecraft: the deep, systemic infiltration of an espionage organization operating from within.

Historically, intelligence failures such as Pearl Harbor or 9/11 derived not from a lack of intelligence collection, but from a failure to synthesize and analyze it. In counterintelligence (CI), however, the challenge is compounded. When a threat is external, identification is relatively straightforward; when it operates from within, the boundaries become dangerously blurred.

Investigating how a state identifies an existential threat hidden within remains the core intelligence dilemma of the July 15 coup attempt.

Gramscian mimicry of passive revolution

To comprehend the FETO terrorist organization's multi-decade infiltration strategy, one must move beyond standard coup typologies and analyze it through Gramsci’s conceptualization of passive revolution.

In Gramscian ontology, state power does not reside solely within the political society—the coercive apparatus of the military, judiciary, and police. Rather, power is co-constituted by civil society, the domain of cultural, intellectual, and normative consensus. Thus, hegemony is established when an organized network gains intellectual and moral leadership across civil institutions, manufacturing a consensus to legitimize its underlying objectives and its own agenda.

Gramsci stressed that in highly institutionalized modern states, a direct, frontal assault (war of movement) is structurally ineffective. Instead, asymmetric actors must wage a patient, protracted "war of position" within the trenches of civil society, sustained by "organic intellectuals" who manufacture consensus and secure social legitimacy.

When borrowed as an epistemological and methodological lens, this Gramscian framework reveals how FETO precisely mimicked these dynamics in its long-term strategy.

Besides directly targeting the state’s coercive instruments, FETO also struggled to establish normative and cultural hegemony within civil society. Operating as a covert espionage and terror network, FETO aimed to cultivate a highly sanitized public persona to establish a cover to be exploited in their espionage operations.

From the 1970s onward, it viciously leveraged educational institutions, preparatory schools (dershanes), media conglomerates, financial networks, and humanitarian organizations to project an image of cosmopolitan dialogue and educational philanthropy. This meticulously crafted pseudo-legitimacy shielded its clandestine activities, allowing it to extract financial resources and recruit human capital from the societal base.

This attempted civic hegemony facilitated the creation of a parallel bureaucratic elite. In the indoctrination cells known as “isik evleri” (operating as secure safehouses and clandestine recruitment hubs structured to groom and compartmentalize future assets), youth were systematically indoctrinated and prepared for state exams.

Through massive, coordinated exam fraud (such as theft of civil service, military, and judicial entry questions), the organization bypassed meritocratic filters, installing its disciples within critical agencies, including the military, police, judiciary, academy, and other ministries, in a crafted agenda.

While posing as civil servants, in fact, these operatives maintained absolute, singular allegiance to FETO’s leadership. Once critical mass was achieved, the group transitioned from passive consolidation to active subversion, launching structural operations to paralyze the state apparatus, visible in the 2012 National Intelligence Organization (MIT) crisis, the December 2013 judicial-police plots, and ultimately, the July 15 coup attempt.

Yet, this treacherous siege clashed directly with the state's security bureaucracy—galvanized by decisive political leadership—and the resolute national will, turning the conflict into an existential struggle between a covert espionage network hijacking sovereignty and the state's self-defense apparatus.

Turkish people are seen after a group of soldiers with armored vehicle, involved in FETOs coup attempt, are being neutralized by police at Bosphorus Bridge in Istanbul, Türkiye on July 16, 2016. (AA Photo)
Turkish people are seen after a group of soldiers with armored vehicle, involved in FETOs coup attempt, are being neutralized by police at Bosphorus Bridge in Istanbul, Türkiye on July 16, 2016. (AA Photo)

FETO’s operational espionage and asymmetric transformism

Critically, analyzing this network through a Gramscian lens must not cultivate the illusion of a terrorist organization’s strategic autonomy. In intelligence ontology, the group did not operate as a sovereign actor; rather, it functioned strictly as a proxy espionage apparatus—a highly subsidized, foreign-steered tool utilized by foreign intelligence services.

Within this patron-client matrix, foreign intelligence services guided and protected FETO as an espionage asset, training it in clandestine tradecraft to hollow out the state’s internal sovereignty. In this context, FETO used advanced operational tradecraft, including rigorous internal compartmentalization managed by mahrem imams (covert civilian handlers operating within state structures) acting as case officers.

The group employed sophisticated signals intelligence (SIGINT) bypass techniques, such as sequential calling via public payphones, and encrypted, custom-built communication applications to evade electronic surveillance. Furthermore, seized database archives revealed a highly advanced personnel assessment and registration system, which evaluated members based on ideological loyalty, psychological vulnerabilities, and operational utility.

Once entrenched, FETO executed a sui generis asymmetric transformism—a concept traditionally defined as neutralizing opposition by absorbing it into its own structure. Through its recruitment methods, the organization absorbed societal intellectual potential into its own body, while simultaneously using its parallel authority to purge constitutionally loyal bureaucrats via forged evidence, wiretapping, and blackmail.

By replacing these bureaucrats with its own operatives, FETO hollowed out the state's organic resilience and turned key agencies into instruments of subversion.

Strategic counterintelligence lessons

The lessons learned from the July 15 experience provide a blueprint for modern counterintelligence doctrine, redefining how states must defend against complex and systemic insider threats:

The paradigm of proactive threat assumption: Modern CI must assume continuous, asymmetric penetration, recognizing that no institution is immune. Since espionage exploits civic and philanthropic covers for legitimacy, CI services must look beyond traditional bureaucratic boundaries to actively monitor covert influence networks and social consensus mechanisms.

Systemic vulnerability and institutional immunity: State security must look beyond external threats, prioritizing internal vetting, strict information controls, and rigorous red-teaming. Ultimately, July 15 proves that even advanced states remain vulnerable if they fail to detect coordinated insider networks exploiting institutional trust and authorized access.

The centrality of the human factor: Despite the advancement of AI, big data, and cyber surveillance, human agency remains the core vector of espionage and subversion. Humanitarian motives (such as money, ideology, coercion, or ego) remain the primary avenues of recruitment. Consequently, continuous behavioral risk assessment, holistic background checks, and internal audit mechanisms are indispensable to modern CI.

The destructive potential of the collective insider threat: While traditional counterintelligence views the insider threat as an isolated individual (e.g., a mole), the Turkish experience reveals it can manifest as a highly coordinated, hierarchical parallel network. Rather than merely stealing information, this collective threat actively manipulates decision-making, fabricates intelligence, and neutralizes state authority. Consequently, CI frameworks must complement individual-centric analysis with network-centric mapping of institutional relationships.

Cultivating a unified state counterintelligence culture: Counterintelligence culture must extend beyond specialized agencies; when an adversary coordinates subversion across the judiciary, military, and finance, CI must be equally integrated. Building a resilient shield requires a shared CI culture across all public sectors, anchored in inter-agency cooperation and meritocracy.

Meritocracy is vital

A decade after the July 15 coup attempt, viewing this historical milestone merely as a thwarted military coup misses its significance. For modern states, the ultimate defense against existential subversion lies in transforming historical crises into institutionalized, proactive capabilities.

While strengthening personnel security through meritocracy is vital, the primary defense mechanism is embedding a dynamic, sophisticated, and permanently institutionalized counterintelligence culture across the entire state apparatus.

July 16, 2026 02:53 PM GMT+03:00
More From Türkiye Today