Iran warns US-owned firms with Middle East footprints

Iran’s Islamic Revolutionary Guard Corps warned that US-owned companies with a footprint in the Middle East could be targeted as early as Wednesday evening in Iran, according to Business Insider. The list cited in the report includes household corporate names such as Tesla, JPMorgan, Microsoft and Apple.

For markets, the significance is less the credibility of any single threat than the widening definition of “war risk.” In earlier phases of the Iran conflict, the risk premium mostly expressed itself in oil, shipping and insurance. A direct warning to multinationals shifts attention to assets that do not move in tankers: data centres, cloud dependencies, brand value, payment rails and local subsidiaries that sit inside reachable jurisdictions.

Large firms tend to treat geopolitics as an input cost until it becomes an operational constraint. A company can hedge fuel and reroute logistics; it cannot easily hedge a sudden loss of local licences, a blocked bank relationship, or a compliance designation that turns routine transactions into prohibited activity. Once a jurisdiction becomes contested, “doing business” starts to mean documenting every vendor, every employee and every data flow to satisfy banks and regulators—compliance as a production factor rather than a legal afterthought.

The exposure is uneven. Companies with physical sites, staff, or contracted service providers in the region face direct security and continuity risks. Firms without major physical presence can still be vulnerable through suppliers and counterparties: cloud identity systems, app stores, payment processors, correspondent banking, and advertising networks. Even when the technical infrastructure is resilient, the financial plumbing can fail first if insurers withdraw coverage or banks refuse to clear payments.

That dynamic can cascade. If insurers raise premiums or exclude certain territories, banks often follow by tightening credit and trade finance. Suppliers then demand prepayment, and local partners seek alternative channels. The result is a de facto rationing of commerce that looks like a policy decision but is often driven by private risk controls.

Corporate responses also tend to be visible only after the fact. Firms announce “reviewing operations” or “monitoring the situation,” while the real action happens in procurement rules, travel bans, vendor offboarding and the quiet relocation of key functions. In that sense, the IRGC’s statement functions as a stress test: it forces boards to decide which revenues are worth the operational and reputational tail risk, and which are only profitable when someone else is bearing the downside.

The list of threatened companies is long. The number of jurisdictions willing to insure, finance and legally defend their Middle East exposure may prove shorter.