[Spain]: Intelligence Notice to Turkey

[Zak]

​

---

Top Secret / Eyes Only

1. Situation Overview
Spain is currently experiencing a constitutional crisis following the invocation of Article 155 of the Spanish Constitution, resulting in the suspension of Catalonia’s autonomy. This measure was enacted after the Free Catalan Assembly, led by Julia Riera, declared unilateral independence and was subsequently suppressed by the central government, culminating in Riera’s arrest.

2. Intelligence Assessment
There is credible evidence indicating potential covert support from elements within the Egyptian government directed towards Catalan separatist factions. This support reportedly includes supportive assistance and communication facilitation, potentially leveraging Egyptian intelligence operatives and affiliated networks. This involvement aligns with broader regional destabilization objectives targeting Mediterranean alliances and the exploitation of Spain’s internal political divisions.

3. Operational Considerations
We urge the Turkish government for increased vigilance to monitor Egyptian nationals transiting through Turkey and onwards to Spain (specifically to Madrid or Barcelona)

Monitoring and intelligence sharing on any communications, logistical support, or financial transactions connected to these networks is critical.

The crisis poses risks to regional security, including the stability of Mediterranean maritime routes significant to both Spain and Turkey.

4. Request for Cooperation
The National Intelligence Center requests enhanced surveillance and intelligence sharing from the National Intelligence Organization concerning suspected individuals and organizations within Turkish jurisdiction that may be facilitating or connected to this activity. Continued coordination will be essential to prevent further destabilization and to support joint efforts to maintain regional stability.

Jay

 

[Jay]

Millî İstihbarat Teşkilatı National Intelligence Organization​

AUTHENTIC COMMUNIQUE OF THE OFFICE OF FOREIGN AFFAIRS Security Clearance: Secure and Encrypted ŞİFRELEME KORUMASI: KAPLUĞA​

CLASSIFICATION: TOP SECRET // EYES ONLY // YALNIZCA TÜRKİYE-İSPANYA CABLE NO.: MIT-EUR/245-2006 DATE-TIME GROUP (DTG): 201200ZAUG06 FROM: MIT HQ ANKARA TO: CNI MADRID SUBJECT: RESPONSE TO CNI INTELLIGENCE BRIEFING – CATALONIA CRISIS & SUSPECTED EGYPTIAN INVOLVEMENT REFERENCE: CNI/CATCRISIS/INTSUM/2025-118

MİT appreciates the timely and detailed briefing received from our Spanish counterparts regarding the current constitutional crisis in Catalonia and associated foreign influence concerns. We recognize the sensitivity and complexity of the current situation and affirm our commitment to maintaining regional stability and protecting mutual interests in the Mediterranean basin. MİT has reviewed internal records and external surveillance data and, to date, has identified no direct or credible evidence of Egyptian intelligence actors using Turkish territory as a logistical or operational base for activities targeting Spain. However, several incidents involving Egyptian nationals in Izmir and Diyarbakir were flagged between March and early August 2006. While initial assessments did not indicate links to Catalan separatist movements, these individuals remain under discreet observation. At present, MİT assesses the likelihood of organized Egyptian support to Catalan elements via Turkish territory as low, though we acknowledge the fluidity of intelligence dynamics and remain vigilant. MİT is actively monitoring movements of interest through key transit points, including Istanbul Airport, Izmir Adnan Menderes Airport, and regional border crossings. Our liaison officers with the Gendarmerie Intelligence Services the JİTEM have been notified of this concern. While legal constraints limit overt surveillance of certain Kurdish-affiliated political groups, particularly where legitimate party status under Turkish law applies, MİT maintains routine intelligence-gathering operations on Kurdish extremist elements, including Kurdish Hawks (TAK) and radical PKK splinters, for any indication of foreign collaboration. The MİT will monitor any potential ties between the TAK and the Catalan Insurgency due to shared affinities expressed by TAK officials for the Catalan Insurgency. MİT proposes the following immediate steps for enhanced bilateral coordination: a. Deployment of MİT liaison officers to Madrid for face-to-face consultations on joint threat assessment and strategic cooperation. b. Establishment of a secure bilateral channel for information exchange regarding suspect individuals, financial flows, or digital communications. c. Joint risk mapping exercise to identify potential vectors of influence or movement from third-party states exploiting regional vulnerabilities. POINT OF CONTACT: MİT Foreign Liaison Division – Europe Desk Encrypted Line: +90-312-XXX-XXXX Channel ID: YALNIZCA-ALPHA Classification: TS/SCI – YALNIZCA TÜRKİYE-İSPANYA Regards, NOTE: This document is classified TOP SECRET and is intended solely for the coordination of intelligence activities between MİT and CNI. Unauthorized dissemination is strictly prohibited.​

Zak

 

[Zak]

​

---

Top Secret / Eyes Only

The Centro Nacional de Inteligencia (CNI) acknowledges receipt of the MİT's recent intelligence communication regarding potential foreign logistical or operational support for Catalan separatist elements via or transiting through Turkish territory.

Key Points of Note.

Appreciation of Strategic Alignment
We values the reaffirmation of MİT's commitment to regional stability and your recognition of the Catalonia situation as an internal Spanish matter. Coordination on this matter remains of high strategic interest to Spain.

Egyptian National Activity (Izmir & Diyarbakir)
We request further data or intelligence (SIGINT/HUMINT) relating to the flagged Egyptian individuals currently under observation. Cross-referencing these profiles with CNI databases may yield insight into indirect or proxy linkages.

Transit Surveillance Operations
CNI commends MİT’s proactive monitoring of strategic transit hubs. We request telemetry or behavioral pattern data (travel clusters, repeat entry-exit cycles) for individuals exhibiting suspect profiles, particularly those matching Catalan-affiliated surnames or dual-national identities of interest.

TAK Expressions of Solidarity
We concur with MİT’s assessment regarding rhetorical solidarity between TAK and Catalan separatist factions. We advise enhanced monitoring of TAK digital forums and associated proxy communication channels (Telegram, decentralized social media) for narratives aligning Catalan and Kurdish separatism.

Response to Proposed Measures

1. Liaison Officer Deployment (Madrid)
Approved. CNI will gladly host MİT liaison personnel at our Madrid headquarters a timeframe to be determined by yourselves. We request details to be coordinated via secure diplomatic backchannel to Ministry of Interior.[/b]

2. Secure Bilateral Channel
Under implementation. CNI proposes establishing a Mediterranean Counterterrorism Signal Network (MCSN) with protocol upgrades for end-to-end encryption and interagency authentication. The Mediterranean Counterterrorism Network will be a secure, interagency intelligence-sharing framework designed to enhance counterterrorism coordination among Mediterranean nations. The network will facilitate real-time encrypted communication, joint threat assessments, and the exchange of signals intelligence (SIGINT) related to transnational extremist movements, illicit trafficking routes, and regional destabilization efforts. It will be operated through a decentralized node-based architecture, the agreement will ensure resilience against cyber interference while promoting rapid, coordinated responses to emerging threats across land, sea, and digital domains.

3. Joint Risk Mapping Exercise
Agreed. CNI proposes initial digital coordination workshop to be scheduled ASAP. The objective will be to compile a red zone matrix identifying high-risk vectors exploited by third-party state and non-state actors (i.e., North African logistical facilitators, Balkan smuggling networks, and cyber-facilitated funding conduits).

Closing Remarks
We consider Turkish-Spanish intelligence cooperation critical to mitigating the transnational dimensions of separatist insurgency and preserving sovereignty against malign external influence. Further exchanges are welcomed via secure lines. We remain at readiness.

Jay

 

[Jay]

Millî İstihbarat Teşkilatı National Intelligence Organization​

AUTHENTIC COMMUNIQUE OF THE OFFICE OF FOREIGN AFFAIRS Security Clearance: Secure and Encrypted ŞİFRELEME KORUMASI: KAPLUĞA​

CLASSIFICATION: TOP SECRET // EYES ONLY // YALNIZCA TÜRKİYE-İSPANYA CABLE NO.: MIT-EUR/245-2006 DATE-TIME GROUP (DTG): 20180ZAUG06 FROM: MIT HQ ANKARA TO: CNI MADRID SUBJECT: RESPONSE TO CNI INTELLIGENCE BRIEFING – CATALONIA CRISIS & SUSPECTED EGYPTIAN INVOLVEMENT REFERENCE: CNI/CRSP-MAY25/INT-REPLY

MİT acknowledges and appreciates CNI’s comprehensive response and welcomes the reaffirmation of our mutual commitment to the preservation of internal sovereignty and regional stability. We concur that the Catalonia crisis constitutes a sensitive national matter, and we remain committed to collaborative intelligence measures within the bounds of bilateral respect and operational discretion. The insurrection demonstrates the pressing need for more proactive intelligence gathering and information sharing by Mediterranean nations. Per CNI request, MİT is compiling an internal dossier regarding the Egyptian individuals observed in Izmir and Diyarbakır. However, the MİT is limited from sharing such reports without the permission of the executive branch and we believe that the Prime Minister should raise this issue with the President, who is currently in Madrid. A sanitized SIGINT summary and accompanying HUMINT field notes will be transferred via secure diplomatic pouch to CNI Liaison Cell upon clearance review. MİT is initiating behavioral profiling protocols at IST, ADB, and ESB in accordance with CNI’s telemetry request. Category A: High-Risk Catalan-Origin Surnames with Travel Anomalies Profiles matching Catalan-affiliated surnames linked to recent separatist activity and exhibiting irregular travel behaviors. Multiple international entries/exits (>4) within 90-day window Prolonged travel to Belgium, Switzerland, or Southern France (28+ days) Entry within 5-day window of known Catalan political gatherings or GA sessions Please find the attached table with Spanish citizens matching Class A high-risk individuals. Name Passport No. Point of Departure Final Destination Entry/Exit Pattern Risk Flags Martí Rovira Fornós XPR4237892 Barcelona-El Prat Geneva, CH 3 exits, 2 returns Dual national (Swiss), encrypted laptop Júlia Castells Vendrell XPR4211023 Girona–Costa Brava Marseille, FR 2 exits, 2 returns Travel clustering, shared PNR Bernat Solé Alavedra XPR4176509 Lleida–Alguaire Brussels, BE 1 exit Declared asylum intent in 2005 Mireia Balaguer Pujol XPR4359981 Reus Airport Buenos Aires, AR 2 exits, no return Dual national (Arg), extended stay Ferran Dalmau Serra XPR4203984 Barcelona-El Prat Reykjavik, IS 1 exit VPN routers in luggage Núria Casanovas Torra XPR4167289 Perpignan (FR) Andorra la Vella 6 land crossings Smuggling suspicion, cash anomaly Oriol Puigdemont Llorenç XPR4290031 Madrid-Barajas Montreal, CA 4 exits, 3 returns Connected to flagged IP nodes Laia Bosch Corominas XPR4115574 Palma de Mallorca Zurich, CH 2 exits, 2 returns Suspicious banking transactions Pau Vila Calvet XPR4312012 Barcelona-El Prat Berlin, DE 1 exit Telegram repo link to rebel network Adrià Sànchez Domènech XPR4399770 Alicante Airport Porto, PT 3 exits Unexplained coordination w/ PPC defector MİT concurs with CNI's observation on emergent narrative alignment between TAK and Catalan separatist rhetoric in online spaces. Active monitoring is underway on: Encrypted TAK digital forums and mirror sites. Messaging patterns linking PKK-aligned sympathizers with Western separatist causes. We have flagged several nodes for further deep packet inspection (DPI) under cyber-operational authority. Updates will be communicated via MCSN (see below). The following list of Kurdish terrorists has been known to operate within Spain. The MİT requests that the Spanish Government conduct surveillance of these operatives and, when actionable, arrest them for their terrorist activities, including funding and recruiting for the TAK/YPG. Name Passport No. Nationality (Dual) Entry Point (Spain) Arrival Date Known Alias / Codename Priority Dilan Serhat Koçer DE9123407 Germany / Türkiye Barcelona-El Prat 23 Mar 2001 “Heval Ronahî” HIGH Welat Baran Demir TR0051832 Türkiye Madrid-Barajas 11 Jun 1998 “Welat Amed” MEDIUM Nûda Şoreş Kalkan TR8844302 Türkiye Valencia Airport 4 Sep 2003 “Nûda Botan” HIGH Cemal Firat Cilo TR2048719 Türkiye Bilbao Airport 17 Nov 1996 “Cilo Zagros” HIGH Delîl Ararat Şivan FR3309121 France / Türkiye Málaga-Costa del Sol 28 Jan 1995 “Şivan Cîwan” MEDIUM Hêvi Baran Kaya BE1198276 Belgium / Türkiye Girona–Costa Brava 08 May 2005 “Hêvi Kendal” LOW Şerzan Botan Özdemir TR1160934 Türkiye Seville Airport 02 Dec 1997 “Mazlum Arîn” HIGH Rozerîn Dilsoz Ekrem NO8834405 Norway / Türkiye Madrid-Barajas 13 Jul 2000 “Berîtan Zîn” MEDIUM Bawer Goran Keskin TR9988272 Türkiye (Single) Zaragoza Airport 09 Apr 2002 “Agit Zana” HIGH Rojda Nalin Karakoç NL3300023 Netherlands / Türkiye Barcelona-El Prat 21 Feb 1999 “Nalin Roja” HIGH (2) Liaison Officer Deployment MİT intends to dispatch liaison personnel to CNI Madrid Headquarters. Advance party (2 officers) projected for arrival in late September, contingent upon visa processing and MoI channel coordination. Name: Col. Yavuz Demiralp Unofficial Title: Intelligence Attaché (Intellignence Cooperation) Official Title: Deputy Defense Attaché (Security Affairs) Affiliation: Turkish Embassy – Madrid Age: 35 Birthplace: Sivas, Türkiye Languages: Spanish (C1), Kurdish (Operational), English (Fluent) Document Type Number Issuing Authority Date Issued Expiration Diplomatic Passport (Green) TR-DP987301 Republic of Türkiye – MoFA 22 May 2006 22 May 2011 National ID Card 250117-1971 Ankara Civil Registry 17 Jan 2001 Valid Visa Application SP-V203849 Spanish Embassy – Ankara Submitted 18 August 2006 Pending (Priority Channel) Name: Lt. Col. Elif Saruhan Unofficial Title: Intelligence Attaché (Intelligence Gathering) Official Title: Cultural Attaché Assistant Affiliation: Turkish Embassy – Madrid Age: 37 Birthplace: Diyarbakır, Türkiye Languages: Spanish (Fluent), Arabic (Operational), Kurdish (Fluent), French (Conversational) Document Type Number Issuing Authority Issue Date Expiry Date Diplomatic Passport TR-DP998642 MoFA Türkiye – Diyarbakır 12 Jun 2006 12 Jun 2011 Turkish ID Number 010287-1982 Diyarbakır Civil Registry 01 Feb 2002 N/A Visa Application SP-V204116 Spanish Embassy – Ankara Submitted 18 August 2006 Pending (Priority Channel) MİT supports the establishment of the MCSN as a strategic intelligence infrastructure. Technical specialists from our Cyber Counter-Operations Unit (Siber Karşı Operasyonlar Dairesi) are ready to assist in architecture design and implementation protocols. MİT proposes an initial technical meeting via VTC (Video Teleconference) in early October by the heads of the Mediterranean Intelligence Chiefs of Türkiye, Spain, France, and is available Italy, Eygpt, and Greece. (3) Joint Risk Mapping – AGREED We welcome CNI’s proposal for digital coordination. MİT proposes convening a working group during the second week of September. Terrorist organizations such as the TAK have regularly used human smuggling, drug trafficking, and other criminal enterprises to fuel their campaign of terror. Both civilian and intelligence level cooperation is necessary to break up cells moving across the Mediterranean and taking advantage of the lawfulness of the high seas. MİT considers our ongoing cooperation with CNI to be of high operational and geopolitical value. In an era of asymmetric hybrid threats, intelligence cohesion between Mediterranean partners is not optional, it is imperative. We remain at readiness and open to expanded channels of strategic dialogue. Regards, NOTE: This document is classified TOP SECRET and is intended solely for the coordination of intelligence activities between MİT and CNI. Unauthorized dissemination is strictly prohibited.​

Zak

 

[Zak]

​

---

Top Secret / Eyes Only

The National Intelligence Center expresses its appreciation for MİT’s comprehensive and timely reply. We value the depth of your engagement and fully acknowledge our shared commitment to sovereignty preservation, regional stability, and coordinated strategic intelligence efforts in the Mediterranean corridor.

We commend MİT’s alignment on the Catalonia crisis and agree that collaborative intelligence actions must remain grounded in bilateral respect and operational discretion. The Category A profiling framework and accompanying data table are received with thanks; the identified patterns and behavioral indicators will be integrated into our ongoing internal threat matrix. Further cross-validation will be conducted with other data as necessary.

Regarding the Egyptian surveillance dossier, We respect the constitutional limitations outlined and concurs that executive clearance is essential, I will pass this up the chain of command and will standby for receipt of the sanitized SIGINT and HUMINT package via secure diplomatic pouch. Our Liaison Cell has been briefed and is prepared to handle sensitive materials with appropriate classification.

MİT’s initiation of profiling protocols at Istanbul, Izmir and Ankara airports per our telemetry criteria is highly welcomed. We will reciprocate by enhancing passive monitoring parameters at Madrid, Barcelona and Malaga airports, with attention to travel anomalies tied to high-risk surnames and event-tied migration windows.

Your cyber-intelligence observations regarding TAK-Catalan narrative convergence confirm trends we have also noted in fringe forums and encrypted social channels. We support continued DPI and metadata tracking under sovereign cyber-authority, and recommend coordination on flagged IP node synchronization via MCSN infrastructure.

The attached list of TAK-linked Kurdish operatives is under review. Our Counter-Terrorism Division will cross-check entries with existing watchlists and will initiate surveillance and interdiction measures in accordance with Spanish legal frameworks and international obligations. Operational updates will be routed through our liaison protocols.

Regarding Liaison Officer Deployment, CNI formally welcomes the proposed assignment of Col. Yavuz Demiralp and Lt. Col. Elif Saruhan to Madrid. Our Internal Coordination Bureau has been instructed to expedite visa facilitation in coordination with the Ministry of Interior and Ministry of Foreign Affairs. Please notify us upon confirmation of their arrival dates to arrange secure workspace and integration briefing.

We strongly support the establishment of the MCSN and will pass on our proposed treaty in writing to the President and acknowledges MİT’s offer to assist in technical design and architecture. We propose the first MCSN VTC be scheduled between 3–6 October. Our Systems Security Directorate is prepared to provide counterpart specialists for protocol finalization.

We confirm agreement on convening the Joint Risk Mapping Working Group during the second week of September. Our proposed agenda will be shared shortly. We agree that maritime and trans-Mediterranean criminal exploitation must be jointly addressed, and that both state-level and intelligence community engagement is required to dismantle these nodes.

The strategic significance of our partnership with MİT cannot be overstated. In the face of multifaceted hybrid threats, cohesion among Mediterranean intelligence actors must deepen, not defer. We remain engaged, responsive, and committed to the advancement of our collective security interests.

Jay