# Internet Research Agency Russian "troll farm" based in St. Petersburg, formally known as the Internet Research Agency LLC. Funded by Yevgeny Prigozhin (Putin ally, later [[Wagner Group]] leader), the IRA conducted the social media influence operation that reached an estimated **126 million Americans on Facebook alone** during the 2016 election cycle. Indicted by [[Robert Mueller]] in February 2018. ## Structure and Scale The IRA operated from a nondescript building at 55 Savushkina Street in St. Petersburg, employing hundreds of Russian operatives working in shifts to impersonate American citizens online. By September 2016, the operation's monthly budget was **$1.25 million**. Staff were organized into specialized departments: - **American department**: Created and managed fake US personas on Facebook, Twitter, [[Instagram]], [[YouTube]], Tumblr, and other platforms - **Graphics department**: Produced memes, infographics, and visual content - **Data analysis department**: Tracked engagement metrics and optimized content for virality - **IT department**: Managed VPNs, stolen identities, and technical infrastructure to mask Russian origins Operatives traveled to the United States in 2014 on intelligence-gathering trips, visiting at least nine states to study the American political landscape, gather local detail for their personas, and purchase American phone numbers and other identity documents. ## The 2016 Influence Campaign The IRA's operation began as early as 2014 — well before the campaign — and targeted both sides of divisive American political issues (race, immigration, gun control, religion) to amplify societal divisions. As the election approached, the operation increasingly favored Trump and opposed Clinton. ### Tactics **Fake American personas**: IRA operatives created hundreds of social media accounts posing as American citizens, community groups, and political organizations. Some amassed hundreds of thousands of followers. Examples included "Blacktivist" (Facebook page with 360K followers, larger than the official Black Lives Matter page), "Being Patriotic," "Heart of Texas," "Army of Jesus," and "United Muslims of America." **Organized real-world events**: The IRA didn't just post online — it organized actual rallies and protests in the United States, recruiting unwitting Americans as participants. In one documented case, IRA operatives organized both a pro-Islam rally and an anti-Islam protest at the same location on the same day in Houston, Texas. **Targeted advertising**: The IRA purchased thousands of social media ads targeting specific American demographics and swing states. Facebook later disclosed that IRA-linked accounts had purchased over 3,500 ads. **Amplification of stolen materials**: When the [[GRU]] released hacked Democratic emails through [[WikiLeaks]] and other channels, IRA accounts amplified the most damaging content, driving engagement and spreading it beyond its organic audience. ### Reach Per the platforms' own disclosures to Congress: - **Facebook**: 126 million Americans reached through IRA content - **Instagram**: 20 million Americans reached - **Twitter**: 1.4 million Americans engaged with IRA accounts - **YouTube**: Over 1,000 videos uploaded ### Named front accounts *(added 2026-09-29)* Press accounts of the February 2018 indictment name the "Being Patriotic" group, the "Matt Skiber" persona, @March_for_Trump, the fake Tennessee Republican account @TEN_GOP, and "Florida Goes Trump," which organized pro-Trump rallies across Florida on August 20, 2016. Wikipedia's roster adds Blacktivist, Heart of Texas, United Muslims of America, SecuredBorders, Don't Shoot Us, LGBT United, Stop AI and BlackMattersUS.com *[single-sourced]*. Persona accounts such as "Jenna Abrams" and @Pamela_Moore13 recur in later reporting but have not been re-verified against the indictment text. The individual defendants, the Federal News Agency (FAN) and the Translator Project are covered at [[Project Lakhta]]. ## The Mueller Indictment In February 2018, Mueller indicted the Internet Research Agency, Concord Management (Prigozhin's company), [[Concord Catering]], and 13 Russian nationals. The indictment charged conspiracy to defraud the United States, wire fraud, and identity theft. The case against Concord Management was eventually dropped in 2020 after the company exploited discovery rules to gain access to sensitive US evidence — a tactic prosecutors described as itself serving Russian intelligence interests. ## Legacy and Evolution The IRA model established a template for state-sponsored social media manipulation that has been studied and replicated globally. The operation demonstrated that relatively modest budgets ($1.25M/month) could achieve enormous influence effects when deployed against open social media ecosystems. The evolution from the IRA's approach (fake personas pretending to be American) to the [[Tenet Media]] model (covertly funding actual Americans) represents a generational leap in sophistication — from impersonation to co-optation. The U.S. government followed a strikingly parallel trajectory. The [[Pentagon Influence Operations - gc_ Generation]] evolved through the same three-stage pattern: overt state media (TRWI, 2008) → bot-farm amplification of front websites ("Unheard Voice," 2022) → paid ad buys distributing curated-but-factual content (gc\_ generation, 2023–present). Both the IRA and the Pentagon learned the same lesson: fake personas are detectable, but paid distribution through legitimate channels is not. ## Significance The IRA is the social media arm of [[Russia]]'s 2016 election interference triad, complementing the [[GRU]]'s hacking operations and [[RT]]'s media platform. Its achievement — reaching 126 million Americans through fake personas operated from a St. Petersburg office building — exposed the vulnerability of open social media platforms to state-sponsored information warfare and reshaped the global understanding of election security. ## See Also *(added 2026-05-19)* The 2026-05-19 [[Disinformation Lexicon]] buildout added multiple entries that directly extend or complement the IRA case-record: - [[Project Lakhta]] — the *parent umbrella operation* of which the IRA was the principal sub-organization; documented through Mueller Feb 2018 + Khusyaynova Oct 2018 indictments; includes Concord Management, Concord Catering, Glavset LLC, Federal News Agency, and multiple shell-companies in the integrated infrastructure - [[Guccifer 2.0]] — the *parallel GRU operation* during the 2016 election that operated alongside the IRA's social-media operations; the Guccifer 2.0 persona was a GRU Unit 74455 product providing plausible-deniability for the DNC document publication - [[Release the Memo]] (January–February 2018) — Hamilton 68 dashboard documented this hashtag campaign as the *most-amplified hashtag in Russian-influence-network monitoring* for the relevant period; canonical case of IRA-style infrastructure amplifying *domestic American political-attack content* - [[Snow Revolution]] (December 2011 – Summer 2013) — the historical inflection-point Russian protest movement whose Putin-regime interpretation as *Western-orchestrated [[Color Revolution]]* substantially drove the post-2012 strategic-doctrine expansion that produced the IRA infrastructure - [[Troll Farms]] — the *vocabulary category* the IRA exemplifies; the IRA's Saint Petersburg template (55 Savushkina, ~2013–2023) is the contemporary canonical case - [[Sockpuppet Accounts]] — the *account-level operational primitive* IRA operations were built on; the IRA's English-language persona accounts (Jenna Abrams, TEN_GOP, Pamela_Moore13, Crystal1Johnson, and many others) are documented case studies - [[Bots]] — the *automation layer* IRA operations frequently combined with sockpuppet infrastructure; bot-amplification of sockpuppet-generated content is one of the documented IRA operational patterns For broader Information Warfare context, see [[Information Warfare]].