The Islamic State Sahel Province (ISSP)—a branch of the Islamic State operating primarily in Burkina Faso, Mali, and Niger—is no longer just a regional insurgency in a distant war zone. It is emerging as a hub for external operations that threaten both Western interests in Africa and, increasingly, the West itself.

This was highlighted on March 12, when a former member of the U.S. Army National Guard killed one person and injured two others in a shooting at Old Dominion University. The gunman had been in contact with an Islamic State operative before traveling to Sierra Leone, Nigeria, and Niger in 2015 in an effort to join the group’s networks in Libya.

ISSP’s increasingly transcontinental threat stems in part from deepening integration with its West Africa chapter, which provides support, personnel, and guidance. ISSP’s emphasis on guided plots conducted by supporters abroad poses a direct threat to Western cities and diasporas. For Western governments, the stakes are clear: ISSP is tightening its grip over a critical swath of the central Sahel that hosts U.S. and European interests while embedding itself within North African and European jihadi ecosystems.

Policymakers have long treated Sahelian violence as a local insurgency best handled by regional partners. But the global hub of jihadism is shifting, and as ISSP attracts foreign fighters, facilitates plots in Morocco and Spain, and integrates more tightly into the Islamic States’ command structure, its reach is expanding. Unless Western capitals update their threat assessments and policies, they risk being caught off guard by attacks already in the making.

---

Originally a localized offshoot of al Qaeda affiliates, ISSP transformed into a full-fledged province in the Islamic States’ global governance system in 2022. Identifying the Sahel as a priority theater to offset the decline of the Iraq-Syria heartland and counter U.S. pressure in Somalia, Islamic State leadership sent Libyan and Syrian cadres to the region and integrated the ISSP within the office for West and North Africa.

ISSP’s rise was also made possible by the wave of coups from 2020 to 2023 in Mali, Burkina Faso, and Niger, which shattered already-fragile civil-military relations. New military rulers empowered abusive auxiliaries and alienated communities in contested border zones, allowing ISSP to move into newly unprotected areas, tax trade and herding routes, and present itself as a provider of security and income. The Islamic State has tightened control over parts of the region where the three countries’ borders meet, launching multifront offensives and developing smuggling networks.

Newly empowered juntas also expelled and sidelined international forces, contributing to the withdrawals of Western actors. In 2021, France decided that “the political and operational conditions were no longer met” to remain in Mali, removing its final troops in August 2022. Washington agreed to withdraw from Niger following its July 2023 coup and dismantled the United States’ main drone and intelligence hub in the central Sahel. These withdrawals created a security vacuum for ISSP to expand governance, protection rackets, and armed presence across large swaths of territory.

In 2024 and 2025, Syria-based Islamic State central command issued directives for these power vacuums to be filled, commanding the West Africa branch to back its Sahelian affiliate in Mali and Niger. Echoing the trajectory of the Islamic State-Khorasan Province in Afghanistan, ISSP is being shaped as a dual-use hub—both a destination for foreign fighters and a platform to project violence northward. In February 2025, for instance, Moroccan authorities dismantled an ISSP terrorist cell functioning as an external operations wing tasked with recruitment beyond the region.

ISSP has expanded its online networks, connecting radicalized supporters in the West with mentorship and operational guidance—including target selection advice—from facilitators in the Sahel and West Africa. Communication often takes place on encrypted messaging applications and social media platforms, where pro-ISSP media outlets and online supporters distribute propaganda.

The group’s digital infrastructure thus lowers the threshold for participation in jihad, turning distant adherents into potential vectors of violence in Western homelands. This branch has become especially effective because it lies at the crossroads of Sahelian, Maghrebi, and European migration and smuggling routes, giving it access to multilingual propagandists who can bridge audiences across Africa and Europe.

The internationalization of the Sahel branch has followed a phased trajectory since 2020, especially in Morocco and Spain. By 2023, Moroccan security communiqués identified ISSP, rather than countries in the Middle East, as one of the two most common intended destinations for recruits, together with the Horn of Africa affiliate, Islamic State-Somalia.

In February 2025, Morocco’s investigation bureau thwarted a terrorist plot and arrested a 12-member cell across nine cities. Searches uncovered signs of advanced operational readiness, and investigators identified a logistics hub operating on existing smuggling routes to Algeria. The same corridors that move migrants and contraband were being prepared to move operatives and material for attacks.

Meanwhile, Spanish services arrested around 90 people on suspicion of links to jihadi movements in the first eight months of 2025 alone, some of whom had intended to travel to Mali before turning toward attack planning inside Spain. Indeed, when travel was blocked, individuals repeatedly shifted to fallback plots at home—a pattern also visible in other European countries, including Austria and France.

Morocco and Spain thus function as the outer ring of Europe’s defense against an emerging threat system, disrupting networks through joint raids, intelligence sharing, and synchronized operations. (As recently as March 25, a joint operation by the two countries resulted in the arrest of three suspects in Tangier and Mallorca.) Yet the volume of arrests, including the dismantling of more than 40 Sahel-linked cells—and more than 1,000 terrorism-related arrests in Morocco since 2015—indicates that the pool of recruits is only expanding.

Beyond the Morocco-Spain axis, French prosecutors have pursued cases explicitly oriented toward Sahelian provinces, while intelligence has tracked suspects who scouted iconic Paris sites after failing to reach Mali. Austrian and other European Union services report small-scale financing through online platforms and cryptocurrency, dissemination of Sahel battlefield imagery, and attempts to route travel via Libya or Algeria.

ISSP has shown growing interest in Western and international targets on African soil, putting diplomats, international organizations, and commercial actors at greater risk. Embassies, aid compounds, and foreign-operated mines are seen as symbols of Western presence and potential leverage over regional governments.

Kidnapping attempts throughout the region in 2025 that were suspected of being linked to various ISSP offshoots targeted a Spaniard, an American pilot, and two women of Swiss and Austrian nationalities. In January of this year, the ISSP—in tandem with the West African Islamic State branch and foreign operatives—conducted a massive assault on Niger’s international airport, storming facilities near Russian and Italian bases and wounding four soldiers.

While border controls, intelligence sharing, and agile policing have so far kept the most lethal plots in the planning stage, European and North American governments must now treat ISSP as a direct threat.

---

Western governments have tried to contain Sahelian risk through a mix of limited military strikes; joint training missions; partnered security forces; and the funding of governance, development, and migration management.

In practice, these strategies privileged short‑term stabilization and capacity‑building over systemic political reform. However, the Sahel’s military governments currently seem to view U.S. diplomacy favorably, providing a rare opening for engagement. Last year, the U.S. started providing military intel for strikes against al Qaeda leadership in Mali; this year, U.S. diplomats have visited Mali, Burkina Faso, and Niger to discuss resuming bilateral cooperation. Italy—the only large Western state actively involved on the ground—has reaffirmed its commitment to the stability and security of Niger and the wider region in talks with Nigerien officials.

Still, the Sahelian coups demonstrate that there are no simple answers for Western-led regime change or democracy promotion. Direct political intervention is unwise, but modest measures—such as the EU’s push for the release of former Nigerien President Mohamed Bazoum—could signal goodwill and preserve channels for future cooperation.

Now, Western governments face three urgent tasks.

First, they must prioritize the Sahel through sustained investment in intelligence, surveillance, strike capabilities, and regional partnerships. Recent U.S. airstrikes in Nigeria conducted against Islamic State camps with the government’s consent are an example of an effective strategy for disrupting high-value operatives and buying time when jihadi sanctuaries begin to harden.

Second, Western governments must adopt a more cooperative approach to Europe’s southern flank and treat Morocco, Spain, Algeria, Mauritania, and Libya as one counterterrorism ecosystem. Operations should more closely link migration management and counterterrorism to prevent routes used by vulnerable migrants from doubling as cover for operatives. Countries should form joint legal agreements so that ISSP cases are treated singularly even when they span jurisdictions, and they should share financial intelligence on small remittances moving between the Sahel and North Africa. European governments should use funding as leverage, tying money for migration and border control to whether partners actually cooperate on investigations and prosecutions.

Third, governments and technology companies should treat ISSP’s online infrastructure as a strategic battle space by building robust open-source intelligence and investigative capacity. They should prioritize rapid removal of terrorist content using automated detection and shared databases—including hashing systems that create digital fingerprints to block reuploads. In parallel, agencies should invest in multilingual open-source intelligence teams to map networks, spot threats early, and turn digital leads into timely arrests. Finally, governments should deepen coordination with independent researchers, civil-society groups, and regional experts to ensure that enforcement decisions are grounded in nuanced understanding of local contexts.

The window in which Western states can treat ISSP as a distant problem is narrowing. A first successful attack in Europe or on Western interests in Africa would instantly recalibrate risk perceptions. The choice for policymakers is whether to act before that moment arrives—or after.