The Trump administration tracked the movement of IRGC members to and from Lebanon, via Al Hadath citing a US source

The pattern in past episodes is that deliberate leaks about surveillance of IRGC or proxy networks precede either diplomatic pressure on the host state, sanctions designations, or in more severe cases strikes against personnel in transit, with Lebanon movements typically read through the Hezbollah supply and command channel. The distinction that matters is between intelligence signalling, which tends to fade within sessions, and evidence of operational intent, which has historically been the trigger for a risk premium in crude and a bid in the dollar and yen against cyclical currencies. Tells worth noting are follow-on official confirmation or denial from Washington, any parallel movement in sanctions or designation activity, and whether regional actors alter posture. Absent escalation, single-source surveillance stories of this type have rarely sustained market moves on their own.