Who Kidnapped Joe in Lioness Season 3 Episode 6? The Iran Twist Explained

Lioness spends several episodes making Joe’s abduction look like a Russian intelligence operation, but Season 3 finally complicates that assumption in Sugar Land. Episode 6 strongly points to Iran as the power actually behind Joe’s kidnapping, with Russian operatives apparently being used as contractors rather than acting entirely on Moscow’s behalf. Kyle reaches that conclusion after finding Oleksa and comparing the details of the operation with the way Russian intelligence normally works. The series has not yet shown an Iranian official admitting to ordering the kidnapping, so Iran’s involvement remains the CIA’s strongest assessment rather than a fully documented confession.

Related: Does Senator Olson Die in Lioness? What Happens to Him

Why Did Everyone Think Russia Kidnapped Joe?

Russia was the obvious suspect because almost every clue initially pointed in that direction. Joe had helped dismantle Russian-linked networks, the CIA knew the SVR had some knowledge of the Lioness program, and Russian or Belarusian operatives repeatedly appeared around the attempts to identify and capture her. Episode 5 even establishes that Joe could provide definitive information about Lioness operations that the SVR currently lacks, making her extremely valuable to Russian intelligence.

The people physically involved also reinforced that theory. Belarusian contract agents had previously attempted to abduct Joe in Virginia, while the wider counterintelligence operation was uncovering Russian sources inside American institutions. By the time Joe disappeared, Kaitlyn, Kyle and the rest of the CIA had every reason to treat the kidnapping as part of the same conflict. Episode 6 does not reveal that those Russian connections were fake, but it changes what they apparently meant.

How Does Oleksa Change Kyle’s Theory?

Oleksa changes the investigation because she understands Russian intelligence from the inside. After the Operation Treasure fallout, Kyle tracks the former SVR source down despite her placement in witness protection because he believes her knowledge could help identify where Joe’s kidnappers might take her. Once he describes the operation, however, Oleksa recognizes that its structure does not look right for a conventional Russian extraction. Kyle and Oleksa begin considering the possibility that Russian operatives were hired to perform only part of the job for another government.

That distinction explains why some clues looked Russian while other pieces did not fit. Contractors can provide local surveillance, safe houses, transportation and muscle without knowing the full objective of the people paying them. If that is what happened, the CIA was correct about who physically helped take Joe but wrong about who ultimately wanted her. The investigation therefore shifts from identifying the kidnappers to identifying the client behind them.

Why Does the CIA Suspect Iran?

Iran becomes the leading suspect because Joe has a history that gives Tehran a far more personal reason to want her. Sugar Land presents the Iranian explanation as the conclusion Kyle and Oleksa reach after eliminating Russia as the most convincing architect of the operation. Their theory is that another nation with a direct grievance against Joe employed Russian-linked operatives already functioning inside the United States. The episode then has the rescue effort change course based on the belief that Iranian agents are preparing to extract her.

The motive also fits Joe’s value as a hostage. She is a senior CIA officer tied to covert American operations and the Lioness program, so interrogating her could expose sensitive missions, personnel and relationships. Her capture could also be used for political leverage rather than intelligence alone, especially if an adversarial government could publicly prove that the United States had conducted secret operations on its territory or against its interests. Lioness has not yet disclosed exactly which grievance is driving Babat’s mission, so that part of the Iranian plan still needs to be revealed.

Are the Russians Innocent?

No, Episode 6 does not absolve the Russian operatives involved in Joe’s abduction. The new theory is that they were participating as contractors, which means they may still have knowingly helped locate, capture and transport an American intelligence officer. Oleksa’s knowledge of Russian safe houses remains useful precisely because Russian-linked personnel are still part of the operational chain.

What changes is their position in that chain. Instead of Russia necessarily controlling the entire mission from the top, the Russian network may have provided services to an Iranian operation. That would also explain why the CIA could understand parts of the kidnappers’ methods while repeatedly failing to predict their final objective. They were studying the subcontractor instead of the customer.

Who Is Really Holding Joe?

By the end of Sugar Land, the most important figure physically controlling Joe is Babat. Joe finally comes face-to-face with him while Randy and Tex unknowingly search the same general area, and Babat makes clear that her situation will become significantly worse if he succeeds in taking her outside the country. He later mutilates part of her foot and abandons the compromised air-extraction plan for another escape route.

The season therefore has not finished answering who kidnapped Joe, but Episode 6 gives the clearest hierarchy yet. Russian and Belarusian operators appear to have helped execute the abduction, while the CIA now believes Iranian interests are directing the larger mission and Babat is managing Joe on the ground. That makes the Iran reveal more than a surprise identity swap because it changes how Kaitlyn and Kyle must predict the next move. They are no longer trying to rescue Joe from the enemy they thought they understood.