Iran Employs Criminal Networks for Covert European Operations

Iran is increasingly utilizing local criminal networks, intermediaries, and online recruits for covert operations in Europe, reducing its reliance on sending its own intelligence agents, according to a report by "Arab News." This strategy allows Iranian entities to conduct surveillance, threats, and attacks in Western countries while maintaining distance from the perpetrators.

The approach has drawn renewed attention following the arrest of five men near a British airbase used for operations against Iran. While these individuals were released on bail and Iran denied involvement, the arrests highlight the evolving tactics. Security experts note that operations often originate with Iran's Revolutionary Guard or Ministry of Intelligence, pass through intermediaries and criminal networks, and are executed by local individuals, often motivated by money rather than ideology.

This method, which can appear amateurish, makes it difficult to identify the orchestrating entity. Sweden has accused Iran of using criminal networks for violent acts, including against Israeli and Jewish targets, and Dutch intelligence has linked Iran to attempts to recruit local criminals against regime opponents. Clara Brockart, a researcher at the Soufan Center, compares this tactic to Russia's operational model in Europe, using individuals without ideological ties to the sponsoring state to obscure the chain of command.

However, Brockart cautions against automatically attributing every suspicious incident to Iran. She emphasizes the need to distinguish between a potential investigative lead, patterns consistent with Tehran's known modus operandi, and cases with concrete evidence of Iranian responsibility. This distinction is crucial, as mere suspicion can generate fear and serve Iran's message that it can reach adversaries far from its borders, even under pressure in the Middle East.