Four Arrested in UK Counter-Terrorism Probe into Iranian Intelligence Surveillance of Jewish Communities

Metropolitan Police arrest one Iranian and three dual British-Iranian nationals as part of a long-running investigation into suspected surveillance of Jewish community locations and individuals in London.

The Arrests

In a significant counter-terrorism operation, London’s Metropolitan Police have arrested four men on suspicion of assisting a foreign intelligence service — specifically Iran’s intelligence apparatus. The arrests, carried out on March 6, 2026, represent the latest action in what authorities describe as a “long-running investigation” into Iranian espionage operations on British soil.

The detained individuals include:

  • One Iranian national, age 40, arrested in Barnet
  • Three dual British-Iranian nationals, ages 55 (Barnet), 52 (Watford), and 22 (Harrow)

All four were detained under the National Security Act 2023, legislation introduced to modernize counter-espionage laws and combat foreign state interference in the United Kingdom.

Six additional men — ages 20 (two individuals), 29, 39, 42, and 49 — were arrested at a single location in Harrow on suspicion of assisting an offender, bringing the total number of detained individuals to ten.

The Investigation: Surveillance of Jewish Communities

The investigation centers on the suspected surveillance of locations and individuals connected to Jewish communities in London. Commander Helen Flanagan, head of Counter Terrorism Policing London, confirmed that the arrests were “part of our ongoing work to disrupt malign activity where we suspect it.”

“We understand the public may be concerned, in particular the Jewish community, and as always, I would ask them to remain vigilant and if they see or hear anything that concerns them, then to contact us,” Flanagan said.

The Community Security Trust (CST), the charity responsible for protecting Britain’s Jewish community, thanked police and confirmed that “security is strong across the Jewish community.”

Iran’s Escalating Threat to the UK

The arrests come against a backdrop of intensifying Iranian hostile activity against the United Kingdom. Following Iran’s retaliatory strikes in response to US-Israeli military action, Prime Minister Sir Keir Starmer issued a stark warning about the scope of Iran’s operations:

“Even in the United Kingdom, the Iranian regime poses a direct threat to dissidents and to the Jewish community. Over the last year alone, they have backed more than 20 potentially lethal attacks on UK soil.”

Deputy Prime Minister David Lammy reinforced the severity of the threat during a morning television appearance: “Iran is the biggest state sponsor of terrorism globally and sadly, that is in effect in our own society as well.”

A Pattern of Iranian Intelligence Operations

This case fits within a well-documented pattern of Iranian intelligence operations targeting Jewish and Israeli-linked communities worldwide:

Physical Surveillance Operations

Iranian intelligence services have long been accused of conducting surveillance operations against Jewish community centers, synagogues, Israeli embassies, and individuals associated with Israeli or Jewish organizations across Europe and beyond. These surveillance operations have historically served as precursors to planned attacks.

The Cyber-Physical Nexus

The arrests parallel the cyber domain discoveries reported this same week by Symantec and Carbon Black, who uncovered MuddyWater — an Iranian MOIS-linked hacking group — embedded in US bank, airport, and software company networks. Together, these revelations paint a picture of Iran conducting coordinated intelligence operations across both physical and digital domains.

Historical Context

Iran’s intelligence operations against Jewish communities have a documented history stretching back decades:

  • 1994: The AMIA bombing in Buenos Aires killed 85 people at a Jewish community center, with Argentine prosecutors attributing the attack to Iranian operatives
  • 2012: Iranian-linked plots targeting Israeli diplomats were disrupted in India, Thailand, and Georgia
  • 2023-2025: Multiple European countries expelled Iranian diplomats over surveillance and assassination plots
  • 2025: MuddyWater compromised Jerusalem CCTV systems months before Iran bombed the city

The National Security Act in Action

The use of the National Security Act 2023 in these arrests is significant. The legislation was specifically designed to address the evolving threat of foreign state interference, providing law enforcement with updated tools to prosecute espionage-related offenses that the previous Official Secrets Act (dating back to 1911 and 1989) was ill-equipped to handle.

Key provisions of the Act include:

  • Foreign interference offenses — criminalizing conduct carried out on behalf of foreign powers that interferes with UK democratic processes or civil society
  • Sabotage and espionage offenses — modernized definitions covering digital and physical intelligence gathering
  • Enhanced penalties — reflecting the seriousness of state-sponsored threats

Government Response

Home Secretary Shabana Mahmood sought to reassure the public: “The UK’s police and security services are world leading and will not hesitate to take action to counter any threat to the UK. They will continue to use the full range of tools and powers available to them to keep this country safe.”

Searches remain ongoing at properties in Watford, Barnet, and Wembley, suggesting investigators are still gathering evidence and the scope of the operation may expand.

Implications for Security

These arrests raise critical questions about the scale of Iranian intelligence networks operating within Western democracies:

  1. How extensive is Iran’s surveillance infrastructure in the UK and other Western nations?
  2. What is the relationship between Iran’s cyber operations (like MuddyWater) and its physical intelligence networks?
  3. Are similar surveillance operations targeting Jewish communities in other countries going undetected?
  4. How do these operations connect to Iran’s broader military activities, given the precedent of cyber surveillance preceding kinetic strikes?

The Convergence of Threats

When viewed alongside the MuddyWater cyber intrusions revealed this same week, a disturbing picture emerges: Iran is simultaneously conducting physical surveillance of communities in the UK while maintaining persistent cyber access to critical infrastructure in the United States and Israel. The convergence of physical intelligence gathering and cyber pre-positioning suggests a coordinated strategic intelligence effort operating across multiple Western nations.

For Jewish communities and organizations worldwide, the message is clear: the threat from Iranian intelligence services is not abstract. It is active, it is present, and it requires constant vigilance.

This article is based on reporting by the BBC, statements from the Metropolitan Police Service, and public remarks by UK government officials on March 6-7, 2026.