n 15, 2026
In certain corners of modern conflict, the lines are not drawn in open fields or declared fronts, but in quieter arrangements—agreements made in shadows, where intention passes through intermediaries and distance becomes a kind of protection. What emerges is not absence, but diffusion: actions that appear local, yet carry echoes from elsewhere.
Recent intelligence assessments and investigative reporting suggest that this diffusion has taken on a distinct pattern. Rather than acting directly, Iran is increasingly accused of relying on criminal networks—biker gangs, organized crime groups, and hired individuals—to carry out operations abroad, including within the United Kingdom.
The approach, described by analysts as one of “outsourcing,” is not entirely new, but it appears to have sharpened in recent years. According to security officials and intelligence findings, these arrangements allow operations—ranging from surveillance to attempted assassinations—to be conducted with a degree of separation, making attribution more complex and response less immediate.
Within the UK, the pattern has drawn particular concern. Intelligence agencies have tracked more than 20 potentially lethal plots linked to Iran in a single recent year, with targets including dissidents, journalists, and Jewish communities. These incidents do not always unfold as singular events, but as part of a wider network of attempts—some interrupted, others still under investigation.
What distinguishes this strategy is not only its intent, but its method. Reports indicate that criminal organizations—motivated less by ideology than by payment—have been engaged to carry out tasks that might otherwise be attributed directly to state actors. These include biker gangs and transnational crime groups, whose existing structures offer both capability and plausible deniability.
There are instances, too, where individuals with no formal ties to state institutions have been drawn into these activities, sometimes through existing criminal connections, sometimes through recruitment that reflects opportunity more than allegiance. Intelligence analysis suggests this model mirrors tactics seen elsewhere, where states employ “cut-outs” or disposable intermediaries to obscure responsibility.
In the UK context, this evolving approach has been linked to a series of incidents and investigations, including arson attacks, surveillance operations, and alleged plots targeting individuals connected to Iranian opposition groups. While not all cases have been definitively attributed, the cumulative pattern has led officials to describe the threat as persistent and adaptive.
The shift is often traced back to a period of increased scrutiny around direct state involvement in overseas plots. By moving toward indirect methods—using criminal proxies—Iran is believed to reduce diplomatic risk while maintaining operational reach. Analysts note that such arrangements can be less precise, sometimes resulting in less coordinated or “amateurish” outcomes, but they remain difficult to trace conclusively.
For investigators and security services, this creates a different kind of challenge. The question is no longer solely about identifying a central command, but about tracing networks that are layered, fragmented, and at times deliberately obscured.
The UK’s intelligence and security bodies continue to monitor and disrupt suspected Iran-linked activities. Officials state that the use of criminal proxies and hired operatives is an increasing concern, with multiple investigations ongoing and security measures heightened around potential targets.
AI Image Disclaimer
Illustrations were created using AI tools and are not real photographs.
Sources
The Guardian The Jerusalem Post Reuters BBC News The Washington Post