UK blames IRGC for alleged RAF Fairford plot as Iran war pressures Europe’s bases

A base used for U.S. bomber operations

The alleged plot centers on one of the most important U.S.-linked airfields in Britain. RAF Fairford has long hosted deployments of American long-range bombers, giving Washington a European platform for operations extending into the Middle East. During the current Iran war, the base’s role has become more visible and more exposed.

Authorities said the Sept. 27 incident prompted a major security response near the rural Gloucestershire base. Residents were evacuated as armed police and bomb-disposal personnel responded. Police later said they found gasoline in three vans linked to the first five suspects arrested at the scene, but no explosives.⁴

All seven suspects arrested are in their 20s. Six are British nationals, and one is a dual U.K.-Iranian citizen, according to police information reported by the Associated Press.⁴ Their release on bail has drawn scrutiny in Parliament, where opposition lawmakers pressed ministers on whether the suspects still posed a risk and whether the government had advance warning of the threat.³

The military implications were immediate. The United States pulled its bombers from RAF Fairford after the incident, and the aircraft were redeployed to their home bases, the Pentagon said.⁴ The Guardian reported that 12 B-1 bombers were withdrawn a week after the incident, amid concern over the security of U.S.-linked bases in Europe.⁶

Reuters, cited by the South China Morning Post, reported that U.S. officials believed the suspected plot involved a possible Iranian drone attack. The report said President Donald Trump linked the bomber withdrawal to a threat associated with Iran.⁷ British authorities have not publicly detailed the alleged operational plan.

MI5 warns Fairford was not isolated

The strongest signal that Britain sees Fairford as part of a wider pattern came from MI5 Director General Ken McCallum. He said Tuesday that Iran is trying to hit military sites in the United Kingdom and that the suspected plot at RAF Fairford was “not unique.”⁵

McCallum said Tehran has moved beyond more familiar targets, such as Iranian dissidents and Jewish sites, toward “harder targets” including military facilities.⁵ That assessment broadens the case from a single alleged plot to a counterintelligence challenge. European security agencies now have to protect not only communities and dissidents, but also bases, logistics hubs and U.S.-linked military infrastructure.

Home Secretary Shabana Mahmood told lawmakers that the Fairford incident was highly likely coordinated by a known individual based in Iran and almost certainly directed by the IRGC.³ She also linked the case to a broader pattern in which Iran uses proxies, criminal networks and volunteers to create plausible deniability while conducting hostile activity inside Britain.³

That model is difficult for European authorities to counter. It blurs the boundary between terrorism, organized crime, espionage and state-directed sabotage. It also allows a government to deny formal involvement while exploiting local actors or transnational networks that may be only loosely connected to state services.

Allies frame it as a European security issue

Britain’s attribution quickly drew allied support. In a joint statement, foreign ministers from the United Kingdom, the United States, many European governments and the European Union recognized the U.K. assessment and condemned Iranian violent plots, arson, sabotage, cyberattacks and other hybrid activity.²

The statement said the incident showed the IRGC’s willingness to project hostile activity beyond Iran’s borders through covert networks and proxy actors.² It also linked Fairford to a recent campaign of attacks across Europe targeting Jewish communities, Iranian journalists and U.S. interests.²

Estonia’s Foreign Ministry put the allied concern in NATO terms. Foreign Minister Margus Tsahkna said RAF Fairford’s security matters beyond Britain because NATO collective defense depends on allied military infrastructure remaining operational and on troops and equipment being able to move quickly across Europe in a crisis.⁸

That framing is significant. If Iranian-linked activity threatens U.S. airfields in Britain, it could also affect European air bases, ports, fuel depots, munitions sites and transit routes that underpin U.S. reinforcement of NATO. The issue is therefore not only counterterrorism, but also force protection and wartime mobility.

Tehran denies the allegations

Iran has rejected the British allegations. Iran’s ambassador in London, Seyed Ali Mousavi, denied Tehran’s role during a diplomatic meeting and urged Britain not to take positions without evidence, according to Anadolu Agency, citing Iranian state media.¹⁰ Mousavi also said Iran was prepared to cooperate in examining the incident.¹⁰

The denial leaves Britain and its allies balancing public attribution against evidentiary limits. London has released its intelligence judgment, but not the underlying intelligence. That is common in state-threat cases, where governments often avoid disclosing sources and methods, but it also gives Tehran room to challenge the claim.

The legal picture remains unresolved. No suspect has been charged, and the discovery of gasoline but not explosives has left unanswered questions about whether the alleged plot was intended as an attack, reconnaissance, intimidation or a signal.⁴ The Guardian cited expert speculation that the episode may have been a demonstration of capability rather than a fully developed strike plan.⁶

A broader spillover from the Middle East war

For defense planners, the Fairford case illustrates how a Middle East conflict can generate security effects far from the battlefield. U.S. bomber operations from European bases create strategic reach, but they also create potential targets for hostile states seeking to impose costs below the threshold of open war.

Iran has previously signaled that it views bases used to attack its territory as legitimate targets, while Britain says threats on its soil are unacceptable.⁴ That divergence raises the risk that Tehran and Western governments will define the battlespace differently: Iran may see overseas military infrastructure as part of the war, while European governments treat attacks or plots on their territory as domestic security violations and hostile state activity.

The alleged Fairford plot also lands amid a wider European focus on hybrid threats, including sabotage, cyberattacks and proxy violence. Burnham’s Commons statement placed Iran alongside broader warnings about Russia’s sabotage campaign in Europe, underscoring that European governments increasingly view domestic security, military readiness and foreign policy as a single threat environment.¹

Britain’s next steps are likely to include more sanctions, tighter base security, deeper U.S.-U.K. coordination and greater scrutiny of suspected Iranian networks. The more difficult task will be detecting low-signature plots before they reach military infrastructure.

Fairford suggests that, as the Iran war continues, European territory is not a rear area insulated from the conflict, but part of the strategic contest around U.S. power projection.