How is the Iran conflict impacting on protests and counter terrorism in the UK?

Overview:

• The escalation following the start of US‑Israeli coordinated strikes on Iran since 28 February 2026, has intensified geopolitical uncertainty across the Middle East, with clear reverberations in the United Kingdom through heightened protest activity and counter‑terrorism (CT) considerations.

  Operation Epic Fury has triggered waves of retaliation across the Gulf. It has also sent shockwaves through Iranian diaspora communities in Europe and the UK. The conflict’s fallout has reshaped domestic protest dynamics, generating one of the most polarised environments seen in recent years.

  
  

• The UK official national threat level, set by MI5 and the Joint Terrorism Analysis Centre (JTAC), remains at “Substantial”, meaning an attack is likely. However, concerns about potential Iranian retaliation and proxy activity have led to the position being under continuous assessment in light of regional escalation and the historic record of Iranian‑aligned surveillance or intimidation activity in Europe. The threshold for raising the level to Severe has not been met.

Impact on the UK protest landscape

The 28 February 2026 escalation has significantly altered the UK protest environment, producing one of the most active and polarised domestic mobilisation cycles in recent years. London has been at the centre of these developments, with multiple large‑scale demonstrations organised by opposing movements broadly divided between anti‑war campaigns and pro‑change Iranian diaspora groups. Following the strikes, the first wave of protests emerged in central London within hours, drawing several thousand participants outside Downing Street. Parallel to these anti‑war actions, Iranian diaspora and royalist groups have held celebratory or counter‑protests welcoming the strikes as the beginning of regime change. Such events have featured the lion‑and‑sun flag used as the national flag before 1979, and messaging applauding the deaths of senior Iranian officials, leading to tense exchanges with rival demonstrators.

Beyond London, solidarity actions linked to the Iran conflict have also occurred in prominent UK cities such as Manchester, Leeds, Liverpool, Birmingham, Glasgow, and Edinburgh, though these have generally been smaller in scale and lower in impact. This indicates how the conflict has fed into a broader national protest environment rather than remaining confined to the capital. While most recent demonstrations have remained peaceful, rising ideological polarisation and online mobilisation continue to elevate the risk of spontaneous confrontations or reputational incidents near high‑footfall or politically symbolic sites in London.

Counter Terrorism Considerations

The Iran conflict is being viewed within the context of a broader, persistent state‑linked threat already well‑documented by UK authorities. Since 2022, MI5 and the police have reportedly disrupted over 20 potentially lethal Iran‑backed plots, targeting Iranian dissidents, journalists, and members of Jewish and Israeli communities in the UK. The Iranian regime has increasingly relied on criminal proxies such as its Foxtrot or Zindashti networks to carry out hostile activity while maintaining deniability. Recent events in March 2026 reinforce this pattern. On 06 March 2026, counter‑terrorism police arrested four men, one Iranian national and three dual British‑Iranian nationals, following a long‑running investigation by MI5 and Counter Terrorism Policing, on suspicion of conducting “hostile surveillance” on London’s Jewish community on behalf of Iranian intelligence. The alleged surveillance activity spanned from 09 July–15 August 2025 and focused on synagogues, Jewish‑linked educational institutions, the Israeli Embassy and consulate in London, and other Jewish community organisations and individuals. On 18 March 2026, two of the men, Nematollah Shahsavani and Alireza Farasati, were formally charged under Section 3 of the National Security Act 2023 for assisting a foreign intelligence service.

On 23 March 2026 at approximately 0140hrs (local), an arson attack destroyed four Hatzola ambulances (a Jewish volunteer emergency service) parked outside the Machzike Hadath Synagogue in Golders Green, North London with two British men, aged 45 and 47, arrested on 25 March 2026 in connection with the incident. A newly emerged Islamic militant group calling itself Harakat Ashab al-Yamin al-Islamia (translated as "The Islamic Movement of the People of the Right Hand") claimed responsibility for the arson attack via its Telegram channel shortly after it happened. Security agencies, including MI5, are examining whether the group is an Iranian proxy or a “bogus” entity created by Iran to provide plausible deniability while conducting a psychological‑terror‑style campaign against European Jewish communities. The Community Security Trust (CST) has assessed that the group may be acting as an Iranian‑aligned front, enabling the regime to exert pressure without overt attribution. Counter Terrorism Policing has taken the lead in the investigation, drawing on its specialist capabilities to examine the targeting, symbolism, and potential state‑linked dimensions of the attack.

Furthermore, highlighting the threat to critical infrastructure, on 19 March 2026 at around 1700hrs (local), a 34‑year‑old Iranian man and a 31‑year‑old Romanian woman were arrested after attempting to gain entry to His Majesty's Naval Base, Clyde (Faslane), the home of the UK’s nuclear deterrent. They were subsequently charged with acting suspiciously and attempting to enter a restricted site.

For organisations, this means the CT‑related risk from the Iran conflict is best understood as a continuation and intensification of an existing state‑linked threat rather than a wholly new form of danger. Sites most likely to be of interest include dissident‑linked premises, media and advocacy organisations, synagogues and Jewish institutions, and entities visibly associated with Israel or US interests. Overall, the CT‑dimension of the Iran conflict is best characterised as a resilient, state‑sponsored, multi‑domain threat that is being actively contested and contained, rather than a sudden step‑change in risk. Organisations should therefore maintain alertness, not alarm, integrating CT considerations into their broader situational‑awareness posture rather than treating them in isolation.

Assessment and Outlook

The current protest environment across the UK, particularly in London, is best characterised as sustained, high-tempo, and increasingly complex, driven by international developments but expressed through localised and often rapidly evolving activity. This convergence spanning anti-war, pro-Palestine, Iranian diaspora, and smaller pro-regime elements continues to increase the risk of friction, particularly where groups mobilise concurrently or in close proximity.

For organisations, the primary impact is disruption and proximity risk rather than direct targeting, with the effects most acute in London but still relevant across other major UK cities. Sites located near key protest areas, including government buildings, embassies, transport hubs, and central public spaces, are more likely to experience access restrictions, transport disruption, increased footfall, and incidental exposure to protest activity. There also remains a low-level but credible risk of direct action or reputational targeting, particularly towards organisations perceived to be linked to US, Israeli, or defence-related interests.

Organisations should maintain proportionate security measures, awareness of protests and geopolitical developments, and flexible contingency plans, particularly where they are based in central London or other major cities.