Iranian spy network in Finland: a new front in hybrid warfare

Could a country known for its peaceful neutrality and harsh winters become a scene for covert operations by one of the world's most mysterious intelligence agencies? Finland, long considered a safe haven, is now at the center of a complex game where Iranian intelligence agencies are actively engaged in espionage. This is not just news — it is a challenge that forces us to reconsider our understanding of modern security in Europe.

The temporary headquarters of the Finnish Security and Intelligence Service (Supo) in Katajanokka, Helsinki. Photo: Heikki Saukkomaa / Lehtikuva

Official recognition: Iran as a threat to Finland's national security

On May 30, 2025, the Finnish security service Supo officially named Iran for the first time as a state that actively engages in espionage activities on its territory. This list included only Russia and China, which underlines the seriousness of the situation. According to Supo, Tehran seeks to collect information about Iranian dissidents and opposition groups located in Finland or abroad, using both traditional intelligence methods and criminal groups as proxy actors (Long War Journal).

Expansion of Iranian intelligence activities in Northern Europe

The threat is not limited to Finland. Similar concerns have been expressed by Swedish security services, which have recorded an increase in Iranian intelligence activity on their territory. Iran is increasingly using organized crime groups to carry out its tasks, which makes it difficult to identify and counteract these operations. For example, the Swedish Foxtrot gang, whose leader was recruited by the Iranian Ministry of Intelligence, carried out attacks on Israeli and Jewish targets in Europe (Iran International).

Methods and goals of Iranian intelligence in Finland

The Finnish Security Intelligence Service emphasizes that Iranian intelligence agencies use a wide range of methods: from gathering information through agent networks to pressuring relatives of opposition figures living abroad. Particular attention is paid to the use of criminal structures to cover their tracks and carry out tasks that go beyond the boundaries of classical intelligence (Yle News).

International context: arrests of Iranian agents in Europe

In May 2025, seven Iranian nationals were arrested in the UK on suspicion of preparing terrorist acts and espionage. Three of them were accused of trying to influence journalists. The suspects are believed to be part of Unit 840 of the Islamic Revolutionary Guard Corps (IRGC-QF), which specializes in overseas operations, including kidnappings and terrorist acts (Helsinki Times).

Transnational persecution of Iranian dissidents

Finland is not the only country where Iranian intelligence services are active. There are numerous cases of Iranian opposition figures being persecuted in various countries around the world through networks of criminal groups. This tactic allows Tehran to distance itself from violence by using intermediaries to cover its tracks (Border.net).

Impact on European security and challenges for intelligence services

The growth of Iranian intelligence activity in Northern Europe poses a threat not only to individual countries, but also to the region as a whole. The use of criminal groups and underground networks complicates the work of intelligence agencies and requires increased international cooperation. Finland, Sweden, the United Kingdom and other countries have intensified information exchange and coordination of actions to counter these threats.

Conclusion: The new reality of hybrid warfare

The official recognition of Iran as an espionage threat in Finland is a wake-up call for all of Europe. This news opens the curtain on a complex intelligence game, where traditional methods are combined with criminal schemes, and geopolitical interests intersect in unexpected places. In a world where information has become the most valuable resource, the fight for it is gaining new momentum. Iran is demonstrating that it is ready to act decisively and uncompromisingly, even in countries that were previously considered relatively safe. The response of Europe and the international community must be no less decisive.

Sources: Long War Journal, Helsinki Times, Iran International, Yle News, Border.net