Group behind European antisemitic attacks may be only a facade, warn experts

Targeting of Jewish sites in several cities raises concerns that Tehran may be behind newly-established, shadowy organization, already labeled ‘Iranian-backed proxy’ by Israel

See more Times of Israel on Google - add us as a Preferred Source

An obscure group has claimed to have carried out a clutch of attacks that have rattled the Jewish community in several European cities.

But experts question whether the group, which has called itself Harakat Ashab al-Yamin al-Islamiya (HAYI) in online posts, really exists or is just a front for Iranian intelligence.

Jewish communities in Belgium, Britain and the Netherlands have each been targeted since the US-Israeli war with Iran began in late February.

Ambulances run by Jewish volunteers were set on fire in London, a car was torched in Antwerp, synagogues were hit with explosives in Liege and Rotterdam, and a Jewish school was targeted in Amsterdam.

Although police have generally been careful not to ascribe motives, pro-Iran social media accounts have posted footage and said the HAYI group carried out the attacks.

A European security source who requested anonymity because of the sensitive nature of the topic pointed out that the HAYI group was unknown before the war.

Hooded people approach ambulances belonging to the Jewish Hatzola organization before torching them, in Golders Green, London, March 23, 2026. (Screenshot: X; used in accordance with Clause 27a of the Copyright Law)

“So it is indeed likely at this stage that it is a front group,” the source said.

Laurence Bindner, a specialist in online radicalization, said the group was first mentioned after the Liege attack on March 9.

She told AFP the logo used by the group shared similarities with that of the so-called axis of resistance, a network of Iran-backed terror proxies in the Middle East.

A facade

Julian Lanches, of the Dutch ICCT research center, also cast doubt on the group’s authenticity in a research note on Monday.

A police car parked outside a Jewish school in Amsterdam, where an explosion was reported overnight, March 14, 2026. (Stéphanie HAMEL / AFP)

After the Amsterdam attack on March 16, claims of responsibility were published first on pro-Iranian accounts before making it onto a supposedly official HAYI account on Telegram.

Yet the official account had only a few dozen followers at the time.

Lanches also wrote that the group had claimed responsibility for attacks that do not seem to have happened, calling these messages “likely disinformation.”

All of which raised the question, he wrote, of “whether HAYI is a genuine terrorist group or merely serves as a facade for Iranian hybrid operations.”

This aerial image shows burnt-out ambulances in a parking area along a street in the Golders Green neighborhood of north London on March 23, 2026, after the ambulances run by a Jewish volunteer organization were set on fire overnight. (Henry NICHOLLS / AFP)

Israeli authorities say they are in no doubt about the nature of the attacks and the group.

Diaspora Affairs Minister Amichai Chikli said the attack on ambulances in London’s Golders Green area was “the latest link in the terror chain” involving HAYI, which he labeled “an Iranian-backed proxy.”

“From Liege and Rotterdam to Golders Green, Tehran deploys local cells to terrorize Jewish communities,” he posted on social media site X on Monday.

Child recruitment

Bindner said it was a “credible hypothesis” that the attacks had been outsourced to young operatives who may not even know who is employing them.

“They recruit operatives, sometimes minors, sometimes in criminal networks,” she said.

A blaze caused by an explosion outside a Rotterdam synagogue on March 13, 2026 (Screen grab via X used in accordance with Clause 27a of the Copyright Law)

“They instruct them to act, to film themselves, to send the video, which is then formatted with the group’s graphics and logo.”

European intelligence agencies have long accused Iran of using criminal networks to conduct clandestine operations in Europe.

“We are probably looking at a dual logic of a front group and subcontracting,” Bindner said, allowing “plausible deniability on the part of the masterminds.”

Times of Israel staff contributed to this report.