Iran's ‘k!ll list’ still exposing details of ‘traitors’ living in exile in UK

A network of pro-Iranian government Telegram accounts has resumed publishing personal information about activists living abroad, prompting concerns over intimidation and the safety of British-Iranian dissidents. The accounts, collectively known as “Bay of Pigs”, describe their activity as identifying “overseas traitors” and encourage users to submit information about other people.

According to Metro, the network became active again after several months of reduced activity, with smaller regional channels targeting activists across Britain and Europe. Those affected and security specialists have raised suspicions of possible direction from Tehran. However, the identities of the operators and any connection to Iranian authorities have not been established.

The Iranian Embassy in London denied involvement and described allegations linking it to the disclosure of activists’ information as “baseless”. British-Iranian activist Ali Taranssari said he was first targeted in April and discovered last week that his private telephone number and date of birth had been published.

Taranssari, who said he had reported the accounts to counter-terrorism police, described the network as a “kill list”. He said threatening messages followed the publication of his details, including messages wishing him dead. “I have had the phone number for 20 years. It’s for close friends and family,” he told Metro.

Taranssari said the Iranian embassy also held the number, but acknowledged that he could not establish how the account operators obtained it. “I can’t say for a fact that nobody from 10 or 15 years ago may now be working with the regime and decided to give my number,” he said.

Metro first reported on the network’s targeting of anti-government activists in May. Its main page stopped functioning shortly afterwards, but regional accounts subsequently appeared. Taranssari said his information had been shared on two channels focused on parts of Europe. He suggested that the regional structure might be intended to avoid restrictions, although that explanation has not been confirmed.

He said the threats would not stop his activism. “These things are not going to slow us down or intimidate us anymore,” he said. Metro reported seeing posts revealing activists’ addresses, movements, workplaces and universities. Another person targeted by the network said the activity appeared intended to silence Iranians abroad through fear.

“My family fled Iran to escape precisely this kind of persecution. The idea that I should now be intimidated into silence on British soil is extraordinary,” the person said. “We didn’t escape repression only to allow it to follow us into the very democracy that gave us refuge.” The network’s administrators also shared Metro’s earlier reporting about their activities, indicating that they were aware of the scrutiny.

Counter-terrorism specialist Roger Macmillan, who has monitored the channels for several months, said their operating methods had changed. “Some of the sites are behind walls that you’ve got to request to join,” he said. “The accounts for different regions mean that they can cross-post.

“They are increasing their digital resilience by having multiple sites to target various individuals.” Macmillan said an activist group in Iran or Europe could be operating the accounts. He assessed that Iranian direction or guidance was highly likely, describing the activity as a form of “transnational digital repression”.

That assessment has not been confirmed by investigators. He also said exposed credentials and other breached information could provide a route to obtaining personal details, particularly where people reuse account credentials across services.

“It is a call to action. It puts the fear levels up. Activists become scared. They become nervous. They’re not quite sure who’s a friend and who isn’t,” he said. Jonathan Hackett, a former American intelligence operator specialising in Iranian covert operations, said the targeting was consistent with longstanding efforts to intimidate dissidents overseas.

“The Islamic Republic has long viewed Iranian dissidents and anti-regime Iranian voices outside Iran as a primary target for harassment, coercion, and even violence,” he told Metro. He said accounts connected to the Iranian government could exploit fear to increase pressure on people living abroad.

The report follows an earlier controversy involving the Iranian embassy’s social media activity. In April, Metro reported that the embassy had encouraged expatriates to become martyrs and sacrifice their lives for their homeland. The Iranian ambassador was subsequently summoned to the Foreign Office over comments described by British officials as “unacceptable and inflammatory”.

Asked about the latest allegations, Counter Terrorism Policing said potential terrorism or national security offences were referred to specialist officers for assessment. “Any allegations relating to possible terrorism or national security related offences are passed to officers within Counter Terrorism Policing, who will assess the details and take any further action as appropriate,” a spokesperson said.

The force declined to confirm whether any particular person or organisation was under investigation. A Home Office spokesperson said the government took threats linked to Iran “incredibly seriously” and would continue supporting police efforts to protect the public.

The department cited sanctions against the Islamic Revolutionary Guard Corps and more than 550 Iranian individuals and entities. It also said the IRGC’s designation as a security threat provided additional powers to disrupt and prosecute people supporting it or acting on its behalf.

The Iranian Embassy rejected any suggestion that it participated in publishing expatriates’ private information. It said its diplomatic and consular activities complied with the Vienna Convention on Diplomatic Relations and the laws and regulations of both Iran and the United Kingdom.