CommandEleven Intelligence · Europe Desk · Rear-Area War series, status as of November 11, 2026. Everything attributed to prosecutors is an allegation, and the defendants are presumed innocent.
Read these first. This update builds on Part 1, Part 2, Part 3: The Gig Economy of Terror and Part 4: RAF Fairford Charges, and on our Foresight Audit.
Bottom Line Up Front
On November 10, the U.S. Department of Justice unsealed an eight-count indictment against three men it calls Iran-backed operatives: Mohsen Mohajeri, Mohammad Ali al-Hassani and Mohammad Baqer Saad Dawood al-Saadi. The DOJ says they planned a string of attacks in Europe, and that the most recent was a “terrorist plot at an air force base in the United Kingdom,” RAF Fairford. Iran’s embassy in London rejects the link. [ALLEGED]
This is the first U.S. charge to tie the Fairford plot to a named Iran-backed network. The network’s brand is Harakat Ashab al-Yamin al-Islamiya (HAYI), the front name we flagged in Part 3 on October 1. The DOJ counts 18 HAYI-claimed attacks in Europe in spring 2026, seven of them in the UK.
No court has tested any of it. The UK defendants have not been tried, and the public record does not say whether the UK case’s handler, known only as “Ali,” is the man the DOJ names as the director.
Key Judgments
KJ1: The Iran line now carries a second government’s formal allegation. The Prime Minister said in October the plot was “almost certainly” directed by the IRGC. The DOJ now alleges Iran-backed operatives acting in support of the IRGC and Kataib Hezbollah. Neither has been tested in court. [ALLEGED]
KJ2: HAYI is the through-line. The DOJ ties the accused to the HAYI brand across 18 attacks. That fits the front-brand reading in Part 3. The fit is ours to assess, not the court’s to confirm. [ALLEGED on the charges; ASSESSED on the fit]
KJ3: The U.S. account describes preparation, not a device. The BBC repeats that no explosive materials were found in the vans and that petrol was seized. The DOJ alleges research into accelerants and shrapnel, not a finished bomb. [CONFIRMED on no explosives; ALLEGED on the rest]
KJ4: Who “Ali” is remains public-record unknown. The UK charges name a handler only as “Ali.” The DOJ names Mohammad Ali al-Hassani as the director. The reporting we have does not say they are one person, so we do not say so either. [DATA DEFICIT]
What the DOJ Alleges
- The directing role. Al-Hassani directed and paid associates in the UK in August to prepare the plot.
- Reconnaissance. On August 22 he paid one person to carry out surveillance of the base perimeter.
- Preparation. In September he paid several people to procure vans and barrels of fuel, research chemical accelerants including potassium chloride, and buy metal objects usable as shrapnel.
- Cover. The vans were made to look like those of a fuel-delivery business and a swimming-pool supply business.
- September 26. He tasked individuals to drive three vans to the base. Some contained barrels of fuel. He was in frequent contact with the drivers and helped direct them.
- The roadblock. At least two of the three vans met a security roadblock on the way and were not allowed to continue along their intended route.
- The remote link. One defendant is said to have communicated with UK contacts from a New York jail, where he awaits trial on earlier charges. The other two are said to have done so from Iran. The FBI Director said one defendant sent coded messages from detention.
The BBC reports that the vans were spotted in the early hours of September 27 by a local farmer who called the police, that seven men have been arrested in the UK, and that two British nationals appeared in court last month. The U.S. withdrew all its bombers from Fairford afterward, with President Trump citing “some threats” to the base. [REPORTED]
The UK Case and the U.S. Case
| Question | UK prosecution (October 27) | U.S. indictment (November 10) |
|---|---|---|
| Who directed it | A handler abroad known as “Ali” | Mohammad Ali al-Hassani, with Mohajeri and al-Saadi named alongside |
| Money | A paid intermediary in London, about £70,000 | Al-Hassani paid UK associates for surveillance and preparation |
| Reconnaissance | A reconnaissance run | August 22 payment for perimeter surveillance |
| The vans | Drivers told to park and walk away; a message about a bomb followed | Three vans tasked on September 26, some with fuel barrels, dressed as business vehicles |
| The trigger | One driver called police | At least two vans met a roadblock; a farmer’s call is also reported |
| Who is behind it | A handler acting for Iran | Iran-backed operatives; the FBI Director names the IRGC and Kataib Hezbollah |
The two accounts are consistent in outline and differ in detail. They are not necessarily in conflict: the DOJ speaks of three vans and the UK case of five drivers, and the public record does not reconcile the two. The sequence of the farmer’s call, the 999 calls and the roadblock is still not public.
Where We Saw This First
Part 3: The Gig Economy of Terror, published October 1, described HAYI as a front brand behind the March-to-April 2026 wave of arsons, bombings and threats across Europe, and as the low-cost, deniable recruitment model that ended at Fairford. The indictment names HAYI as the brand under which the accused ran the attacks. That does not make the allegation true. It does mean the framework we used to read the incident is now the framework the prosecution uses. [ASSESSED]
What We Cannot Say Yet
- Whether “Ali” and al-Hassani are the same person.
- Whether any defendant will be extradited or ever appear in a U.S. court on these counts.
- Whether the UK defendants are the drivers, the intermediary or neither, in the DOJ’s account.
- Whether the Golders Green stabbing in April, which the DOJ counts among HAYI’s attacks, will be tied to the same direction in court. A suspect is due to stand trial next year.
What to Watch
- November 20: the Old Bailey hearing in the UK case.
- Any U.S. court filing, arraignment or extradition request.
- Any new UK charge that cites HAYI by name.
- Any Iranian response beyond the embassy’s denial.
What Would Change Our Assessment
- A UK or U.S. filing that names “Ali” and ties him to Iran’s security services.
- A guilty plea or verdict in either country.
- Disclosure of the intelligence behind the DOJ’s IRGC and Kataib Hezbollah attribution.
- Evidence that the August 22 surveillance payment and the UK reconnaissance run are different events.
Frequently Asked Questions
Who has the U.S. charged over RAF Fairford?
Three men: Mohsen Mohajeri, Mohammad Ali al-Hassani and Mohammad Baqer Saad Dawood al-Saadi, in an eight-count indictment unsealed on November 10. The DOJ calls them Iran-backed operatives.
Is Iran confirmed behind the Fairford plot?
No. The DOJ alleges it, the UK Prime Minister has said it was “almost certainly” directed by the IRGC, and Iran denies it. No court has ruled.
Was there a bomb at RAF Fairford?
No explosive materials were found in the vans, though petrol was seized. The DOJ alleges the accused researched accelerants and shrapnel.
Related Reading
- RAF Fairford Charges: The Handler, the Money and the Iran Case – Part 4
- RAF Fairford Terror Plot: Dossier on the Averted Attack – Part 1
- RAF Fairford Through October 27: Scoring Our Judgments Against the Charges
- The Gig Economy of Terror: From Hatzola to Fairford – Part 3
Sources
- Three Iran-backed suspects plotted attacks including RAF Fairford incident, US says, BBC News, November 11, 2026
- RAF Fairford Charges: The Handler, the Money and the Iran Case – Part 4, CommandEleven Intelligence
- The Gig Economy of Terror: From Hatzola to Fairford – Part 3, CommandEleven Intelligence
- RAF Fairford Through October 27: Scoring Our Judgments Against the Charges, CommandEleven Intelligence
