Justice · RAF Fairford inquiryContinuing story · report 3 of 3
No explosive devices found near RAF Fairford as UK suspects Iranian involvement
Police found petrol but no improvised explosive devices in three vehicles. Britain now suspects Iranian involvement, without disclosing its evidence, while five men remain on police bail.
Transcript · LOADING
Continuing storyDay 9
3 reports83 outlets188 sources44 videos
Full storyWhat changed since our last report
2 days later
Then
Five Fairford suspects released on bail; neighbours still await an all-clearWhat we said was still open
The vehicle findings, exact counts, cause of the response and any connection to RAF Fairford remain unconfirmed.
Still openWhether any suspected device was viable, what the intended target was, or whether a foreign state was involved.
Still openPublic findings from the vehicle examinations and confirmation of when residents can return.
Answered
Now
Police found petrol but no improvised explosive devices in three vehicles. Britain now suspects Iranian involvement, without disclosing its evidence, while five men remain on police bail.
Answered since
- Public findings from the vehicle examinations and confirmation of when residents can return.
Zero improvised explosive devices were found in the three vehicles examined near RAF Fairford. After evacuations, armed roadblocks and military-assisted forensic checks, that is the finding that most changes the public understanding of a case initially described as a suspected bomb plot. Investigators recovered petrol, not a confirmed homemade bomb. Its purpose remains unexplained. 6
Yet the political allegation has become more explicit. On 30 September 2026, Prime Minister Andy Burnham said there were “strong indications that Iran played a part” in the incident. The government has moved from declining to draw a direct Iranian connection to publicly expressing that assessment—without disclosing the evidence behind it. Five arrested men remain under investigation on conditional police bail; neither criminal charges nor a specific intended attack are established in the available reporting. 183 178 6
Key facts
In our 28 September report, we described the five men’s bail release, continuing vehicle examinations and neighbours still awaiting a confirmed all-clear. We did not report a verified viable bomb, target, motive or foreign sponsor. The subsequent police findings answer the vehicle question. Later reporting also establishes that residents were permitted to return, although complete closure of the investigative scenes remains unconfirmed.
Assistant Commissioner Laurence Taylor’s 29 September update said extensive examinations, assisted by military assets and forensic experts, found no improvised explosive devices. Police recovered “a quantity of petrol,” described as an accelerant. No numerical quantity has been disclosed. Petrol can accelerate burning, but finding it does not establish an intended fire, a selected target or why the men were there. 6 158
Early assessments that material was consistent with improvised explosive devices were provisional, not completed forensic findings. Bloomberg Television reported on 28 September that sources described a serious attempted attack disrupted at a late stage. The subsequent examinations do not confirm that characterization. Equally, the absence of an explosive device is not a finding that no offence occurred: the criminal inquiry continues. 1 6
Five arrests, but no established charges
The men were arrested near Whelford, Gloucestershire, outside RAF Fairford in the early hours of Sunday, 27 September. Gloucestershire Police initially detained them on suspicion of Explosives Act offences, then further arrested them on suspicion of preparing a terrorist act under section 5 of the Terrorism Act. Those are grounds for arrest, not charges or findings of guilt. Counter Terrorism Policing took over the investigation. 25 2
All five are British nationals living in London, in their 20s. The Guardian’s 28 September account, attributing the details to police, gave three aged 24, one aged 23 and one aged 25. Their names are not established publicly in the available material. 27
Police obtained additional questioning time before releasing all five on Monday, 28 September, after interviews and inquiries. Conditions restrict their movements and contact with others; the complete terms and next bail dates are not established. Earlier reports of continuing custody describe a stage since superseded. The widely reported 14-day detention limit was a legal maximum, not their actual time in custody. 21 20 6
There is a consequential reporting discrepancy here. C-SPAN’s Peter Knowles said on 29 September that the suspects had been charged and released on bail. The Independent’s account that same day reproduced the police statement: five men released on police bail remained under investigation. The police-bail accounts do not establish charges, so C-SPAN’s description cannot safely be repeated as a verified procedural fact. Bail is neither an acquittal nor the end of the inquiry. 4 6
A newly reported detail also changes the account of how the response began. The BBC reported on 30 September that one of the five men later arrested himself called police at 00:45 BST—almost an hour before a female farmer’s alert after seeing men in balaclavas. The BBC presented his identity as something it understood, not a directly quoted police confirmation. His precise words and reason for calling remain unknown. 161
The initial police chronology placed a report about three suspicious vehicles apparently heading towards Fairford at approximately 00:45 BST on 27 September. The newer two-call account helps explain the difference between that time and the farmer’s earlier recollection of calling just after 01:30. It does not establish coordination between the callers or explain the men’s intentions. 27 161
The farmer described three white vans blocking a road and her driveway, with hooded or masked men nearby. She said she tried the Ministry of Defence Police without an answer before calling 999. Her belief that she foiled plans by “pure luck” is her interpretation; what those plans were remains unestablished. Police described their response as drawing on a range of information, including a public report, without publishing a complete intelligence chronology. 25 38 3
A stronger allegation, still undisclosed evidence
Fairford hosts American forces and has been used for US bomber missions and strikes against Iran. That makes a possible foreign-state connection consequential, but it does not prove the base was the intended target or that its military role motivated these men. Investigators have considered whether people could have acted as foreign-state proxies knowingly or unknowingly. 5 7
On 28 September, Defence Secretary Wes Streeting declined to draw a direct connection with Iran. Burnham’s 30 September statement is a new stage in the government’s public position, not a restatement of that earlier caution. He said “we believe Iran to have played a part” and “We will say more in due course,” but provided no further evidentiary details in the available account. Who allegedly directed whom, what conduct is attributed to Iran and what the suspects knew remain unestablished publicly. 41 178
US Secretary of State Marco Rubio had already alleged foreign involvement in a Fox News interview on 28 September, reported the following day, without supplying evidence or further details. Donald Trump said the men intended “big damage” and had been “under view for a long time.” Those assertions do not establish a workable attack, selected target or documented surveillance history. A public emergency call does not logically exclude earlier intelligence activity—but neither does it verify Trump’s claim. 173 39 38
For neighbours, the immediate consequences were less abstract: a major incident, specialist vehicle examinations and evacuation. The household count remains unresolved. BBC News reported about 85 households in its 30 September programme; Sky News reported 45 homes on 28 September. Other accounts also gave approximately 85. These are differing accounts, not a verified revision from 45 to 85, and neither counts individual evacuees. 2 37 24
CBC News reported on 28 September that Home Secretary Shabana Mahmood said Army checks had determined the vehicles and surrounding area were safe and evacuated residents could return. That establishes permission to go home, not that every household actually returned. The 29 September police update said London property searches were complete and remaining scenes near Fairford were expected to close on 30 September. Completion was not confirmed by the available updates at 20:58 UTC that day. 8 6
Security at the base increased after the arrests, but no attack inside it, resulting injuries or disruption of aircraft operations is established. The next consequential finding is not another description of how serious the incident might have been. It is whether investigators can establish an offence, explain the petrol and substantiate—or reject—the allegation of Iranian involvement. 23
As aired 16 lines
- On September 28 we reported ongoing vehicle checks. Those examinations found no improvised explosive devices. Petrol was recovered, five men remain under investigation on bail, and the government now suspects Iranian involvement without disclosing its evidence. What can investigators establish about the petrol, the men's purpose and possible foreign direction?
- Petrol is the confirmed recovery, not a homemade bomb. Extensive examinations of three vehicles, assisted by military assets and forensic experts, found no improvised explosive devices. The finding announced on September 29 changes the original suspected-bomb description. Early assessments of material consistent with explosive devices were provisional. Claims that explosives had been found, or that a serious attempted attack was disrupted at a late stage, are not confirmed by the completed examinations. But finding no device does not establish that no criminal offence occurred. Petrol can accelerate burning; its presence alone does not establish an intended fire, a target or the men's purpose. No numerical quantity has been disclosed.
- All five men are out of custody, but their movements and contacts remain restricted. They were released on September 28 after interviews and inquiries, following an extension of the time available for questioning. They are British nationals living in London, all in their twenties, and have not been publicly named. The more detailed age breakdown is three aged twenty-four, one twenty-three and one twenty-five; that breakdown has not been independently verified. Nor has a complete borough-by-borough residence list. An unclear fifth location cannot safely be identified by guessing its spelling.
- No criminal charges are established in the available account. A description of the men as charged conflicts with the police-bail accounts and cannot be treated as a verified procedural fact. Gloucestershire Police initially arrested them near Whelford, outside RAF Fairford, in the early hours of September 27 on suspicion of Explosives Act offences. They were subsequently arrested on suspicion of preparing a terrorist act under section five of the Terrorism Act. Those are arrest suspicions, not charges or findings of guilt. The widely cited fourteen days was a legal maximum for detention without charge, not their actual time in custody. Release on bail is neither an acquittal nor the end of the inquiry. The complete bail conditions and next bail dates are not established.
- The release date remains September 28. A police update delivered on September 29 referred to release the previous day; its later publication does not move that release to September 29.
- One of the arrested men is now understood to have made the first emergency call himself. The initial chronology placed a public report at about twelve forty-five in the morning on September 27, concerning three suspicious vehicles apparently travelling towards RAF Fairford. The newer account describes that man's call almost an hour before a female farmer's alert. His precise words and reason for calling remain unknown, and his identification as the caller is not a publicly quoted police confirmation. Two calls help explain the difference between the official twelve forty-five timing and the farmer's recollection of calling just after one thirty. They do not establish coordination or intent.
- The farmer's alert concerned three white vans blocking a road and her driveway, with hooded or masked men nearby. Her account included an unanswered attempt to contact the Ministry of Defence Police before calling nine-nine-nine. Her belief that she had foiled plans by pure luck does not establish what those plans were. Another account placed her call around twelve forty-five, but that should not erase the newer distinction between two alerts. Armed officers were described as making arrests within about an hour of a report; an exact arrest time is not established. The response drew on a range of information, including a public report, without a complete intelligence chronology being made public.
- Army explosive-ordnance specialists and remote-controlled vehicles examined the vans during a declared major incident. Armed officers and roadblocks restricted access. The cordon's reported extent was about four hundred metres, not a verified radius. A separate account placed the arrests about four hundred metres from the base; those descriptions are not interchangeable measurements.
- The evacuation accounts differ by forty homes or households, and that difference has not been reconciled. Several accounts put the number advised to evacuate at approximately eighty-five; another gave forty-five homes. Neither figure counts individual people. Whelford was described as a community of about two hundred residents and almost totally evacuated, an approximate description rather than a household census. Evacuees went to Cirencester leisure centre, and nearly thirty people reportedly spent Sunday night in a hotel.
- Residents were permitted to return after Army checks determined the vehicles and surrounding area were safe. That September 28 safety announcement answers the earlier uncertainty about permission to go home. It does not establish that every household actually returned or that every investigative cordon closed. London property searches were complete by the September 29 update. The remaining scenes near Fairford were being reduced, with closure expected the following day, September 30. Completion of that expectation is not confirmed. Local safety, completed searches, release from custody and closure of investigative scenes are separate developments; none means the criminal inquiry is over.
- RAF Fairford hosts American forces and has been used for US bomber missions and strikes against Iran. That role explains the scrutiny of possible foreign involvement, but does not prove the base was the intended target or that its military use motivated these men. The area is broadly eighty to ninety miles west of London, not an exact incident-site measurement. Security increased after the arrests. An early account put the base at Delta, described there as the highest alert level; its current alert level is not established. American citizens in Britain were urged to exercise caution and attend to personal security. No attack inside the base, resulting injuries or disruption of aircraft operations is established.
- The government now believes Iran played a part. That September 30 assessment is more explicit than the earlier refusal to draw a direct Iranian connection. It comes with a promise of more detail in due course, but no disclosed supporting evidence. The public position has changed; the public evidentiary picture has not caught up. Who allegedly directed whom, what conduct is attributed to Iran, and whether the men knew of any foreign involvement remain unestablished.
- Investigators have considered whether people could have acted for a foreign state knowingly or unknowingly. An Iran-linked motive was described early on as the leading possibility, with a possible Russian operation also under examination. Those were lines of inquiry, not established responsibility. Counter Terrorism Policing continues to pursue multiple possibilities, including why the men were there, what the petrol was for, whether any preparations constituted an offence and whether other people were involved.
- Claims of planned big damage and longstanding American surveillance remain unverified. Praise for British-American cooperation does not establish a workable attack or a documented surveillance history. Even the description of the alleged target varied between our fort and a US port; neither is a British investigative finding. A local emergency call does not logically exclude earlier intelligence activity. The newly described call by a suspect complicates the public chronology, but still does not verify what intelligence existed beforehand. A separate American foreign-actor allegation, made in a September 28 interview and published the next day, came without supporting evidence or further details. Its longer exact wording is unsettled, with accounts differing between the hand and the hands of a foreign actor.
- Iran categorically denies involvement. Its London embassy condemned the speculation as unfounded and malicious, warned that it could fuel Iranophobia, and reserved the right to take legal measures to safeguard its rights and interests. That denial does not resolve the inquiry, just as the government's assessment does not publicly substantiate responsibility.
- The vehicle question now has a clear answer: no improvised explosive devices were found, and petrol was recovered. The questions about purpose and foreign direction remain open. Residents had permission to return, but every household's return and complete scene closure are unverified. The first caller's reported identity helps explain two different call times, not the men's intentions. No specific intended attack or criminal charge is established. Five unnamed men remain under investigation on conditional police bail.
Sources
188 sources83 outlets44 videos3 wire copies
Source map
Follow the evidence behind this report. The map shows its connections; the links below open the sources cited in this article.
Source map loads as you read.
Revision log
- r1First published.


