Metro, on Iran, 1 November 2026

6.0out of 10Serious

still exposing details of 'traitors' living in exile in UK

Tap a highlight to see why it matters.2 findings

British expats are being doxxed again by the Telegram pages doxxing the personal details of British expats has become active again, Metro can reveal. The network of Telegram accounts called ‘Bay of Pigs’ is publishing information to ‘identify overseas traitors’. After months of ‘quiet’, the pages are once again targeting British-Iranian activists and mocking criticisms of their threatening activity. Security sources and victims told Metro the level of detail and professionalism of the operation suggests the people behind the account could be taking directions from Tehran.

Ali Taranssari personal phone number was revealed alongside those of dozens of other activists The accounts are also asking Iranians to submit personal details about other ‘traitors’ they know. Ali Taranssari was first doxxed in April but discovered last week that his personal phone number and date of birth had been published. The activist, who has reported the page to counter-terror police, said: ‘It is a kill list. ‘They want to target us and the regime finds anybody through the dark web and asks them to go and target whoever they like to.’

Mr Taranssari claimed: ‘I have had the phone number for 20 years. It’s for close friends and family. The other people that would have that number is the [Iranian] embassy in London. ‘I can’t say for a fact that nobody from 10 or 15 years ago may now be working with the regime and decided to give my number.’ He has now been received a string of messages ‘wishing death’ on him after the Telegram post. In May, Metro first revealed that the ‘Bay of Pigs’ were targeting .

Ali Taranssari called the accounts a ‘kill list’ but said he would not be intimidated Their main page stopped functioning soon after. But following a hiatus, smaller regional ‘accounts’ posting about ‘traitors’ have popped up. Taranssari’s details were posted on two pages focusing on areas in Europe, which Taranssari speculates could show the admins are trying to get around the UK’s designation on support for the IRGC. He added: ‘This is a fight between the ordinary Iranian people and a regime that you know is is openly killing people.

We cannot back down.’ ‘These things are not going to slow us down or intimidate us anymore.’ Metro has seen examples where the addresses and movements of overseas activists across Europe have been doxxed by the Telegram accounts. The admins have also exposed which universities and workplaces the activists attend. One expat in Europe whose account was doxxed by the Bay of Pigs said the Iranian Regime is using fear ‘to silence its own people’ and was ‘attempting to export that same repression beyond Iran’s borders’.

They added: ‘My family fled Iran to escape precisely this kind of persecution. The idea that I should now be intimidated into silence on British soil is extraordinary. ‘We didn’t escape repression only to allow it to follow us into the very democracy that gave us refuge.’ The pages ask people to submit personal details of ‘traitors’ The Bay of Pigs admins have also posted Metro’s article about them in their Telegram channel, showing they are aware of outside scrutiny of their actions.

UK counter-terrorism specialist Roger Macmillan has been monitoring the Bay of Pigs Telegram accounts for months and said they have changed their method of operating. He explained: ‘Some of the sites are behind walls that you’ve got to request to join. ‘The accounts for different regions mean that they can cross-post. ‘They are increasing their digital resilience by having multiple sites to target various individuals.’ While it is impossible to know who is behind a Telegram account due to the site’s privacy protections, Macmillan said it was ‘quite possible an activist group within Iran or Eruope is running it’.

He added: ‘It is highly likely they are taking direction and guidance from Iran. ‘This is another form of a transnational digital repression technique.’ The security expert explained that the personal details being released in the hacks could be uncovered by ‘very skilled’ hackers. Macmillan continued: ‘People reuse credentials on multiple sites. At some point, these details are going to be breached. This is what people are exploiting.’ ‘It is a call to action.

It puts the fear levels up. Activists become scared. They become nervous. They’re not quite sure who’s a friend and who isn’t.’ have read Metro’s expose on their threatening activity The Telegram channels are now using smaller regional accounts to strengthen their digital resilience and attempts to stop their doxxing efforts Jonathan Hackett, a former American intelligence operator and expert in Iran’s covert operations, told Metro: ‘The Islamic Republic has long viewed Iranian dissidents and anti-regime Iranian voices outside Iran as a primary target for harassment, coercion, and even violence. ‘The doxxing of people like Taranssari follows exactly the regime’s playbook.

This is not new.’ He added: ‘Regime-connected Telegram accounts are likely capitalizing on this fear to further intimidate Iranians abroad.’Iran has already faced huge criticism for their activity in Telegram channels in the UK. Metro revealed in April that the Iranian embassy in London attempted to recruit expats to become martyrs and ‘sacrifice their lives for the Homeland’. The Iranian Ambassador was then summoned to the Foreign Office over the embassy’s ‘unacceptable and inflammatory’ social media comments.

A Counter Terrorism Policing spokesperson said: ‘Any allegations relating to possible terrorism or national security related offences are passed to officers within Counter Terrorism Policing, who will assess the details and take any further action as appropriate. More broadly, we do not comment on who may or may not be subject to any investigation.’ A Home Office spokesperson said: ‘We take the threat posed by Iran incredibly seriously, and will continue to back the police with the tools and powers they need to keep the public safe. ‘We have introduced a comprehensive set of additional measures aimed at countering threats posed by the Iranian regime, including sanctioning the IRGC in its entirety, as well as more than 550 Iranian individuals and entities. ‘The IRGC has been designated as a security threat under landmark new powers, equipping the police and intelligence agencies with more powers to disrupt and prosecute those supporting them or working on their behalf.’

The Iranian Embassy in London denied have any role in the doxxing of expats and called allegations of that nature ‘baseless’. The Embassy stressed that ‘it carries out its diplomatic and consular functions in both diplomatic and consular fields in accordance with the Vienna Convention on Diplomatic Relations (1961) and relevant laws and regulations of the sending and receiving states.’ Get in touch with our news team by emailing us at webnews@metro.co.uk.

For more stories like this, check our news page.

Read the original article on metro.co.uk (opens in a new tab)
What we found (2)

Metro reports that a network of Telegram accounts is again publishing the personal details of British-Iranian activists, and it quotes victims, a counter-terrorism specialist, officials and the Iranian embassy's denial. Its headline calls the network an 'Iran' kill list, which drops the caution of its own body: the article says it is impossible to know who runs the accounts and that experts only think Tehran is likely guiding them. In its own narration Metro also repeatedly uses 'Regime' for Iran's government.

  1. Headline goes beyond the article

    Serious

    “Iran 'kill list'”

    Why this matters
    The headline names Iran as the owner of the 'kill list' with no attribution or qualifier.
    The impression it gives
    A reader takes it as established that the Iranian state runs the Telegram network publishing activists' details.
    The context
    The body says nobody knows who runs the accounts. Security sources say the operators 'could be' taking directions from Tehran, a specialist says it is 'quite possible' an activist group in Iran or Europe runs it and 'highly likely' it takes guidance from Iran, and the Iranian embassy denies any role and calls the allegations 'baseless'.

    How we know

    • Elsewhere in the article“it is impossible to know who is behind a Telegram account”
    • Elsewhere in the article“could be taking directions from Tehran”
    • Elsewhere in the article“denied have any role in the doxxing of expats”

    Show it in the article

    Written straight

    Telegram 'kill list' targeting British-Iranian activists active again, with experts saying it is likely guided by Tehran, which denies any role.

  2. Uses a loaded word

    Minor

    “A pro-Iranian Regime ‘kill list’”

    Why this matters
    In its own opening line Metro calls Iran's government 'Regime', with a capital letter, as a proper name.
    The impression it gives
    A reader takes the verdict carried by 'Regime' as Metro's neutral description of the Iranian state from the first sentence.
    The context
    'Regime' is a word with a verdict built in, used here by the activists and officials Metro quotes. In the outlet's own narration, 'Iran's government' describes the same thing without taking a side.

    How we know

    • Elsewhere in the article“a regime that you know is is openly killing people”

    Show it in the article

    “anti-Regime activists”

    Why this matters
    Metro describes the targeted activists by their opposition to the 'Regime', again in its own voice.
    The impression it gives
    The activists' own term for the government becomes the article's default label, so their side's vocabulary frames the whole report.
    The context
    The activists can be described as opponents of Iran's government. 'Regime' belongs inside quotation marks when a source uses it.

    Show it in the article

    “The pro-Regime accounts”

    Why this matters
    A caption in Metro's voice labels the Telegram accounts 'pro-Regime'.
    The impression it gives
    This repetition adds to the sense that the accounts' alignment and the government's illegitimacy are both settled facts stated by Metro.
    The context
    The accounts' content supports calling them pro-government. The loaded word for the government is Metro's own choice.

    Show it in the article

Spot something we missed? Report this article

More from Metro

  1. 1 NovIran designates RAF and Royal Navy as 'terrorist organisations'3.0
  2. 20 OctTwo men re-arrested for helping 'Iran intelligence' in RAF Fairford probe6.0
  3. 15 OctUS considers using the Mother of All Bombs against Iran - how powerful is it?6.0
  4. 12 OctIran 'almost certainly' coordinated RAF Fairford incident says Burnham3.0
  5. 6 OctTrump jokes about letting Iran bomb Los Angeles and San Diego3.0

Everything we scored from Metro