Iran's Islamic Revolutionary Guard Corps directed two arson attacks against Jewish targets in Sydney and Melbourne, using agents with prior Australian residency to execute the plan, AP News reported in June 2026.

Australia responded decisively. Canberra accused Tehran of orchestrating the antisemitic attacks and expelled Iran's ambassador within seven days—a formal downgrade of diplomatic relations short of a complete break, Reuters reported in August 2025.

The operational design was deliberate and layered. Mike Burgess, director-general of Australian Security Intelligence Organisation (ASIO), revealed that the IRGC used "cut outs"—intermediaries positioned to obscure the chain of command—and that investigators traced the network by following money rather than communications. This is a standard denial-and-deception tactic: insert enough human buffers between the decision-maker and the operatives on the ground, and attribution becomes legally murky. Here, it was not murky enough. Reuters reported Burgess's account in August 2025.

The Operational Picture

The choice to employ individuals with prior ties to Australia was strategic, not random. Former residents understand local geography, daily patterns of target communities, and how to blend in—advantages a newly arrived operative lacks. For an intelligence service running covert intimidation campaigns against Jewish diaspora communities, that local knowledge reduces friction substantially.

The cut-out structure Burgess described mirrors how the IRGC's external operations division—historically associated with the Quds Force—has organized coercion and influence campaigns against diaspora groups in Europe and North America. What made the Australian case solvable was the funding channel: money movements are harder to conceal than phone calls or messages, and financial forensics have proven to be one of the more reliable tools for unraveling deniable operations.

Diplomatic and Strategic Fallout

Ambassador expulsions are a calibrated message. They register stronger disapproval than a formal protest but avoid a complete diplomatic break—a careful distinction that keeps some communication open while signaling a clear cost. Australia's choice of this specific response signals displeasure matched to what it can publicly demonstrate, without slamming every door.

The larger pattern of IRGC operations against Jewish diaspora communities cannot be separated from the environment after October 2023, when Iranian-backed networks accelerated harassment and intimidation across multiple Western countries. Australia has historically been a lower-priority target than Europe or North America, which makes the decision to attack there significant. It suggests the IRGC judged Australian security services as unlikely to detect or respond forcefully. That judgment was mistaken.

For Canberra, this episode also unfolds as Five Eyes intelligence partners—the close alliance of Australia, Canada, New Zealand, the UK, and the US—have been intensifying coordination on IRGC external operations. Australia's public attribution, backed by Burgess naming the mechanism, aligns with a broader allied strategy of refusing to absorb covert harassment in silence. Revealing the cut-out method is itself a counterintelligence move: it narrows the operational template for future attacks by removing the deniability the structure was meant to provide.

What Tehran does next is uncertain. Historical patterns in other Western countries suggest a period of apparent de-escalation—possibly reassigning implicated officers—followed by operational restart through different networks. Whether Iran takes reciprocal action against Australia's diplomatic staff in Tehran, and how that shapes remaining bilateral channels, will indicate how far Iran is willing to let this relationship deteriorate.