British-Azerbaijani man arrested on suspicion of spying for Iran at British military base in Cyprus
A 44-year-old British-Azerbaijani dual national has been arrested in Cyprus on suspicion of conducting hostile reconnaissance of RAF Akrotiri and passing information to Iran's IRGC.
Intelligence analysis by Llama

Rashid Sultan-Af, an Islington resident, was arrested on July 17 in Cyprus. He is accused of surveilling RAF Akrotiri for Iran's Islamic Revolutionary Guard Corps between May and June 2025, marking the first use of the UK's 2023 National Security Act outside British territory.
Imagine a spy in a movie sneaking around a top-secret air base to take notes for the bad guys. Police in Cyprus caught a man they think was doing exactly that for Iran, watching a British air base where fighter jets take off. Because the base is in another country, the UK is using a brand-new law for the very first time to charge him.
Analysis
A First-Ever Extraterritorial Use of Britain's National Security Act
Rashid Sultan-Af's arrest in Cyprus represents an unprecedented legal milestone. According to the UK Crown Prosecution Service, the 44-year-old dual British-Azerbaijani national will be charged under the National Security Act 2023, making this the first time the legislation has been deployed to investigate an alleged offence committed outside British soil. Helen Flanagan, head of London's Counter-Terrorism unit, framed the case as a demonstration that the law can reach hostile state activity even when it targets UK military infrastructure abroad. The investigation window, stretching from 11 May to 22 June 2025, suggests that British and Cypriot authorities had been tracking the suspect's movements and digital activity for over a month before the July 17 arrest.
Akrotiri's Front-Line Role in the Iran Confrontation
RAF Akrotiri is not a peripheral outpost. Britain has maintained a permanent presence there since the 1950s, and in recent months the base has served as a launchpad for RAF operations to intercept Iranian missiles and drones. The base's strategic value to Western air power in the Eastern Mediterranean has made it a recurring target in Tehran's rhetoric. The IRGC has previously warned, echoing Iran's foreign ministry, that any base used to strike Iranian territory would be treated as a "legitimate target." The UK's Defence Secretary responded at the time that Britain "should not be intimidated by Iran's sabre-rattling." That an alleged agent was conducting surveillance of this particular installation suggests Iran views the facility as a high-priority intelligence target worth the operational risk of placing a human asset nearby.
The Diaspora Channel and the Espionage Pattern
Sultan-Af's profile, a London-based dual national with Azerbaijani citizenship, fits a familiar template in Iranian intelligence operations: using individuals with legitimate travel reasons and clean criminal records to approach restricted Western sites. The BBC notes that three Iranians were earlier charged in a London court with espionage, and that the Iranian judiciary has separately accused two detained Britons of spying, allegations their family denies. This pattern points to a sustained intelligence contest playing out on both sides of the Channel, with each government treating the other's nationals as potential leverage or sources. The legal proceedings in Cyprus, followed by an extradition to the UK, will likely take months, but the intelligence damage assessment, what the IRGC may have learned about base layouts, flight schedules, and force posture, will be far more consequential than the courtroom outcome.
Key points
- Rashid Sultan-Af, 44, a British-Azerbaijani dual national from Islington, was arrested in Cyprus on July 17 on suspicion of spying for Iran's IRGC.
- He is accused of conducting hostile reconnaissance of RAF Akrotiri between May 11 and June 22, 2025, and will be charged under the UK's 2023 National Security Act.
- This is the first time the 2023 National Security Act has been used to investigate an alleged offence committed outside British territory.
- RAF Akrotiri has been a key launchpad for UK operations intercepting Iranian missiles and drones, and the IRGC has previously declared any base used to strike Iran a legitimate target.
- The investigation was led by London's Counter-Terrorism unit in cooperation with Cypriot police, with extradition proceedings now underway.
If the extradition proceeds smoothly and the case moves to trial in the UK, it would vindicate the 2023 National Security Act's extraterritorial reach and send a clear deterrent signal to Iranian intelligence services. Successful prosecution could also strengthen UK-Cyprus security cooperation and tighten protective measures at Akrotiri and other overseas bases.
Even with the arrest, any reconnaissance already passed to the IRGC cannot be undone, potentially compromising base security, force posture, and personnel safety. The case also raises the risk of reciprocal Iranian moves, including further detentions of British nationals, and underscores how vulnerable overseas bases are to long-term penetration by state intelligence services.



