Five Arrested After Foiled Bombing of Bank of America in Paris

French anti-terrorism police arrested five people after stopping a bombing attempt targeting Bank of America's Paris headquarters in the early hours of Saturday morning, an operation authorities are linking directly to Iranian proxy networks operating across Europe.

Officers from the Paris police prefecture detained a suspect at 3:30am local time as he placed an improvised explosive device containing five liters of liquid fuel and an ignition system outside the bank's offices in the 8th arrondissement, two streets from the Champs-Élysées. A second person accompanying him and filming on a mobile phone fled when police arrived.

Well done to the rapid intervention of a Paris police prefecture unit, which made it possible to thwart a violent act of a terrorist nature overnight in Paris.

— Laurent Nuñez, French Interior Minister

By Sunday evening, French security services had arrested two more suspects in connection with the incident. On Monday morning, authorities confirmed a fifth person had been taken into custody.

Three Minors Among Suspects

The National Anti-Terrorism Prosecutor's Office identified three of the five suspects as minors from Montreuil, an eastern Paris suburb. All three were previously known to police for drug trafficking offenses.

During interrogation, the suspects told investigators they did not know who ordered the attack, according to details reported by AFP and confirmed by Le Monde. They admitted to acting in exchange for "a promise of a few hundred euros," according to the prosecutor's office statement.

Under French law, terrorism suspects can be held for 96 hours before charges must be filed. A court can extend this period further.

"Two further individuals were taken into police custody last night as part of the investigation launched on March 28, 2026 into the offences committed against Bank of America," the prosecutor's office said on Sunday. The investigation is examining "attempted damage by fire or other dangerous means in connection with a terrorist undertaking" and "terrorist criminal conspiracy."

French Minister Links Attack to Iranian Operations

Authorities are making a "direct link" to Iran, Nuñez told French radio RTL on Monday morning. The modus operandi "is in every respect similar to actions that have been carried out in the Netherlands and in Belgium," he said.

In this type of conflict, you have a number of Iranian services that are likely to carry out actions such as these through proxies.

— Laurent Nuñez, speaking on RTL radio

Nuñez was referring to the ongoing US-Israel military operations against Iran that began February 28.

Nuñez said similar attacks have been foiled in France, the Netherlands, Britain, and Norway in recent weeks. He urged security services to be "extra vigilant" and increase their presence at transport hubs and other locations across the country.

The Iranian embassy in France has not commented on Nuñez's remarks.

Part of Wider European Pattern

The foiled Paris bombing follows a series of attacks across Europe that security analysts link to Iranian proxy operations. A previously unknown Islamist group calling itself Harakat Ashab al-Yamin al-Islamia (the Islamic Movement of the Companions of the Right) has claimed responsibility for several incidents.

The group claimed responsibility for an attack in London last week in which four ambulances belonging to a Jewish charity were set on fire. It has also claimed attacks on synagogues in Liège, Belgium, and the Netherlands.

"The attacks in Belgium and the Netherlands follow an explosion at the US Embassy in Oslo, for which three brothers of Iraqi heritage have been arrested," The National reported on March 20, citing security sources. Iran is recruiting Iraqi Shi'a exiles in Europe for what one official described as an "underground army," according to the report.

A New York Times investigation published March 24 found the group emerged on March 9 and has since taken credit for attacks in London, Belgium, the Netherlands, and the car burning in Antwerp. Security analysts told the Times that Iran-linked proxies are coordinating low-cost attacks on Jewish sites and Western targets across Europe using criminal networks and encrypted messaging apps.

Bank of America Targeted as Symbolic Western Institution

The choice of Bank of America as a target marks an expansion from the pattern of attacks primarily focused on Jewish community sites. This matters. Attacking synagogues and Jewish charities carries sectarian overtones that let governments frame the problem as antisemitism. Attacking a Wall Street bank in central Paris is a direct strike at American economic infrastructure on European soil.

Bank of America operates in France through its Paris branch, which serves as a hub for the bank's European investment banking and wealth management operations. The building targeted sits in Paris's financial district.

The bank has not issued a public statement about the foiled attack. Representatives for Bank of America did not respond to requests for comment.

Recruiting Criminal Networks for Low-Cost Terror

The involvement of minors with criminal backgrounds points to a recruitment strategy that European security services are struggling to counter. By paying small amounts to individuals with no ideological commitment, Iranian proxies can execute attacks while maintaining operational distance.

"They use proxies," one European counterterrorism official told Fortune. The challenge is tracking operations where "handlers operate remotely and foot soldiers have no direct contact with Iranian intelligence services," the official said.

The International Centre for Counterterrorism said in a March analysis that the threat is "relatively predictable, given the established networks, routes, and relationships that Iran has developed with sleeper cells across the globe and their repeated deployment of these tactics historically."

The model is disturbingly efficient. Handlers coordinate through encrypted messaging apps, offering payment to low-level criminals who have no understanding of geopolitics and no connection to Iranian intelligence. If arrested, the operatives cannot identify who recruited them. The chain breaks at the first link.

French domestic intelligence service DGSI is working with the judicial police on the investigation. Multiple European intelligence agencies are coordinating to map the networks behind the attacks, according to security sources cited by European media.

The Paris judicial police and France's domestic intelligence service, the General Directorate for Internal Security, are leading the investigation under the supervision of the anti-terrorism prosecutor.