Standfirst: Portuguese and Spanish authorities are monitoring reported online calls linked to jihadist networks urging attacks on police officers and demonstrators during protests in several European countries. The information remains based on a Spanish media report and authorities have not announced that an attack linked to the messages has taken place.
Security services in Portugal and Spain are examining reported threats that allegedly encourage militants to exploit large demonstrations and clashes with police. The warnings relate to protests in Portugal, Spain, France and Italy, where demonstrations have been driven largely by concerns about housing costs and the wider cost-of-living crisis.
Portugal’s Internal Security System, known by its Portuguese acronym SSI, said it was “closely monitoring” the situation and maintaining contact with the relevant authorities. The statement was provided to Portugal’s main news agency, Lusa, after reports emerged in Spain.
What the reported threat involves
Spanish newspaper El País reported that Spain’s Interior Ministry had identified messages on a website allegedly connected to the Islamic State group. According to the newspaper, the messages called for attacks against police officers and protesters during mass demonstrations.
The report said an internal document from Spain’s Cybersecurity Coordination Office described calls to use crowded protests and street disorder as opportunities for violence. The alleged material reportedly included references to suicide attacks and vehicle-ramming incidents.
These details have not been presented in the source material as a confirmed operational plot. The reporting concerns messages and propaganda allegedly circulated online, while authorities continue to assess their credibility, origin and potential significance.
How Portugal and Spain are responding
Portugal’s SSI said its secretary-general was following the matter within the organisation’s responsibilities and was in ongoing contact with relevant agencies. The statement did not announce a change to Portugal’s national threat level or identify a specific planned attack.
Spanish authorities are also understood to be assessing the reported content. The involvement of Spain’s Interior Ministry and cybersecurity coordination structures underlines the importance of monitoring online extremist propaganda, particularly when it refers to public gatherings and possible attacks on security personnel.
For the public, the practical message is to follow instructions from police and event organisers, avoid areas affected by disorder and report credible concerns through official channels. Unverified claims shared on social media can increase fear and complicate the work of investigators.
Why protests are being identified as potential targets
The demonstrations covered by the report have taken place over several weeks in a number of European countries. In Portugal and Spain, daily protests and overnight camps in central squares have been associated with housing affordability and pressure on household budgets.
Large gatherings can create complex security challenges because they bring together protesters, bystanders, journalists, emergency workers and police in confined urban areas. When demonstrations become violent, identifying an individual threat can become more difficult and emergency services may face competing demands.
The reported assessment appears to focus on the opportunity that disorder could create for extremist actors, rather than suggesting that protesters themselves are responsible for the alleged calls. Protest movements and jihadist propaganda are separate phenomena, and claims about either should be assessed independently.
Wider unrest in France and Italy
The report also referred to violent incidents in France and Italy. It said that protests in France had intensified during the previous weekend, with buildings including Limoges City Hall and the Lyon tourism office reportedly set on fire and badly damaged.
Italy was also reported to have experienced arson attacks, including incidents in Milan. The source material said demonstrations in France alone were estimated to have attracted more than 800,000 people during the previous weekend.
Those figures and descriptions concern the protests and reported disorder, not confirmed terrorist attacks. Keeping that distinction clear is important as authorities investigate the online material and assess risks surrounding future gatherings.
What happens next
Authorities in the affected countries are expected to continue monitoring extremist content, sharing relevant intelligence and reviewing security arrangements around demonstrations. Any decision to increase policing or introduce restrictions would be a matter for the competent national authorities.
The reported warnings also highlight the continuing role of online platforms and cybersecurity agencies in identifying propaganda that encourages violence. A message posted online does not by itself establish that an attack is imminent, but authorities may examine its language, distribution, credibility and links to known networks.
There is no indication in the supplied reporting that the European Union has issued a new security measure in response to the reports. The immediate response described is national, involving Portuguese and Spanish security authorities and cooperation with other relevant agencies.
Key points for readers
- Spanish media reported alleged jihadist calls to attack police and demonstrators during protests in several countries.
- Portugal’s Internal Security System said it was closely monitoring the situation.
- The reported messages allegedly urged the use of suicide attacks and vehicle-ramming tactics.
- No confirmed attack linked to the reported messages is identified in the source material.
- The demonstrations are largely connected to housing and cost-of-living concerns, while reported violent incidents have occurred in parts of France and Italy.
Conclusion
The reported threat is being assessed by national authorities in Portugal and Spain amid continuing protests and episodes of unrest elsewhere. The central development is the monitoring of alleged extremist propaganda, not confirmation of an imminent attack. For now, the most reliable guidance is to rely on official security advice, avoid spreading unverified claims and recognise the difference between peaceful protest, public disorder and terrorism-related investigations.