Europe is facing a complex and evolving terror threat, with a new Europol report warning that terrorism and violent extremism are becoming more fragmented, harder to detect and increasingly influenced by online communities.
The warning comes from the latest European Union Terrorism Situation and Trend Report 2026, known as EU TE-SAT 2026. Published by Europol in July 2026, the report examines terrorism-related activity recorded across the European Union during 2025. It identifies jihadist terrorism as the most persistent terrorist threat while also highlighting the growing importance of right-wing extremism, nihilistic violent extremism, online radicalisation and hybrid threats.
The report recorded 45 terrorist attacks across 10 EU member states during 2025. Of these, 22 were completed attacks, 20 were foiled and three were classified as failed attempts. Authorities also arrested 486 people for terrorism-related offences across 21 EU countries. Seventy-one percent of those arrests were connected to jihadism.
While the number of recorded attacks fell from 58 in 2024, arrests increased from 449. Europol therefore describes a security environment that cannot be judged simply by counting attacks. Instead, the agency warns that the nature of terrorism is changing.
Europol Warns of a More Fragmented Terror Threat
The central message of the latest Europol assessment is that terrorism in Europe is becoming less predictable.
Traditional terrorist organisations remain important, but individuals and small groups can now become radicalised and mobilised without direct contact with an established terrorist organisation.
Online platforms have transformed how extremist propaganda spreads. Individuals can encounter violent material, conspiracy narratives and extremist communities from almost anywhere, sometimes moving between different ideological environments.
Europol says this creates a more fragmented landscape in which ideology, personal grievances, criminality and the desire for recognition can overlap.
This creates a significant challenge for European security services.
In the past, investigators could often look for connections between a suspect and a known terrorist organisation. Today, a person may radicalise independently, interact with online communities and act without receiving direct instructions from a larger organisation.
That does not necessarily make every extremist a terrorist, but it makes early identification of genuine threats more difficult.
Jihadist Terrorism Remains the Primary Concern
Despite the changing terrorism landscape, jihadist terrorism remains the most prominent terrorist threat identified by Europol.
The 2026 report recorded 24 jihadist attacks and 347 terrorism-related arrests linked to jihadism during 2025. Europol also reported five fatalities and 81 injuries resulting from jihadist attacks.
The figures demonstrate why European authorities continue to prioritise counter-jihadism operations.
Europol notes that modern jihadist terrorism increasingly relies on digital propaganda and decentralised mobilisation. Instead of requiring complex command structures, extremist organisations can encourage sympathisers to act independently.
This approach can make attacks harder to prevent because there may be limited communication between the attacker and an established terrorist organisation.
The threat can therefore develop through online influence rather than traditional recruitment structures.
Lone Actors Create a Difficult Security Challenge
One of the most important developments identified by European authorities is the role of lone actors and small, self-initiated cells.
Many attacks and disrupted plots have involved individuals operating independently or groups without clear external direction. These perpetrators can use relatively accessible methods, making it difficult for intelligence services to identify preparations in advance.
This is particularly significant because conventional counter-terrorism methods often depend on detecting communication, financing, travel or operational planning.
A lone actor may leave fewer warning signs.
That creates an uncomfortable reality for European governments: even when intelligence agencies disrupt major terrorist networks, the broader threat may remain because individuals can become radicalised independently.
Online Radicalisation Is Changing the Threat
The internet has become one of the most important battlegrounds in Europe’s fight against terrorism.
According to Europol, online ecosystems increasingly influence how extremist identities develop. Terrorist propaganda can be distributed rapidly, while online communities can provide individuals with a sense of belonging and recognition.
This development goes beyond traditional extremist propaganda.
Europol describes an environment where different forms of extremism can overlap. Individuals may encounter jihadist propaganda, conspiracy theories, misogyny, nihilistic content, violent accelerationism or other extremist narratives without necessarily subscribing completely to one established ideology.
Violence itself can become a form of identity.
That is an important change because security agencies can no longer rely entirely on traditional ideological classifications when assessing potential threats.
The Rise of Nihilistic Violent Extremism
Another concern highlighted by Europol is nihilistic violent extremism.
Unlike traditional terrorism, which is often associated with a defined political, religious or separatist objective, nihilistic violent extremism can involve individuals motivated by violence, notoriety, identity or belonging.
Europol has also highlighted online ecosystems such as “The Com,” where violent and extremist material can circulate and vulnerable individuals can be exposed to radicalising content.
Authorities recently carried out coordinated action against this online ecosystem, with Europol reporting that thousands of URLs containing disturbing material were referred during a multinational operation. The agency has warned that minors can be both victims and perpetrators within such online environments.
The development illustrates why counter-terrorism policy is increasingly connected to online safety.
Europe Faces Multiple Forms of Extremism
Although jihadist terrorism remains the largest component of the terrorist threat identified by Europol, European authorities are not dealing with only one ideological danger.
The EU TE-SAT framework examines jihadist terrorism, right-wing terrorism, left-wing and anarchist terrorism, ethno-nationalist and separatist terrorism and other forms of terrorism.
This broader picture matters.
A focus on one ideology can leave governments less prepared for another form of violent extremism. Europol’s latest assessment instead points toward a more diverse threat environment.
Right-wing extremist activity continues to concern authorities, while left-wing and anarchist terrorism and separatist movements remain part of Europe’s security landscape.
The report also points toward ideological convergence, where individuals can combine ideas from several extremist environments.
Terrorism and Geopolitical Instability
Europe’s security environment is also being shaped by wider geopolitical instability.
Wars and conflicts outside the European Union can influence extremist propaganda, recruitment and mobilisation. International conflicts can be used by extremist groups to frame narratives, exploit anger and encourage radicalisation.
Europol’s assessment identifies geopolitical developments as one of the factors contributing to an increasingly complicated terrorism landscape.
This means European counter-terrorism agencies have to monitor developments beyond the EU’s borders while simultaneously addressing domestic radicalisation.
The challenge is therefore both international and local.
Hybrid Threats Add Another Layer of Risk
Europol has also warned about hybrid threats in which terrorism, organised crime, proxies and other destabilising activities can overlap.
According to the agency, hybrid threat actors can use criminal networks and proxies to create persistent disruptions designed to destabilise societies.
This expands the traditional definition of security threats.
European authorities are increasingly concerned not only about spectacular terrorist attacks but also about sustained attempts to create instability.
Such activity could involve combinations of criminal activity, online manipulation, extremist messaging and other forms of disruption.
The challenge for governments is determining where ordinary criminality ends and politically motivated destabilisation begins.
Terrorist Attacks Fell, But the Threat Has Not Disappeared
One important fact from the 2026 report is that the number of terrorist attacks recorded in the EU declined compared with the previous year.
Europol recorded 45 attacks in 2025, compared with 58 in 2024. However, terrorism-related arrests increased from 449 to 486.
This distinction is important.
A lower number of attacks does not automatically mean that the overall security threat has disappeared.
Authorities may prevent attacks before they occur, while increased arrests can indicate successful intelligence and law-enforcement operations.
The figures therefore need to be interpreted together.
The latest report suggests that Europe remains under significant pressure from terrorism even as the number of completed attacks fluctuates.
Spain and France Among Key Counter-Terrorism Fronts
The distribution of terrorism-related arrests also highlights differences between European countries.
Spain recorded the highest number of jihadism-related arrests in the EU in 2025, with 100, according to reporting on the Europol assessment. France followed with 64.
These figures do not mean that Spain or France are necessarily facing an imminent attack.
Instead, they demonstrate the scale of counter-terrorism activity and investigations in countries dealing with persistent extremist threats.
European security agencies increasingly rely on cooperation between national authorities, Europol and other international partners.
Why Cross-Border Cooperation Matters
Terrorism does not respect national borders.
A suspect can potentially radicalise online in one country, communicate with people elsewhere, travel through several countries and become involved in criminal activity across borders.
That makes intelligence sharing essential.
Europol’s European Counter Terrorism Centre supports cooperation between national authorities and helps connect investigations when they have international dimensions.
However, Europe does not operate a single centralised terrorism watchlist covering every person under surveillance.
Recent reporting has highlighted questions about cross-border monitoring and differences between national systems. Europol has stressed that counter-terrorism investigations remain primarily a national responsibility while information can be shared when cases have international dimensions.
This balance between national security responsibilities and European cooperation remains an important policy issue.
The Challenge of Preventing Radicalisation
European governments are increasingly focusing on prevention as well as traditional policing.
Stopping terrorism requires more than arresting suspects after investigations begin.
Authorities want to identify radicalisation before it turns into violence. That can involve monitoring extremist propaganda, disrupting terrorist financing, cooperating with online platforms and supporting programmes designed to prevent violent extremism.
But prevention is difficult.
Not everyone who views extremist material becomes violent, and not every person expressing controversial or extreme views represents a terrorist threat.
Security agencies therefore face the difficult task of protecting the public while respecting democratic rights, privacy and freedom of expression.
What the Latest Europe Terror Alert Really Means
The phrase “high threat level” can create the impression that every European country has simultaneously raised its national terrorism alert.
That is not what the Europol report says.
Different European countries use their own national terrorism threat systems, and threat levels can vary considerably.
The EU TE-SAT 2026 is a strategic assessment of terrorism trends across the European Union. It does not impose one common terrorism alert level on all EU countries.
The more significant warning is that the terror threat in Europe remains serious while becoming more difficult to predict.
That distinction matters.
The report is not predicting that Europe is about to experience a continent-wide wave of attacks. Instead, it identifies persistent terrorist activity, online radicalisation, lone actors, ideological convergence and hybrid threats as major challenges for European security services.
What Happens Next?
The European security response is likely to focus increasingly on digital environments.
Authorities will continue monitoring extremist propaganda and online recruitment while working with technology companies and international partners.
The prevention of radicalisation among young people is also likely to remain a priority, particularly as extremist communities increasingly use digital platforms to attract vulnerable individuals.
At the same time, traditional intelligence work will remain essential.
Authorities must identify terrorist financing, monitor organised networks, investigate suspicious travel and disrupt plots before they reach the operational stage.
The future of European counter-terrorism will therefore depend on combining traditional intelligence methods with sophisticated digital investigations.
Europe Remains Alert
The latest Europol assessment delivers a serious warning, but it should not be misunderstood as a prediction of inevitable terrorist attacks.
Europe recorded fewer terrorist attacks in 2025 than in 2024, while authorities made more terrorism-related arrests. That indicates both the continuing threat and the scale of counter-terrorism efforts.
The bigger concern is how terrorism is changing.
Jihadist terrorism remains the primary terrorist threat, but extremist violence is no longer confined to clearly organised groups. Lone actors, small cells, online communities, hybrid threats and ideological mixtures are creating a more complicated security environment.
For European governments, the challenge is to identify threats early without unnecessarily alarming the public.
For citizens, the message is straightforward: remain informed, follow official security guidance and avoid treating sensational claims on social media as confirmed intelligence.
The latest terror threat in Europe is serious, but the Europol report ultimately points to a changing threat rather than a single continent-wide emergency.
Europe’s security agencies are responding with increased cooperation, intelligence sharing and online counter-extremism operations. Whether those efforts can keep pace with increasingly decentralised radicalisation will remain one of the biggest security questions facing Europe in the years ahead.
FAQs
Is the terror threat in Europe increasing?
Europol says the terrorist threat in the EU remains significant and is becoming more fragmented and difficult to predict. However, the number of recorded terrorist attacks fell from 58 in 2024 to 45 in 2025.
What is the main terrorist threat in Europe?
According to Europol’s 2026 assessment, jihadist terrorism remains the most persistent and widespread terrorist threat in the EU. It accounted for 24 of the 45 attacks and 347 of the 486 terrorism-related arrests recorded in 2025.
How many terrorist attacks were recorded in the EU in 2025?
Europol recorded 45 terrorist attacks across 10 EU member states in 2025. Twenty-two were completed attacks, 20 were foiled and three were failed attempts.
How many terrorism-related arrests were made?
There were 486 terrorism-related arrests across 21 EU member states in 2025. Around 71% were linked to jihadism.
Is Europe under one common terrorism alert level?
No. EU member states maintain their own national terrorism threat assessment systems. The Europol EU TE-SAT report provides a Europe-wide strategic assessment but does not establish one common alert level for every country.
Why is online radicalisation a concern?
Online platforms can allow extremist propaganda and violent material to reach individuals without requiring direct contact with established terrorist organisations. Europol says this contributes to a more decentralised and unpredictable threat environment.
What are lone-actor attacks?
Lone-actor attacks involve individuals who operate independently or with little apparent direction from established terrorist organisations. Europol says this type of activity can be particularly difficult for authorities to detect in advance.
Does a lower number of attacks mean Europe is safe?
Not necessarily. The decline in recorded attacks is encouraging, but Europol continues to describe terrorism and violent extremism as a significant threat. The changing nature of radicalisation means authorities must monitor both established terrorist organisations and decentralised extremist networks.
What is Europol?
Europol is the European Union’s law-enforcement cooperation agency. It supports EU member states by facilitating information exchange, analysis and cooperation against serious international crime and terrorism.
What is the EU TE-SAT report?
The EU Terrorism Situation and Trend Report is Europol’s annual assessment of terrorism in the European Union. It examines attacks, arrests and broader terrorism trends and covers multiple forms of terrorism and violent extremism.
About the Author
