'Counterterrorism in Germany: How the Police, Intelligence Agencies, and

The terrorist threat in Germany is not limited to a single ideology. The state simultaneously monitors Islamist terrorism, right-wing extremist violence, anti-state networks, left-wing extremist sabotage, and extremist groups linked to foreign conflicts. At the same time, daily life in Germany remains relatively safe, as evidenced by and general crime statistics in Germany, but the security services are constantly at work.

The German model is not built around a single “main intelligence agency,” but rather around coordination. The police, the Verfassungsschutz, the public prosecutor’s office, immigration authorities, and federal and state agencies exchange data to detect preparations for an attack before it is carried out.

What threats is Germany monitoring?

In official reports, terrorism is often discussed alongside extremism. The reason is simple: an attack is usually preceded by a chain of indicators—radicalization, propaganda, searching for weapons, fundraising, contacts with a group, travel, private chat rooms, or public threats.

Area	How it manifests	How the state responds
Islamist terrorism	Online radicalization, lone actors and small groups, symbolic targets, risks to Jewish and Israeli sites	GTAZ, work on “Gefährder,” monitoring of propaganda and financing, protection of sensitive sites
Right-wing extremism and terrorism	Racism, anti-Semitism, attacks on migrants, politicians, activists, journalists, and public events	GETZ, monitoring of violent groups, bans on associations, weapon seizures, investigations into politically motivated violence
Anti-state networks	Reichsbürger, Selbstverwalter, and related groups that do not recognize the institutions of the Federal Republic of Germany and sometimes prepare for armed resistance	Verification of gun permits, surveillance, criminal investigations, coordination between the police and the Verfassungsschutz
Radical left-wing extremism	Arson, attacks on police and political opponents, sabotage of infrastructure and construction sites	GETZ, investigation of serial attacks, infrastructure protection, work on covert groups
Foreign extremism	The spillover of conflicts from the Middle East, Turkey, and other regions into German public life	Monitoring of organizations, control of funding, Vereinsverbot, international data exchange

According to the latest available federal Verfassungsschutzbericht for 2024, the far-right extremist threat was estimated at approximately 50,250 individuals, the far-left threat at approximately 38,000 individuals, and Islamist circles remained a significant threat to the security services. These figures refer to the reporting year of 2024, not to the current operational situation in 2026.

Islamist Terrorism

Islamist terrorism remains one of the most sensitive areas for German intelligence agencies. The risk comes not only from organized networks but also from lone actors or small groups who rapidly radicalize online and choose simple means of attack: a knife, a car, or homemade incendiary devices.

Following the Hamas attack on Israel on October 7, 2023, German security agencies specifically highlighted an increased threat to Jewish and Israeli targets. The official assessment for 2024 also noted young, lone-wolf attackers, as well as the influence of international propaganda from terrorist organizations.

For immigration authorities, this means closer cooperation with law enforcement agencies. If, when processing an asylum application in Germany (), doubts arise regarding the applicant’s identity, travel route, documents, or background (), the case may undergo additional scrutiny. It is important to distinguish between the fact of migration itself and a security risk: the agencies’ task is not to equate refugees with a threat, but to identify specific indications of danger.

Right-wing terrorism and anti-state violence

Right-wing extremism in Germany has long been regarded as one of the main domestic threats. This environment is characterized by a convergence of antisemitism, racism, xenophobia, a cult of weapons, conspiracy theories, and the search for an “enemy within.” Migrants, Jews, Muslims, politicians, journalists, activists, and participants in public events can all become targets.

A separate group consists of the “Reichsbürger” and “Selbstverwalter.” Not every member of this community is planning a terrorist attack, but it is precisely here that the agencies see a dangerous combination of refusal to recognize the state, armed resistance, conspiracy theories, and a willingness to resist the police.

Radical Left-Wing Extremism

Violence by the radical left in Germany tends to take the form not of mass attacks on random passersby, but of targeted sabotage: arson, damage to equipment, and attacks on police, construction sites, transportation, energy facilities, and other infrastructure. To the average citizen, such incidents may go unnoticed until a specific event occurs, but the damage they cause can be significant.

Therefore, systematic arson, conspiratorial groups, and attacks on critical infrastructure are viewed not as ordinary hooliganism, but as politically motivated violence. These matters are handled by specialized police units and the agencies responsible for protecting the constitutional order.

Extremism Linked to Foreign Conflicts

Germany remains a hub for organizations and networks that use diaspora communities, public demonstrations, the media, and fundraising to support conflicts outside Germany. Public reports most frequently mention groups linked to the Middle East and Turkey.

The challenge lies in the fact that this involves the intersection of freedom of assembly, foreign policy, the protection of minorities, the fight against antisemitism, and the criminal prosecution of support for banned organizations. Therefore, the state monitors not only street demonstrations but also funding, organizers’ connections, symbols, propaganda, and contacts with foreign entities.

GTAZ and GETZ: How Coordination Works

The key feature of the German model is constant coordination between agencies. Terrorist planning is often detected not by a single “decisive” indicator, but by a combination of data: contacts, travel, financial transactions, past cases, online activity, and reports from eyewitnesses.

GTAZ—the Joint Counterterrorism Center (Gemeinsames Terrorismusabwehrzentrum)—has been operating since 2004 and focuses primarily on Islamist terrorism. It is not a separate intelligence agency, but rather a coordination platform involving federal and state authorities.

In particular, the following agencies work together:

• Bundesamt für Verfassungsschutz — Federal Office for the Protection of the Constitution;
• Bundeskriminalamt — Federal Criminal Police Office;
• Bundesnachrichtendienst — Federal Intelligence Service;
• Bundespolizei — Federal Police;
• Generalbundesanwalt — Federal Prosecutor General;
• Zollkriminalamt — Customs Criminal Investigation Office;
• Bundesamt für Migration und Flüchtlinge — Federal Office for Migration and Refugees;
• Militärischer Abschirmdienst — Military Counterintelligence Service;
• State criminal investigation agencies and state Verfassungsschutz agencies.

GETZ—the Joint Center for Countering Extremism and Terrorism (Gemeinsames Extremismus- und Terrorismusabwehrzentrum)—was established to coordinate efforts against right-wing, left-wing, and foreign extremism, as well as anti-state groups and related threats. Its approach is similar: to gather fragments of information from various agencies to form a comprehensive picture.

Countermeasures

The German system does not rely on a single method but rather on a combination of legal, police, intelligence, and preventive tools.

• Data sharing. The Antiterror Database (Antiterrordatei) and other mechanisms help cross-reference information on suspects’ contacts, addresses, travel, and connections.
• Risk Assessment. The category “Gefährder” is applied to potentially dangerous individuals; for the Islamist threat, the BKA uses standardized risk assessment approaches, including RADAR-iTE.
• Banning organizations. Through the Vereinsverbot, the state can ban associations that support terrorism, unconstitutional activities, or extremist propaganda.
• Monitoring of funding. Donations, funds, transfers, and “humanitarian” contributions are scrutinized for any signs of support for banned or violent organizations.
• Online Monitoring. Radicalization often occurs in messaging apps, social media, gaming communities, and short videos. Therefore, monitoring propaganda and taking legal action against channel administrators have become a routine part of their work.
• Prevention and deradicalization. Schools, municipalities, prisons, social services, and counseling programs help identify early signs of radicalization. Language, employment, and integration courses in Germany are important for long-term integration.

Synagogues, Jewish institutions, airports, train stations, Christmas markets, soccer matches, and other mass gatherings are protected separately. Visible measures such as concrete blocks, armed patrols, metal detectors, and random searches in Germany are often preventive in nature rather than a sign of a state of emergency.

What Does This Mean for Residents?

To the average resident, Germany does not appear to be a country living in a state of constant alert. But the security services take threats seriously, especially when it comes to direct calls for violence, banned symbols, the financing of extremist groups, or the planning of an attack.

The practical rules are simple:

• In case of immediate danger, call the police at 110;
• Do not share prohibited symbols, terrorist propaganda, or calls for violence—even “as a joke”;
• Report real threats, especially if there is a specific location, time, name, or plan;
• At large public events, expect security checks, roadblocks, and heightened security measures;
• Do not judge a person solely based on their origin, religion, or immigration status—the German system evaluates specific risk indicators.

In Brief

The fight against terrorism in Germany relies on early risk detection, data sharing, and coordination between federal and state agencies. The most challenging scenarios for the agencies involve a rapidly radicalized lone actor, a small group without complex logistics, and online environments where preparations can proceed unnoticed. Therefore, security here is understood not as a one-time campaign, but as ongoing work by the police, intelligence agencies, the public prosecutor’s office, municipalities, and civil society.