Codename 'Ukasa': Turkiye handler directed Delhi terror module; how bomber Umar’s 2022 trip planned strikes

NEW DELHI: Investigators probing the Red Fort blast have traced the origins of the terror conspiracy to a Turkiye-based handler, known by the codename Ukasa, who allegedly directed the module led by Al-Falah University professor Umar Un Nabi. According to security sources, Ukasa acted as the primary link between the Delhi-based module and handlers of proscribed outfits Jaish-e-Muhammed (JeM) and Ansar Ghazwat-ul-Hind (AGuH). The plot, officials said, was hatched as early as 2022 in Turkiye, where Umar and three others — all linked to the two Pakistan-backed groups — had travelled.

Umar had visited Turkiye in March 2022 and stayed in Ankara for two weeks.

“Their conversations had initially started on Telegram and later shifted to encrypted apps like Signal and Session,” an officer said. “It was Ukasa who guided them on how to establish covert cells and avoid digital footprints.” Investigators believe Ukasa played a crucial role in shaping the module’s plan to carry out a “spectacular” series of attacks in India — involving multiple vehicle-borne IEDs followed by armed strikes.

Three cars — a Hyundai i20, a red Ford Ecosport, and a Maruti Brezza — were reportedly procured for the operation. While Umar’s i20 exploded near Red Fort on November 10, killing him instantly, security agencies have since recovered the Ecosport from Faridabad and launched a search for the Brezza. Officials suspect the remaining vehicles may still contain hidden explosives. Sources said Umar’s close aide, Dr Muzammil — also associated with Al-Falah University — had conducted multiple recces of Red Fort in January this year. “They intended to study the monument’s security apparatus ahead of a possible strike, likely to coincide with Republic Day celebrations in 2026,” an investigator said. Over 350kg of explosive material, including ammonium nitrate and traces of RDX, had been accumulated by the group since 2022. This cache was recovered earlier this year in Faridabad, leading to Muzammil’s arrest and pushing Umar to flee before detonating the IED-laden i20 after a 16-hour drive across Delhi-NCR. The probe has also revealed that besides Delhi, Ayodhya was on the hit list. “They planned to attempt an attack around November 25, coinciding with the hoisting of a saffron flag atop the Ram temple,” a source said. Investigators are now seeking the cooperation of foreign intelligence agencies to trace Ukasa’s digital footprint and establish his links to Pakistani terror handlers. “Every encrypted chat and overseas transfer is being scrutinised. The Turkiye connection is the fulcrum of this case,” an officer added.