WhatsApp, IEDs And Hamas-Style Plans: NIA Uncovers How White-Collar Module Planned Red Fort Attack

Last Updated:May 13, 2026, 12:32 IST

The module was allegedly preparing for multiple “high-impact” terror strikes across Delhi, Jammu & Kashmir and Uttar Pradesh, including possible Hamas-style drone attacks.

The National Investigation Agency (NIA) is set to file its chargesheet in the November 10, 2025 Red Fort car blast case, describing the attack as part of a “deep-rooted", pan-India and transnational terror conspiracy involving educated professionals, Pakistan-linked terror outfits and a wider plan for sustained attacks across north India.

According to exclusive details accessed by CNN-News18, the agency’s investigation has uncovered what officials describe as a highly organised “white-collar terror module", largely comprising doctors, technical experts and educated professionals from Jammu & Kashmir who were allegedly radicalised online and linked to Pakistan-based terror groups such as Jaish-e-Mohammed (JeM) and its affiliate Ansar Ghazwat-ul-Hind (AGuH).

At the centre of the conspiracy was Umar Un Nabi, a doctor and assistant professor from Kashmir, who carried out the suicide attack near the Lal Qila Metro station in Delhi. Investigators say Umar was not merely the suicide bomber but also the chief architect of the module, coordinating recruitment, ideological indoctrination and operational planning.

The NIA investigation alleges that Umar radicalised educated professionals through personal networks, encrypted communication channels and ideological material circulated on WhatsApp and Telegram groups. The chargesheet is expected to mention the role of preacher Mufti Irfan Ahmad Wagay and self-recorded videos allegedly created by Umar that promoted violent jihad and glorified martyrdom.

Officials say the conspiracy extended far beyond the Red Fort blast itself. The module was allegedly preparing for multiple “high-impact" terror strikes across Delhi, Jammu & Kashmir and Uttar Pradesh, including possible Hamas-style drone and rocket attacks.

Investigators claim the group procured ammonium nitrate and other explosive chemicals in small quantities from different locations to avoid suspicion. The materials were allegedly stored in rented premises in Haryana’s Faridabad. The Hyundai i20 used in the blast was allegedly procured and registered through co-accused Amir Rashid Ali.

Technical assistance was allegedly provided by Jasir Bilal Wani alias Danish, who investigators say helped modify drones, batteries and other equipment. Other accused, including Dr Muzammil Shakeel Ganai, Dr Adeel Ahmad Rather and Dr Shaheen Saeed, allegedly handled logistics, procurement of raw materials, weapons arrangements and financing.

According to the probe, the module raised around Rs 26 lakh internally to fund terror activities, including fabrication of improvised explosive devices (IEDs). Investigators also allege that members tested explosives and weapons at different locations while using spycraft methods such as duplicate SIM cards and encrypted messaging platforms to evade detection.

The NIA has further alleged that overground workers and sympathisers played a critical role in sheltering operatives and destroying evidence. Bilal Naseer Malla allegedly harboured Umar and assisted in erasing evidence after the attack. Mohammad Soyab from Faridabad is accused of aiding and sheltering Umar, while Yasir Ahmad Dar allegedly participated in planning meetings.

In February this year, the NIA arrested Zameer Ahmad Ahangar from Ganderbal and Tufail Ahmad Bhat, both alleged overground workers linked to the conspiracy.

The chargesheet is expected to invoke multiple provisions of the Unlawful Activities (Prevention) Act (UAPA), including Sections 16 and 18 relating to terrorist acts and conspiracy, along with terror financing and support provisions. Sections 3 and 4 of the Explosive Substances Act, dealing with causing and attempting explosions likely to endanger life, are also expected to be included.

Investigators say the case marks a significant shift in terror recruitment patterns, highlighting the emergence of educated, self-funded radical networks using technology, encrypted communication and professional expertise to plan large-scale attacks.

News india WhatsApp, IEDs And Hamas-Style Plans: NIA Uncovers How White-Collar Module Planned Red Fort Attack

Read More