‘White-collar terror ecosystem’ near Indian capital: Faridabad terror module busted by Jammu and Kashmir Police. What could have happened?

The recovery of hundreds of kilogrammes of explosive precursor material, Kalashnikov assault rifles and propaganda material from near the heart of the Indian capital New Delhi is evoking memories of earlier terror attacks. The bust, which followed weeks of investigation and the interrogation of a Kashmiri doctor working in Faridabad in the National Capital Region (NCR), took place just weeks ahead of the anniversary of the 2008 Mumbai terror attacks and two decades after the 2005 Delhi serial blasts. The recoveries and arrests point to the existence of what police described as a ‘white-collar terror ecosystem’, with links to Pakistan-based Jaish-e-Mohammed (JeM) and the al-Qaeda-linked Ansar Ghazwat-ul-Hind (AGuH). Clearly, a major terror attack—or a series of attacks—was being planned, aimed at creating mayhem in or near India’s capital, even as the wounds of the recent Pahalgam terror attack are yet to heal.

A terror module spanning J&K, Haryana, Uttar Pradesh and beyond

The joint operation, involving Jammu and Kashmir Police, the Intelligence Bureau, Haryana Police and Uttar Pradesh Police, dismantled a network that was allegedly building a sophisticated terror infrastructure in northern India. It marks a chilling evolution in terrorist strategy that combines radical ideology with professional cover to evade detection. The white-collar terror ecosystem involved working professionals and clerics operating far from traditional conflict zones, and dangerously close to India’s capital.

White collar terror ecosystem: How the probe began and evolved

Jaish-e-Mohammed propaganda posters that appeared in Srinagar’s Nowgam area on 19 October were the trigger for the investigation. The posters threatened security forces and promoted extremist ideology. Police registered a case under the Unlawful Activities (Prevention) Act and other laws and began making arrests. Interrogations in Kashmir quickly revealed a much wider network with transnational links stretching across multiple states.

North India terror module is unprecedented in scale and composition

Two doctors from south Kashmir—Dr Adil Ahmad Rather and Dr Muzammil Ahmad Ganaie—were at the centre of the conspiracy, according to the police. Both were highly educated professionals who allegedly used their medical positions to disguise radical activities, including recruitment through encrypted channels. Dr Ganaie was employed at Al-Falah Medical College in Faridabad, while Dr Rather was a former Senior Resident at Government Medical College, Anantnag.

Dr Ganaie had rented a house in Dhauj village in Faridabad roughly three months before the raids. The property was used as a safehouse to store arms, explosives and improvised explosive device (IED) components. It was the interrogation of Dr Rather, arrested from Saharanpur in Uttar Pradesh on 6 November, that led investigators to the Faridabad cache.

What the police found in Faridabad: A stunning cache

The raid on the Dhauj property on Sunday (Nov 9), led to the recovery of about 360 kilogrammes of ammonium nitrate—an industrial chemical often used in bomb-making.

Police also found an AK-47 rifle, pistols, ammunition, timers, batteries, electronic circuits and inflammable liquids. One rifle was reportedly recovered from the vehicle of a woman doctor associated with the suspects. Another raid in the same area the following day led to the seizure of additional materials. Communication devices and incriminating documents indicating contact with handlers based in Pakistan were also recovered.

Seven people, all hailing from Jammu and Kashmir, have been arrested so far in connection with the case. A cleric from Shopian and several Srinagar-based operatives were detained for assisting with logistics, propaganda and recruitment.

Hiding in plain sight: How the terror module was operating among us

Investigators believe the terror group had ties to proscribed organisations Jaish-e-Mohammed and possibly other transnational jihadist networks. The suspects were hiding in plain sight behind their professional backgrounds, operating covertly, raising funds and procuring chemicals, weapons and equipment without drawing suspicion.

What could have happened: Massive scale of a possible terror attack

The recovery, described by security officials as one of the largest hauls in recent years, likely prevented a catastrophic attack in or near Delhi—potentially on the scale of the 2005 Delhi serial bombings or even the 26 November 2008 Mumbai attacks.
But it is not just the quantity of explosive material recovered but its location that makes this case so serious. Faridabad, in northern Haryana, sits on the outskirts of Delhi and was possibly being used as a staging ground for terror mayhem. Delhi and nearby urban centres could have been potential targets.

This is another sign of terrorist activity shifting from border regions and rural Kashmir to urban infiltration. Educated terror operatives are embedding themselves in civilian life, using their positions to build covert networks.