White-collar terror is now an inescapable reality

On the evening of November 10, New Delhi was rocked by a powerful explosion that tore through a Hyundai i20 near the bustling Red Fort Metro Station. Thirteen people were left dead and over 20 injured — the shattered glass and charred vehicles testified to the brutality of the attack. Initially, the investigation was mired in disbelief — there were no clear signs of traditional explosives: no wires, no shrapnel and no immediate forensic clues.

As investigators sifted through the remains, a chilling pattern emerged: the spectre of terrorism was once again at Delhi’s doorstep, after more than a decade.

Security agencies have identified a prime suspect, a doctor from Pulwama (Kashmir), believed to be part of a sophisticated terror module. Reports suggest that Dr Umar Mohammed was working at Government Medical College, Anantnag, where his services were terminated due to medical negligence. Reportedly, after his expulsion, he joined the Al-Falah School of Medical Science and Research Centre at Faridabad in 2023.

Emerging evidence ties this white-collar terror module to a notorious Pakistan-backed outfit, Jaish-e-Mohammed, underlining how terror groups are increasingly manipulating educated local recruits to distance themselves from direct involvement.

Since the launch of Operation Sindoor, there has been no let-up in the frequency of terror attempts. Experts estimate that there have been several dozen foiled attempts since May, with security forces gaining actionable intelligence from each operation. Most plots have seen the involvement of local modules, sometimes with direct evidence like Pakistani voter IDs and contraband.

Prior to the car blast, law enforcement agencies made two significant recoveries. On November 9, the police seized nearly 3,000 kg of explosives, including 350 kg of ammonium nitrate, from residential buildings tied to a terror network operating from Kashmir. The cache also included assault rifles, pistols, bomb-making timers and remote detonation devices.

On the same day, the Gujarat Anti-Terrorist Squad (ATS) arrested three suspects, recovering Beretta pistols and cartridges, and unearthing evidence of an ongoing plot to target major urban centres. Both cases involved professionals — doctors and university employees — providing yet more proof of the trend towards white-collar terrorism.

The size and sophistication of the armaments point to a concerted effort to trigger mass-casualty incidents, highlighting a disturbing level of intent and logistical capability within these cells.

The Delhi incident marks a visible shift in Pakistan’s approach to cross-border terrorism against India. No longer reliant solely on foreign fighters or direct infiltration, Pakistan’s deep state now seeks to orchestrate attacks by leveraging home-grown, white-collar professionals.

By employing disaffected local operatives — doctors, students, seemingly respectable citizens — these groups find new ways to evade detection, sow confusion during investigations and forestall leads.

It’s a deliberate attempt to maintain plausible deniability so that terrorist acts cannot be directly traced back to the Pakistan state or its institutions. Local operatives blur lines of attribution for security agencies, helping Pakistan strategically distance itself from direct links to militant operations, especially those with cross-border implications. It involves using proxy groups, fragmented networks or deniable assets to carry out operations.

There are many domestic and international factors for this change of strategy. Firstly, Pakistan seeks to avoid the international fallout of a primary role in terror incidents, making diplomatic or military responses more difficult. The Financial Action Task Force had issued a fresh warning to Pakistan in October, stating that its removal from the grey list in 2022 did not grant immunity from global monitoring or scrutiny regarding money laundering and terrorist financing.

More importantly, growing domestic instability due to a resurgence of the Tehrik-e-Taliban Pakistan, sectarian violence and the conflict with Afghanistan have led to increasing commitment of the Pakistan army in internal security duties and on the Durand Line. It also feels the palpable pressure to rebrand its image globally while retaining strategic leverage in regional conflicts.

India’s security establishment faces unprecedented challenges wherein old battle lines — foreign infiltrators versus home-grown insurgents — have blurred, making detection more complex. Terror modules now merge professional cover with sleeper-cell tactics, staying under the radar. Large-scale recoveries at different locations indicate an intent not just for isolated attacks, but possible widespread operations across India directed by handlers across the border.

The challenge for agencies lies in proactively mapping new recruitment channels, enhancing HUMINT (human intelligence) on radicalisation within professional ranks and using forensic data and digital surveillance to connect logistical dots. Institutions also need to carry out a thorough selection process, including detailed background checks before employment.

Counter-radicalisation efforts within universities and professional institutions need to be considered to address this evolving threat. India can take a cue from France, which launched the ‘Prevent to Protect’ plan in 2018 to counter radicalisation, focusing on prevention through coordinated government action involving social, educational, security and prison systems. It builds on earlier plans and aims to shield people from radicalisation, widen detection networks, train stakeholders and design disengagement programmes.