The National Investigation Agency (NIA) has intensified its operations in Kashmir following a series of high-profile terror incidents, including a deadly car blast near Delhi's Red Fort. On December 1, 2025, NIA teams conducted coordinated raids at eight locations across Pulwama, Shopian, and Kulgam districts, targeting individuals and networks linked to a “white-collar” terror module. These operations underscore the government’s ongoing commitment to tackling both overt and covert terrorist activities in the region.
The raids focus on dismantling the financial, logistical, and recruitment networks that have enabled radicalization and terrorist acts. Authorities believe that these networks are highly organized and strategically positioned to facilitate terror activities, including recruitment of operatives, mobilization of resources, and coordination of attacks across states. The NIA’s operations are designed to disrupt these structures before further incidents can occur.
High-ranking officials from the NIA emphasized that the raids are part of a broader, ongoing investigation into terror financing, radicalization, and cross-regional collaboration among extremist groups. By targeting key nodes in the network, law enforcement aims to strengthen security in both urban centers and remote districts of Jammu & Kashmir.
Locations and Targets of the NIA Raids
The NIA executed searches at multiple critical locations across the Kashmir Valley. In Shopian, the residence of Moulvi Irfan Ahmad Wagay was a primary target. Wagay has been identified as a central figure in radicalizing and recruiting individuals for the “white-collar” terror module linked to the Red Fort car blast. He was previously arrested in October by local police and taken into NIA custody when the agency assumed responsibility for the investigation.
Additional raids took place in Pulwama at Koil, Chandgam, Malangpora, and Samboora areas. These sites were reportedly linked to associates and facilitators connected to the Delhi car blast. Authorities are scrutinizing these locations for evidence of financial transactions, recruitment activities, and logistical planning that supported the terror module.
In Kulgam, the residence of Dr Adeel Ahmad Rather, who was arrested in Saharanpur, Uttar Pradesh, earlier in November, was also searched. Rather’s connections are believed to play a significant role in the module’s operational planning and coordination across multiple states, linking regional operatives to broader terror networks.
Background of the White-Collar Terror Module
The “white-collar” terror module represents a shift in terrorist operational strategy, emphasizing financial manipulation, covert recruitment, and strategic planning over conventional street-level attacks. Investigations have revealed that members of this module were involved in fundraising, creating falsified documents, and leveraging professional networks to recruit operatives for violent operations.
The module came into the national spotlight after the car blast near Delhi's Red Fort, which resulted in 15 fatalities and numerous injuries. Authorities have since traced multiple channels of communication, recruitment, and funding to operatives based in Jammu & Kashmir, highlighting the module's sophisticated and decentralized structure.
Moulvi Irfan Ahmad Wagay is alleged to have orchestrated much of this operation, serving as the mastermind behind the recruitment and radicalization strategies that targeted vulnerable individuals in both urban and rural settings. His arrest and subsequent custody transfer to the NIA marked a critical step in dismantling the module’s hierarchy.
Evidence Collection and Investigative Measures
During the raids, NIA officials collected a range of evidence, including electronic devices, documents, financial records, and communication data. These materials are expected to provide insights into the operational planning, recruitment methods, and financial channels used by the module. Forensic analysis of digital devices will likely reveal further connections to other operatives and potential future threats.
Authorities are also focusing on tracing illicit financial transactions and examining social media communications that facilitated recruitment and radicalization. By systematically mapping these networks, investigators aim to preempt potential attacks and dismantle the infrastructure supporting extremist activities.
The coordination of multiple raids simultaneously across districts indicates a strategic approach, emphasizing quick action and minimal risk of evidence destruction or operational compromise. The NIA has also deployed specialized units to secure the collection and documentation process, ensuring that all gathered materials are admissible in court proceedings.
Impact on Regional Security and Public Safety
These raids reinforce the Indian government’s broader security strategy in Jammu & Kashmir, targeting not only violent operatives but also the supporting networks that enable terrorism. By addressing the “white-collar” aspect of terror modules, authorities aim to reduce the flow of resources, dismantle communication channels, and prevent recruitment before it escalates into violent acts.
Public safety measures have been heightened in the districts where raids were conducted. Security forces have increased patrols, monitored key transport hubs, and implemented checkpoints to ensure minimal disruption while maintaining vigilance against potential retaliatory or coordinated attacks.
The operation has also served as a deterrent to other extremist networks in the region, signaling that law enforcement agencies are capable of detecting and neutralizing both visible and covert threats. Residents are being reassured that comprehensive security protocols are in place to prevent further incidents.
Future Directions of the Investigation
The NIA investigation is ongoing, with further searches, interrogations, and intelligence-gathering operations expected in the coming weeks. Investigators are likely to follow leads emerging from the current raids to uncover additional members of the module and any cross-border linkages that may exist.
Authorities are coordinating with state police, central intelligence agencies, and cyber forensic teams to analyze the collected data comprehensively. This multi-layered approach aims to map the full extent of the module’s activities, anticipate potential threats, and prosecute individuals involved in terrorism financing, recruitment, and planning.
The raids conducted on December 1, 2025, are a critical milestone in India’s ongoing counterterrorism efforts, particularly against evolving, non-traditional modules that rely heavily on digital tools, financial networks, and professional channels to further extremist agendas. The outcome of these operations will likely shape both investigative tactics and regional security policies in the months ahead.
Also Read: India Mandates Sanchar Saathi App on All Phones for Safety
About the Author:
Harshit Raj
