NIA takes over investigation from Gujarat ATS in case of 3 accused linked to ISIS

The case of three terrorists of the Islamic State of Khorasan Province (ISKP) arrested by the Gujarat Anti-Terrorist Squad (ATS) in November 2025 has now been handed over to the National Investigation Agency (NIA).

The Union Home Department has issued official orders in this regard, after which the Ahmedabad unit of the NIA will start an in-depth investigation of this international terrorist network.

What will happen in the NIA investigation ?

The NIA will investigate how these three joined the terrorist group and where the funding was coming from. Details will be obtained as to whether any of their other associates or sleeper cells are active in Gujarat or other states of India. The NIA will thoroughly investigate the conversations made on the dark web through the seized laptops and mobile phones.

November arrests

Three persons were arrested in a joint operation by the Gujarat Anti-Terrorist Squad (ATS) and central agencies on November 9 for suspicious activities near Adalaj in Gandhinagar. These terrorists include 35-year-old Dr Ahmed Mohiuddin Sayed, who was in touch with extremists living abroad affiliated with ISKP. Along with Ahmed, his two associates Mohammad Suhail and Azad Saifi were also caught. According to the ATS, these three were preparing for terrorist attacks in Ahmedabad, Lucknow and Delhi and were kept under surveillance for a long time.

After the arrest, ATS teams searched the residence of accused Mohammad Suhail Mohammad Salim Khan. Where a black ISIS flag, several mobile devices, hard drives and memory cards were found. The ATS has had great success with the recovery of these materials. Sources said the agency is investigating whether Suhail was receiving instructions from foreign handlers or spreading extremist material in the state.

Terrorist Suleh sent a parcel to Azad

A shocking thing has come out in the interrogation of another arrested suspected terrorist Azad Suleman Sheikh that Suhail had allegedly sent him a parcel before his arrest. The contents of the parcel have not been disclosed, but the investigation team has started an investigation.

It has been revealed that terrorist Azad Sheikh performed reconnaissance activities in temples in Haridwar. Azad had been wanting to carry out some big incident for a long time.

Literature on how to maintain digital privacy found

According to the ATS, the third accused, Dr Ahmed Syed, was preparing to carry out a major terror attack in India. His digital trail shows a deliberate and systematic effort to evade surveillance. Literature on how to maintain digital privacy was found in the conversations between Dr Ahmed and his handler. This included modules on encrypted communication, hiding IP addresses, accessing the dark web and using code-based messaging.

The officers said that Ahmed worked almost entirely through encrypted channels, frequently changed platforms and identities, and relied on the dark web to communicate with handlers abroad.

Ahmed seen leaving Ahmedabad hotel

Critical CCTV footage has been recovered from Hotel Grand Embassy, ​​located opposite Lucky Hotel in Ahmedabad’s Lal Darwaza area. The footage shows terrorist Dr Ahmed Syed leaving the hotel on the evening of November 7, 2025.

Encrypted communication trail revealed

The investigation team further claimed that Dr Ahmed used code words in conversations and relied on dark-web communication channels to maintain contact with his handlers. Digital forensics teams are currently examining the recovered data and recovered from the seized devices.