Meerut | A joint operation by the Uttar Pradesh Anti-Terrorist Squad (ATS) and STF has exposed an alleged sleeper cell network operating in western Uttar Pradesh. Investigating agencies arrested four young men from Saharanpur who are accused of conducting reconnaissance of sensitive locations, recruiting youths and conspiring in anti-national activities while allegedly remaining in contact with Pakistani gangster Shahzad Bhatti and foreign handlers. The case has triggered heightened alertness among security agencies across the region.
According to investigators, the arrested accused include Mahakab and Shahrukh from Saharanpur, Gagandeep alias Guri Singh from Muzaffarnagar and Musharraf from Haridwar. Preliminary investigation reportedly revealed that the four were in contact with Pakistani gangster Shahzad Bhatti and alleged ISI handlers through social media platforms, video-calling applications and encrypted chat services. Agencies claim the suspects were instructed to gather information about sensitive locations and expand the network by influencing local youths.
FCRF’s Flagship Cyber Law Certification Returns With a New Four-Week Cohort
Sources associated with the probe said the accused had allegedly been tasked with conducting reconnaissance of a political party office, a hospital and other important establishments. Investigators also found indications of discussions related to weapons, money and possible attacks. Agencies are now trying to determine whether the network was confined to western Uttar Pradesh or had links extending to other states as well.
Investigators further stated that the accused were operating under the cover of ordinary professions. Mahakab and Shahrukh reportedly worked as welders and frequently travelled across different states for work, while Gagandeep worked as a truck driver. Agencies believe these frequent movements and external contacts were used for reconnaissance and network expansion activities. Residents of their native villages have also expressed shock following the arrests.
Security officials said the suspects allegedly came into contact with foreign handlers through platforms such as Instagram and WhatsApp. Thereafter, instructions were allegedly passed on through video calls and encrypted communication channels. Investigators also suspect that some of the accused held a meeting in Noida to discuss future activities, logistics and resources. Digital devices, chat histories and online transaction records are currently undergoing forensic examination.
Western Uttar Pradesh has witnessed multiple cases in recent years involving suspected terror modules and foreign-linked networks. Security agencies believe that youths who frequently travel across states for labour work or other occupations are increasingly being targeted through social media platforms. Authorities therefore consider the case highly sensitive from a national security perspective.
Renowned cyber crime expert and former IPS officer Prof. Triveni Singh said, “Terror and organized crime networks are increasingly using social media, encrypted messaging applications and video-calling platforms to influence young people at a rapid pace. Earlier, terror modules operated through limited physical networks, but now digital platforms are allowing them to reach small towns and rural areas. In such cases, digital forensics, social media monitoring and financial transaction analysis become extremely important.”
Investigating agencies said the accused would be taken on remand for detailed interrogation to determine the extent of instructions they had received and identify other individuals linked to the network. Officials are also examining whether any sensitive information or location-based data had already been shared with foreign contacts.
Following the development, security surveillance and intelligence monitoring have been intensified across western Uttar Pradesh and adjoining regions. Agencies are now closely monitoring social media-driven radicalisation and recruitment patterns to ensure that any potential conspiracy can be identified and neutralised before it escalates further.
