The Uttar Pradesh ATS has widened its investigation after two arrests in an alleged AQIS-linked module, examining around 50 people, their digital communications and bank transactions. Investigators are giving particular attention to five or six individuals identified during the probe.

UP ATS Examines Bank Transactions After Alleged AQIS-Linked Arrests

The420 Correspondent
5 Min Read

Lucknow. The Uttar Pradesh Anti-Terrorist Squad (ATS) has expanded its investigation following the arrest of two suspects allegedly linked to a module associated with the ideology of Al-Qaeda in the Indian Subcontinent (AQIS). During questioning and examination of digital devices, investigators have gathered information about around 50 people allegedly connected with the network in the state. The ATS is now examining their social media contacts, communications, digital activities and financial transactions. The roles of five to six people identified during the investigation are under particular scrutiny.

The ATS arrested 19-year-old Mohammad Nabeel from the Didarganj area of Azamgarh on September 12. Two days later, on September 14, the agency arrested Maqsood Ali, a resident of Siddharthnagar, from Tamil Nadu. According to the agency’s allegations, the two were allegedly attempting to connect young people with extremist ideology through a WhatsApp group named ‘La Ghalib-Illallah’ on social media.

FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals

According to the ATS, examination of Nabeel’s mobile phone led to the recovery of material related to AQIS ideology and videos concerning bomb-making. The agency has also alleged that the two had attempted to obtain information related to bomb-making. The digital material is now undergoing technical examination to determine the nature of the activities allegedly being pursued by the suspects and their links with other individuals in the network.

After the arrests, investigators began examining the suspects’ mobile phones, social media accounts and conversations on messaging platforms. During this process, information about several other people reportedly came to light. The ATS is examining the links between the contacts, including how long the individuals had been communicating, what type of digital material was shared and which people remained in regular contact with the suspects.

Different roles among around 50 people

The nearly 50 people identified during the investigation are not being treated as a single group. The ATS is trying to determine which individuals were merely in contact through social media or messaging applications and which may have allegedly played an active role in the activities under investigation. Analysis of digital evidence has reportedly led investigators to identify five to six people whose roles are considered particularly suspicious.

The available digital and other evidence concerning these individuals is being examined separately. Some suspects have also reportedly been questioned. Investigators are seeking to establish each person’s role through digital communications and other evidence rather than treating mere contact with a suspect or membership of an online group as proof of involvement in criminal activity.

Bank accounts and transactions under scrutiny

The ATS has expanded the investigation beyond digital activity to financial transactions. Bank accounts belonging to people who were in direct contact with Nabeel and Maqsood are also being examined. The agency is trying to determine whether any funds were allegedly provided for the activities under investigation and, if so, where the money originated.

Investigators are also examining whether financial transactions can establish links between individuals under scrutiny. Any suspicious transactions identified during the investigation will be assessed alongside digital evidence and other material before the role of the concerned individuals is determined.

Technical analysis of digital messages and files continues

The ATS is conducting technical analysis of conversations on social media, WhatsApp and other messaging platforms, along with files and messages allegedly shared through these channels. The objective is to understand the possible structure of the network and trace connections between its members. Material recovered from mobile devices is being compared with other evidence gathered during the investigation.

The investigation is currently focused on determining how many of the nearly 50 people identified were merely in contact with the suspects and how many may have allegedly played an active role. The roles of five to six individuals are receiving particular attention. Further legal action will depend on the findings of the digital evidence analysis, questioning and examination of financial transactions.

About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.

Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics

Stay Connected