On November 21, 2025, Indian authorities revealed the extent of an unprecedented anti-terror crackdown that has sent shockwaves across the country. The operation, which spanned multiple states and involved a coordinated response from police and anti-terror squads, uncovered a sprawling terror network with roots extending from Pakistan to several Indian cities. According to DefenceWeb and ET Explains, the Punjab Police shot dead two ISI-linked suspects in an encounter in Ludhiana, recovering Chinese-made grenades and cross-border weapons. This dramatic confrontation was only one piece of a much larger and more complex puzzle that investigators are racing to solve.
The scale of the crackdown, described by ET Explains as the largest in recent years, is staggering. It covers Delhi, Gujarat, Hyderabad, Uttar Pradesh, Rajasthan, and beyond. The operation has already led to the seizure of 2,900 kilograms of explosives in Faridabad and the exposure of a terror web that includes bio-terror plots, drone smuggling, and online radicalisation. At the heart of the investigation lies the disturbing revelation that Pakistan-based handlers have been directing modules inside India using virtual numbers and encrypted channels, making detection and disruption all the more challenging.
In Ludhiana, the Punjab Police’s encounter with the ISI-linked suspects was swift and deadly. Officials reported that the men were acting on instructions from a handler across the border, who managed communications through virtual numbers to evade surveillance. The recovered grenades and weapons, believed to be manufactured in China and smuggled into India, highlight the international dimension of the threat. According to police sources cited by DefenceWeb, "the module was being directed by a Pakistan-based handler through virtual numbers as part of an intensified crackdown on terror and gangster networks in the state." The operation is part of a broader state-wide effort to dismantle both terror and organized crime syndicates, which officials say are increasingly intertwined.
Meanwhile, in Gujarat, the Anti-Terrorism Squad (ATS) made a series of explosive discoveries following the interrogation of operatives linked to the Islamic State Khorasan Province (ISKP). These individuals, arrested for their role in a ricin poison terror plot, provided investigators with crucial evidence tying their activities to handlers in Pakistan. Raids conducted at the residence of Mohammad Suhail in Uttar Pradesh led to the recovery of an ISIS flag, while a simultaneous search at Dr. Ahmed Mohiyuddin Saiyed’s home in Hyderabad yielded significant digital evidence.
One of the more chilling findings came from a parcel delivered to Dr. Ahmed two months earlier. The package, containing Rs 1.5 lakh, was sent by fellow operatives Azad Suleman Sheikh and Suhail, allegedly at the direction of a Pakistani agent. ATS sources told ET Explains that this financial link suggests a sophisticated cross-border funding operation. Investigators are now working to trace the origin of the funds and identify those responsible for arranging the cash transfers. The discovery of weapons in another parcel, also linked to Azad and Suhail, further underlined the seriousness of the threat.
Dr. Ahmed’s story offers a sobering glimpse into the process of radicalisation that fuels such networks. Despite holding a doctorate, Ahmed was reportedly radicalised after completing his academic studies. According to ATS sources, "his wife, upon discovering his extremist views, separated from him within two months of their marriage." The digital evidence recovered from his devices revealed that he had promised a handler named Abu Khaleja that he would carry out a "significant act," indicating a high level of commitment to the cause and suggesting that the plot was at an advanced stage.
The investigation took another turn when interrogations revealed that Azad, originally from Uttar Pradesh, had traveled to Baramulla in Jammu and Kashmir with the intention of executing a terror strike. Failing to find a suitable target there, he moved on to Haridwar, Uttarakhand, where he conducted reconnaissance of temples after meeting a man on a train. This mobility and willingness to adapt plans highlight the persistent risk posed by such operatives, as well as the challenges faced by law enforcement in tracking their movements across state lines. Gujarat ATS is now tracking every individual linked to the network as the probe widens.
Beyond these individual cases, the broader crackdown has revealed a terror web of alarming sophistication. According to ET Explains, agencies have uncovered evidence of ISIS-aligned doctors radicalised online and Pakistan-based handlers teaching the manufacture of ricin—a highly toxic agent with potential for mass harm. The use of drones, digital payments, and encrypted messaging has allowed these networks to operate with a level of stealth and agility previously unseen. CCTV footage and digital forensics have played a crucial role in piecing together the network’s activities, but officials warn that the threat is far from neutralized.
One particularly notable aspect of the current crackdown is the intersection of terror and organized crime. As DefenceWeb reports, the Punjab Police’s intensified efforts are aimed not just at terror cells but also at gangster syndicates, which increasingly serve as conduits for weapons, funding, and logistical support. The recovery of Chinese-made grenades and cross-border weapons in Ludhiana is a stark reminder of the international black market’s role in arming these groups. Law enforcement officials stress that dismantling these networks requires cooperation across states and agencies, as well as international collaboration to disrupt cross-border supply chains.
The revelations have sparked concern among security experts and policymakers alike. The use of educated professionals, such as doctors, in terror plots demonstrates that radicalisation is not confined to any single demographic or socioeconomic group. The financial trails uncovered by ATS investigators point to a well-organized effort to fund operations through both traditional and digital means. The willingness of operatives to travel long distances, adapt their plans, and exploit new technologies suggests that India’s security apparatus must remain vigilant and adaptable.
As the investigation continues, authorities are urging the public to remain alert and report any suspicious activity. The crackdown has already led to multiple arrests and the recovery of significant quantities of explosives and weapons, but officials caution that more work remains to be done. The probe now extends across several states, with investigators racing to identify and apprehend anyone linked to the network.
For now, the events of November 21, 2025, stand as a stark reminder of the evolving nature of the terror threat facing India. With cross-border handlers, radicalised professionals, and sophisticated funding mechanisms at play, the country’s security agencies face a formidable challenge. Yet, as the recent breakthroughs demonstrate, coordinated action and relentless investigation can yield results—even against the most complex and determined adversaries.
