Mumbai Police Close Terror Threat Cases as 'True But Undetected'
Mumbai Police Close Terror Threat Cases as Undetected

Mumbai Police Hit Dead End in Terror Threat Investigations

Mumbai: The Mumbai police have reached a frustrating impasse in their investigation of multiple terror threat messages received over the past three years. In a significant development, the city's crime branch has recently closed two key cases, classifying them as "A Summary – true but undetected" despite strong technical evidence pointing toward Pakistani networks. This decision underscores the immense challenges law enforcement faces in tracing anonymous digital threats in an era of sophisticated cyber tools.

High-Profile Cases Closed Amid Security Alerts

The criminal intelligence unit (CIU) has been probing at least ten high-profile terror threat message cases that triggered major security alerts across Mumbai. Among these, two cases have now been formally closed after exhaustive investigations. Officials confirmed that while the threats were deemed genuine and credible, the actual senders could not be positively identified or traced, leaving the cases unresolved.

One of the earliest and most alarming incidents occurred on August 19, 2022, when the Worli traffic control room's WhatsApp number received twenty-six messages accompanied by screenshots. These communications warned of a potential terror attack even more devastating than the 26/11 Mumbai attacks. Another serious threat emerged on July 17, 2023, when a message in Urdu claimed that armed shooters equipped with AK-47 rifles were planning to target government installations and execute an attack reminiscent of 26/11.

Wide Pickt banner — collaborative shopping lists app for Telegram, phone mockup with grocery list

Technical Challenges and International Obstacles

Following these threats, Mumbai police immediately heightened security across the city, deploying additional personnel and intensifying checks at vulnerable locations. However, the threats eventually appeared to be hoaxes, though their origins remained shrouded in mystery. Given the international nature of the phone numbers involved, the cases were transferred to the CIU for a detailed and specialized investigation.

Police officials explained that while First Information Reports (FIRs) are routinely registered after such threats, arrests are exceedingly rare. The senders typically employ advanced technological tools to conceal their identities, including:

  • Virtual Private Networks (VPNs) that mask their true locations
  • Encrypted email services hosted on foreign servers
  • The dark web, which provides anonymity for illicit communications

During the probe, investigators utilized comprehensive technical surveillance and digital forensics. Their efforts revealed that one of the threatening numbers operated through Voice over Internet Protocol (VoIP), with IP addresses dynamically shifting across multiple countries, including Qatar, Singapore, and Ireland. Another number was traced directly to Pakistan, with telecom data conclusively pointing to the Pakistan Telecommunication Company network.

Domestic Leads Prove Inconclusive

In addition to international tracing, police also explored potential domestic connections. Their investigation focused on Bijnor in Uttar Pradesh, where a suspect named Anis Ahmed Sajid Ansari was identified. However, Ansari was later found to be working in Qatar, prompting authorities to issue a Look Out Circular (LOC) against him. Despite these efforts, no concrete evidence could be established linking him directly to the terror threats.

Investigators extracted mobile data, verified multiple suspects, and coordinated with various agencies, but they ultimately failed to pinpoint the actual sender. The use of virtual numbers, frequently changing IP addresses, and the lack of access to foreign-based data proved insurmountable hurdles.

Cases Classified as 'True But Undetected'

With no actionable leads and limited scope for further progress, Mumbai police have filed an A Summary report before a metropolitan magistrate court. This classification means the cases are acknowledged as genuine threats but remain undetected in terms of perpetrator identification. Officials have indicated that the investigations may be reopened if any fresh leads emerge in the future, keeping the door open for potential breakthroughs.

Pickt after-article banner — collaborative shopping lists app with family illustration

This situation highlights the evolving landscape of cyber-enabled terror threats and the critical need for enhanced international cooperation in digital forensics. As criminals increasingly leverage technology to obscure their tracks, law enforcement agencies must adapt with more robust tools and collaborative frameworks to protect public safety.