Pahalgam terror attack:  The National Investigation Agency (NIA), which is probing the Pahalgam terror attack, has made significant revelations regarding the planning, logistics and communication methods used by the terrorists involved in the incident. According to the agency, the three terrorists linked to the attack were killed in an encounter on July 28, 2025, and two smartphones recovered from them have now become key evidence in the investigation.

Two smartphones recovered after encounter

During the operation, security forces recovered two mobile phones from the slain terrorists, a Redmi 9T (orange colour) and a Redmi Note 12 (black colour). Forensic examination of these devices reportedly uncovered crucial details about the origins of the phones and the terror network supporting the attackers.

The NIA stated that both phones had reached Pakistan through Xiaomi’s supply chain before eventually ending up in the hands of the terrorists involved in the Pahalgam attack.

Redmi 9T linked to Karachi-based import network

Investigators traced the Redmi 9T using its IMEI number and contacted Xiaomi Global to obtain the device’s supply records. According to company data, the handset was part of a large consignment delivered to Pakistan on January 1, 2021.

The shipment had allegedly been imported by Karachi-based Tech Sirat Pvt Ltd. Records further showed that the financial and logistical arrangements for the consignment were handled by Karachi’s Faysal Bank. The delivery address mentioned in documents was listed as Faysal House, Main Branch, Shahrah-e-Faisal, Karachi.

The agency noted that the bank’s name has surfaced in earlier terror-related investigations and international reports. Some reports had earlier claimed that accounts linked to banned terror outfits were maintained there. However, the bank has consistently denied such allegations, saying it took action whenever sanctions were imposed.

Mobile activated only before the attack

According to investigators, the Redmi 9T remained inactive for nearly four years after reaching Pakistan. It was reportedly activated only in 2025 before the Pahalgam attack and later recovered from one of the terrorists.

Officials believe the delayed activation indicates that the device may have been deliberately preserved for operational use rather than regular communication. Investigators suspect the phone was stored securely and handed over specifically for the terror mission.

Redmi Note 12 also followed similar pattern

The second phone, a Redmi Note 12, was reportedly imported into Pakistan in 2023 by Lahore-based Air Link Communications Limited, one of the country’s major mobile distribution companies.

NIA officials stated that this phone too remained unused for a long period and was activated shortly before the attack. Interestingly, forensic examination found no call logs, text messages, social media chats or internet communication data in either device.

Terrorists used radio communication instead of mobile networks

The absence of digital communication records led investigators to conclude that the terrorists relied on long-range radio communication systems instead of conventional mobile networks or internet-based services.

According to officials, these communication methods allow secure contact over several km without leaving traces typically found in mobile or internet records. This explains why investigators could not recover traditional communication data from the phones.

Attack planning linked to navigation app data

Forensic analysis also revealed that the terrorists had planned the attack in advance. Investigators discovered that the navigation application AlpineQuest contained saved locations related to Baisaran Valley, the site of the attack.

Several screenshots of the valley, dated April 15 and 16, were also recovered from the phones. The actual attack took place on April 22, suggesting detailed reconnaissance and pre-planning days before the assault.

NIA earlier revealed Chinese route of GoPro camera

In another major finding disclosed earlier on May 24, the NIA had revealed that a GoPro action camera recovered from terrorists involved in the Pahalgam attack had also reached them through China-based supply routes.

The camera, manufactured by American company GoPro Inc., was recovered after a separate encounter in the Dachigam forests following the attack. Investigators believe tracing the movement of the device may expose broader networks responsible for providing equipment, funding and logistical support to terror outfits operating in Jammu and Kashmir.

GoPro reportedly informed investigators that the camera had been supplied to an authorised distributor in China. Authorities are now examining how the equipment was diverted to terrorists through illegal procurement channels and intermediaries.

NIA officials have observed an increasing trend among terror organisations in Jammu and Kashmir of using body cameras and action cameras during attacks. Such devices are allegedly being used to record assaults and later circulate propaganda material online.

Investigators are probing possible local support networks and covert procurement systems involved in supplying such equipment.

Pakistan-based Lashkar handler named mastermind

The NIA’s charge sheet filed on December 15, 2025, reportedly concluded that the Pahalgam attack had direct links to Pakistan-based terror infrastructure.

According to the investigation, the mastermind of the attack was Lashkar-e-Taiba operative Saifullah alias Saifullah Sajid Jutt alias Langda, a resident of Kasur near Lahore in Pakistan.

Investigators identified Sajid Jutt as the main handler who remained in continuous contact with the three terrorists during the operation. He allegedly shared the exact location of Baisaran Valley and guided the attackers in real time throughout the assault.

Tour guides arrested for alleged failure to alert authorities

The NIA charge sheet also named tourist guides Parvez Ahmad Jothar and Bashir Ahmad Jothar, claiming that the attack could possibly have been prevented if timely information had been provided to security agencies.

According to investigators, the guides had seen the terrorists in the Baisaran area before the attack but did not alert authorities. Both individuals have since been arrested.

The agency alleged that a day before the attack, the terrorists sought food and assistance in the name of religion and ate at Parvez’s hut. They also reportedly carried food supplies with them before carrying out the attack.

Attack described as targeted religious killing

The charge sheet described the incident as a targeted killing based on religion. A total of 26 persons, including 25 tourists and one local resident, lost their lives in the attack.

The three Pakistani terrorists killed during Operation Mahadev on July 28, 2025, were also named as accused in the case.

Links to earlier Z-Morh tunnel attack

Investigators further linked Sajid Jutt and his accomplices to the October 20, 2024 firing incident at Srinagar’s Z-Morh Tunnel, where seven persons were killed.

During that incident, security forces had killed a terrorist named Junaid. Weapons and equipment recovered from him, including an M4 carbine and a GoPro camera, were reportedly similar to those used in the Pahalgam attack.

Officials believe both incidents were carried out by the same terror module.

Terrorists killed in July 2025 operation

The NIA stated that Pakistani terrorists Faisal Jutt alias Suleiman, Habib Tahir alias Jibran Bhai and Hamza Afghani,  all linked to the Pahalgam attack, were killed by Indian security forces during Operation Mahadev on July 28, 2025.

Meanwhile, the alleged mastermind Sajid Jutt alias Langda remains among India’s most wanted terrorists, with a reward of Rs 10 lakh announced for information leading to his capture.