On a humid Thursday evening in late July 2026, inside the air-conditioned workout hall of the Renaissance Fitness Studio off National Highway 2 in Burdwan, West Bengal, gym-goers were completing their usual evening routines alongside off-duty police officers who lived in the gated complex. Among them was a soft-spoken 24-year-old who told neighbours he was a remote IT professional. He was mid-workout when six plainclothes officers from the West Bengal Police Special Task Force (STF) walked in, surrounded him, and quietly escorted him to a waiting unmarked vehicle.

Captured on facility surveillance cameras, the arrest of Mohammad Hamim Mondal was swift and discreet. Yet within twenty-four hours, the ripples of that quiet detention expanded across state borders and international boundaries. Digital footprints recovered from Mondal’s smartphone pointed 300 kilometres north to Gwarkhol, a rural village in Jharkhand’s Sahibganj district. There, counter-terrorism operatives arrested his 22-year-old girlfriend, Arpita Sarkar—an English Honours graduate and aspiring social media influencer whose Instagram page featured motorcycle travel reels.

What initially appeared to be a localized digital extortion racket was soon revealed to be a multi-layered espionage and sabotage network. According to official disclosures by STF Inspector General Gaurav Sharma, the duo operated under direct instructions from Pakistan-based handlers linked to Jaish-e-Mohammed (JeM) and the Shahzad Bhatti–Azmal Gujjar narco-terror network. Their assigned tasks ranged from tracking the unguarded movements of Chief Minister Suvendu Adhikari to honey-trapping cabinet members' families, procuring police uniforms, and preparing to infiltrate student protests at Delhi’s Jantar Mantar to trigger civil disruption.

In Custody, Under Scrutiny, and Political Tremors (August 2, 2026)

Inside the high-security interrogation facilities of the Special Task Force in Kolkata, counter-terrorism analysts and digital forensics experts worked to breach multiple layers of encryption on seized mobile devices. Produced before a magistrate at the Burdwan court, Arpita Sarkar was remanded to 13 days of STF custody, while Hamim Mondal was placed under a 14-day custodial remand.

Investigators focused on decrypting chat histories across Session, Element X, Telegram, and WhatsApp, aiming to map the full extent of the module's cross-border links. STF officers noted that the handlers utilized virtual phone numbers backed by SIM cards registered in the United Kingdom (+44) and Mexico (+52) to conceal their geographical origins.

The political fallout was immediate. Speaking to reporters regarding the security implications of the plot, Chief Minister Suvendu Adhikari emphasized the broader national threat: "This is an extremely sensitive matter. There are international links. It concerns national security. The STF is investigating the case and examining the information recovered from his mobile phone and other electronic devices. This is not just about my security; it is a matter of national security."

The Chief Minister also confirmed that the threat extended to other members of the administration, specifically pointing to Minister of State Umesh Rai. Rai had previously alerted law enforcement after receiving extortion threats from individuals claiming affiliation with a "Pakistani agency," who sent surveillance photographs of political headquarters and threatened to abduct his son.

Unmasking the Plot: Police Uniforms, Jantar Mantar, and Shadow Handlers (August 1, 2026)

During a press conference at the STF headquarters in Kolkata, IG Gaurav Sharma detailed the operational directives given to Mondal by his cross-border handlers.

"Hamim was working under instructions received through social media and encrypted messaging apps from individuals using Pakistani handles and phone numbers," IG Sharma stated. "He was instructed to buy police uniforms and head to Jantar Mantar in Delhi with a group of men and women to create disturbance there. We are yet to ascertain whether he was able to build that team and travel to Delhi."

The STF disclosed that the cell was instructed to exploit public demonstrations organized by the Cockroach Janta Party (CJP) at Jantar Mantar. Mondal was tasked with procuring police disguises to allow operatives to pass through security perimeters, infiltrate student groups, and execute acts of sabotage intended to trigger clashes with law enforcement.

Simultaneously, Mondal was assigned to conduct physical and digital reconnaissance on Chief Minister Suvendu Adhikari. Handlers repeatedly requested specific intelligence regarding the Chief Minister’s motorcade routes, travel schedules, and potential security lapses where he might remain unguarded near his residence in Chinar Park.

IG Sharma identified four primary Pakistan-based online handles directing the operation: Abir Jat333, Uzair, Rana, and Had (also identified as Hamad). "It is suspected that these handles are linked to Pakistan's Shahzad Bhatti gang," Sharma explained. "Through them, fundamentalist propaganda was spread and youths were targeted for brainwashing... The investigation is still at a very nascent stage, and more persons are likely to be arrested in the coming days."

The Raid in Sahibganj: Biker Reels and Honey-Trap Missions (July 31, 2026)

Twenty-four hours after Mondal’s detention, an STF tracking team crossed the state border into Jharkhand, executing an early-morning raid in Gwarkhol village, located in the Barharwa block of Sahibganj district. Officers arrested 22-year-old Arpita Sarkar from her family home.

To her online followers and local neighbours, Sarkar was an aspiring lifestyle influencer who posted travel updates and motorcycle riding reels. She held an English Honours degree from BSK College in Barharwa. However, digital forensics revealed a contrasting online presence.

Investigators recovered Instagram chat logs showing that Mondal had introduced Sarkar to the module, bringing her into direct communication with Pakistani handlers. Sarkar was assigned to establish contact with influential figures, including politicians and police personnel, to extract personal details and build leverage.

STF officers alleged that Sarkar played an active role in a honey-trap operation targeting the son of Minister of State Umesh Rai. The objective was to lure the minister's son into a compromised position, enabling the network to demand ransom and extract political intelligence. IG Sharma noted that "Arpita was fully aware of what she was doing," adding that investigators were examining whether foreign funds had been transferred into her accounts.

Neighbours in Gwarkhol village described Sarkar as reserved and noted that she spent significant time away from the area, particularly following her mother’s death five years earlier. During her college years, she frequently made extended visits to her maternal grandparents' residence in Kolkata—trips now being scrutinized by investigators to determine if they served as covert operational meetings with Mondal.

The Takedown in Burdwan: Posing as a Techie Among Police Officers (July 30, 2026)

The chain of arrests began at 8:00 PM on Thursday, July 30, when plainclothes STF personnel detained Mondal at the Renaissance Fitness Studio.

Mondal had moved into the Renaissance Township three months prior alongside his father, Moniruddin, his brother, and his sister. The family leased an apartment owned by Ekta Mehra, a Delhi resident who had not lived in the property for nine years. The lease was facilitated by a local grocery shop owner, Syed Mazharul Ali. To his neighbours and the local broker, Mondal claimed to be an IT professional working remotely. The gated enclave also housed several senior police officers, including a DIG and a SP, providing Mondal with an ideal cover environment.

The news of Mondal's arrest caused shock in his ancestral home of Dirghanagar village in Monteswar, East Burdwan. His uncle, Suman Mondal, expressed disbelief when informed of the terror allegations: "He is a simple, quiet, and timid young man who wasn't even confident riding a motorcycle. Our family has been in the rice trade for generations and has never given anyone reason for suspicion. This must be some misunderstanding."

The Trigger: Extortion Calls, Kompromat, and Digital Shadows (Mid-July 2026)

The STF investigation was initiated after state intelligence agencies detected extortion threats directed at Minister of State Umesh Rai in Howrah.

The minister received messages containing surveillance photographs of political offices, along with threats that his son would be honey-trapped and kidnapped unless extortion demands were met. Cyber forensics traced the social media handle transmitting the threats back to Sahibganj, identifying Arpita Sarkar as the user.

Analysis of Sarkar's encrypted communications revealed frequent exchanges with Mondal. Intercepted logs showed that Mondal was receiving directives from Pakistani accounts and passing specific tasks to Sarkar, establishing a functional operational link between the two.

The Prelude: Recruitment, Hawala, and Online Romance (2022 – May 2026)

The connection between Mondal and Sarkar began four years earlier, around 2022, when the two met via Instagram. Their online acquaintance eventually turned into a personal relationship during Sarkar’s frequent visits to Kolkata.

However, intelligence agencies estimate that their exposure to cross-border handlers developed much more recently. Approximately one year prior to his arrest, Mondal established contact with social media handles managed by the Shahzad Bhatti–Azmal Gujjar network—a syndicate backed by Pakistan's ISI and linked to Jaish-e-Mohammed. Over the subsequent seven months, intelligence monitoring detected illegal hawala funds flowing to Mondal to support local reconnaissance and logistics.

In early 2026, Mondal abruptly resigned from his job tagging garment barcodes at a factory in Howrah’s Pilkhana area, where his father had worked since relocating from Monteswar in 1998.

Between March and April 2026, handlers formally tasked Mondal with establishing an operational cell in West Bengal. He recruited Sarkar shortly thereafter. In May 2026, Mondal relocated his family to Renaissance Township in Burdwan, using his cover as an IT employee to conduct surveillance on targets in nearby Kolkata and prepare for sabotage operations.

Technical Summary of the Terror Cell

The operational parameters, communication channels, and target profiles identified by the Special Task Force are detailed in the matrix below.

Strategic Implications and Counter-Terrorism Analysis

The unravelling of the Mondal-Sarkar network highlights several evolving patterns in regional counter-terrorism and intelligence operations.

First, the case demonstrates the ongoing convergence between transnational terrorist organizations and transnational organized crime groups. Operatives linked to Jaish-e-Mohammed utilized the Shahzad Bhatti criminal syndicate to handle lower-level logistics, hawala transfers, and digital communications. By routing instructions through criminal networks involved in narco-trafficking and extortion, terrorist outfits attempt to insulate their primary operational cores while building disposable local cells.

Second, the recruitment strategy reflects a shift toward targeting digitally connected youth who can maintain convincing non-conventional covers. Operatives like Sarkar—an English Honours graduate and active social media user—allow terror networks to execute honey-trap and intelligence-gathering missions without triggering standard security red flags. Her ability to move between rural Jharkhand and urban Kolkata provided functional cover for cross-border directives.

Third, the integration of local extortion schemes into terror module planning indicates an emphasis on self-sustaining finance models. By attempting to kidnap and blackmail political figures, the cell sought to generate local funds to support its operations, minimizing traceable international banking or hawala transfers that frequently alert counter-terrorism agencies.

As the West Bengal Special Task Force and partner central agencies expand their forensic analysis of seized devices, custodial interrogations remain focused on identifying other potential recruits brought into the network over the past five months. Security protocols surrounding key state functionaries and public protest sites in the capital have been strengthened to counter potential infiltration tactics involving law enforcement disguises.