NDTV reports that Dr Muzammil Shakeel has confessed to participating in a plot that began in 2023, with discussions on carrying out coordinated attacks across different Indian cities. According to officials, the plan involved creating multiple sleeper cells, securing safe houses, gathering chemicals, and recruiting medically trained individuals to avoid detection.
Investigators say Muzammil admitted he received instructions through encrypted channels and worked closely with other module members, including Dr Umar Nabi. His confession is now being cross-verified with digital data, phone tower logs and seized documents.
Investigators have recovered the first detailed visuals of the room used by Dr Muzammil Shakeel to prepare explosive material in Faridabad. According to the Times of India, Muzammil converted a small rented space into a makeshift workshop where he used a flour mill machine, electric grinders, and mixing tools to pulverise and blend chemical components.
Officials said the room contained traces of ammonium nitrate and other materials earlier seized in the 2,900-kg haul. Forensic teams found signs of repeated grinding, suggesting the doctor created fine-grade mixtures that could be packed into improvised devices. Investigators are examining whether the flour mill was modified to function as a high-speed grinder to evade suspicion.
Authorities say the setup indicates “methodical preparation” and reinforces concerns that the module had begun stockpiling material for multiple attacks.
The National Medical Commission (NMC) is preparing to release new guidelines for doctors, medical colleges and training hospitals following concerns raised by the “white-collar terror module” investigation.
According to Medical Dialogues, the guidelines will remind medical practitioners and institutions of legal obligations under national security laws and will outline reporting mechanisms for suspicious activity, radicalisation patterns and misuse of hospital facilities. Officials said the advisory is being framed to prevent exploitation of medical training pathways and to reinforce ethical responsibilities within the profession.
Fresh accounts from former colleagues indicate that Dr. Umar Mohammad Nabi had displayed a pattern of behavioural changes during his time at the Faridabad clinic. NDTV reports that Umar frequently questioned female patients about wearing the hijab and asked others about their prayer practices, raising concern among some staff members.
Workers told investigators that although he did not express overt threats, his comments appeared ideological. These accounts are now being reviewed alongside digital evidence to understand whether early signs of radicalisation were visible during his clinical work.
The Enforcement Directorate has expanded financial investigations linked to Al-Falah University and produced its chairman, Jawad Ahmed Siddiqui, before the Saket court. According to the ED’s submission, Siddiqui allegedly collected ₹415.10 crore from students and parents by projecting the institution as fully recognised, despite regulatory discrepancies flagged earlier in the probe.
The agency told the court that Siddiqui’s family resides in Gulf countries and that he was “preparing to flee abroad,” raising concerns that evidence could have been destroyed if he had not been detained. The ED also said the Al-Falah Group showed unusual financial growth since the 1990s, which investigators described as inconsistent with its declared assets.
The court has remanded Siddiqui to 13 days of ED custody for further questioning.
Dr Priyanka Sharma, a resident of Jhajjar district in Haryana and a medical doctor posted at GMC Anantnag, was detained and later released during questioning connected to the investigations around the Red Fort blast and the so-called white-collar terror module.
Sources say Sharma’s name surfaced after cell-phone call-detail records from a former GMC Anantnag staffer uncovered links to individuals under investigation. Her phone and SIM card were seized for forensic examination.
Police emphasized that her detention was for questioning only, not an arrest; no charges have been filed against her yet. Her mobile remained in custody while her whereabouts were verified, including her academic and residential background.
The questioning of Dr. Sharma reflects the widening scope of the probe, as investigators extend their checks to various medical professionals and institutions across Jammu & Kashmir, Haryana and Delhi-NCR.
Fresh accounts from individuals in Hidayat Colony, Nuh, describe disturbing behaviour by Dr. Umar Mohammad Nabi in the days before he drove the explosive-laden Hyundai i20 to the Red Fort signal.
Afsana, the landlord of the room he occupied, and her brother-in-law Shoaib are currently under questioning. Afsana’s daughter told reporters that Dr Umar remained locked inside the room for almost 10 days, avoiding bathing, not changing clothes and reportedly defecating inside the room. Family members said he left the room mainly for food and occasionally stepped out late at night.
On 7 November, foul-smelling waste seeped out from the room, after which Shoaib was informed. Dr Umar drove away around 11 p.m. on 9 November in his i20 and carried out the blast in Delhi on 10 November.
The family said Umar stayed in the last room of the five-room house and that his vehicle was parked outside for only four of the ten days. He had been placed in the house on 31 October, according to the family’s statement.
Meta confirmed to NDTV that it has removed the suicide bomber’s ideological video from Facebook, Instagram and WhatsApp channels after the clip started circulating widely online.
The video, recorded shortly before the blast, contained radical messaging in which Umar attempted to justify the attack and spoke about “martyrdom.”
Meta said the content violated policies on terrorism and extremist organisations, and that automated as well as human moderation teams took down versions of the video within hours.
Officials said the clip is now part of the NIA’s digital forensics review.
In a major financial development, NDTV reports that the Enforcement Directorate has alleged that Jawad Ahmad Siddiqui, chairperson of Al-Falah University, “dishonestly” generated around Rs 415 crore through irregular admissions, cash collections and non-transparent fee structures.
The ED said the university’s trust and associated entities:
Collected large sums in cash
Maintained parallel accounts
Bypassed mandatory financial reporting rules
Investigators are now examining whether any portion of the funds flowed into activities connected to the terror module or its members.
The agency has frozen multiple properties and bank accounts pending further inquiry.
NDTV reports that Chaudhary Anwarul Haq, a politician from Pakistan-occupied Kashmir, issued a provocative public statement days after the Delhi blast.
In the clip circulating online, he appeared to threaten India with:
“We will hit you the way you attack us.”
Indian officials have taken note of the remarks but have not issued a formal diplomatic response.
Security agencies say such statements are now part of the broader information review to assess potential external ideological or propaganda influences.
According to NDTV, ten individuals with past or present associations to Al-Falah University have not been traceable since the Red Fort blast.
Investigators describe them as:
• Former students
• Hostel residents
• Lab or clerical assistants
• Peers of the arrested doctors
While not all are suspects, agencies believe some may have had indirect operational or logistical knowledge connected to the wider module.
Efforts are under way to contact families and track bank activity, phone logs and travel records.
Officials said the disappearances coincide with the initial arrests, raising concerns that they may have fled or destroyed communication devices.
Investigators have confirmed that Dr. Umar Mohammad Nabi, the Red Fort suicide bomber, visited his family home in Pulwama about a week before the attack.
According to NDTV, he handed over his primary mobile phone to one of his brothers during this visit.
Officials say this action appears deliberate and was likely meant to:
Avoid digital tracking
Conceal conversations with handlers
Ensure the device would ping from Pulwama while he operated elsewhere
Agency sources said the handover was a classic deception tactic to mislead tower-location tracking and mask his movements during the days leading to November 10.
His family reportedly had no knowledge of his plans, and relatives told investigators they believed the visit was routine.
Recent investigations into the Delhi Red Fort blast have revealed that one of the co-conspirators, Jasir Bilal Danish, had initially been involved in planning a suicide attack but ultimately backed out of the plan. According to sources, Danish had expressed strong reservations about carrying out a suicide bombing, emphasizing that such acts are sinful. The authorities continue to probe the extent of influence and communication among conspirators to understand the dynamics of the attack.
A recent development in the Delhi case is the emergence of photographs showing Dr. Shaheen and Muzammil purchasing a Maruti Brezza. The images depict the duo paying cash for the vehicle, raising questions about their activities and possible logistical support for the attack. The purchase of the vehicle is being scrutinized as part of the investigation into their involvement in the blast. Authorities believe that such transactions could be linked to planning and execution phases of the attack, serving as a mode of transportation or concealment. The cash payment method also suggests efforts to evade digital trails and maintain operational secrecy.
A self-recorded video of Dr Umar Mohammad (alias Umar-un-Nabi), the suspected perpetrator of the Red Fort car blast, has surfaced, offering rare insight into his mindset. In the undated footage, Umar discusses the nature of suicide bombing, calling it a “martyrdom operation” rather than what is commonly described as a suicide attack. He says the act involves “a person presuming that he is going to die at a particular place and time.”
Security agencies are treating the video as critical evidence. They say Umar’s articulation in fluent English, his calm tone, and his framing of the operation as a legitimate act reflect deep radicalisation and planning. Investigators say the emergence of the video strengthens the theory that the vehicle explosion near the Red Fort was indeed intended as a martyrdom strike.
The death toll in the Red Fort car blast has climbed to 15 after two more victims succumbed to their injuries at LNJP Hospital, according to a report by Business Standard. Doctors said both patients were critically injured, suffering from severe burns and shrapnel wounds sustained during the explosion.
Despite intensive care, hospital officials confirmed that both victims developed complications leading to multi-organ failure. Six other survivors remain on ventilator support in the intensive care unit, with their condition described as critical but being closely monitored by specialist teams.
The updated toll makes this one of the deadliest terror-linked explosions in Delhi in recent years, as investigators continue to track the wider module and its financial, digital and logistical network.
Investigators have discovered that members of the alleged white-collar terror module used food-related words as coded language on Telegram while planning the Red Fort blast. According to officials cited by NDTV, chats recovered from seized phones show that terms like “biryani,” “daawat,” and “guests” were not casual messages but encrypted signals meant to coordinate logistics.
In these exchanges, “biryani ready” was used to indicate that explosives had been assembled, while “daawat tomorrow” pointed to the movement or delivery of materials. The phrase “guests arriving” referred to new operatives or contacts joining the network, and “bed ready” suggested that a safe house or meeting point had been prepared.
The communication took place through Telegram groups that used disappearing messages, VPN connections, and multiple devices to avoid detection. Investigators say this method reflects a deliberate attempt to mask operational details behind everyday language, making the chats appear harmless if intercepted.
Officials have noted that this form of coded messaging has been seen in earlier Kashmir-linked terror plots, and its use here reinforces suspicions that the network was trained or guided by experienced handlers.
The NIA has arrested a Srinagar-based man described as an “active co-conspirator” in the Red Fort blast case. According to Times of India, the accused provided technical support to the doctor-led module, helped set up encrypted communication networks, and even attempted to develop rocket-like improvised weapons.
Investigators say he played a deeper operational role than previously known. He assisted in digital mapping of possible targets, helped procure chemicals, and used secure platforms to connect module members with handlers. The arrest was made on November 17 in Srinagar, after forensic examination of seized devices pointed to his involvement.
Officials said he was not a passive sympathizer but someone actively working to enhance the group’s weapons capability. The suspect has now been moved into NIA custody for further questioning in Delhi, where teams are probing whether the rocket experiments were linked to planned multi-city attacks.
Investigators believe that Dr. Shaheen Sayeed, professionally a surgeon and lecturer, was known within the terror network by the code-name “Madam Surgeon”. According to latest sources, she was entrusted with setting up the women’s wing of the banned outfit Jaish‑e‑Mohammed (JeM) in India and operated under the alias while overseeing recruitment, logistics and coded communications.
In chats retrieved by agencies, the word “medicine” is believed to have been used as a code-word for explosives, and Dr. Shaheen is shown receiving messages from contacts saved as “Madam X” and “Madam Z” who asked her for “medicine” ahead of “operations”. The investigation document also mentions a so-called “D-6 Mission”, which appears to be a planned series of attacks culminating on December 6, and Dr. Shaheen’s name appears in the blueprint alongside other doctors from the module.
Her background is striking: she was previously a faculty member in Kanpur and Lucknow, something that prompted suspicion of how a person with such a professional career became enmeshed in a terror network. Investigators say she maintained contacts across states, including phone records showing links with doctors in Kanpur and Kashmir, which is viewed as part of the network’s nationwide reach.
While direct linkage to the actual blast vehicle remains under technical verification, Dr. Shaheen is now firmly treated as one of the operational coordinating figures within the module. Her role, officials say, is among the most puzzling and central within the “white-collar doctors’ module”.
The National Investigation Agency (NIA) announced on Sunday the arrest of Amir Rashid Ali, a resident of Samboora in Pampore, in whose name the car used in the Red Fort attack was registered.
The NIA, which took over the case from Delhi Police on November 11, launched a massive search operation leading to Ali's arrest from Delhi. Investigations revealed that the accused had conspired with the alleged suicide bomber, Dr. Umar Un Nabi, to carry out the terror attack.
"Amir had come to Delhi to facilitate the purchase of the car which was eventually used as a vehicle-borne Improvised Explosive Device (IED) to trigger the blast," the agency stated.
The anti-terror agency has also seized another vehicle belonging to Nabi. The vehicle is being examined for evidence in the case, in which NIA has so far examined 73 witnesses, including those injured in the blast on November, 10.
The NIA has forensically established the identity of the deceased driver as Dr. Nabi, who hailed from Pulwama district and was Assistant Professor in the General Medicine Department at Al Falah University in Faridabad, Haryana.
Delhi Police recovered three 9mm calibre cartridges from the Red Fort blast site on November 16, two live rounds and one spent cartridge. According to senior police officials, these cartridges are prohibited for civilian possession and are typically only found with armed forces personnel or individuals holding special permission.
Significantly, no pistol or firearm parts were discovered at the scene. "These cartridges are usually only possessed by the armed forces or those with special permission," a police official told news agency ANI. Investigators are now working to determine how the restricted ammunition reached the blast site and whether the suspect had possession of the weapon, adding a new dimension to the ongoing investigation into the November 10 attack that claimed almost 13 lives.
Investigators suspect that triacetone triperoxide (TATP), an extremely volatile explosive known as the "Mother of Satan," was likely used in the Red Fort blast.
TATP is one of the world's most unstable explosives, highly sensitive to heat, friction, impact, and even static electricity, making it dangerous to manufacture or transport.
Forensic experts are working to confirm whether TATP was indeed used in the deadly blast. Officials say TATP can deliver up to 80 percent of TNT's explosive power despite being made from everyday materials like hydrogen peroxide and acetone.
Due to its sensitivity, the device may not have needed a detonator, as heat or friction alone could have triggered the blast. While TATP may have acted as the initiating explosive, investigators believe ammonium nitrate formed most of the main charge. The absence of metal shrapnel suggests the bomb relied on the car's own structure to amplify the explosion.
Shesh Paul Vaid, former Director General of Police of Jammu and Kashmir, described Al-Falah University, where several arrested suspects were employed, as appearing to be "a hub of terrorism."
Speaking to news agency ANI on November 15, Vaid questioned how the university received its license, citing media reports that its owner had served three years in jail for fraud. "I don't know how such a person can get a license for a university," he stated.
Vaid raised concerns about the institution's lack of NAAC accreditation and welcomed government directives for the Enforcement Directorate (ED) and National Investigation Agency (NIA) to investigate the university's accounts for potential foreign funding.
"It is very unfortunate that such a thing was happening... Such a university should be immediately closed," Vaid said, praising authorities for pursuing action against what he termed "fraudulent universities."
Delhi Police officials told Hindustan Times that Dr Umar Mohammad used at least four mobile phones and multiple SIM cards before the Red Fort blast, frequently discarding or switching devices to evade surveillance.
Investigators said some phones were activated briefly near Faridabad and Delhi, then switched off before tower triangulation could be completed. Forensic experts are now cloning recovered devices to reconstruct call logs and encrypted app activity.
Faculty at GSVM Medical College in Kanpur have removed the name of Dr Shaheen Saeed from the departmental display board following her arrest, Times of India reported.
A senior professor said this was part of standard protocol once a doctor becomes the subject of a terror investigation.
Dr. Shaheen had previously worked at the college as a junior resident.
According to The Indian Express, investigators relied on three key forensic clues to confirm that Dr Umar Mohammad was driving the Hyundai i20 that exploded:
• A charred limb found at the blast site
• A distinctive black shoe recovered from inside the vehicle
• DNA samples collected from remains at the scene
These elements, combined with CCTV tracking and tower data, confirmed Umar was inside the car when it detonated near the Red Fort Metro signal.
Indian Express reports that police have traced multiple vehicles parked near the i20 at the time of the blast.
CCTV footage shows at least 11 cars and two two-wheelers in proximity to the explosion. Their owners and drivers were contacted, and statements recorded to identify potential witnesses or accomplices.
Officials say none are currently suspects, but the vehicles offer valuable timeline confirmation.
A Ludhiana-based doctor who graduated from Al-Falah University in 2024 was detained in West Bengal for questioning, Indian Express reported.
He was picked up from a private hospital where he was working, after digital evidence linked him to one of the suspects.
Officials have not confirmed any direct role in the blast but say his past peer connections with detained doctors necessitated interrogation.
The Hindu reports that three more people have been detained in connection with the Delhi blast probe as the NIA expands its investigation.
Meanwhile, two separate FIRs have been registered against Al-Falah University, including one over alleged accreditation fraud and another related to suspected terror-linked activities on campus.
Officials say multiple angles are being pursued, including misuse of university property and administrative negligence.
CCTV footage shows at least 11 cars and two two-wheelers in proximity to the explosion. Their owners and drivers were contacted, and statements recorded to identify potential witnesses or accomplices.
Officials say none are currently suspects, but the vehicles offer valuable timeline confirmation.
Delhi Police have registered a fresh FIR in the Red Fort blast case after analysing new digital and forensic evidence. According to the Times of India, investigators now believe the plot extends beyond the initial group of accused doctors and may involve a broader network operating across multiple states.
Officials said the module used “spycraft-style tactics” including anonymous SIM cards, VPN masking, encrypted messaging apps, coded phrases and staggered reconnaissance visits to avoid detection. The new FIR invokes additional sections under the Unlawful Activities (Prevention) Act and IPC provisions relating to conspiracy and organised terror activity.
Senior officers said the FIR will help consolidate parallel leads emerging from Faridabad, Saharanpur, Srinagar and Kanpur, allowing the NIA and Delhi Police to coordinate a joint operational trail.
A Uttar Pradesh Anti-Terrorism Squad team questioned staff members of a private hospital in Saharanpur where one of the arrested doctors, Dr. Adil Ahmad, had worked. According to officials quoted by TOI, the team reviewed duty rosters, attendance logs, visitor entries and internal phone communication to track whether Adil had interactions with other module members.
Hospital sources told investigators that Adil maintained a routine schedule and rarely socialised outside work. Staff were also asked about any unexplained absences or visitors in the days preceding his arrest. Officials said the questioning is part of the continuing effort to verify whether workplace links played any role in operational coordination.
A doctor from Pathankot was questioned by Delhi Police after call-record analysis showed multiple conversations with staff at Al-Falah University. According to Times of India, the doctor had previously been associated with the university’s medical college, though officials stressed he is not named as an accused.
Investigators say they are verifying whether the calls were professional, personal or connected in any way to suspects such as Dr. Umar Nabi or Dr. Muzammil. The doctor reportedly cooperated fully and provided details of his prior employment, patient caseload and contact history.
Officials said the questioning took place in Pathankot on 13–14 November, after call-detail analysis flagged several conversations between the doctor and Al-Falah University staff currently under scrutiny. Delhi Police clarified that the doctor remains a person of interest only for routine verification, and no incriminating evidence has emerged so far.
Investigators reviewed his earlier tenure at Al-Falah Medical College and asked him to explain the context of the phone calls with university employees. According to police sources, he cooperated fully, answered all questions, and stated that the calls were routine professional communication with former colleagues.
Officials added that the questioning was conducted only to corroborate digital leads, and no further action has been taken pending forensic review.
Newly recovered CCTV footage from the Lal Quila Metro Station area shows the exact moment the Hyundai i20 exploded at the traffic signal. The video, reported by Mint and NDTV, captures a sudden flash followed by a shockwave that jolted nearby vehicles and pedestrians.
Investigators are synchronising this footage with earlier clips from toll booths, Ring Road cameras and Chandni Chowk lanes to reconstruct the second-by-second timeline of the blast, including traffic density and positioning of potential witnesses.
A powerful explosion at the Nowgam Police Station in Srinagar killed at least nine people after explosives seized from a Faridabad-linked doctor detonated during evidence handling. According to NDTV and Hindustan Times, the explosive materials had been recovered earlier in the week as part of the widening probe into the suspected doctor module behind the Red Fort blast.
Officials said the materials were being catalogued when an accidental ignition occurred. A forensic audit is under way to determine the ignition point and whether static discharge, friction or procedural lapses contributed to the blast. Security across Srinagar has been tightened, with checkpoints, restricted zones and reinforced CRPF patrols around police and government buildings.
Jammu and Kashmir Director General of Police R R Swain confirmed that the explosion was accidental and not the result of an external attack. He stated that the seized materials were legitimate exhibits from ongoing terror investigations and that the blast happened inside the station compound while officers were examining the items. A high-level committee has been formed to review evidence-handling protocols and safety measures for sensitive exhibits.
The National Medical Commission (NMC) has initiated the process to cancel the medical registrations of the four doctors named in the Red Fort car blast investigation, senior officials told multiple outlets. The doctors include Dr Umar Mohammad Nabi, Dr Muzammil Shakeel, Dr Shaheen Saeed and Dr Adeel Ahmad Rather, all of whom are under various stages of investigation for alleged involvement in operational planning or logistical support.
Officials said the Commission will proceed under professional misconduct and national-security provisions, and will complete formal cancellation once the NIA submits its detailed findings. The NMC has also instructed state medical councils and private institutions to strengthen ID verification, biometric attendance and campus surveillance for medical trainees.
Intelligence sources have confirmed that three of the accused doctors were communicating with two foreign handlers in the months leading to the blast. The handlers are believed to be based in Turkey and Pakistan, operating through encrypted channels.
Investigators say the suspects exchanged operational cues, motivational messages and reconnaissance details through platforms including Telegram, Signal, Session and Threema. The foreign handlers are suspected to have issued guidance regarding target timing and ideological reinforcement, strengthening the cross-border dimension of the case.
Forensic teams are currently mapping IP routes, VPN trails and deleted message caches to establish the depth of these contacts.
Twenty-three survivors of the Red Fort blast remain in critical condition at Lok Nayak Hospital, where emergency and burn units continue to operate under tight security. Doctors say many patients suffered inhalational injuries, ruptured eardrums, deep burns and embedded shrapnel.
Families, some camped outside the hospital for days, told reporters they are clinging to hope despite grim updates. Several victims have undergone multiple surgeries, and some remain on ventilator support. Hospital sources said recovery could take months and that psychological trauma is significant among survivors.
A three-year-old boy continues to wait at the doorway of his Delhi home for his father, unaware that he was among the 13 victims killed in the Red Fort blast. The victim, Amar Kataria, a Chandni Chowk textile trader, had stepped out briefly to collect stock when the car exploded at the Red Fort signal.
His widow told reporters that the child still asks why “papa hasn’t come back yet.” The family identified Amar’s charred remains using his tattoo and torn clothing. Relatives said the household was already facing hardship and that Amar had been the only earning member.
A Kerala-based cardiologist was mistakenly identified by some media outlets as the Kanpur medical student detained for questioning in connection with the Red Fort blast probe. According to a verified report by Medical Dialogues, the doctor’s photograph was wrongly circulated in breaking-news coverage after several platforms pulled an unrelated image from online archives.
The misidentified doctor has no link to the investigation, and the actual individual being questioned is Dr Mohammad Arif, a first-year DM Cardiology student at GSVM Medical College in Kanpur.
The Kerala doctor’s family and colleagues reportedly contacted him after noticing his photo being used alongside terror-related headlines. The error appears to have arisen from hurried reporting during the initial surge of national coverage. Medical Dialogues stated that the mistake stemmed from the use of incorrect stock images and confusion created by online search results.
The platform has urged media organisations to verify photographs in sensitive cases to prevent reputational damage to uninvolved professionals. It reiterated that the Kerala cardiologist has no association with the suspects or the wider probe.
A landlord in Kanpur, speaking to JMD News, described his brief interactions with Dr. Mohammad Arif and his flatmate Dr. Abhishek. He said both doctors had been tenants for less than a month and largely kept to themselves.
He said, “Dr. Arif and Dr. Abhishek were partners in one flat. They were partners for less than a month. They never used to greet anyone. They used to come and go for their work. We used to sit here and they never greeted us. Nowadays, IDs are checked. My son checked the ID and everything was fine. Then we gave them on rent. I checked myself to see if the ID was correct. Abhishek came first. Then Arif came. The four of them came at 7.30 in the morning. They went straight to the flat. My son was present. I was busy with my work. My son called me. I told him to talk to the doctor. He was going to his flat. I told him to let him go. He said, let him go. He is one of us. He locked the room. I did not know what he did inside. I did not know what he checked. He did not go anywhere. He did not go anywhere. He did not even call the doctor. He said, let him stay in the flat. He said, I have nothing to do with this. They came here less than a month ago. He is a doctor. He does not have a fixed time. Sometimes, he comes in the night. Sometimes, he comes in the day. He does not behave like this. He is very simple.”
The landlord added that neither Dr. Arif nor Dr. Abhishek displayed unusual behaviour and that their tenancy appeared routine until investigators arrived.
A man who said he personally knew Dr Muzammil Shakeel, one of the doctors arrested in the Faridabad module linked to the Red Fort blast investigation, told OpIndia that the accused doctor appeared “polite” and deeply religious in daily life.
He said he had met Muzammil “many times” and never observed behaviour that suggested involvement in unlawful activities. According to him, Muzammil prayed five times a day and often went straight from the hospital to the mosque, where the two would occasionally meet.
The man recalled:
Muzammil was “very nice” in behaviour.
He never saw anything unusual that raised doubts.
He regularly prayed the five daily namaaz and was often seen at the Al-Falah mosque, where “many doctors offer prayers.”
Expressing disbelief at the allegations, he questioned how “a person who offers prayers at 5 in the morning” could plan or store materials connected to an attack.
He also claimed that the doctor who died in the blast had “a connection” with Muzammil, though he did not elaborate further.
The comments reflect the shock among community members who interacted with the arrested doctor in routine medical and religious settings.
A new family account has surfaced through India Today, where the sister-in-law of Dr. Umar Mohammad Nabi — identified as the driver of the Hyundai i20 that exploded near the Red Fort — said the family is “unable to believe” his alleged involvement.
She told reporters that Dr. Umar last visited home about two months ago and had been working in Faridabad for “two or three years.” She added that the family had long struggled with poverty, and that relatives believed Umar would improve their circumstances as he was the only earning member.
According to her statement, police arrived late at night and took both of Umar’s brothers for questioning. She said the family had no indication he was involved in any wrongdoing and that “there was never anything suspicious” in his behaviour.
She also noted that the two friends linked with him in media reports had never visited the home, saying she “saw them for the first time” when their names appeared in the news. The family maintains that they are in shock and are cooperating with agencies during the ongoing investigation.
A new account has emerged from Kanpur, where Dr. Abhishek, the flatmate of detained cardiology student Dr. Mohammad Arif, spoke to local media and clarified that he never observed anything unusual about Arif’s behaviour.
Describing their living arrangement, Dr. Abhishek said Arif was his flatmate but they occupied separate rooms, limiting how much they interacted daily. When asked whether Arif spent excessive time on his phone or laptop, he stated he “did not know” because they largely kept to their own spaces.
He added that Arif behaved normally at home, completing his hospital duties and returning quietly. There were no concerns regarding Arif’s conduct or temperament during the time they lived together.
Dr. Abhishek also recalled Arif mentioning that his father was undergoing cancer treatment, which was one of the few personal details he had shared.
Security forces on Friday demolished the Pulwama home of Dr. Umar Nabi, who was driving the explosive-laden Hyundai i20 used in the Delhi blast, officials confirmed. His identity was confirmed after DNA samples collected from the site matched those of his mother, officials said.
Investigators said Umar was part of a terror module linked to Jaish-e mohammed and Ansar Ghazwat-ul-Hind (AGuH).
A key foreign handler, Ukasa, acted as the primary link between the Delhi module and the terrrorist organisations.
The residence, located in Koil village, Pulwama district of Jammu and Kashmir, was razed as part of the ongoing investigation into the attack near Red Fort.
The blast, which occurred on Monday evening, claimed more than 13 lives and injured several others.
Investigators told reporters that suspects in the case used an encrypted messaging application based in Switzerland to share maps, photos and operational details related to the planned attack. Forensic teams recovered chat traces and message metadata during device forensics, and officials say the app’s design (end-to-end encryption, minimal metadata storage) complicated early tracing. Agencies continue to extract logs and are seeking cooperation from the app provider through legal and diplomatic channels.
According to NDTV, the app used by the suspects has been identified as Threema, a Swiss-based encrypted messaging platform designed for high privacy.
Forensic teams found that the accused doctors shared location files, photographs of Delhi landmarks and routing images through Threema before the blast. These files were recovered from seized devices and are now being matched with CCTV timelines and mobile tower data.
Officials say Threema’s architecture, which allows users to operate without linking a phone number and stores almost no server-side metadata, has made digital tracing more difficult. Messages are typically stored only on user devices, so investigators are relying heavily on device-level extraction rather than server logs.
Authorities have started formal requests seeking cooperation from Threema’s parent company in Switzerland, though investigators note that the platform’s privacy-first policies limit available metadata.
They are now analysing subscription records, possible payment trails and VPN logs to identify whether any communication with foreign handlers passed through Threema before the attack.
Investigators widened enquiries to the native district of Al-Falah’s founder Jawad Ahmad Siddiqui after reporting showed corporate and local links. Authorities and journalists who visited the area say officials are checking company directorships, trust records and historical complaints tied to the founder to map any financial or administrative links to the university’s operations. Local records and corporate documents are being reviewed as part of multiagency financial and legal tracing.
Students and staff at the Al-Falah campus, and residents in nearby villages, report heightened fear and uncertainty. College attendance and routine campus activity were affected as families sought information and authorities conducted searches and seized records. University officials have said they are cooperating with investigators while campus communities await clarifications from regulators and law enforcement teams.
US Senator Marco Rubio described the explosion as “clearly a terrorist attack” in comments reported by overseas outlets, and he praised Indian investigators for what he called a measured professional response so far.
Investigators told reporters that suspects in the case used an encrypted messaging application based in Switzerland to share maps, photos and operational details related to the planned attack. Forensic teams recovered chat traces and message metadata during device forensics, and officials say the app’s design (end-to-end encryption, minimal metadata storage) complicated early tracing. Agencies continue to extract logs and are seeking cooperation from the app provider through legal and diplomatic channels.
The Association of Indian Universities (AIU) has suspended Al-Falah University’s membership pending verification after regulators and media raised questions about the university’s credentials. The suspension is an administrative action while national education bodies and NAAC examine accreditation claims listed on the university’s website. University officials have been asked to submit documentary proof to dispel alleged discrepancies.
Punjab Police say they have disrupted a separate grenade attack module and arrested 10 people during intelligence-led operations. Officials described the arrests as preventive and part of coordinated action following leads developed after the Red Fort blast; the Punjab cases are being investigated separately by state agencies in close cooperation with central agencies.
According to an NDTV investigation citing intelligence sources, one of the detained doctors in the Red Fort blast case, Dr. Shaheen Saeed, had been in communication with Afirah Bibi, the wife of Umar Farooq, the Jaish-e-Mohammed commander killed in 2019 who is widely identified as the mastermind of the Pulwama suicide attack. The communication was reportedly conducted through encrypted channels and is now a major focus of the NIA’s digital forensics review. Investigators say the contact strengthens the suspicion of a cross-border link within the module, although the purpose and frequency of communication are still being verified.
Investigators have found a Delhi-bound air ticket from Srinagar during a search of the Saharanpur residence of Dr. Adil Ahmad, the doctor earlier detained in connection with the expanding probe. According to reports from The Times of India, the ticket was booked shortly before the Red Fort blast and is now being examined as part of the timeline reconstruction of his movements and possible coordination with the wider module. Agencies are verifying whether the planned travel was connected to operational activity or an attempt to leave the city as arrests began.
A 32-year-old cardiology student from Kanpur, identified as Dr. Mohammad Arif, has been detained for questioning as part of the nationwide follow-up in the Red Fort blast investigation. According to PTI, Arif is a first-year Doctor of Medicine (Cardiology) student at GSVM Medical College, Kanpur.
Officials said he was picked up from an undisclosed location after digital leads suggested possible contact with individuals already under investigation. An Anti-Terrorism Squad team later searched his rented accommodation in Ashok Nagar, seizing his mobile phone and laptop for forensic analysis.
Sources told PTI that Arif was then taken to Delhi for detailed questioning, where investigators are examining call records and chats that allegedly indicate communication with persons linked to the “white-collar” module. Rediff News reported that preliminary digital analysis also pointed to possible interaction with a suspected mastermind and other associates, though no formal charges have been announced.
Officials emphasised that the detention is for corroboration of digital trails, and that further action will depend on the outcome of forensic and technical examination.
Police and bomb disposal teams visited Al-Falah’s campus and associated properties after a Maruti Brezza emerged as a vehicle of interest in CCTV trails and searches. Separately, investigators recovered a second car, a white hatchback, on the Delhi–Agra highway; forensic teams are processing both vehicles for fingerprints, chemical residues and trace evidence to establish ownership and usage.
Security agencies have begun an international search for a Kashmir-based doctor identified in the probe as Dr. Muzaffar, after he went missing during the rapidly expanding investigation. Officials told Times of India that his name emerged repeatedly during questioning of arrested doctors and through analysis of seized digital devices.
According to senior police officers, Jammu and Kashmir Police have formally approached Interpol to issue a Red Corner Notice (RCN) for the fugitive doctor. The request was filed earlier this week as part of a coordinated effort with the National Investigation Agency and central intelligence units. Officials said the RCN would allow international law enforcement agencies to locate and detain him if he is found to have fled abroad.
Investigators believe Dr. Muzaffar may have played a role in logistics and communication for the module under scrutiny, which they say involved radicalised professionals spread across multiple states. His sudden disappearance raised suspicions that he may have had advance knowledge of the crackdown that followed the Red Fort explosion.
Sources added that the Interpol submission includes digital identifiers, travel records, phone metadata and association links extracted during the probe. Agencies are now verifying whether he crossed international borders and whether forged documents were used to travel.
Dr Hayat Zafar, the ex-husband of Dr Shaheen Saeed, has told India Today and The Times of India that she “never wore a burqa,” was “liberal,” and showed no signs of extremist behaviour during their marriage.
He said the two divorced in 2012 and have two children, both living with him. According to him, he had no contact with her after the divorce and was unaware of her activities. He said she preferred a modern lifestyle and had once expressed interest in settling abroad. He stated he was shocked to see her name linked to the module under investigation.
University officials told reporters that investigators collected property documents and other administrative records during searches. The university’s legal advisor confirmed authorities took specified campus records as part of the probe; these documents will be examined by investigative agencies as they map financial and tenancy links.
The official website of Al-Falah University in Faridabad is currently down. The National Assessment and Accreditation Council (NAAC) has issued a show-cause notice to the university. They accused the institution of showing false accreditation details. NAAC stated that the university was "neither accredited nor volunteered for Cycle-1." However, the university falsely claimed to have a "Grade A by NAAC" for several of its colleges on its website.
Local records and company documents show Jawad Ahmad Siddiqui, chairperson and one of the founders of Al-Falah University, has come under fresh scrutiny after the Red Fort probe put the university at the centre of investigations. Reporting notes Siddiqui is linked to multiple corporate directorships and to an older FIR and investment-scheme case from around 2000. Journalists who visited his ancestral town in Madhya Pradesh found locals recalling his family’s earlier prominence, while investigators are checking corporate and trust records to map any financial or administrative links to the university’s operations.
The National Assessment and Accreditation Council (NAAC) has issued a show-cause notice to Al-Falah University after questions were raised about the institution claiming an A grade on its publicity material and website. NAAC has asked the university to explain the alleged discrepancy in accreditation representation while education regulators review institutional records as part of routine compliance checks triggered by the case.
Following the forensic and banking leads developed by the NIA and local police, the Enforcement Directorate has opened inquiries into the financial flows connected to entities linked with Al-Falah University. Officials say the ED will examine bank records, trust accounts and corporate transactions to trace any cross-border remittances or suspicious fund movements tied to the module. This financial track is intended to complement forensic, digital and telecom evidence already being analysed by the NIA.
Investigators told reporters that financial and digital evidence recovered so far suggests members of the alleged module pooled money to buy items and prepare devices. Official leads indicate roughly Rs 26 lakh was collected from within elements of the group and channelled into logistics and purchases alleged to be linked to explosive-making activity. The sum and transaction details are under forensic examination as part of parallel financial probes.
A fresh NDTV video shows a man matching Dr Umar Mohammad Nabi’s description wearing a mask at a toll plaza while carrying a large duffel or bag that was later seen inside the Hyundai i20. Investigators say the footage reinforces the theory that the explosive device or components were transported inside the vehicle and that the suspect made several stops en route to Delhi. Police continue to trawl toll-plaza and petrol-pump CCTV for additional frames that may identify accomplices or the bag’s origin.
Forensic and digital leads now point to a wider logistical effort. Investigators recovered data suggesting up to 32 vehicles were being prepared across locations linked to the module, with some cars showing evidence of modification or storage of materials. Agencies are checking ownership trails, sale and movement records, and local CCTV to determine whether these vehicles were intended as backup devices or for transport and logistics.
Security teams have extended records checks and interviews to Prayagraj after leads indicated that Dr. Shaheen (one of the detained doctors) had professional ties in the city. The Statesman reports investigators are reviewing staff records, residence history and CCTV at the medical college where she had worked to map her contacts and movements. Officials said the Prayagraj work is part of a wider inter-state effort to trace the module’s support network.
A Saharanpur-based doctor, identified as Dr. Babar, has publicly denied social-media rumours claiming he was detained by ATS in connection with the Delhi Red Fort blast probe. Speaking to TV9 Uttar Pradesh, he said he had no knowledge of any terror links involving his colleague, Dr. Adil Ahmed, who was arrested earlier from a hospital in Saharanpur.
Dr. Babar said he has been working at the hospital for three years, while Adil joined around seven to eight months ago through hospital administration. According to him, their interaction was limited to routine professional duties in the OPD. He described Adil as “polite” and showing no behaviour that could have raised suspicion.
He also confirmed that he and a small group of colleagues attended Adil’s wedding on October 4, a few days before Adil’s arrest. They had travelled early because they were planning a visit to Kashmir, he said. Dr Babar emphasised that nothing about the event or the people present suggested anything unusual. He added that Adil was preparing for the wedding in a typical manner, often bringing new clothes to the hospital while organising the functions.
Responding to claims that he had helped Adil arrange a rented room, Dr Babar told TV9 that he had no role in securing accommodation and only spoke once by phone to the landlord, as instructed by hospital staff. He maintained that he was not involved in any arrangements connected to Adil’s alleged activities.
In the final days before the arrest, Dr. Babar said Adil told colleagues he would be leaving because his mother was unwell and he needed to visit home. He rejected speculation that Adil anticipated police action at the time, saying colleagues had no knowledge of any such concerns.
Dr. Babar reiterated to the PTI that he was not detained, is continuing his hospital duties, and is cooperating fully with investigating agencies whenever information is requested. He called the rumours “baseless” and urged the public not to spread misinformation. He also expressed shock that “educated professionals” were being linked to terrorism, saying the entire hospital community was distressed by the revelations around Adil.
Investigators have arrested Ishtiaq, the long-time imam of the mosque at Al‑Falah University in Faridabad, after discovering that one of the rooms he rented out was used by Dr. Muzammil Shakeel, a doctor affiliated with the university, to store explosives. According to the report, the rented house is in Fatehpur Taga village and had been leased to Dr. Muzammil days before the major haul of ammonium nitrate and bomb-making materials was uncovered. Police sources say that the imam is now under interrogation along with two of his brothers, who also serve as imams in his hometown of Singar (Nuh district).
NDTV reports that investigators have zeroed in on Room 13 in Building 17 of Al-Falah University as a key meeting spot where members of the module reportedly convened. Police say the room was used for private gatherings and planning, and forensic teams are examining records, CCTV and visitors logs linked to that space as part of the probe
DNA testing has confirmed the body recovered from the blast site is that of Dr Umar Mohammad Nabi Bhat and that his DNA matches material found in the Hyundai i20, establishing he was the vehicle’s driver at the time of the explosion. Investigators say this finding narrows key forensic questions and helps focus digital and financial tracing on his known contacts.
Intercepted material and interrogations point to a broader plan that included up to six blasts across Delhi and the National Capital Region on December 6, the anniversary of the Babri Masjid demolition. Agencies have increased protection at identified high-risk sites and are treating the claim as an operational lead while they verify sources.
A bus tyre burst in Mahipalpur on Wednesday evening caused panic among commuters, illustrating the heightened tension in the city since the Red Fort explosion; authorities said they treated the incident as routine but urged calm while checks and extra patrols continued.
Investigators have located footage of Dr. Umar Mohammad Nabi on CCTV at roughly 50 locations across Delhi and the National Capital Region in the hours before the blast, according to NDTV. Police compiled the visuals after matching timestamps and mobile tower pings to the suspect’s phone activity. Officials say the footage helped reconstruct his route from Faridabad into the city and corroborates the timeline investigators have formed from toll booths and traffic cameras. DNA matching from remains recovered at the site is reported to have linked the suspect to the i20.
It was reported that a severed arm was found on the roof of a shop about 300 metres from the blast site, indicating the force of the explosion dispersed human remains across a wide radius. Forensic teams are conducting body-part mapping and DNA sampling to ensure all victims are identified and to match remains to the recovered vehicle and site exhibits. Police warned that recovery and identification work may take several days given the scale of the blast and the condition of remains.
India Today says investigators have widened vehicle leads and are searching for a missing Maruti Brezza that appears on CCTV near the blast window and may have been used for logistics or as a follow-up vehicle. Teams in Delhi and neighbouring districts have been tasked to scan toll records, petrol pumps and private CCTV networks for the Brezza’s movement; lookouts and roadblocks have been issued across the NCR. Officials stressed the Brezza’s involvement is not yet confirmed and that the search is a routine follow-up to corroborate digital and visual evidence.
Jammu and Kashmir Police sources say interrogation of Irfan Ahmad Wagay, a paramedic-turned-imam from Shopian, provided key leads that led investigators to the Faridabad arrests and the seizure of explosive material. According to Hindustan Times, Wagay, who worked earlier in the Government Medical College and Hospital, Srinagar, and later served as an imam at a mosque in Chanpora, was questioned after posters bearing Jaish-e-Mohammad insignia were found pasted in the Nowgam area on October 18–19.
Police sources told investigators that Wagay had contact with medical professionals and helped recruit or indoctrinate individuals into a radicalised network. His interrogation reportedly identified several members and safe houses, prompting arrests in Srinagar and follow-up action in Faridabad that uncovered around 2,900 kg of suspected ammonium nitrate and other materials.
Officials also said Wagay maintained links with Dr. Muzammil Ganaie and with Dr. Umar Un-Nabi, the latter believed to have died in the Red Fort blast; his information helped map the network’s urban support cells. Hindustan Times adds that some of Wagay’s relatives, including his pregnant wife, were taken into custody for questioning; family members have denied the allegations.
The Union Cabinet officially declared the Red Fort explosion a ‘heinous act of terrorism’ under national security provisions. The classification allows the National Investigation Agency to lead without state referral and provides fast-track compensation to victims’ families. Union Home Minister Amit Shah briefed the Cabinet on early findings linking the blast to a cross-border terror module. The government also directed the Ministry of External Affairs to brief foreign missions on the incident and reassure tourists about security in the national capital.
The Turkish government issued a formal statement denying any connection between individuals or organisations based in Turkey and the Delhi Red Fort blast. According to Dainik Jagran, Ankara reaffirmed its commitment to assist Indian authorities in counterterrorism cooperation, following reports that two accused doctors had visited Turkey in 2023. Turkish diplomatic officials clarified that no evidence has been shared suggesting involvement of any Turkish national or group, calling the claims “unfounded.”
According to The Indian Express, investigators found encrypted messages from Dr Umar Nabi’s phone in which he discussed “timing an act” to “make a statement” with another member of the module. These messages, sent days before the blast, were shared with a foreign-based handler. The revelation supports suspicions that Umar was planning a symbolic strike rather than an accidental detonation. Investigators are now verifying whether any external communication was routed through VPN servers based overseas.
Authorities have confirmed the identities of all thirteen victims killed in the Red Fort car blast. Among the deceased were daily commuters, small traders, and transport workers caught in traffic when the Hyundai i20 exploded near the Red Fort Metro signal on Monday evening. Many of the bodies were charred beyond recognition, forcing families to identify loved ones through tattoos, torn clothing, and personal belongings, according to Moneycontrol. Post-mortem reports revealed ruptured eardrums, blast injuries, and severe lung damage due to the shockwave and inhalation of toxic fumes, Times of India reported.
Those killed included 38-year-old Amar Kataria, a Chandni Chowk businessman who ran a textile shop near Fatehpuri. His family told India Today he had stepped out to collect stock when the blast occurred. Among others were DTC bus conductor Nitin Kumar, e-rickshaw driver Rahim Khan, taxi driver Ramesh Yadav, and two pedestrians who were crossing the intersection at the time.
Hospital staff said several of the injured had sustained deep burns and shrapnel wounds to the face and chest.
Delhi government officials have announced ₹10 lakh compensation for the families of the deceased and ₹2 lakh for the injured.
All the deceased have been identified as: Amar Kataria (35), Mohammad Jumman (35), Ashok Kumar (34), Mohsin Malik (35), Dinesh Kumar Mishra (35), Lokesh Kumar Agrawal (52), Pankaj Saini (23) and Mohammad Nauman (19).
The Ministry of Culture announced that a public condolence event will be held at the Red Fort lawns this weekend to honour victims of the explosion. Officials said security will remain tight but the event will proceed as a symbolic message against terror. Archaeological Survey of India (ASI) teams have inspected the monument and confirmed no structural damage to the fort itself.
According to NDTV, Dr Umar Mohammad Nabi, the prime suspect killed in the explosion, was captured on CCTV hours before the blast visiting an Old Delhi mosque near the Red Fort. Investigators said footage shows him offering prayers and then returning to his Hyundai i20 shortly before 6:42 p.m., when the vehicle exploded. He was seen carrying a small backpack and a phone later recovered from the blast site. The phone’s last active location matched the Red Fort signal area minutes before detonation.
Investigators have recovered a second vehicle believed to be connected to the Red Fort blast suspects. The car, a white hatchback found abandoned on the Delhi–Agra Highway, is suspected to have been used for transporting materials and equipment prior to the explosion. Forensic teams are examining fingerprints and trace samples from the recovered vehicle, and registration records are being verified to determine ownership links to Dr Umar Nabi or other detained individuals. Preliminary inspection revealed possible chemical residues and burned fabric, which have been sent for laboratory analysis.
Air India Express confirmed that one of its Varanasi-bound flights received an online “security threat” message on Wednesday evening. Security agencies treated it as potentially connected to the wider alert issued after the Red Fort explosion. The aircraft was isolated for inspection at Delhi Airport, and all passengers were screened again. No explosives were found on board. Authorities later described the message as a hoax but said it demonstrated continuing online attempts to spread panic after the blast.
Assam Police arrested five people for allegedly posting inflammatory content and misinformation related to the Red Fort blast on social media. The individuals are accused of spreading communal remarks and false claims linking communities to the explosion. Police said digital evidence has been collected, and all five were booked under sections of the IT Act and the Indian Penal Code. Officials reiterated that sharing unverified content can attract criminal charges under national security laws.
The National Investigation Agency is expected to visit Al-Falah Medical College in Faridabad later this week as part of its ongoing investigation into the alleged “white-collar” module. Officials said the visit will include forensic inspection of laboratories, staff quarters, and student records to determine whether any university facilities were misused for planning or communication purposes, according to The Hindu. Authorities will also interview administrative staff and examine digital surveillance footage from the campus covering the week before the blast.
Investigators are working multiple vehicle leads. Besides the Hyundai i20 that exploded, police teams are searching for a red EcoSport SUV that may be connected to movements around the blast timeline; teams have issued alerts and are reviewing CCTV and toll plaza records to locate it. Authorities have not yet confirmed whether the EcoSport is directly linked to the explosion or a separate follow-up movement.
Investigators have identified Dr. Nisar-ul-Hassan, a former government doctor from Jammu and Kashmir who was dismissed from service in 2023 for alleged anti-national activities, as a person of interest in the Red Fort blast investigation. According to NDTV, Dr Hassan later joined Al-Falah University in Faridabad, where he taught for a short period before reportedly going missing after the explosion.
Sources said that Dr. Hassan, once known as a close aide of the late separatist leader Syed Ali Shah Geelani, has not been reachable since the blast, prompting agencies to review his travel and attendance records. NIA teams are cross-checking hostel registers, staff logs and CCTV footage to determine his movements and possible contact with other suspects.
University officials confirmed that he was no longer on the payroll and reiterated their cooperation with investigators. Meanwhile, J&K Police and central agencies are jointly verifying whether his disappearance is linked to the wider “white-collar” module under probe.
Delhi and central agencies have detained nine people in Kanpur for questioning about possible links to the Red Fort blast; interrogation is under way to determine whether they have any organisational connections. These detentions form part of wider nationwide action and intelligence-led follow-ups tied to the expanding investigation.
Investigators say intercepted material and interrogation leads indicate that the module under scrutiny had planned a high-profile attack timed around December 6, the anniversary of the Babri Masjid demolition, with multiple landmarks and public places listed as potential targets, according to Hindustan Times. Agencies are treating the revelation as a core lead and have increased security at sensitive locations across the capital.
Forensic teams collected more than 40 samples from the blast site, including vehicle fragments, cartridge casings and explosive residues, which are being analysed at the FSL to confirm the chemical composition and triggering mechanism. Preliminary field reports identified traces consistent with ammonium nitrate but authorities say final laboratory confirmation is pending.
Investigators have now confirmed through recovered phone data that Dr. Umar Nabi and Dr. Muzammil conducted reconnaissance visits to the Red Fort area in January 2025, months before the explosion.
The recces were likely part of an early plan to target the site on Republic Day, which failed due to increased police presence.
New forensic evidence shows that radicalisation and coordination of the so-called “doctors’ module” took place on encrypted Telegram groups — “Farzandan-e-Darul Uloom, Deoband” and another channel operated by a Jaish-e-Mohammed handler, Umar bin Khattab, based in Pakistan, according to News18.
Investigators say that Dr. Umar, Dr. Muzammil, and cleric Maulvi Irfan were active participants in these chats, where ideological indoctrination evolved into operational planning. Members received instructions to travel abroad, share funds, and set up sleeper networks disguised as professional placements.
Sources told CNN-News18 that Dr. Umar and Dr. Muzammil were directed by their handler to travel to Turkey, where they allegedly attended secret meetings before returning to India. Following their return, Dr. Muzammil joined a Faridabad clinic, while Dr. Adeel Rather was sent to Saharanpur, an intentional move to build a decentralised network, investigators say.
Forensic teams have recovered encrypted chat logs, Delhi landmark photos, and travel itineraries from the suspects’ seized mobile devices. Mobile tower analysis around the Red Fort revealed active communication from Dr. Umar’s number between 3 p.m. and 6:30 p.m. on the day of the blast, minutes before the explosion occurred.
Investigators believe these interactions were likely with co-conspirators or handlers coordinating final logistics.
Delhi Police Special Cell has detained Amit, a Faridabad-based car dealer, who allegedly facilitated the sale of the Hyundai i20 (registration HR26 CE 7674) used in the explosion.
The vehicle changed hands multiple times between Mohd Salman, Devender, Aamir, and Dr. Umar, with police now verifying each transfer for possible financial irregularities or false documentation.
Al-Falah University in Faridabad has reiterated that it has “no connection with the accused beyond their employment.”
Vice-Chancellor Prof. Bhupinder Kaur Anand stated, “No suspicious chemical or material was ever stored on campus.”
Meanwhile, NIA teams have seized CCTV footage and locker access logs from the university’s medical college for cross-verification.
The Ministry of Education has sought a preliminary compliance report from the Haryana higher education department regarding institutional oversight, India Today reported.
Times of India reports that Dr. Shaheen Saeed's brother Dr. Parvez Ansari was picked up earlier for questioning after raids in Lucknow.
Several properties linked to the duo have been sealed, and digital evidence sent for forensic audit.
Prime Minister Narendra Modi visited survivors of the Red Fort blast at LNJP Hospital in Delhi after returning from Bhutan.
He reviewed medical arrangements and met with hospital staff and families of the injured. Chief Minister Rekha Gupta and Union Home Minister Amit Shah have also held review meetings on the ongoing probe and security measures
Sources within the NIA told India Today and News18 that investigators are now examining financial trails, bank transfers, and cryptocurrency links possibly used to fund the module.
Preliminary digital audit shows small fund inflows from foreign accounts, now under RBI and FIU examination.
Investigators also suspect students from other private universities may have been approached for indoctrination, prompting a nationwide academic audit under UAPA and IT Act provisions.
The death toll from the Red Fort car explosion has now risen to 13, according to The Hindu. Preliminary investigation indicates that the blast was “premature” the suspect, a Pulwama-based doctor, Dr. Umar Mohammad Nabi, believed to be the vehicle’s sole occupant, was reportedly in haste following a series of police raids that had already led to the arrest of two of his colleagues. Investigators suspect that the device may have detonated accidentally during handling.
Al-Falah University in Faridabad’s Dhauj village continues to face investigation. Authorities are probing how the 76-acre campus and its medical college may have been used by individuals allegedly acting at the behest of Pakistan-backed handlers. The university, established under the Haryana Private Universities Act and granted university status in 2014, remains under watch as NIA teams cross-check its records and CCTV footage.
Security agencies have recorded statements of the suspects’ families, including the parents of Dr. Umar Nabi from Pulwama’s Samboora, and collected DNA samples for verification. Relatives expressed disbelief at the allegations.
According to NDTV, investigators have detained three additional doctors from Faridabad’s Al-Falah University — Dr. Muzammil Shakeel, Dr. Umar Mohammed, and Dr. Shaheen Shahid, as the National Investigation Agency (NIA) officially took over the probe into the Red Fort car explosion that killed at least nine and injured over 20.
All three were associated with Al-Falah University’s medical college and hospital, as per early reports.
Police sources told India Today that Dr. Muzammil is linked to the earlier Faridabad seizure of approximately 2,900 kg of explosive-making material, which was found in two rooms he had rented in a nearby locality. Authorities are verifying his tenancy and the chemical composition of the recovered materials.
Arms and ammunition were also recovered during follow-up searches linked to another suspect, Dr. Shaheen Shahid, who, according to NDTV, is being questioned regarding alleged contacts with individuals tied to proscribed terror outfits.
A senior professor at Al-Falah University recalled that Dr. Shaheen’s behaviour had long raised concerns: “She would often leave campus without informing anyone,” and several colleagues noted “unidentified visitors” meeting her in her office, according to NDTV.
Following the Faridabad explosives haul on November 9 — just a day before the blast, agencies now suspect that Dr. Umar Mohammed, a Pulwama native and close associate of Dr. Muzammil Shakeel, may have been driving the Hyundai i20 that exploded near the Red Fort. Investigators are probing whether it was a deliberate detonation or an accidental trigger, pending forensic confirmation.
Officials told India Today TV that CCTV footage shows the same vehicle parked near a Faridabad petrol pump days before the explosion and later crossing the Badarpur toll plaza en route to Delhi.
The first FSL report is expected soon. Preliminary analysis suggests that ammonium nitrate mixed with heavy metal powder and a remote triggering device was likely used in the explosion.
Police in Haryana’s Gurugram have arrested Mohd Salman, the original owner of the car bearing registration number HR26 CE 7674, according to India Today.
Salman told police he had sold the car to a Pulwama resident named Tariq.
Further investigation revealed that the vehicle changed hands multiple times:
In March 2025, Salman sold the car to Devender.
On October 29, Devender sold it to Aamir.
Aamir later transferred it to Dr. Umar.
Tariq was reportedly aware of the exchange chain.
Both Aamir and Tariq are currently being questioned by Delhi Police and NIA teams.
Both Aamir and Tariq are currently being questioned by Delhi Police and NIA teams.
The picture of Dr. Umar Mohammad, the suspected driver of the vehicle, has surfaced. He was employed at Al-Falah Medical College in Faridabad and hails from South Kashmir’s Pulwama, as reported by NDTV.
Two of his brothers have been detained for questioning, and investigators have seized multiple mobile phones during searches in Pulwama.
Authorities believe Dr. Umar acted alone inside the vehicle, though the investigation remains open on whether he detonated the explosive manually or remotely. The NIA has not yet confirmed this as a suicide bombing.
Police sources describe the group as part of a “white-collar terror module” — a network of radicalized professionals under investigation by the NIA and Delhi Police Special Cell, as per India Today.
The NIA has registered a case under sections of the Unlawful Activities (Prevention) Act (UAPA) and the Explosive Substances Act. Forensic Science Laboratory (FSL) experts are analysing samples from the blast site and from the bodies recovered to confirm whether the explosion was triggered from within the vehicle or remotely.
The blast occurred around 6:42 PM near the traffic signal close to Gate No. 1 of the Lal Qila Metro Station in the Chandni Chowk area. At least 10 people were killed and more than 30 injured after a high-intensity explosion ripped through a Hyundai i20 car, according to CNN.
Firefighters and emergency services rushed to the scene. Multiple casualties were taken to Lok Nayak Jai Prakash (LNJP) Hospital, where fatalities were confirmed and injured patients received urgent care. Hospital officials stated that many victims were brought dead, while several remain critical.
Chief Minister Rekha Gupta and Union Home Minister Amit Shah visited LNJP Hospital late Monday night. Gupta appealed to Delhiites to avoid rumours and maintain peace, assuring that authorities are working around the clock to ensure safety.
Home Minister Amit Shah said the vehicle involved was a Hyundai i20 and that investigators would probe all possible angles. Teams from the Delhi Police, National Investigation Agency (NIA), National Security Guard (NSG), and forensic units are leading the investigation, as per INA.
Prime Minister Narendra Modi took stock of the situation and was briefed by central and state officials.
Chandni Chowk market will remain closed on Tuesday as authorities continue investigations and security checks in the area.
The explosion occurred just one day after a separate counter-terror operation in Faridabad, Haryana, where police recovered a large quantity of suspected ammonium nitrate and arms from a rented house on November 9, 2025.
(Rh/VK/MSM)
