India's intelligence agencies have launched heightened surveillance across South Indian states after reports emerged that the Islamic State (IS) is deploying a deliberate micro-group radicalisation strategy targeting local youth, with Tamil Nadu identified as the outfit's primary operational base in the region. Security officials say the threat is evolving, with lone-actor attacks now a central concern.

The Micro-Cell Strategy

According to officials aware of the matter, IS-affiliated individuals are convening in gatherings of no more than three to four persons — a deliberate tactic to evade detection by security agencies. No pamphlets, books, or physical material are distributed at these meetings, further minimising the risk of exposure.

An Intelligence Bureau official confirmed that those already radicalised are organising such sessions to propagate IS ideology and identify potential recruits. 'The meetings are attended by not more than three to four persons, and this is a deliberate ploy to evade the attention of the security agencies,' the official said.

According to officials, discussions at these gatherings focus on three areas: deepening radicalisation, identifying potential lone-actor targets, and replicating the Tamil Nadu model in Karnataka, Kerala, Telangana, and Andhra Pradesh.

Tamil Nadu as the IS Foothold

Officials describe Tamil Nadu as the state where IS has found 'considerable success since its inception in 2014.' The outfit's scale of influence in other southern states is reportedly smaller, but the current meetings are specifically aimed at closing that gap.

This comes amid sustained concern over online radicalisation pipelines feeding into offline organising. Security agencies are tracking both vectors simultaneously, officials said.

The Jameesha Mubin Incident: A Blueprint for Lone Actors

Intelligence officials say IS-linked cells are drawing operational lessons from the Jameesha Mubin incident in Coimbatore, Tamil Nadu, on 23 October 2022. Mubin attempted to detonate a vehicle near the Sangameshwar Temple in Kottaimedu, Coimbatore, but was killed when the vehicle exploded prematurely, failing to reach his intended target.

What alarmed agencies was not the failure but the concealment: Mubin had successfully hidden his plans from intelligence networks until the explosion itself. 'Prior to the incident, he was involved in fundraising and was also part of several meetings, all of which went undetected. The actual plan came to light only once the explosion took place,' an official said.

A subsequent Enforcement Directorate (ED) investigation found that Mubin and associates had raised funds through a fraudulent COVID-19 vaccination certificate scheme, collecting payments from individuals seeking fake certificates without actual vaccination. Additional funds were reportedly collected fraudulently at the Kovai Arabic College in Coimbatore.

Lone-Actor Threat and What Agencies Are Watching

Officials say the IS's current priority is radicalisation, but agencies have assessed that the outfit would actively encourage any radicalised individual willing to carry out a lone-actor operation. Intelligence inputs suggest that future terror attempts in the region are more likely to be executed by lone actors than coordinated cells — a pattern consistent with IS global strategy post-2019.

Notably, the small-meeting format mirrors the operational security Mubin was known to practice, making pre-emptive detection significantly harder. Security agencies have placed southern states under close watch, with Tamil Nadu under particular scrutiny.

With IS apparently seeking to entrench further across the southern peninsula, the effectiveness of India's micro-level surveillance infrastructure — and inter-agency coordination — will face a direct test in the months ahead.