Uttar Pradesh has emerged as the primary recruitment ground for the Shahzad Bhatti terror network, which is allegedly operated at the direction of Pakistan's Inter-Services Intelligence (ISI) to enlist Indian youth for anti-India activities. Of the 20 persons arrested so far in the case, nine are from Uttar Pradesh, according to officials. Investigations have also extended to Delhi and Maharashtra, but UP remains the network's core operational focus.

Key Arrests and the UP Module

The Uttar Pradesh Anti-Terrorist Squad (ATS) this week arrested Sharon Ahmad, 29, a Class VII dropout, for his alleged role in the network. Investigators say Ahmad was promised financial rewards to gather sensitive information and was additionally tasked with recruiting and radicalising young people through social media platforms.

An Intelligence Bureau official said that in recent weeks it has become clear that the Bhatti network and its chain of recruiters have been concentrating primarily on Uttar Pradesh. The syndicate's stated aim, according to officials, is to build a cadre of youth on social media who would in turn draw in more recruits — ultimately forming a ground network capable of carrying out targeted killings, surveillance, and online radicalisation.

Why Western UP Was Targeted

Officials say the Bhatti network's focus on UP's western region is deliberate. “There is high digital vulnerability and the region is strategic due to its geographical proximity to national targets,” an Intelligence Bureau official said. The districts of Muzaffarnagar, Meerut, Ghaziabad, and Noida have been identified as primary recruitment zones, chosen for their closeness to the national capital and well-developed transport links that ease movement and coordination for operatives.

Investigators also note that the network has exploited existing criminal infrastructure in the region, using established local networks to facilitate recruitment and operations.

Recruitment Tactics and Economic Exploitation

The syndicate's recruitment playbook follows a clear pattern, according to officials. Headhunters have targeted the region's large youth demographic, capitalising on widespread smartphone penetration to push provocative and extremist content. The primary target audience is in the age group of 25 to 30, officials said.

Economic vulnerability has also been systematically exploited. Members of the network were reportedly willing to carry out assigned tasks for as little as ₹3,000 to ₹5,000, according to officials, underscoring how financial distress was weaponised to facilitate recruitment.

Notably, new recruits are not immediately assigned high-risk roles. Initial tasks involve recording local infrastructure and mapping public facilities — activities that do not attract the attention of security agencies. Over time, officials say, these individuals are given more significant assignments.

Broader Objectives: Rail Networks and Sabotage

Investigators have found that the UP module was specifically tasked with gathering detailed information about the railway network, including signal systems and sensitive operational data. Officials say this intelligence gathering is clearly aimed at disrupting operations in Delhi and surrounding areas.

The longer-term objectives of the network, officials warn, are far more serious than the small payments and routine-seeming tasks suggest. Videos of local infrastructure and facility mapping are allegedly intended to support arms and ammunition smuggling operations and lay the groundwork for future anti-India activities.

What Comes Next

With investigations ongoing across multiple states, security agencies are working to map the full extent of the Bhatti network's reach in India. Officials have indicated that the arrests made so far represent only a portion of the network's active operatives, and further action is expected as the probe deepens.