Tracing Red Fort blast plan: What happened during Umar's 2022 visit to Turkey-based handler 'Ukasa'?

While Umar’s i20 exploded near Red Fort on November 10, security agencies have since recovered the Ecosport from Faridabad and launched a search for the Brezza.

A Turkiye-based handler, known by the codename Ukasa, was allegedly involved in the high-intensity explosion near the iconic Red Fort that claimed 12 lives, according to a report by Times of India.

Security sources told TOI that the Turkiye-based handler, known by the codename Ukasa, directed the module led by Al-Falah University professor Umar Un Nabi. Ukasa reportedly  acted as the primary link between the Delhi-based module and handlers of proscribed outfits Jaish-e-Muhammed (JeM) and Ansar Ghazwat-ul-Hind (AGuH).

According to the TOI report, the plot was hatched as early as 2022 when Umar and three others had travelled to Turkiye.  Umar had stayed in Ankara for two weeks.

“Their conversations had initially started on Telegram and later shifted to encrypted apps like Signal and Session. It was Ukasa who guided them on how to establish covert cells and avoid digital footprints,” an officer told TOI.

According to investigators, Ukasa played a key role in shaping the module’s plan to carry out a “spectacular” series of attacks in India.

A Hyundai i20, a red Ford Ecosport, and a Maruti Brezza were reportedly procured for the operation. While Umar’s i20 exploded near Red Fort on November 10, security agencies have since recovered the Ecosport from Faridabad and launched a search for the Brezza. Umar was killed on the spot.

The TOI report stated that the  remaining vehicles may still contain hidden explosives.

Sources said Umar’s close aide, Dr Muzammil , also associated with Al-Falah University, had conducted multiple recces of Red Fort in January this year. “They intended to study the monument’s security apparatus ahead of a possible strike, likely to coincide with Republic Day celebrations in 2026,” an investigator told TOI.

Over 350kg of explosive material, including ammonium nitrate and traces of RDX, had been accumulated by the group reportedly since 2022. This cache was recovered earlier this year in Faridabad. This had led to  Muzammil’s arrest and Umar had feld before detonating the IED-laden i20 after a 16-hour drive across Delhi-NCR.

Ayodhya was also reportedly on the hit list. “They planned to attempt an attack around November 25, coinciding with the hoisting of a saffron flag atop the Ram temple,” a source told TOI.

Investigators have reportedly approached foreign intelligence agencies to trace Ukasa’s digital footprint. “Every encrypted chat and overseas transfer is being scrutinised. The Turkiye connection is the fulcrum of this case,” an officer told TOI.

Earlier, ACP Somnath Paruthi stated that police officials are holding meetings with car dealers across the city to ensure that all sales follow proper documentation and identity verification procedures.

"Following the recent incident, we are meeting with car dealers to check compliance with vehicle registration norms and identity of car owners. Following this incident, we have asked the car dealers to carefully check who they are selling the car to. We have also asked them to inform the police of any suspicious customers," he said.

Lokesh Munjal, President of the All India Car Dealers Association's Delhi unit, urged all dealers to remain vigilant and ensure that verified documents support every transaction.
"I appeal to all car dealers not to sell cars without verifying all documents that might lead to any unfortunate incident," Munjal told ANI.