Terror's Many Faces: Terrorism and Organised Crime

Terrorism is the use or threat of violence to create fear and coerce governments or societies for political, ideological, religious or social objectives, typically targeting civilians. It is distinct from ordinary crime in its purpose: the terrorist wants an audience, not just a victim, and the attack is theatre designed to polarise society and provoke the state into overreaction. The Pahalgam terror attack of April 2025, which killed 26 civilians in Jammu and Kashmir, is the most recent reminder that this threat still stalks India.

This article maps terrorism's many faces in India: its causes, its manifestations, the money that feeds it, and its growing merger with organised crime and drug trafficking. It then sets out the counter-terrorism architecture India has built, from the NIA and the UAPA to the PRAHAAR doctrine and the global No Money for Terror platform.

The FBI two-category framing: domestic versus international terrorism

The FBI divides the terrorist threat into two broad categories : domestic and international terrorism, distinguished by the origin, base and objectives of the perpetrators rather than by the weapon used. The distinction travels well into mains answers because it maps onto India's own threat picture: Pakistan-backed cross-border modules sit in the international category, while radicalised modules that organise wholly inside India fit the domestic frame.

Domestic terrorism is "the unlawful use, or threatened use, of force or violence by a group or individual based and operating entirely within the United States or its territories without foreign direction committed against persons or property to intimidate or coerce a government, the civilian population, or any segment thereof, in furtherance of political or social objectives." International terrorism "involves violent acts or acts dangerous to human life that are a violation of the criminal laws of the United States or any state, or that would be a criminal violation if committed within the jurisdiction of the United States or any state. Acts are intended to intimidate or coerce a civilian population, influence the policy of a government, or affect the conduct of a government. These acts transcend national boundaries in terms of the means by which they are accomplished, the persons they appear intended to intimidate, or the locale in which perpetrators operate."

The exam value of the framing is classificatory: when a question asks how terrorism manifests in India, opening with the domestic-international split shows the examiner you can sort the threat before you describe it.

What terrorism is: the many faces

UPSC's 2025 mains question asked exactly this: how terrorism has manifested in India, with contemporary examples. The manifestations below are the answer bank for that question.

The changing nature of terrorism is the mains-worthy insight: terror groups increasingly rely on criminal networks for funding, on digital platforms for recruitment, and on proxy fronts like TRF and PAFF for deniability, while the state answers with intelligence-led, technology-enabled counter-terrorism.

Why terrorism persists: the causes

No single theory explains Indian terrorism; the 2021 mains question asked for causes, linkages and the 'obnoxious nexus' together. The table below gives the standard seven-cause framework with Indian examples.

For answers, cluster these causes: external (sponsorship, borders), ideological (fundamentalism, separatism), and structural (grievances, governance). The 2014 mains question on radicalism in India's neighbourhood rewards exactly this clustering.

The money behind the gun: terror financing

Terror financing is the raising, collecting, moving, storing and using of funds or assets to support terrorist acts, organisations or individuals. The money can come from legitimate sources like businesses, charities and donations, or from illicit ones like drug trafficking, kidnapping for ransom, extortion, smuggling, counterfeit currency and hawala networks. Cutting this money is as important as catching the militant: without funds there are no weapons, safe houses or recruits.

Narco-terrorism: drugs as a weapon

Narco-terrorism is the use of drug trafficking by terrorist organisations or insurgent groups to fund, sustain and expand their operations. It is the intersection of the narcotics trade and terrorism: proceeds from illegal drugs finance violence and subversion against the state. UPSC asked a full 10-mark question on it in 2024, calling it a serious threat across the country.

The supply map has four nodes. Pakistan-based syndicates move heroin and opium into Punjab and J&K with ISI backing. Afghanistan, in the Golden Crescent, supplies high-grade opiates trafficked through Pakistan. Myanmar, in the Golden Triangle, supplies methamphetamine and heroin trafficked through Manipur and Mizoram. And maritime routes across the Arabian Sea bring heroin and hashish from Pakistan and the Gulf to India's coast, alongside a worrying rise in domestic synthetic-drug labs producing meth, LSD and MDMA in Maharashtra, Gujarat and Himachal Pradesh.

India's vulnerability is geographic and structural: it sits between the world's two great opium and meth belts, has long porous borders, and runs a vast pharmaceutical and chemical industry whose precursor chemicals can be diverted. The double damage is the exam point: drugs fund the gun, and drugs corrode the border society that must resist the gun.

• Interdiction : the Narcotics Control Bureau, Coast Guard and border forces target trafficking corridors, with drone and maritime surveillance.
• Financial tracking : FIU-IND and the Enforcement Directorate follow the drug money into terror coffers.
• Demand reduction : de-addiction and rehabilitation dry up the domestic market that makes trafficking profitable.
• International cooperation : intelligence sharing with source and transit countries under UN drug conventions.

Organised crime: the profit motive meets the ideology

Organised crime refers to profit-driven criminal activity carried out by structured networks operating across local, national or international borders. In India it has evolved from traditional smuggling, extortion and illicit liquor into transnational networks in drug trafficking, cybercrime, money laundering, human trafficking, arms trafficking, counterfeit currency and illegal mining. India's position between the Golden Crescent and Golden Triangle, porous borders, rapid digitalisation and governance gaps have all fed this growth.

The motives differ, crime wants money, terror wants power, but they increasingly collaborate for mutual benefit. This crime-terror nexus is the subject of the 2022 mains question, and it enables the sharing of financial resources, logistics, weapons and illicit networks that make both sides more resilient.

Five factors drive the nexus deeper. Operational reciprocity: terrorists supply muscle and demand for black-market weapons, crime supplies couriers and laundering channels. Misgovernance: terror-created lawless zones become criminal havens. Porous borders: riverine and jungle frontiers like the India-Myanmar border are transit corridors. Digital disruption: encrypted apps and crypto let cells coordinate and pay without a paper trail. And legislative gaps: India lacks a single central law prosecuting the crime-terror nexus together, forcing agencies to stitch state and central statutes.

The impact on India is fivefold: internal security is weakened as crime finances terror; the economy bleeds through black money and tax evasion; governance corrodes through the criminal-politician nexus; society suffers drug abuse and trafficking; and the rule of law erodes as syndicates exploit loopholes. Breaking the nexus needs a whole-of-government approach: intelligence, financial surveillance, technology and international cooperation together.

India's counter-terrorism architecture

India answers terrorism with a layered system: laws to punish, agencies to investigate, forces to respond, and intelligence grids to connect them all.

The challenges that remain are honest mains material: cross-border drone smuggling, digital radicalisation through encrypted apps and deepfakes, the blurring line between crime and terror, inter-agency coordination friction between the Centre and states (police is a state subject), and conviction delays that dull deterrence.

PRAHAAR: a national counter-terrorism doctrine

PRAHAAR is India's first comprehensive national counter-terrorism policy, unveiled by the Ministry of Home Affairs on a 'zero tolerance' approach to terrorism. Its strategic significance is the doctrinal shift: from a reactive, post-incident response model to a proactive, intelligence-driven framework built on anticipatory threat detection, prevention and pre-emption.

• Threat spectrum expanded : drone swarms, cyber-enabled terrorism, dark-web financing, encrypted networks and CBRNE-plus-digital threats.
• Religion-neutral : terrorism defined as violence without association to any religion, ethnicity or community, reinforcing constitutional values.
• Duty-to-share : replaces the old 'need-to-know' compartmentalisation with seamless inter-agency intelligence exchange.
• Balanced strategy : stringent UAPA enforcement paired with structured de-radicalisation and rehabilitation of vulnerable youth and inmates.
• Development-centric : inclusive development, education, jobs and women's empowerment as long-term prevention of radicalisation.

Its limitations are equally exam-relevant: federal bottlenecks since policing is a state subject, the civil-liberties versus security balance under the UAPA, capacity gaps in state police against crypto and drone threats, and the subjectivity of standardising de-radicalisation programmes.

No Money for Terror: choking the finances

The No Money for Terror (NMFT) conference is a global ministerial initiative to build cooperation between countries to choke terror funding. Launched by France in 2018 and held in Australia in 2019, its third edition was hosted by India in New Delhi on 18-19 November 2022, with delegates from 72 countries and 15 international organisations, the direct subject of the 2023 mains question.

• Four sessions : global trends in terror financing; use of formal and informal channels; emerging technologies and terror financing; international cooperation.
• India's pitch : one common definition of terrorism and terror financing; no distinction between good and bad terrorism; prevent misuse of non-profit organisations for terror ideology.
• Chair's statement : affirmed that UN sanctions listings and de-listings must be objective, evidence-based and free from political considerations; flagged terror safe havens and the use of drones for weapons transport.
• Permanent secretariat : India offered to establish a permanent NMFT secretariat to sustain global focus, complementing the FATF; a discussion paper was to be circulated to all participants.
• Delhi Declaration link : welcomed the UNSC Counter-Terrorism Committee's Delhi Declaration of October 2022 on countering new and emerging technologies for terrorist purposes.

For answers, NMFT is the international bookend to domestic finance tools like FIU-IND and the ED: it pushes uniform standards for asset freezing, information-sharing between financial intelligence units, and regulation of crypto and the dark web.

Way forward

• Legal reform : update anti-terror laws for emerging threats while protecting civil liberties, as the Second Administrative Reforms Commission recommends.
• Intelligence modernisation : AI, facial recognition and integrated command systems for predictive, not just reactive, intelligence.
• Border and coastal security : fencing, sensors, drones and CIBMS against infiltration and smuggling.
• Root causes : inclusive development, education and jobs in vulnerable regions, through the Aspirational Districts Programme and tribal schemes.
• De-radicalisation : grassroots engagement, rehabilitation centres and community policing in high-risk districts.
• International partnerships : intelligence sharing, extradition and joint capacity-building via the UN, FATF and bilateral agreements.
• Technology regulation : monitoring social media, regulating encrypted channels and promoting cyber hygiene through CERT-In and I4C.

UPSC and this topic: PYQ weightage

• 2025 : 'Terrorism is a global scourge. How has it manifested in India?' Asked for contemporary examples and state counter-measures.
• 2024 : 'Explain how narco-terrorism has emerged as a serious threat across the country' and suggest counter-measures (10 marks).
• 2023 : major sources of terror funding, efforts to curtail them, and the aim and objective of the NMFT conference held in New Delhi in November 2022.
• 2022 : types of organised crime and the linkages between terrorists and organised crime at national and transnational levels.
• 2021 : 'Analyse the complexity and intensity of terrorism, its causes, linkages and obnoxious nexus' and measures to eradicate it.
• 2019 : the UAPA and NIA Act amendments in the prevailing security environment, plus the human-rights critique of the UAPA.
• 2017 : solutions to curb terrorism and the major sources of terrorist funding.
• 2016 : 'hot pursuit' and 'surgical strikes' and their strategic impact; and 'terrorism is emerging as a competitive industry'.
• 2015 : ISIS, its mission, and the danger of digital-media radicalisation of Indian youth.
• 2014 : radicalism in India's multi-religious neighbourhood and strategies to counter it.

Newer forms: lone wolves, hybrid terrorists and white-collar terror

Lone-wolf attacks are acts of terror carried out by individuals acting without direct command from any organisation, though they may draw inspiration online. Their unpredictability is the core challenge: there is no handler to intercept and no network to map, and simple means defeat technology-centric surveillance. India's vulnerability is demographic and digital: a large youth population, deep social-media penetration and ready propaganda widen the pool from which lone actors emerge.

Hybrid terrorists are radicalised individuals who live ordinary public lives, the "boys next door", but keep themselves in standby mode awaiting a handler's signal. They use encrypted messaging, move small crowd-funded transfers and exploit the cover of normalcy. Identification is the policing problem: the hybrid terrorist is indistinguishable from a civilian until the moment of activation, and sleeper cells are their dormant form.

Bioterrorism is, in Interpol's definition, "the purposeful release of biological agents or toxins to hurt or kill persons, animals, or plants to intimidate or force a government or civilian population to promote political or social aims." Its mains relevance lies in consequence management: mass panic, overwhelmed hospitals and long decontamination, which is why the NDMA's guidelines and the NDRF's CBRN capabilities belong in internal-security answers.

White-collar terrorism is the use of respectable professional cover, doctors, engineers or students in elite institutions, to give terror networks safe houses, clean finances, institutional access and technical skill. The clean financial profile defeats watchlists, and digital echo chambers supply the ideology. For policy it exposes a blind spot: background-vetting and professional-licensing systems designed for ordinary crime do not catch ideological infiltration.

The starkest recent case: on 10 November 2025, a vehicle-borne IED exploded near the Red Fort in Delhi, killing 11 people and injuring 29. The NIA's 2026 chargesheet identified the suicide bomber as Dr Umar Un Nabi, an assistant professor at Al-Falah University, Faridabad, who allegedly led a revived Ansar Ghazwat-ul-Hind module. It is the sharpest illustration of white-collar terrorism: educated professionals weaponised by terror networks.

Cyber terrorism is "the use of the Internet to attack critical infrastructure, financial systems, or data that cause fear, disruption, or coercion, in order to achieve political or ideological gains through threat or intimidation." At mains level it sits at the junction of this article and the cyber-security article: power grids, banking systems and hospital networks attacked for ideological ends.

Radicalisation is the process by which individuals adopt extremist ideologies that justify violence. The standard factor set is political, repression and poor governance; socio-economic, unemployment and marginalisation; administrative, corruption and alienation from the state; religious intolerance and sectarian narratives; social-media echo chambers; and displacement and identity crises. Mains answers should treat radicalisation as the pipeline and de-radicalisation as the counter-pipeline.

Organised crime defined: the Interpol test and its characteristics

Organised crime is, in Interpol's definition, "any group with a corporate structure whose main goal is to make money through illegal means, frequently subsisting on intimidation and corruption." The corporate structure is the exam point: unlike ordinary crime, organised crime has hierarchy, continuity and division of labour, which is exactly why it can lend terrorist groups logistics, arms and laundering channels on demand.

Transnational organised crime is organised crime that crosses international borders: people or groups organising and carrying out unlawful operations across them. The textbook split is traditional organised crime, illicit liquor, betting, robbery and gambling, versus non-traditional organised crime, money laundering, hawala, counterfeit currency and cybercrime. The non-traditional set is where the terror nexus lives.

The Palermo Convention: the global rulebook on organised crime

The UN Convention against Transnational Organized Crime (UNTOC), adopted in 2000 and known as the Palermo Convention, is the principal global treaty against transnational organised crime. The UN Office on Drugs and Crime (UNODC) is its custodian. It is supplemented by three Protocols: against trafficking in persons, against the smuggling of migrants, and against illicit manufacturing of and trafficking in firearms.

Article 3 gives the transnational test: an offence is transnational if it is committed in more than one state; or committed in one state but substantially prepared, planned or controlled in another; or committed by an organised criminal group active in more than one state; or committed in one state but with substantial effects in another. The four tests are the legal grammar behind extradition and mutual legal assistance requests.

The India hook: the Central Bureau of Investigation (CBI) is India's focal point for cooperation under the Convention, and UN Security Council Resolution 2482 explicitly links terrorism with organised crime, asking states to break the financial and logistical nexus between them. The Convention's way-forward logic for India mirrors this article's: a dedicated central law, witness protection, confiscation of the proceeds of crime and shared databases.

The 2019 upgrades: the UAPA and the NIA

The Unlawful Activities (Prevention) Amendment Act, 2019 made a doctrinal shift: individuals, not just organisations, can now be designated as terrorists, closing the loophole that let leaders of banned outfits simply rebrand. It also empowered NIA officers of Inspector rank and above to investigate scheduled offences in India and abroad, and added the International Convention for the Suppression of Acts of Nuclear Terrorism (2005) to the UAPA's Schedule.

The NIA (Amendment) Act, 2019 widened the agency's remit to offences committed outside India and brought new scheduled offences into its fold: human trafficking, counterfeit currency, manufacture and sale of prohibited arms, cyber-terrorism and offences under the Explosive Substances Act, 1908, with Special Courts for speedy trial. Together, the two 2019 amendments are India's answer to cross-border, networked terror.

Key Terms

• Terrorism: Terrorism is the use of violence against civilians and the state to create fear for political ends. India has no statutory global definition to rely on, which is why the Comprehensive Convention on International Terrorism remains stalled. It matters as the central internal-security threat, from cross-border groups to online-radicalised lone actors. Example: The 26/11 Mumbai attacks as the defining terror strike on India.
• National Investigation Agency (NIA): The National Investigation Agency is India's federal counter-terrorism investigation agency, created by the NIA Act of 2008 after the 26/11 Mumbai attacks. It investigates scheduled offences like terrorism across state boundaries without needing state permission. The 2019 amendment extended its jurisdiction to offences committed abroad against Indians. It matters as the backbone of terror-financing and conspiracy prosecutions. Example: NIA probes into Kashmir terror-funding cases.
• Unlawful Activities (Prevention) Act, 1967: The Unlawful Activities (Prevention) Act, 1967 is India's principal anti-terror law, criminalising terrorist acts, terrorist organisations and support to them. The 2019 amendment allows designation of individuals, not just organisations, as terrorists. It matters because almost every major terror prosecution, from Kashmir militancy to urban modules, runs through UAPA. Example: Designation of Masood Azhar as a terrorist under the 2019 amendment.
• Narco-terrorism: Narco-terrorism is the use of drug-trafficking proceeds to finance terrorism, or the use of terror networks to protect drug routes. In India's context, heroin from the Golden Crescent funds cross-border militant modules while Punjab's drug problem feeds the same pipelines. It matters because it merges the NDPS enforcement challenge with counter-terrorism. Example: Heroin proceeds funding terror modules in Punjab and J&K.
• Crime-terror nexus: The terror-organised crime nexus is the symbiotic link where terrorist groups use criminal networks for funds, weapons and logistics, and criminals use terror networks for protection and firepower. It matters because countering either threat in isolation fails, as D-Company's alleged role in terror financing shows. Example: Drug syndicates moving arms for militant groups in Punjab.
• The Resistance Front (TRF): The Resistance Front is a militant proxy outfit active in Jammu and Kashmir that emerged around 2019 after the abrogation of Article 370. Indian agencies describe it as a front for Lashkar-e-Taiba, created to give Pakistan-backed militancy a local, secular-sounding name. It claimed the April 2025 Pahalgam attack, which made it the focal point of India's case on state-sponsored terrorism. Example: TRF's claim of the Pahalgam attack, April 2025.
• PAFF: The People's Anti-Fascist Front is a militant proxy outfit in Jammu and Kashmir that emerged around 2020, widely assessed as a front for Jaish-e-Mohammed. Like TRF, it gives Pakistan-backed militancy a local name. It claimed several attacks on security forces in the Pir Panjal region. It matters as evidence of the rebranding strategy of proxy groups. Example: PAFF claims of attacks in Rajouri-Poonch.
• Golden Crescent: The Golden Crescent is the opium-producing region spanning Afghanistan, Iran and Pakistan, the source of most heroin trafficked into India. It matters because heroin proceeds fund cross-border terrorism, fusing the drug trade with the Kashmir and Punjab security threat. Example: Afghan heroin routed through Pakistan into Punjab.
• Golden Triangle: The Golden Triangle is the opium-producing region at the junction of Myanmar, Laos and Thailand, whose drugs flow into India's North-East. It matters because the Myanmar border's drug corridors fund insurgent groups and feed addiction in the region. Example: Methamphetamine and heroin entering Manipur from Myanmar.
• National Security Guard (NSG): The National Security Guard is India's federal counter-terrorism and hostage-rescue force, raised in 1984 and known as the Black Cats. Under the MHA, its hubs across the country cut response time to terror attacks, as in 26/11. It matters as the specialist force for urban terror contingencies. Example: NSG commandos in the 26/11 Mumbai operations.
• PRAHAAR: PRAHAAR is India's first publicly released National Counter-Terrorism Policy and Strategy, unveiled by the Ministry of Home Affairs on 23 February 2026. Its seven pillars, Prevention, Response, Aggregating internal capacities, Human rights, Attenuating conditions, Aligning international efforts and Recovery, spell the acronym. It matters because it marks India's shift from a reactive to a pre-emptive, intelligence-led counter-terror doctrine with a whole-of-government approach. Example: MHA's seven-pillar counter-terrorism doctrine, February 2026.
• No Money for Terror (NMFT): No Money for Terror is the international ministerial conference against terror financing, held in Paris (2018), Melbourne (2019) and New Delhi (2022). The Delhi conference pushed for unified action against formal and informal funding channels. It matters as India's flagship diplomatic initiative on countering terror finance. Example: The November 2022 NMFT conference hosted in New Delhi.
• De-radicalisation: De-radicalisation is the process of rehabilitating radicalised individuals away from extremist ideology through counselling, education and community engagement. India lacks a national programme, a gap flagged in counter-terror assessments. It matters because killing or jailing militants does not kill the ideology. Example: Counselling programmes for misguided youth in Kashmir.
• Lone-wolf attack: A lone-wolf attack is a terror attack carried out by an individual acting without direct orders from any group, usually radicalised online. Example: self-radicalised individuals inspired by extremist propaganda who strike without handler contact.
• Hybrid terrorist: A hybrid terrorist is a radicalised individual who lives an ordinary public life but remains in standby mode, ready to act on a handler's signal. Example: the "boys next door" modules that use encrypted messaging and small crowd-funded transfers.
• White-collar terrorism: White-collar terrorism is the use of respectable professional cover, such as doctors or engineers, to give terror networks safe houses, clean finances, institutional access and technical skill. Example: professionals whose clean financial profiles defeat terror-finance watchlists.
• Radicalisation: Radicalisation is the process by which individuals adopt extremist ideologies that justify violence, driven by political, socio-economic, administrative, religious and online factors. Example: youth drawn into extremist narratives through social-media echo chambers.
• Bioterrorism: Bioterrorism is the purposeful release of biological agents or toxins to hurt or kill persons, animals or plants in order to intimidate a government or civilian population. Example: the NDMA's CBRN preparedness framework for mass-casualty biological incidents.
• Palermo Convention (UNTOC): The Palermo Convention, formally the UN Convention against Transnational Organized Crime adopted in 2000, is the principal global treaty against transnational organised crime, custodied by UNODC. Example: its Article 3 four-part test for whether an offence is transnational.
• Sleeper cell: A sleeper cell is a dormant terror module embedded in a community that stays inactive, often for years, until activated for an attack. Example: urban modules that surface only when handlers trigger them.

Practice questions