Delhi Police's Special Cell announced Saturday the arrest of eight individuals it says formed an active terror module backed by Pakistan's Inter-Services Intelligence, with operational links to the Mumbai underworld and fugitive gangster-turned-terrorist Shehzad Bhatti. The sweep spanned Delhi, Maharashtra, and Jharkhand over seventeen days — a timeline that suggests this was not a reactive grab but a deliberate, surveilled takedown.

According to police officials, the alleged conspiracy centered on carrying out grenade attacks and targeted shootings in Delhi and Mumbai. What makes the stated motive notable is its specificity: investigators say the module's Pakistan-based handlers framed the operation as retaliation for the demolition of a mosque in Bandra's Garib Nagar locality, razed during a municipal anti-encroachment drive. That framing — a local grievance, real or amplified, converted into a national-level violence mandate — is a documented ISI recruitment playbook, and its appearance here is worth holding up plainly.

The initial thread, police say, unraveled with the arrest of a sharpshooter in Pune. From that single detention, investigators traced a wider web: reconnaissance data on target locations in Mumbai was allegedly being compiled and transmitted to handlers based outside India. Police have named Dubai and Bangkok as nodes in the command chain — a geography consistent with how Dawood Ibrahim's D-Company has historically routed communications and funds to avoid direct Pakistan-to-India exposure.

The financing architecture described by investigators tracks with a pattern that Indian security agencies have flagged for years but that rarely receives sustained public attention: cryptocurrency channels were reportedly used to move money across borders, insulating the flow from the kind of wire-transfer scrutiny that conventional hawala networks now attract. That detail, if substantiated in a charge sheet, would represent a meaningful escalation in how ISI-affiliated networks are adapting to financial surveillance.

Shehzad Bhatti — named by police as a central figure whose network the module was plugged into — is a designated terrorist and fugitive with alleged ties to both Dawood Ibrahim's organized crime syndicate and Pakistan-based militant infrastructure. Bhatti's name appearing alongside ISI and D-Company in the same alleged operational structure is not new as an allegation, but each time it surfaces in a filed case rather than a press conference, it adds a layer of legal record to what has long been treated as an open secret in Indian counterterrorism circles.

India and Pakistan have been locked in a mutual accusation cycle over cross-border terrorism for decades, and any claim originating from Delhi Police's Special Cell must be read with awareness of that political context. The Special Cell has a credible operational track record, but it operates within a system where the government has strong incentives to publicize ISI links — particularly at moments of elevated bilateral tension. That does not make the arrests fabricated; it does mean the evidentiary substance will matter enormously when and if these cases reach a court.

What is confirmed at this stage: eight people are in custody, arrested across three geographically dispersed states, which implies at minimum a coordinated network rather than a single-location cell. What is alleged: ISI direction, Dawood Ibrahim network connections, cryptocurrency funding, and an attack plan tied to the Bandra demolition grievance. What remains to be tested: all of the above, in a courtroom, against a charge sheet that investigators say is being prepared.

The Bandra demolition angle deserves a separate line of scrutiny. Municipal demolitions of religious structures — regardless of encroachment status — carry enormous symbolic weight and have historically been exploited by external actors precisely because they generate genuine domestic anger that can be redirected. Whether the Garib Nagar demolition produced organic rage that was then channeled, or whether the grievance was largely manufactured as a recruitment pretext, is a distinction that matters both for understanding the plot and for the communities in Bandra who are now, through no action of their own, adjacent to a terrorism narrative.

The broader pattern this case fits is one Indian security officials have been describing with increasing alarm: a hybridized threat model in which organized crime logistics, ISI strategic direction, and domestically radicalized low-level operatives are no longer separate streams but a single, flexible network. If the charge sheet supports what Delhi Police is claiming publicly, this bust is not just a foiled attack — it is a rare documented window into how that network actually functions.