Investigation Probes Whether Suspects’ Private Threema Server Was India-Based or Abroad

Delhi Blast, Threema App Delhi Blast: The investigation into the car blast near Delhi's Red Fort has now taken a digital turn. Security forces have found suspects' conversations on the Swiss messaging app Threema, whose deep encryption and anonymous identification system have further complicated the case.

Mon, 17 Nov 2025 12:02 PM (IST)
Investigation Probes Whether Suspects’ Private Threema Server Was India-Based or Abroad
Investigation Probes Whether Suspects’ Private Threema Server Was India-Based or Abroad

A surprising digital angle has cropped up in the investigation related to the blast near the Red Fort. The security forces have said that three doctors involved in the attack, namely, Dr. Omar Un Nabi, Dr. Mujhmil Ganai, and Dr. Shaheen Shahid, continued to communicate with the Swiss messaging app Threema. These three accused are associated with Al-Falah University in Faridabad. Threema's extremely strong encryption and user anonymity system made it tough for the investigating agencies to apprehend these people.

Investigation revealed that the accused had built a closed communication network using the security infrastructure of the app. The peculiar thing about Threema is that it does not ask for either a mobile number or an email address. A single random ID can operate the entire account. This is why the suspects remained elusive for so long.

Sources claim that the three even created their own private Threema server. Through this server, they shared locations, maps, files, and planning related to the blast. End-to-end encryption, a policy of not storing metadata, and the ability to delete chats from both sides made it difficult for forensic teams to trace any evidence.

Advertisement

Want to get your story featured as above? click here!

Advertisement

Want to get your story featured as above? click here!

Investigating teams are now trying to determine whether this private server was located in India or abroad, and whether there are other individuals involved in this module.

Threema is not a new name. The government banned this app in May 2023 under Section 69A of the IT Act. The investigation found that several Pakistan-based groups were using such high-encryption apps to spread propaganda and establish contacts in India. Along with Threema, apps like Zangi, Briar, Nandbox, SafeSwiss, BChat, Element, Second Line, IMO, and MediaFire were also banned because monitoring these platforms is nearly impossible.

Even though the app is blocked, agencies suspect that the accused circumvented the country's restrictions by using VPNs. They were able to use it unhindered while traveling abroad, especially to Turkey and the UAE.

Threema's payment system also makes tracking difficult. Users can send cash to Switzerland or pay with Bitcoin to purchase the app. Neither method creates a digital record.

The Red Fort blast investigation clearly shows that terrorism is now deeply entrenched not only on the ground but also in the digital world. An app designed for privacy and secure chatting can, in the wrong hands, become a tool for planning major attacks. As the forensic team unravels the layers of digital evidence, it is clear that the fight against terrorism is going to become even more complex in the future.

Muskan Kumawat Muskan Kumawat is a Journalist & Content Writer at Sangri Times English, covering a wide range of topics, including news, entertainment, and trending stories. With a strong passion for storytelling and in-depth reporting, she delivers engaging and informative content to readers.