Pakistan does not merely shelter terrorists. It operates an integrated infrastructure that provides designated residences, police non-interference protocols, hospital access under assumed identities, madrassa employment for wanted men, and military-escorted movement corridors linking safe houses across provincial boundaries. Understanding this system requires abandoning the comfortable fiction that Pakistan’s safe haven is a passive failure of governance. Rawalpindi, the city where Pakistan’s Army General Headquarters and Inter-Services Intelligence directorate are both located, simultaneously hosts the safe houses of designated terrorists from Hizbul Mujahideen. If a man on India’s most-wanted list can live openly in the most tightly controlled military city in Pakistan, the safe haven is not an accident of geography or a symptom of state weakness. It is a product of deliberate institutional design, maintained by specific agencies for specific strategic purposes, and funded through identifiable financial channels that the Financial Action Task Force has spent years trying to disrupt.
The shadow war that India has conducted against terrorists on Pakistani soil since 2021, documented comprehensively in the campaign overview, is not simply targeting individuals. It is targeting a system. Every elimination of a wanted terrorist in Karachi, Lahore, Sialkot, Rawalpindi, or Pakistan-Occupied Kashmir is an incision into the body of an institutional apparatus that produces, protects, and replenishes the men who plan and execute attacks against India. To understand the shadow war’s strategic logic, one must first understand the infrastructure it is penetrating. This article provides the first systematic inventory of that infrastructure, categorized by facility type and mapped to the cities where it operates, treating the safe haven not as a collection of random hiding spots but as an integrated institutional system with identifiable components, maintenance mechanisms, and vulnerabilities.
Origins and Evolution of the Safe Haven System
Pakistan’s safe haven for anti-India terrorist groups did not emerge spontaneously. It was constructed over four decades through deliberate strategic decisions by Pakistan’s military establishment, beginning with General Zia ul-Haq’s Islamization program in the late 1970s and accelerating through the anti-Soviet jihad in Afghanistan during the 1980s. Zia’s decision to cultivate jihadist organizations as instruments of foreign policy created the institutional template: the state would recruit, train, arm, and deploy non-state actors to achieve strategic objectives in Afghanistan and later in Kashmir, and in exchange, those actors would receive sanctuary, funding, and political protection within Pakistan.
The Afghan jihad of 1979-1989 established the physical infrastructure. Training camps in Khyber Pakhtunkhwa and the Federally Administered Tribal Areas, originally built with CIA funding and ISI management to train Afghan mujahideen, were repurposed after the Soviet withdrawal to train Kashmiri militants. The intelligence apparatus that the ISI built during the Afghan war, a network of case officers, logistics chains, weapons depots, and communication systems, was redirected toward India. By 1989, when the Kashmir insurgency erupted, the infrastructure was already in place. The ISI did not need to build a new safe haven for anti-India groups. It already had one.
The 1990s represented the period of maximum expansion. Lashkar-e-Taiba established its 200-acre headquarters at Muridke near Lahore in 1987, initially as a small seminary. By the mid-1990s, the Muridke compound had grown into a self-contained campus with training facilities, dormitories, a hospital, schools, a media center, and administrative offices. Hafiz Saeed, whose complete profile details his organizational empire, operated from Lahore with the openness of a senior government official. Masood Azhar, released from Indian prison during the IC-814 hijacking in December 1999, established Jaish-e-Mohammed’s headquarters in Bahawalpur within months. The definitive guide to Jaish-e-Mohammed traces how Azhar built his organization’s infrastructure from scratch using ISI-provided resources and existing jihadist networks in southern Punjab.
The post-9/11 period forced cosmetic adjustments without dismantling the underlying system. Pakistan banned Lashkar-e-Taiba in January 2002 under international pressure following the December 2001 Indian Parliament attack. Saeed responded by renaming the charitable and political wing as Jamaat-ud-Dawa, a maneuver analyzed in the front organization analysis. The ban changed nothing operationally. The same personnel operated from the same offices under a different letterhead. Training camps were nominally closed, then reopened under new names or relocated to less visible locations. The cosmetic compliance strategy worked for years because Pakistan’s international partners, principally the United States, needed Pakistan’s cooperation in Afghanistan and were willing to accept surface-level gestures as evidence of genuine action.
The November 2008 Mumbai attacks, which killed 166 people across multiple locations in India’s commercial capital over a sixty-hour siege, represented the safe haven system’s most consequential product and its most destabilizing moment. Every component of the safe haven was visible in the 26/11 operation: Lashkar-e-Taiba’s organizational command directed the attack from the Muridke headquarters area. Zaki-ur-Rehman Lakhvi, the operations commander, coordinated the ten gunmen from a control room in Pakistan. The attackers had trained in LeT camps in PoK and Punjab. They were equipped with weapons, communications equipment, and operational intelligence provided through the organizational infrastructure. They launched from Karachi’s coast, using the city’s maritime chaos as cover. David Headley, the Pakistani-American operative who conducted pre-attack surveillance in Mumbai, operated from the safe haven system’s residential and logistical infrastructure.
After 26/11, international pressure on Pakistan’s safe haven reached its previous peak. India mobilized military forces along the border in a standoff that lasted months. The United States pressed Pakistan to act against LeT and JeM. The United Nations Security Council designated JuD as a LeT front organization. Pakistan arrested Lakhvi and placed Saeed under house arrest. Within two years, Lakhvi was released on bail and Saeed’s house arrest was lifted. The safe haven system absorbed the pressure and reconstituted itself. The cycle demonstrated a pattern that would repeat through multiple crises: international pressure produces temporary concessions; concessions are reversed when pressure eases; the underlying system emerges intact.
Between 2008 and 2019, the safe haven operated with relative stability. LeT continued to function through JuD. JeM carried out the 2016 Pathankot airbase attack and the 2019 Pulwama bombing. Hizbul Mujahideen continued to direct infiltration from PoK. The pattern of cosmetic bans, temporary arrests, and institutional continuity continued uninterrupted. India’s responses, the 2016 surgical strikes across the LoC and the 2019 Balakot airstrike, targeted specific operational nodes but did not threaten the safe haven system itself. The surgical strikes destroyed staging areas; the safe haven that produced the staging areas remained functional.
The FATF grey-listing from 2018 to 2022 represented the most sustained international pressure on the safe haven system. Pakistan was placed on the grey list specifically for deficiencies in counter-terrorism financing and for failing to prosecute designated terrorist organizations. The grey-list period produced measurable but limited results: JuD’s bank accounts were frozen, some properties were seized, and Saeed was eventually convicted on terrorism financing charges and sentenced to prison. Yet the organizational infrastructure survived largely intact. Madrassas continued to operate. Training facilities were temporarily shuttered, then reconstituted. The safe haven adapted to pressure without fundamentally changing.
The shadow war that began in 2021 represents a qualitatively different threat to the safe haven system. Unlike diplomatic pressure, which targets the system’s political and financial vulnerabilities, the covert elimination campaign targets its human components directly. Unlike military strikes, which target physical infrastructure that can be rebuilt, the campaign targets specific individuals whose institutional knowledge, organizational relationships, and operational expertise cannot be easily replaced. The shadow war attacks the safe haven at its most vulnerable point: the people who inhabit it.
Defining the Safe Haven: Components and Architecture
The term “safe haven” implies passive shelter, a place where a fugitive can hide. Pakistan’s safe haven for anti-India terrorist groups is something far more active and institutionalized. The system operates through six distinct infrastructure categories, each serving a specific function within the overall architecture.
The first category is training camps and military staging facilities, where recruits undergo weapons training, ideological indoctrination, and operational preparation for infiltration into India. These range from large permanent installations like the Muridke campus to smaller, mobile training sites in rural Punjab, Khyber Pakhtunkhwa, and Pakistan-Occupied Kashmir that can be dismantled and relocated when international inspectors visit.
The second category is the madrassa network, which serves as the primary recruitment pipeline feeding young men into militant organizations. As documented in the madrassa-to-militant pipeline analysis, Pakistan’s madrassa system is not uniformly radicalized, but specific institutions affiliated with LeT, JeM, and other groups function as feeder schools for jihad.
The third category is residential safe houses, where wanted terrorists live under false identities or under their real names with police non-interference guarantees. Zahoor Mistry, the IC-814 hijacker whose profile details his two decades of concealment, lived in Karachi’s Akhtar Colony neighborhood under the alias Zahid Akhund for years before motorcycle-borne assassins found him in April 2022.
The fourth category is medical infrastructure, where wounded fighters receive treatment and wanted men access healthcare under assumed names. JuD operates its own hospitals, and evidence suggests that Pakistan’s military hospitals have provided treatment to designated terrorists.
The fifth category is front-organization offices, the bureaucratic layer that provides institutional legitimacy to Pakistan’s armed organizational apparatus. JuD’s charity offices, Falah-i-Insaniyat Foundation’s disaster-relief operations, and various media organizations all serve this function.
The sixth category is military cantonments and escorted movement corridors, the physical spaces and transit routes where the Pakistan Army provides direct logistical support and physical protection to terrorist leaders and operatives. These corridors connect safe houses across provincial boundaries and provide secure transit between cities.
Each category is examined in detail below, with specific facilities, locations, and associated personnel identified from open-source reporting, FATF documentation, Indian government submissions to international bodies, and the geographic data compiled from the targeted eliminations documented across the Series A profiles. Taken together, these six categories constitute what can only be described as a parallel state within the Pakistani state, an institutional system with its own governance structures, its own financial architecture, its own educational institutions, and its own security apparatus, all operating under the protection of the national security establishment. The parallel state analogy is not rhetorical exaggeration. LeT’s institutional empire alone encompasses schools, hospitals, media operations, agricultural enterprises, disaster relief capabilities, and a political party, a breadth of institutional presence that rivals and in some cases exceeds the Pakistani state’s own service-delivery capacity in the districts where both operate. Understanding this institutional depth is essential for any assessment of whether the safe haven can be dismantled and what dismantlement would actually require.
Training Camps and Military Staging Facilities
Pakistan’s training camp infrastructure for anti-India terrorist groups has evolved through three distinct phases since the 1980s. The first phase, during the anti-Soviet Afghan jihad, produced large, permanent camps in the tribal areas and Khyber Pakhtunkhwa, funded by the CIA and managed by the ISI. The second phase, during the 1990s Kashmir insurgency, saw these camps repurposed for Kashmir-focused training and supplemented by new facilities in Pakistan-Occupied Kashmir specifically designed for infiltration preparation. The third phase, post-9/11, drove the camps into a more distributed, lower-visibility configuration that has persisted to the present.
Lashkar-e-Taiba’s primary training infrastructure centers on the Muridke compound, formally known as Markaz-e-Taiba, located approximately 35 kilometers northwest of Lahore in Punjab province. The compound covers roughly 200 acres and functions as a self-contained organizational campus. The Muridke compound guide provides granular detail on the facility’s layout. Markaz-e-Taiba includes a central mosque, residential blocks for students and permanent staff, a madrassa and school complex providing education from primary through post-secondary levels, a hospital providing free healthcare, agricultural land, and, according to Indian intelligence assessments submitted to the United Nations, weapons training areas that were nominally closed after the 2002 ban but have periodically resumed operations.
Beyond Muridke, LeT has operated training facilities in Muzaffarabad and Mansehra in Pakistan-Occupied Kashmir, specifically designed for pre-infiltration preparation. These camps focus on mountain warfare, border-crossing techniques, weapons handling for the specific small arms used in Kashmir operations, and counter-surveillance training to evade Indian border security. The Muzaffarabad facilities are located in a region that falls under the administrative control of the Pakistan Army’s Force Command Northern Areas, making military awareness and complicity structurally unavoidable. Indian intelligence has documented at least four major training sites in the Muzaffarabad-Mansehra corridor, though the precise number fluctuates as camps are relocated in response to international pressure or satellite surveillance.
Jaish-e-Mohammed’s training infrastructure is centered in Bahawalpur, Masood Azhar’s hometown in southern Punjab. The Bahawalpur guide documents the seminary complex that serves as JeM’s organizational heart. Bahawalpur hosts JeM’s central madrassa, Madrassa Usman-o-Ali, which provides both religious education and operational training. Unlike LeT’s sprawling Muridke campus, JeM’s training infrastructure is more dispersed across multiple smaller sites in southern Punjab, using agricultural land and rural properties that attract less attention than a single large compound. JeM also maintained camps in the Balakot area of Khyber Pakhtunkhwa, one of which India targeted during the February 2019 airstrike. The post-Balakot period saw JeM distribute its training activities more widely, reducing the vulnerability of any single site to military action.
Hizbul Mujahideen’s training facilities are located primarily in Pakistan-Occupied Kashmir, where the organization maintains camps focused on infiltration preparation along the Line of Control. Syed Salahuddin, the Hizbul supreme commander designated as a Specially Designated Global Terrorist by the United States in 2017, has directed operations from Rawalpindi while training camps operate in PoK under the supervision of the Pakistan Army’s Force Command. The Hizbul Mujahideen guide details how the organization’s training capacity has declined significantly since the early 2000s, with fewer recruits and reduced operational output, but the physical infrastructure remains available.
The training camp system’s resilience derives from its relationship with the Pakistan military. Camps located in PoK operate within territory directly administered by the military. Camps in Punjab and KPK operate on land that the military can surveil, and their continued existence implies institutional tolerance at a minimum. When international pressure intensifies, camps are temporarily closed, personnel are dispersed, and equipment is stored. When pressure eases, operations resume. This cycle has repeated after every major crisis: the 2001 Parliament attack, the 2008 Mumbai attacks, the 2016 Pathankot attack, the 2019 Pulwama bombing, and the FATF grey-listing. The cycle’s persistence is itself evidence that the camp infrastructure is state-managed rather than independently operated.
The training curriculum at these camps reflects an institutional sophistication that distinguishes Pakistan-based groups from self-radicalized individuals or loosely organized cells. LeT’s training program, as described by former operatives who testified in Indian and American courts (including in the David Headley prosecution), follows a structured progression. Initial daura-e-suffa courses provide basic ideological grounding and physical fitness. Advanced daura-e-khas courses introduce weapons handling with AK-47 assault rifles, pistols, grenades, and rocket-propelled grenade launchers. Specialized courses cover urban warfare, reconnaissance techniques, small-boat operations (relevant to the 26/11 Mumbai assault), and counter-interrogation methods. JeM’s training program, according to charge sheets filed by India’s National Investigation Agency in the Pathankot case, emphasizes infiltration techniques suited to the forested terrain along the Line of Control in Jammu’s Samba and Kathua sectors: nighttime navigation, river crossing, and evasion of border surveillance technology.
The weapons procurement chain that supplies these camps constitutes an infrastructure category of its own. Small arms, ammunition, and explosives reach the training facilities through multiple channels: Pakistan Army ordnance factories provide weapons through ISI-intermediated transfers; Afghan-war-era weapons caches in Waziristan and KPK’s tribal areas remain accessible; Quetta’s arms bazaars supply specialized equipment; and cross-border smuggling from Afghanistan replenishes stocks that are consumed in training or allocated to operational deployments. The procurement chain’s multiple redundancies make it resilient to disruption. Cutting one supply route does not eliminate access to weapons because alternative channels remain active.
Satellite imagery analysis, conducted by multiple international research institutions and open-source intelligence organizations, has documented training camp locations in PoK and Punjab. Images showing assault courses, firing ranges, and administrative buildings at sites consistent with LeT and JeM training descriptions have been presented at international forums, including the FATF plenary sessions that contributed to Pakistan’s grey-listing. Pakistan has responded by dismantling visible surface features at identified sites, then reconstituting activities at alternative locations or underground facilities not visible from satellite observation. The cat-and-mouse dynamic between satellite surveillance and camp concealment continues, with Pakistan demonstrating enough adaptive capacity to stay ahead of the most obvious detection methods.
The Madrassa Recruitment Pipeline
Pakistan’s madrassa system is vast, diverse, and overwhelmingly non-violent. Estimates of the total number of madrassas in Pakistan range from 30,000 to over 35,000, the majority of which provide conventional religious education and have no connection to militant organizations. The safe haven analysis concerns a specific subset: madrassas directly affiliated with, funded by, or serving as recruitment feeders for designated terrorist organizations, particularly Lashkar-e-Taiba, Jaish-e-Mohammed, and their front organizations.
Lashkar-e-Taiba’s madrassa network operates under the Jamaat-ud-Dawa umbrella. JuD runs educational institutions across Pakistan, concentrated in Punjab and Sindh. These institutions provide free education, room, and board to students from impoverished families, creating a dual-use problem that complicates dismantlement. A family that sends a child to a JuD madrassa in rural Sindh may be motivated by the absence of government schools rather than by jihadist ideology. The madrassa provides genuine educational services alongside ideological conditioning that channels a portion of graduates toward operational roles.
Sardar Hussain Arain, the JuD operative whose assassination in Nawabshah by unknown gunmen exposed the organization’s Sindh network, was responsible for managing the madrassa pipeline in Sindh province. His killing revealed the geographic extent of JuD’s recruitment infrastructure in districts far from the Punjab heartland, including Nawabshah, Sukkur, Larkana, and other towns in rural Sindh. Arain’s funeral attendance by JuD leadership provided intelligence on the network’s hierarchy, illustrating the shadow war’s cascading effect: each elimination exposes connections that inform future operations.
JeM’s madrassa system is centered on Madrassa Usman-o-Ali in Bahawalpur but extends through a network of affiliated seminaries across southern Punjab. These institutions played a documented role in recruiting the operatives who carried out the 2016 Pathankot airbase attack and contributed to the 2019 Pulwama bombing’s logistical chain. Pakistani authorities have intermittently placed Madrassa Usman-o-Ali under “observation” without shutting it down, a pattern of tokenistic action that preserves the recruitment pipeline.
The madrassa recruitment mechanism follows a recognizable pattern across organizations. Students enter at a young age, typically between eight and twelve years old. They receive years of religious education combined with ideological conditioning that frames jihad against India as a religious obligation. By their late teens, a subset of students are identified by organization handlers as suitable candidates for operational training. These candidates are transferred from madrassa environments to training camps, where religious education gives way to weapons handling, explosives training, and operational planning. The pipeline produces a steady flow of recruits who have been indoctrinated over years, making them more committed than individuals radicalized through online propaganda or short-term exposure.
The financial flows sustaining this pipeline run through registered charitable organizations, domestic donations collected at mosques and public events, diaspora remittances, and, according to FATF documentation, funds routed through Pakistan’s formal banking system. The financial architecture’s integration into Pakistan’s legitimate economy is what makes it resistant to disruption. Freezing JuD’s accounts at one bank results in the opening of accounts under new names at another bank, a pattern documented repeatedly during the grey-list period.
Safe Houses, Hospitals, and Residential Protocols
The residential component of Pakistan’s safe haven system operates through two distinct models. The first is open residence, where designated terrorists live under their real names in known locations with explicit or implicit guarantees of police non-interference. Hafiz Saeed’s Lahore residence, Masood Azhar’s Bahawalpur compound, and Syed Salahuddin’s Rawalpindi accommodation all exemplify this model. These individuals do not need to hide because the Pakistani state has decided they will not be arrested despite international warrants, UNSC designations, and Indian extradition requests.
The second model is concealed residence under false identity, used for operatives who need to avoid both international scrutiny and domestic political complications. Zahoor Mistry lived as Zahid Akhund in Karachi for roughly two decades. Bashir Ahmad Peer, the Hizbul Mujahideen launching commander known as Imtiyaz Alam, lived in Rawalpindi under his operational alias. The false-identity system requires institutional support: someone must provide the identity documents, ensure local police do not investigate the newcomer in the neighborhood, and arrange employment or a cover story that explains the individual’s presence.
Medical infrastructure extends the residential system. JuD operates hospitals in Lahore and other Punjab cities that provide free healthcare to the public, but these facilities also serve as accessible medical providers for operative personnel who cannot visit government or military hospitals without revealing their identities. After the FATF grey-listing, Indian intelligence assessments alleged that Pakistan military hospitals, particularly Combined Military Hospital facilities in Rawalpindi and Lahore, had provided treatment to designated terrorists under assumed names. Pakistan has denied these allegations, but the structural possibility exists in any system where military hospitals serve dual civilian-military functions and where patient identity verification is minimal.
The residential safe-house network spans every major Pakistani city where anti-India terrorist organizations maintain a presence. In Karachi, Sindh’s provincial capital and Pakistan’s largest city, safe houses are distributed across multiple neighborhoods. The eliminations documented in Series A profiles reveal the geographic distribution: Akhtar Colony (where Mistry lived), Samanabad (where Mufti Qaiser Farooq was killed near a religious institution, as detailed in his profile), and other locations across the city. In Lahore, residential accommodations range from Saeed’s known residence to less visible safe houses in suburban neighborhoods. In Rawalpindi, safe houses for Hizbul Mujahideen and other Kashmir-focused groups operate within kilometers of Pakistan Army General Headquarters.
The residential system’s maintenance requires active coordination between the ISI, local police, and in some cases the Pakistan Army’s Military Intelligence directorate. When an operative relocates from one city to another, arrangements must be made at both ends: the old location must be cleaned of evidence, and the new location must be prepared with the same non-interference guarantees. This coordination implies an institutional apparatus dedicated to managing the residential network, not a passive tolerance of individuals who happen to live in Pakistan.
The family support dimension of the residential system reinforces the safe haven’s hold on its beneficiaries. Organizations provide financial stipends to the families of operatives living in Pakistan, covering housing costs, children’s education, and basic living expenses. For fighters killed in operations against India, organizations pay ongoing support to surviving family members, creating a social insurance system that incentivizes participation and loyalty. LeT’s family support network is the most developed, with documented payments to hundreds of families in Punjab and PoK. JeM provides similar support through its seminary network, integrating family welfare into the madrassa system so that fighters’ children receive education alongside organizational indoctrination. This family support infrastructure creates dependencies that bind operatives to their organizations and to the safe haven system. An operative contemplating departure from the organization must weigh not only personal risk but the loss of financial support for his wife, children, and extended family. The economic bonds reinforce the ideological ones, producing a level of organizational cohesion that external pressure finds difficult to fracture. The safe haven, in this sense, is not only a geographic concept but a social contract between the organizations, the state, and the families that constitute the system’s human foundation.
Front Organizations and Institutional Camouflage
Pakistan’s safe haven system includes an institutional layer that provides legal, bureaucratic, and public-facing cover for Pakistan’s armed organizational apparatus beneath it. Jamaat-ud-Dawa is the paradigmatic example, but it is not the only one. The front-organization ecosystem includes charitable foundations, media companies, agricultural trusts, educational boards, and political parties, all of which serve the dual purpose of providing legitimate services to the Pakistani public and channeling resources, recruits, and political protection to the terrorist organizations they represent.
JuD’s institutional architecture is the most developed. The organization operates schools enrolling tens of thousands of students, hospitals treating hundreds of thousands of patients annually, and disaster-relief operations that deployed effectively during the 2005 Kashmir earthquake and 2010 Punjab floods. Falah-i-Insaniyat Foundation, another LeT-linked entity, was specifically created as a humanitarian brand after international sanctions targeted JuD. The proliferation of front organizations serves a strategic purpose: each ban can be circumvented by creating a new entity with the same personnel and infrastructure but a different legal name. Pakistan’s authorities have banned LeT, JuD, and FIF at various points, but the underlying institutional infrastructure has never been dismantled because dismantlement would require confronting the reality that these organizations provide services the Pakistani state itself does not.
JeM’s front-organization structure is simpler than LeT’s but still functional. The Al-Rehmat Trust, associated with JeM, operates madrassas and charitable activities in southern Punjab. Splinter organizations, including Lashkar-e-Jabbar and various regional cells, maintain separate institutional identities that complicate law enforcement targeting. When Pakistani authorities crack down on JeM’s central organization, activities shift to affiliate entities that are not yet on the ban list.
Hizbul Mujahideen operates primarily through the United Jihad Council, an umbrella organization chaired by Syed Salahuddin that coordinates multiple Kashmir-focused militant groups. The UJC provides an institutional framework for groups that might otherwise compete, allocating infiltration routes, coordinating operational planning, and presenting a unified political front. The UJC’s continued operation from Pakistan, with Salahuddin issuing public statements and holding press conferences, is itself evidence of state protection. No one chairs a publicly known jihad coordinating body from a city controlled by the Pakistan Army without the Army’s knowledge and at least tacit consent.
The media component of the front-organization ecosystem includes publications, websites, and social media operations that propagate jihadist ideology while maintaining enough editorial distance from direct operational content to avoid easy legal targeting. LeT’s media wing has historically produced magazines, pamphlets, and online content promoting jihad against India, framing it as a religious and national obligation. These publications serve recruitment, fundraising, and narrative-control functions simultaneously.
The political dimension of the front-organization ecosystem deserves particular attention because it connects the safe haven to Pakistan’s domestic political system. JuD’s leadership has entered electoral politics through Milli Muslim League, a political party created in 2017 as yet another institutional vehicle for Saeed’s organization. Pakistani courts initially blocked the party’s registration, then reversed course under political pressure. The political entry serves multiple purposes: it provides a legal framework for fundraising, creates a constituency that can pressure the government against cracking down on the organization, and generates electoral leverage that makes the political cost of dismantlement visible to any government contemplating action. Politicians who accept JuD support at the constituency level become stakeholders in the organization’s survival, creating a web of political dependencies that extends the safe haven’s protection into Pakistan’s civilian governance structures.
The agricultural dimension of the front-organization ecosystem is less visible but economically significant. JuD and affiliated entities control agricultural land across Punjab, using it for farming operations that generate revenue and provide employment for organization members. In some cases, agricultural trusts associated with LeT affiliates hold title to land valued at millions of dollars. This agricultural infrastructure provides the organization with a revenue base that is independent of international banking systems and resistant to the financial sanctions that the FATF grey-listing targeted. Land cannot be frozen like a bank account. Agricultural revenue flows outside the formal financial monitoring systems that Pakistan has established, however imperfectly, under FATF pressure.
Lahore and Punjab: The Jihadist Heartland
Punjab province is the organizational homeland of anti-India terrorism in Pakistan. Every major jihadist organization targeting India maintains its primary headquarters in Punjab. LeT’s Muridke compound sits in Punjab’s Sheikhupura district, near Lahore. JeM’s Bahawalpur headquarters anchors the southern end of the province. Hizbul Mujahideen’s leadership resides in Punjab’s twin cities of Rawalpindi and Islamabad. The Khalistan Commando Force’s Paramjit Singh Panjwar lived in Lahore until motorcycle-borne gunmen shot him during a morning walk in May 2023.
Lahore occupies a singular position within the safe haven network. The city is Pakistan’s cultural and intellectual capital, home to over eleven million residents, the Punjab provincial government, several major universities, and a vibrant arts and media scene. It is also the city where LeT’s institutional presence is most deeply embedded. The Lahore city guide documents three overlapping geographic layers: the LeT-JuD institutional layer (Muridke compound, JuD offices, affiliated madrassas and hospitals), the Pakistan Army protection layer (Lahore Cantonment, the garrison, and military checkpoints), and the shadow war penetration layer (the 2021 car bomb near Saeed’s residence, the 2026 shooting of LeT co-founder Amir Hamza, and the Panjwar killing).
The 2021 car bomb explosion near Hafiz Saeed’s Lahore residence on June 23, 2021, marks one of the earliest known operational acts in the shadow war within Pakistan’s most protected safe haven city. Saeed’s residence in Johar Town sits within a heavily policed area of Lahore. The car bomb’s detonation within this security perimeter sent a signal that reverberated through the jihadist establishment: Lahore’s protection was not absolute. When Amir Hamza, LeT’s co-founder, was shot on a Lahore street in 2026, the signal became unmistakable.
The concentration of jihadist headquarters in Punjab is not coincidental. Punjab is the demographic and political center of Pakistan. The Pakistan Army is a disproportionately Punjabi institution, with Punjabis historically dominating the officer corps. Armed organizations the Army sponsors reflect this Punjabi dominance. LeT’s founding leadership, JeM’s organizational base, and the ISI’s operational headquarters in Islamabad-Rawalpindi are all Punjabi institutions embedded within Punjabi cities. The safe haven is geographically concentrated in Punjab because the state institutions that maintain it are concentrated in Punjab.
Beyond Lahore, Punjab’s safe haven infrastructure includes Gujranwala, where LeT maintains a significant organizational presence; Faisalabad, where JuD operates charitable institutions; and the Bahawalpur-Multan corridor in southern Punjab, where JeM’s seminary network is densest. Each city hosts a combination of residential safe houses, organizational offices, and madrassa feeders that collectively sustain this armed recruitment pipeline.
Gujranwala, located between Lahore and the Indian border, has served as a secondary operational hub for LeT since the early 2000s. The city’s proximity to the Wagah-Attari crossing and to several infiltration routes into Indian Punjab gives it logistical significance that its relatively low international profile obscures. LeT operatives have been documented living in Gujranwala’s urban neighborhoods and in surrounding villages, using the city as a transit point between the Muridke headquarters and forward positions closer to the border. JuD maintains charitable offices in Gujranwala that provide both community services and organizational cover.
Faisalabad, Pakistan’s third-largest city and its textile manufacturing center, hosts a JuD presence built around charitable institutions, madrassas, and recruitment activities focused on the city’s working-class population. The textile industry employs hundreds of thousands of workers, many from rural backgrounds and many with limited educational opportunities, making Faisalabad’s working-class neighborhoods productive recruitment terrain for organizations offering religious education, social services, and a sense of purpose. JuD’s Faisalabad operations exemplify the dual-use challenge: the organization provides genuine services to populations underserved by the state, and those same services create the social infrastructure through which ideological conditioning and operational recruitment occur.
The Multan-Bahawalpur-Rahim Yar Khan corridor in southern Punjab represents JeM’s geographic heartland. Masood Azhar’s family roots are in Bahawalpur, and the organization’s institutional identity is closely linked to southern Punjab’s Deobandi seminary tradition. Madrassa Usman-o-Ali in Bahawalpur is the hub, but affiliated seminaries stretch from Multan in the north to Rahim Yar Khan in the south, creating a recruitment belt approximately 300 kilometers long. Operatives who carried out the 2016 Pathankot airbase attack were trained and deployed through this seminary network. The 2019 Pulwama bombing’s logistical chain included nodes in southern Punjab. India’s decision to strike Bahawalpur during Operation Sindoor reflected an assessment that the seminary belt represents JeM’s organizational center of gravity, the point where disruption would produce the most consequential impact on the organization’s operational capacity.
Sialkot, a Punjab city located approximately 15 kilometers from the Indian border, occupies a specific niche in the safe haven system as a forward operational hub for JeM. The city’s proximity to India makes it a natural staging area for cross-border operations and communications. Shahid Latif, the JeM commander who masterminded the 2016 Pathankot airbase attack, lived in Sialkot and was shot dead by masked gunmen inside a mosque in the city. The Sialkot city analysis documents how the city functions as a border-operations hub where JeM maintains surveillance capabilities directed at Indian military installations visible from the international boundary. Latif’s ability to live and operate in Sialkot for years despite being identified as the Pathankot mastermind illustrates the protection that extends even to forward-deployed operatives in border cities.
Karachi and Sindh: The Primary Operational Theater
Karachi occupies a fundamentally different position in the safe haven system than Lahore. Where Lahore functions as the organizational headquarters for jihadist leadership, Karachi serves as the operational staging ground, transit hub, and, increasingly, the primary theater of the shadow war’s targeted eliminations. The Karachi terror analysis documents why more terrorists have been killed in Karachi than in any other Pakistani city.
Karachi’s population exceeds fifteen million, making it Pakistan’s largest city by a substantial margin. Its demographic complexity, with significant Muhajir, Sindhi, Pashtun, Baloch, and Punjabi populations coexisting in often tense proximity, creates an urban environment where anonymity is achievable in a way that smaller, more homogeneous cities do not permit. A wanted Kashmiri militant can blend into Karachi’s Pashtun neighborhoods in ways that would be impossible in the tighter social fabric of a Punjabi city like Sialkot or Bahawalpur.
The organizational footprint in Karachi spans multiple groups and neighborhoods. LeT maintains cells across several Karachi neighborhoods, with particular concentration in areas like Samanabad and portions of North Karachi. JeM operatives have been documented in Akhtar Colony and surrounding areas in Karachi’s eastern districts. Smaller organizations and affiliate groups maintain their own residential and operational presences throughout the city. Karachi’s port, Pakistan’s largest, has historically served as an entry point for weapons and materiel. The city’s extensive hawala networks and informal banking sector facilitate the financial flows that sustain militant operations.
Sindh’s rural districts complement Karachi’s urban safe haven function. JuD’s madrassa network extends into rural Sindh, where the organization provides educational services in districts where government schools are absent or dysfunctional. The Nawabshah killing of Sardar Hussain Arain exposed the extent of this rural Sindh network, revealing JuD infrastructure in districts that most security analyses of Pakistan’s safe haven system overlook. Rural Sindh’s poverty and governance deficits create fertile ground for organizations that combine charitable service provision with ideological recruitment.
The shadow war has exploited Karachi’s characteristics as effectively as the terrorists have. The city’s endemic violence, including gang warfare, political killings, and sectarian attacks, provides operational cover for targeted eliminations. Motorcycle-borne shootings are tragically common in Karachi’s violent landscape, making it difficult for Pakistani authorities to distinguish campaign-attributed killings from the city’s background violence. The same anonymity that allows terrorists to hide allows their killers to operate.
Laurent Gayer, whose study of Karachi’s ordered disorder provides the most comprehensive academic analysis of the city’s violence ecosystem, has documented how Karachi’s political parties, ethnic organizations, criminal gangs, and sectarian groups create overlapping conflict systems that produce daily casualties. The targeted elimination of Indian-designated terrorists occurs within this existing violence landscape and is statistically indistinguishable from Karachi’s background killing rate without analysis of victim profiles and targeting patterns. Pakistani police investigations of the killings have consistently produced no arrests, a failure rate that may reflect investigative inability, institutional disinterest, or active non-cooperation by intelligence agencies that do not want the operations scrutinized.
Ziaur Rahman, the LeT operative whose profile documents his killing during an evening walk in Karachi, illustrates the modus operandi that has become the campaign’s signature in the city. Rahman was shot by motorcycle-borne gunmen in a residential neighborhood, a method that exploits Karachi’s dense motorcycle traffic and narrow residential streets. The attackers approached on a standard motorcycle, fired at close range, and escaped into traffic within seconds. Mufti Qaiser Farooq was killed near a religious institution in Karachi’s Samanabad neighborhood using a nearly identical method. Zahoor Mistry was killed in Akhtar Colony in April 2022. The geographic spread of these killings across distinct Karachi neighborhoods demonstrates intelligence preparation that maps the entire city’s terrorist footprint rather than focusing on a single area.
The organizational diversity of Karachi’s eliminated targets further distinguishes the campaign from Karachi’s endemic violence. LeT operatives, JeM members, and operatives from affiliated organizations have all been killed in Karachi. No single Karachi criminal gang or political faction has reason to target members of multiple India-focused organizations. The common factor linking the victims is their presence on Indian intelligence targeting lists, a commonality that only one actor has both the motive and the capability to exploit systematically.
Sindh province beyond Karachi presents a different dimension of the safe haven. Rural Sindh’s districts, particularly Nawabshah (Shaheed Benazirabad), Sukkur, and Larkana, host JuD’s madrassa and charitable infrastructure in areas where the state’s service-delivery capacity is weakest. Sardar Hussain Arain’s operational territory encompassed these rural districts, managing a recruitment and indoctrination network that drew students from agricultural communities where literacy rates remain among the lowest in Pakistan. His killing in Nawabshah in October 2023 exposed the extent of this rural network, revealing organizational infrastructure in towns that received minimal attention in security analyses focused on Pakistan’s major cities. The rural Sindh dimension complicates any analysis that treats the safe haven as a purely urban phenomenon. The system extends into Pakistan’s poorest districts, where it fills governance gaps that the Pakistani state has left open for decades.
Rawalpindi: Sanctuary in the Garrison City
Rawalpindi presents the single most damaging piece of evidence against the weak-state explanation for Pakistan’s safe haven. The city is the physical headquarters of the Pakistan Army, housing GHQ (General Headquarters), the ISI directorate, and extensive military cantonment areas. Rawalpindi’s security is not a provincial police responsibility in any meaningful sense. The city’s security architecture is dominated by military checkpoints, intelligence surveillance, and a population that includes a large proportion of serving and retired military personnel. Nothing happens in Rawalpindi without the military’s awareness.
It is in this city, the most military-controlled urban space in Pakistan, that Bashir Ahmad Peer, India’s most-wanted Hizbul Mujahideen commander and the organization’s launching chief in Pakistan, maintained his residence. Peer operated under the alias Imtiyaz Alam, but his identity was hardly a secret within the security establishment. Indian intelligence had identified him, named him in public designation orders, and communicated his presence to Pakistani authorities through diplomatic channels. The Rawalpindi safe haven analysis examines the distances between military installations and known terrorist residences, constructing a proximity argument that eliminates plausible deniability.
When unknown gunmen killed Peer outside a shop in Rawalpindi, the location itself became the argument. A designated terrorist was living in the one Pakistani city where the state’s security apparatus is physically concentrated at its maximum density. His presence there was not a failure of state capacity. It was an exercise of state policy. The weak-state thesis, which holds that Pakistan’s safe haven results from the government’s inability to control its territory, collapses entirely in Rawalpindi. Waziristan may be ungoverned. The tribal areas may be difficult to police. Rawalpindi is governed more tightly than any city in Pakistan, and it still sheltered India’s enemies.
The analyst Anatol Lieven, in his study of Pakistan’s state-society dynamics, has argued that Pakistan’s relationship with militant groups reflects a complex negotiation between state institutions and non-state actors, where each side has leverage over the other. In Rawalpindi, this negotiation is physically manifest. The military provides shelter; armed proxy groups provide strategic assets. The arrangement is maintained as long as both parties perceive benefit. The shadow war’s penetration of Rawalpindi threatens this arrangement by demonstrating that the military’s protection guarantee has limits.
Rawalpindi’s security architecture makes the city fundamentally different from Karachi or even Lahore as an analytical case. Karachi’s safe haven functions partly because of the state’s weakness; the city’s chaos creates spaces where the state cannot monitor everything. Rawalpindi’s safe haven functions precisely because of the state’s strength; the city’s comprehensive military surveillance means that the presence of designated terrorists is known, monitored, and tolerated by the institutions that control every significant security variable. The distinction matters because it separates the safe haven question from the failed-state question. Pakistan is not Somalia, where terrorists exploit governance vacuums. Pakistan is a functioning nuclear state that deliberately allocates security resources to protect the people it has been asked to surrender.
The cantonment system that dominates Rawalpindi’s urban layout further concentrates military control. Cantonment areas in Pakistan are governed by military regulations rather than civilian municipal authority, with separate courts, police, and administrative structures. Housing within cantonments is allocated to serving and retired military personnel, creating residential zones where the military controls who lives, works, and enters. Hizbul Mujahideen safe houses operating in Rawalpindi operate either within or adjacent to these cantonment zones, making military awareness of their presence structurally certain. The physical architecture of the city does not allow for ignorance.
Farzana Shaikh, whose work on the institutional incentives sustaining Pakistan’s security establishment provides additional analytical depth, has noted that the safe haven persists because the costs of maintaining it have historically been lower than the costs of dismantling it. Dismantling the safe haven would require the Pakistan Army to confront organizations it created, alienate constituencies it cultivated, and abandon a strategic posture toward India that has defined its institutional identity for decades. The shadow war is changing this cost-benefit calculation by imposing costs, primarily reputational and strategic, that the safe haven was never designed to absorb.
Bahawalpur, PoK, and the Peripheral Nodes
Bahawalpur, located in southern Punjab approximately 600 kilometers south of Islamabad, serves as Jaish-e-Mohammed’s organizational capital. Masood Azhar, whose comprehensive profile documents his rise from released prisoner to terror entrepreneur, established JeM’s headquarters in his hometown shortly after his release during the IC-814 hijacking in December 1999. The Bahawalpur compound includes Madrassa Usman-o-Ali, JeM’s central seminary and the primary institution through which the organization recruits, indoctrinates, and channels young men toward operational roles.
Bahawalpur’s significance within the safe haven network extends beyond JeM’s physical headquarters. The city sits at the center of a southern Punjab seminary belt that includes affiliated madrassas in Multan, Rahim Yar Khan, and surrounding districts. This seminary network produces a continuous flow of recruits who have been ideologically prepared for jihad over years of intensive religious instruction. Bahawalpur was one of the primary targets India struck during Operation Sindoor in May 2025, indicating that Indian military planners identified the city as a critical node in the terrorist infrastructure rather than merely a residential location.
Pakistan-Occupied Kashmir functions as the forward operating base for the safe haven system, the point where organizational infrastructure meets the operational front line. PoK’s geographic position along the Line of Control makes it the staging area for infiltration into Indian-administered Kashmir. Training camps in Muzaffarabad, Kotli, and Rawalakot prepare operatives for border crossing. Weapons and equipment are cached in forward positions. Communication infrastructure links PoK staging areas to organizational headquarters in Punjab.
The shadow war has penetrated PoK with particular strategic significance. Abu Qasim, the LeT commander and alleged Dhangri attack mastermind, was shot in the head inside a mosque in Rawalakot in Pakistan-Occupied Kashmir. The Rawalakot killing demonstrated that the shadow war’s geographic reach extends not only to Pakistan’s major cities but to the forward operating bases where infiltration operations are planned and launched. If operatives are not safe in PoK, they are not safe anywhere in the system.
Khyber Pakhtunkhwa province, particularly its tribal districts, represents the safe haven system’s historical origin point. The Afghan jihad’s training camps were located in KPK and the tribal areas, and remnants of that infrastructure persist. Sheikh Yousaf Afridi, the LeT commander killed in Landi Kotal in Khyber district, demonstrates that anti-India terror operatives maintain a presence in KPK despite the region’s association primarily with Afghan-focused groups and the TTP. Akram Khan, another LeT operative, was killed in KPK’s Bajaur tribal district, further establishing the shadow war’s reach into the tribal belt.
The tribal districts of KPK present a genuinely different governance challenge than Punjab’s garrison cities. Historically governed through a separate administrative framework under the Frontier Crimes Regulation, these areas have experienced limited state penetration. The merger of the Federally Administered Tribal Areas into KPK in 2018 was intended to extend standard governance to the tribal belt, but the process remains incomplete. In this context, the weak-state argument has more explanatory power than it does in Rawalpindi or Lahore. Anti-India operatives in KPK’s tribal districts benefit from both deliberate ISI placement and genuine governance gaps, making attribution of their presence to state policy more complex than in Punjab.
Quetta, the capital of Balochistan province, represents another peripheral node in the safe haven network with distinct characteristics. Quetta is best known internationally as the location of the Afghan Taliban’s Quetta Shura, the leadership council that directed the Afghan insurgency from Pakistani soil. The Quetta Shura’s presence established a template: senior leadership of a designated insurgent organization operating openly from a Pakistani provincial capital under military protection. Quetta’s terror ecosystem is primarily Afghanistan-focused, but supply chains connecting Quetta’s weapons markets and smuggling routes to India-focused organizations create indirect linkages that matter for the broader safe haven analysis. Weapons acquired through Quetta’s informal arms bazaars have been documented in LeT and JeM operations, and the logistics networks that move materiel through Balochistan connect to the Punjab-based organizational infrastructure.
The geographic breadth of the safe haven system is itself an analytical finding. Training camps in KPK and PoK, organizational headquarters in Punjab’s cities, operational cells in Karachi, recruitment infrastructure in rural Sindh, and supply-chain connections to Balochistan create a system that spans all four Pakistani provinces and the administered territory of PoK. No Pakistani province is uninvolved. No major region is clean. The system is national in scope, integrated in function, and sustained by institutional actors whose authority extends across provincial boundaries. This geographic totality eliminates explanations that attribute the safe haven to local conditions in a single province or to the weakness of a single provincial government. The safe haven is a national system managed by national institutions. Its geographic scope mirrors the geographic scope of the Pakistan Army’s own institutional presence, a correspondence that is not coincidental. Where the Army projects authority, the safe haven operates. Where the Army is absent, as in parts of Balochistan’s periphery, the safe haven’s presence is indirect rather than direct. The shadow war’s geographic expansion, reaching from Karachi to Landi Kotal to Rawalakot, is systematically testing this national system at every node.
ISI Direction and the Maintenance of Sanctuary
The safe haven system’s most critical component is not physical infrastructure but institutional management. The Inter-Services Intelligence directorate, Pakistan’s premier intelligence agency, serves as the safe haven’s primary architect, maintenance authority, and policy coordinator. Understanding how the ISI maintains the safe haven requires examining three distinct functions: protection, coordination, and strategic direction.
Protection is the most visible function. ISI case officers assigned to specific terrorist organizations maintain regular contact with organizational leadership, monitor their security, and, when necessary, facilitate relocations to safer accommodations. This protection is not uniform across all groups. As documented in the ISI-terror nexus analysis, the ISI maintains differential relationships with different organizations: LeT enjoys the closest institutional ties and the most robust protection; JeM has a more complicated relationship marked by periodic tensions; Hizbul Mujahideen’s protection has declined as the organization’s operational relevance has diminished; and Khalistan groups receive a different form of support focused on diplomatic and political utility rather than military capability.
Coordination involves managing the interactions between multiple terrorist organizations operating within the same geographic space. The United Jihad Council, chaired by Syed Salahuddin from Rawalpindi, is itself a coordination mechanism that the ISI supervises. Infiltration routes into Kashmir must be managed to avoid organizations interfering with each other’s operations. Training camp schedules must be coordinated to share scarce resources. Weapons and ammunition procurement must be centrally managed to maintain supply chains. Without ISI coordination, Pakistan’s multiple anti-India terrorist organizations would compete, conflict, and compromise each other. The ISI’s coordination function is what transforms a collection of independent groups into a coherent system.
Strategic direction is the function that transforms the safe haven from a passive sanctuary into an active instrument of state policy. The ISI does not merely protect terrorist groups. It provides operational guidance on targeting, timing, and methodology. The Pulwama bombing of February 2019, which killed forty Indian paramilitary personnel, occurred in the lead-up to Indian national elections. The timing was widely assessed as strategically motivated: a major attack that would test India’s resolve and potentially influence electoral dynamics. Whether the ISI directed the specific operation or merely approved the general concept is debated, but the strategic alignment between the attack’s timing and Pakistan’s political objectives is difficult to attribute to coincidence.
The ISI’s management of the safe haven operates within the broader strategic framework of Pakistan’s India policy. The Pakistan Army views India as an existential threat and has historically used non-state actors as force multipliers to offset India’s conventional military superiority. Terrorist organizations provide Pakistan with the ability to impose costs on India below the threshold of conventional warfare, maintaining strategic pressure without triggering full-scale military conflict. This calculus has persisted through multiple administrations, suggesting that it reflects institutional consensus within the military rather than the preference of any individual commander.
The differential management of different organizations reveals the ISI’s strategic priorities with particular clarity. Lashkar-e-Taiba receives the most robust institutional support because it serves the widest range of strategic functions: anti-India military operations, domestic political mobilization through JuD’s charitable network, and international signaling capability through its demonstrated capacity for spectacle attacks like 26/11. JeM receives support calibrated to its operational utility, but the relationship is more transactional and marked by episodes of tension, particularly when JeM’s actions trigger international consequences that Pakistan finds difficult to manage, as occurred after the Pulwama bombing. Hizbul Mujahideen receives diminishing support as its operational relevance declines and its leadership ages out of effectiveness. Khalistan groups receive a qualitatively different form of support focused on political and diplomatic utility rather than military capability, reflecting Pakistan’s interest in exploiting India’s domestic political vulnerabilities without committing operational resources.
The ISI’s management of the safe haven also involves a containment function that is rarely discussed in analysis focused on India. The ISI must prevent the organizations it shelters from acting against Pakistan itself. The relationship between the Pakistani state and its proxy groups has produced episodes of blowback, most notably the rise of Tehrik-i-Taliban Pakistan, which turned the jihadist infrastructure against the Pakistani state with devastating consequences. The ISI’s management of India-focused groups includes measures to prevent a similar turning: monitoring internal communications, managing leadership succession to ensure continued state alignment, and maintaining financial dependency that preserves ISI leverage. The safe haven is not a free sanctuary. It is a managed environment in which the ISI maintains control through a combination of protection, financial dependency, and coercive oversight.
This management architecture has vulnerabilities that the shadow war exploits. Every eliminated operative represents a disruption to the management relationship. Case officers who lose assigned clients face institutional embarrassment. The ISI’s reputation for effective protection is its primary currency in negotiations with militant leadership. When that currency is devalued by repeated protection failures, the ISI’s leverage over its clients diminishes. Militant leaders who no longer trust the ISI’s protection may seek independent security arrangements, relocate without ISI knowledge, or reconsider the costs and benefits of the relationship. The shadow war’s targeting of specific individuals within the ISI-managed system is, at its most strategic level, an attack on the management relationship itself.
Police Non-Interference and Military Corridors
Below the ISI’s strategic direction lies a layer of operational maintenance that involves Pakistan’s police forces and the military’s own logistics infrastructure. Police non-interference is perhaps the safe haven’s most mundane but essential component. Without it, the entire system would be vulnerable to routine law enforcement actions.
Police non-interference operates through both formal and informal mechanisms. Formally, the ISI can issue instructions to provincial police forces through established bureaucratic channels, directing that specific individuals or locations are not to be investigated. Pakistan’s police forces are hierarchically subordinate to both civilian and military authority, and an instruction from an ISI officer carries effective veto power over any local investigation. Informally, police officers in cities with significant militant presence learn through experience which neighborhoods, individuals, and organizations are off-limits. Senior officers receive direct communication from intelligence officials. Junior officers observe the pattern: raids are conducted against some targets and not others, complaints about specific individuals are filed and ignored, and certain neighborhoods are tacitly designated as no-go zones for proactive policing.
The false-identity system, which allows wanted terrorists to live under assumed names, requires police cooperation at multiple levels. Identity documents, including Computerized National Identity Cards issued by NADRA (National Database and Registration Authority), must be obtained under the false name. Local police must register the individual as a resident under the assumed identity without conducting background checks. Landlords or neighborhood associations that might question a newcomer must be satisfied by the presence of valid-looking documentation. The entire chain of identity concealment depends on institutional actors, from NADRA officials to local police constables, either actively participating in the deception or deliberately failing to scrutinize it.
Military corridors represent the movement infrastructure that connects the safe haven’s dispersed components into a functional network. When a senior terrorist leader travels from Lahore to Rawalpindi, or from Punjab to Pakistan-Occupied Kashmir, the journey may involve military escorts through checkpoints that would otherwise detain the traveler. These corridors are particularly important for the movement of weapons, ammunition, and equipment from storage facilities to training camps or forward staging areas. Pakistani military convoys transporting materiel through the country’s highway system are not subject to police inspection, creating a secure logistics channel that armed group infrastructure can access through its ISI liaisons.
The movement corridor system is visible in the geographic pattern of the safe haven itself. Terrorist leaders maintain residences in multiple cities, moving between them based on security conditions, organizational needs, and seasonal patterns (infiltration across the Line of Control is typically attempted during summer months when mountain passes are accessible). The ability to move freely across Pakistan, changing cities when a particular location feels compromised, is a core feature of the safe haven that police non-interference and military corridors collectively enable.
The corridor system’s importance became visible after the shadow war began. Pakistani media reports have documented instances of designated terrorists relocating from one city to another following nearby eliminations, a behavioral pattern that suggests awareness of targeting risk and the logistical ability to execute rapid relocations. These relocations require advance preparation: a new safe house must be identified, local police in the destination city must be notified of the incoming resident’s protected status, and personal security arrangements must be adapted to the new environment. The fact that multiple relocations have reportedly occurred successfully indicates that the corridor and non-interference systems continue to function even as the shadow war erodes the protective guarantee.
The non-interference system’s resilience has limits that the shadow war tests. Police non-interference is effective against domestic law enforcement investigations. It cannot protect against intelligence-driven covert operations by a foreign adversary. The ISI designed the safe haven to protect terrorists from Pakistani police, from international arrest warrants, and from domestic political pressure. It was not designed to protect against a systematic covert campaign by a hostile intelligence service that has independently developed targeting intelligence on the protected individuals. This mismatch between the design parameters and the threat it now faces is the structural vulnerability that the shadow war exploits.
The non-interference system also creates secondary vulnerabilities. Police officers who do not investigate terrorist residents in their jurisdictions do not develop the intelligence picture that would allow them to detect anomalous surveillance by hostile actors. Neighborhoods where police presence is deliberately minimized to protect terrorist residents become neighborhoods where hostile operational teams can conduct pre-attack surveillance without encountering police patrols. The protection system’s suppression of normal policing creates the operational space that the shadow war occupies.
The FATF Grey-List and International Pressure
The Financial Action Task Force placed Pakistan on its grey list of jurisdictions with strategic deficiencies in combating money laundering and terrorist financing in June 2018. The grey-listing represented the most sustained and consequential international pressure on Pakistan’s safe haven system, because it attached economic costs to the institutional tolerance of terrorist infrastructure.
The FATF identified specific deficiencies: Pakistan had failed to prosecute UN-designated terrorist organizations and their leaders, failed to freeze assets associated with designated entities, and failed to implement effective counter-terrorism financing measures. The action plan required Pakistan to demonstrate progress on 27 specific items, including prosecuting the leadership of designated organizations, seizing their assets, and reforming its financial monitoring systems.
Pakistan’s response followed the established pattern of cosmetic compliance. Hafiz Saeed was arrested and eventually convicted on terrorism-financing charges, receiving a cumulative prison sentence of over thirty years across multiple cases. JuD’s bank accounts were frozen, and some of its properties were seized. Pakistan passed updated counter-terrorism financing legislation and enhanced its financial monitoring systems to satisfy FATF reviewers.
The cosmetic nature of the compliance is evident in the outcomes. Saeed’s conviction addressed the leadership question without dismantling the organization he built. JuD’s charitable operations continued under alternative arrangements even as the formal institutional accounts were frozen. Training infrastructure was temporarily idled but not permanently dismantled. The madrassa recruitment pipeline continued to function. The residential safe-house network was not affected by the grey-listing in any documented way. Pakistan exited the grey list in October 2022, having satisfied the technical requirements of the action plan without fundamentally altering the safe haven system that the action plan was intended to disrupt.
The FATF experience illustrates both the potential and the limitations of international pressure on the safe haven. The grey-listing demonstrated that economic consequences can motivate surface-level compliance. Pakistan’s government and military took the grey-listing seriously because it threatened the country’s access to international financial markets and imposed costs on legitimate economic actors. The compliance, however, targeted symptoms rather than causes. Prosecuting Saeed does not eliminate the institutional incentive to maintain the safe haven. Freezing accounts does not redirect the revenue streams that sustain armed group infrastructure. Passing legislation does not change the behavior of the ISI officers who manage the protection system.
India’s submissions to international bodies, including detailed dossiers on the safe haven infrastructure, have documented specific facilities, named individuals, and provided evidence of state complicity. These submissions have contributed to the international pressure that produced the FATF grey-listing and ongoing monitoring. Their impact, however, is constrained by the same limitation that affects all diplomatic approaches to the safe haven: Pakistan’s status as a nuclear-armed state with significant strategic relationships, particularly with China and historically with the United States, provides it with geopolitical protection against the most severe consequences that international institutions could theoretically impose.
China’s role in shielding Pakistan from international consequences deserves specific examination. Beijing has repeatedly used its UN Security Council veto power and procedural maneuvers to protect Pakistan and its proxies from the most consequential international actions. China blocked JeM leader Masood Azhar’s designation as a global terrorist at the UNSC for nearly a decade, from 2009 until finally allowing the designation in 2019 only after the Pulwama bombing made continued obstruction diplomatically untenable. Chinese protection at the UNSC has historically provided Pakistan with confidence that its safe haven practices will not trigger the most severe international responses, reducing the incentive for genuine compliance. The China-Pakistan relationship, formalized through the China-Pakistan Economic Corridor and decades of military cooperation, creates a structural shield that limits the effectiveness of multilateral pressure mechanisms.
The United States’ historical approach to Pakistan’s safe haven further illustrates the limitations of international pressure. During the post-9/11 period, Washington needed Pakistan’s cooperation for military logistics in Afghanistan, intelligence sharing on Al-Qaeda, and access to Pakistani airspace and ground supply routes. These operational dependencies gave Pakistan leverage to resist American pressure on the anti-India terror groups, which Washington treated as a secondary concern relative to the Afghan campaign. Pakistan successfully compartmentalized its cooperation: assisting the United States against Al-Qaeda and the Afghan Taliban’s leadership (unevenly and with significant exceptions) while simultaneously maintaining its anti-India proxy infrastructure. The United States accepted this compartmentalization for two decades because the alternative, confronting Pakistan and potentially losing its cooperation in Afghanistan, was assessed as more costly than tolerating the anti-India safe haven. The American withdrawal from Afghanistan in 2021 removed this leverage dynamic, but by then Pakistan’s safe haven practices were so deeply institutionalized that the absence of American pressure produced no change in Pakistani behavior.
How the Shadow War Is Penetrating the Network
The shadow war documented across InsightCrunch’s comprehensive analysis represents a fundamentally different approach to the safe haven problem. Where diplomacy and international pressure target the system’s political and financial vulnerabilities, the targeted elimination campaign targets its human components: the specific individuals who operate within the safe haven and whose continued presence demonstrates the system’s protective capacity.
The campaign’s geographic expansion traces a systematic penetration of the safe haven network. The earliest documented operations concentrated in Karachi, Pakistan’s largest and most chaotic city, where operational anonymity is most available to both the hunted and the hunters. The 2021 car bomb near Saeed’s Lahore residence demonstrated capability in Punjab’s most protected city. Subsequent killings in Sialkot (Shahid Latif, the Pathankot mastermind shot inside a mosque), Rawalpindi (Bashir Ahmad Peer), Pakistan-Occupied Kashmir (Abu Qasim in Rawalakot), and Khyber Pakhtunkhwa (Sheikh Yousaf Afridi in Landi Kotal, Akram Khan in Bajaur) expanded the operational theater to encompass virtually every region where the safe haven operates.
The geographic expansion is documented in granular detail in the safe haven transformation analysis, which tracks how Pakistan’s cities have shifted from sanctuaries to hunting grounds. The transformation is not uniform. Karachi has seen the highest density of operations, which may reflect either greater target availability or more favorable operational conditions, or both. Lahore and Rawalpindi have seen fewer but more symbolically significant operations targeting higher-value individuals. PoK and the tribal areas have seen operations that demonstrate reach into areas previously considered beyond the shadow war’s geographic scope.
The campaign’s organizational breadth is equally significant. Eliminations have targeted operatives from Lashkar-e-Taiba, Jaish-e-Mohammed, Hizbul Mujahideen, Al-Badr, the Khalistan Commando Force, and the Khalistan Tiger Force. No single organization has been spared. This organizational diversity eliminates explanations that attribute the killings to internal rivalries within a single group. LeT’s internal politics cannot explain the killing of JeM operatives. JeM’s factional disputes cannot explain the killing of Hizbul commanders. Khalistan groups’ rivalries cannot explain the killing of Kashmiri jihadists. The common factor linking all the eliminated individuals is their presence on India’s most-wanted lists, a commonality that points toward a single coordinating intelligence.
The shadow war’s impact on the safe haven extends beyond the individuals killed. Behavioral evidence, compiled from Pakistani media reports and the profiles documented across the A-series, suggests that surviving terrorist leaders have significantly increased their personal security measures since the campaign accelerated in 2023. Senior LeT figures in Lahore have reportedly reduced their public movements, changed residences, and adopted counter-surveillance protocols. JeM leadership in Bahawalpur has increased security around Madrassa Usman-o-Ali. Hizbul commanders in Rawalpindi have altered their daily routines. These behavioral changes indicate that the safe haven’s psychological guarantee, the assurance that Pakistan is a place where wanted men can live without fear, has been damaged even where physical infrastructure remains intact.
The academic analyst Anatol Lieven’s framework for understanding Pakistan’s state-society dynamics provides a useful lens for interpreting the shadow war’s impact on the safe haven. If the safe haven is maintained through a negotiated arrangement between the military and armed groups, the shadow war disrupts the arrangement by demonstrating that the military’s protection is no longer reliable. The ISI’s case officers assigned to protect specific individuals are confronted with a protection failure every time one of their clients is killed. The accumulated failures erode trust, and the erosion of trust weakens the institutional bonds that sustain the system.
The modus operandi of the shadow war itself reveals an intimate knowledge of the safe haven’s operational rhythms. The motorcycle-borne shooting teams that have carried out the majority of documented eliminations exploit the daily routines of their targets, routines that the safe haven system’s predictability makes possible. Shahid Latif was shot inside a mosque during prayer time, a predictable location at a predictable hour. Paramjit Singh Panjwar was killed during a morning walk near his Lahore residence, a habitual activity. Ziaur Rahman was targeted during an evening walk in Karachi, another daily routine. The safe haven’s guarantee of normalcy, its assurance that wanted men can live ordinary lives with ordinary schedules, is the very vulnerability that the campaign exploits. The system’s greatest success, convincing its beneficiaries that they are safe enough to maintain predictable habits, produces the patterns that targeted operations require.
The intelligence preparation required for these operations implies sustained surveillance of safe haven infrastructure. Identifying a target’s residence, mapping daily routines, selecting an attack location with suitable escape routes, and timing the approach all require days or weeks of pre-operational reconnaissance conducted within the safe haven itself. This surveillance capability means that the shadow war has not merely penetrated the safe haven’s cities. It has established an enduring intelligence presence within them, a presence capable of sustained observation and patient target development that the ISI’s protection system has been unable to detect or disrupt.
The cascading intelligence effect of each elimination compounds the campaign’s impact on the safe haven. When Sardar Hussain Arain was killed in Nawabshah, his funeral was attended by JuD leadership figures whose identities and locations were thereby exposed. Each elimination reveals network connections, communication patterns, and organizational hierarchies that inform subsequent targeting. The safe haven’s social fabric, the relationships between operatives, the shared infrastructure, the communal events, becomes itself a source of targeting intelligence. The system designed to shelter individuals from external threats generates the information that external actors need to find them.
Can the Safe Haven Network Be Dismantled?
The question of whether Pakistan’s safe haven can be dismantled requires distinguishing between three levels of dismantlement: the physical infrastructure, the institutional management apparatus, and the strategic calculus that motivates the system’s maintenance.
Physical infrastructure is theoretically dismantleable. Training camps can be destroyed, as India demonstrated with the 2019 Balakot airstrike and the 2025 Operation Sindoor strikes on Bahawalpur and other targets. Madrassas can be shut down. Safe houses can be raided. Front-organization offices can be closed. The challenge is that physical infrastructure is also the easiest component to reconstitute. Training camps can be rebuilt. Madrassas can reopen under new names. Safe houses can be established in new locations. Physical dismantlement without institutional change produces a cycle of destruction and reconstruction that does not address the underlying system.
The 2019 Balakot airstrike illustrates both the potential and the limitation of physical strikes against safe haven infrastructure. India struck a JeM training facility in KPK’s Mansehra district, claiming significant casualties. Pakistan disputed the damage assessment. Regardless of the strike’s tactical effectiveness, JeM’s organizational capacity was not meaningfully diminished. Within months, the organization had reconstituted its training functions at alternative sites. Operation Sindoor’s strikes on Bahawalpur in 2025 were conducted at larger scale and with greater precision, targeting multiple facilities simultaneously. The operational results of these strikes against the safe haven’s physical infrastructure remain contested by both sides, but the strategic logic is clear: physical destruction that is not accompanied by institutional change produces temporary disruption rather than permanent degradation.
The institutional management apparatus is far more resistant to dismantlement because it is embedded within the Pakistan Army and ISI, institutions that are not subject to external reform and that resist internal change. Dismantling the ISI’s management of the safe haven would require the Pakistan military to redefine its strategic posture toward India, abandon a capability it has cultivated for decades, and confront organizations that retain the ability to cause domestic instability if turned against the state. No Pakistani military leader has shown willingness to undertake this transformation, and the institutional incentives strongly favor continuity.
Pakistan’s experience with the Tehrik-i-Taliban Pakistan illustrates what happens when the state attempts to confront organizations it previously nurtured. The TTP, born from the same jihadist infrastructure that produced the anti-India groups, turned against the Pakistani state with devastating violence. Pakistan’s military operations against TTP in Swat (2009) and North Waziristan (2014) required years of sustained combat, produced thousands of military casualties, displaced millions of civilians, and still failed to eliminate the TTP as an operational threat. The precedent weighs heavily on any military calculation about confronting LeT, JeM, or Hizbul. If the TTP, a relatively smaller organization, required such enormous military effort, the prospect of simultaneously confronting LeT (with its nationwide charitable infrastructure and political constituency), JeM (with its southern Punjab seminary base), and Hizbul (with its PoK operational network) represents a commitment that no Pakistani military leadership has been willing to contemplate.
The strategic calculus that motivates the safe haven’s maintenance is the deepest and most resistant layer. As long as the Pakistan Army perceives India as an existential threat and views non-state actors as useful instruments for imposing costs on India below the nuclear threshold, the incentive to maintain some form of safe haven persists. Changing this calculus requires either a fundamental transformation in India-Pakistan relations, which decades of diplomacy have failed to achieve, or the imposition of costs so severe that the safe haven becomes a net strategic liability rather than a net strategic asset.
The shadow war may be shifting the cost-benefit equation in precisely this direction. Every eliminated operative represents a visible failure of the protection guarantee. Every geographic expansion of the campaign demonstrates that the safe haven’s boundaries are shrinking. The behavioral changes among surviving leaders suggest that the system’s psychological effectiveness is degrading. Farzana Shaikh’s analysis of institutional incentives suggests that the safe haven will persist as long as its costs remain lower than its benefits. If the shadow war continues to impose escalating costs, the tipping point at which the costs exceed the benefits becomes a strategic possibility rather than a theoretical abstraction.
Operation Sindoor’s combination of covert targeting and conventional military strikes may represent the strategic approach most likely to alter the fundamental calculus. Covert operations alone are limited in scale; they eliminate individuals but cannot destroy physical infrastructure. Conventional strikes alone are limited in sustainability; they are politically expensive and risk escalation. Combined, the two approaches impose costs across multiple dimensions simultaneously: the covert campaign attacks the safe haven’s human assets, and the conventional capability threatens its physical infrastructure. The safe haven system was designed to absorb pressure from one direction at a time. Whether it can absorb sustained pressure from both directions simultaneously is the strategic question that the coming years will answer.
The dual-use problem, however, must be acknowledged honestly. Some safe-haven infrastructure, particularly the madrassa and charitable-organization network, serves legitimate civilian purposes. JuD’s hospitals treat patients who have no other affordable healthcare options. JuD’s schools educate children in districts where government schools do not exist. Dismantling this infrastructure without providing alternative services would create genuine humanitarian gaps and potentially generate public backlash that strengthens rather than weakens armed proxy organizations’ social base. Any realistic dismantlement strategy must account for the service-provision function that the safe haven’s institutional layer performs.
Frequently Asked Questions
Q: How does Pakistan’s terror safe haven network actually work?
Pakistan’s safe haven operates through six integrated infrastructure categories: training camps for military preparation, madrassas for ideological recruitment, residential safe houses for concealing wanted operatives, medical facilities for treating fighters under false identities, front organizations providing institutional legitimacy and funding, and military corridors enabling secure movement between cities. These components are managed by the ISI, which coordinates protection, assigns case officers to specific organizations, and ensures police non-interference across provincial boundaries. The system is not passive shelter. It is an actively maintained institutional apparatus that produces, protects, and replenishes the operatives who plan and execute attacks against India.
Q: Which Pakistani cities shelter the most terrorists?
Lahore, Karachi, Rawalpindi, Bahawalpur, and cities across Pakistan-Occupied Kashmir constitute the primary nodes of the safe haven network. Lahore hosts LeT’s headquarters and most senior leadership. Karachi serves as the operational staging ground with the highest concentration of active cells across multiple organizations. Rawalpindi shelters Hizbul Mujahideen’s leadership within the garrison city controlled by the Pakistan Army. Bahawalpur functions as JeM’s organizational capital. PoK cities like Muzaffarabad and Rawalakot serve as forward bases for infiltration operations across the Line of Control.
Q: Does Pakistan actively protect wanted terrorists?
The evidence supports an affirmative answer, though Pakistan officially denies it. Designated terrorists including Hafiz Saeed (prior to his conviction), Masood Azhar, and Syed Salahuddin lived openly in Pakistani cities for decades despite international warrants and UN Security Council designations. Bashir Ahmad Peer lived in Rawalpindi, the garrison city controlled directly by the Pakistan Army, while on India’s most-wanted list. The false-identity system that allowed Zahoor Mistry to live as Zahid Akhund in Karachi for approximately twenty years required institutional cooperation from NADRA, local police, and intelligence agencies.
Q: Is the safe haven a deliberate state policy or a weak-state failure?
The Rawalpindi evidence effectively eliminates the weak-state explanation for at least the most protected targets. Rawalpindi is Pakistan’s most tightly controlled city, where Army GHQ, the ISI directorate, and extensive military cantonment areas ensure comprehensive security monitoring. Designated terrorists living in Rawalpindi cannot be explained by governance failures in remote tribal areas. The safe haven operates in the heart of Pakistan’s military establishment, which implies deliberate institutional policy. However, the system’s implementation varies by region: in tribal areas and parts of Sindh, genuine governance deficits complement the deliberate protection that operates in Punjab’s garrison cities.
Q: How does the safe haven differ from city to city?
Each city serves a distinct function within the network. Lahore is the command center where organizational headquarters, senior leadership, and institutional infrastructure are concentrated under military protection. Karachi is the operational hub where the terrorist footprint is geographically dispersed across multiple neighborhoods, exploiting the city’s anonymity and chaos. Rawalpindi is the political-military nexus where the proximity to Army GHQ makes state complicity most visible. Bahawalpur is the seminary capital where JeM’s recruitment pipeline is anchored. PoK cities are the forward staging areas where operations against India are prepared and launched.
Q: What infrastructure do terrorists have access to in Pakistan?
Documented infrastructure includes: the Muridke compound covering approximately 200 acres near Lahore with training facilities, dormitories, schools, and a hospital; JeM’s Madrassa Usman-o-Ali in Bahawalpur; a network of residential safe houses across Karachi, Lahore, Rawalpindi, and other cities; JuD-operated hospitals providing medical care under conditions that allow wanted operatives to access treatment without identity verification; front-organization offices providing employment cover and institutional legitimacy; and military transit corridors that enable secure movement between cities without police interference.
Q: Has the shadow war degraded the safe haven network?
The shadow war has demonstrably degraded the safe haven’s two core functions: physical protection and psychological assurance. Physically, targeted eliminations across Karachi, Lahore, Rawalpindi, PoK, and KPK have demonstrated that no city within Pakistan is beyond the campaign’s operational reach. Psychologically, behavioral changes among surviving leaders, including increased personal security, residential relocations, and reduced public movements, indicate that the guarantee of safety has been weakened. However, the safe haven’s institutional infrastructure, including training camps, madrassas, front organizations, and the ISI management apparatus, remains substantially intact. The safe haven is damaged but not dismantled.
Q: Can Pakistan dismantle its own safe haven infrastructure?
Pakistan possesses the technical capability to dismantle the safe haven but lacks the institutional will and political incentive to do so. Dismantlement would require the Pakistan Army to confront organizations it created, alienate constituencies it cultivated, and abandon a strategic posture toward India that has defined its institutional identity for decades. The FATF grey-listing demonstrated that international pressure can produce cosmetic compliance, including arrests of designated leaders and asset freezes, without triggering structural change. The dual-use nature of some infrastructure, particularly the madrassa and charitable networks that serve genuine civilian needs, further complicates dismantlement.
Q: How does the ISI maintain the safe haven system?
The ISI maintains the safe haven through three functions: protection, coordination, and strategic direction. Protection involves assigning case officers to specific organizations, facilitating relocations when security threats arise, and ensuring police non-interference with designated individuals. Coordination involves managing interactions between multiple terrorist organizations, allocating infiltration routes, coordinating training schedules, and centralizing weapons procurement. Strategic direction involves providing operational guidance on targeting, timing, and methodology for attacks against India, aligning militant operations with Pakistan’s broader strategic objectives.
Q: What role do madrassas play in the safe haven network?
Madrassas affiliated with LeT, JeM, and associated organizations serve as the primary recruitment pipeline for armed group infrastructure. Students enter at young ages, receive years of religious education combined with ideological conditioning framing jihad against India as a religious duty, and a subset are channeled from madrassa environments into training camps for operational preparation. JuD’s madrassa network extends across Punjab and Sindh, while JeM’s seminary system is concentrated in the Bahawalpur-Multan corridor in southern Punjab. The pipeline produces recruits indoctrinated over years rather than months, making them more operationally committed than individuals radicalized through short-term exposure.
Q: Why did the FATF grey-listing fail to dismantle the safe haven?
The FATF grey-listing targeted symptoms rather than causes. Pakistan’s compliance strategy addressed specific FATF action-plan items, arresting Saeed, freezing JuD accounts, passing legislation, without altering the institutional apparatus that maintains the safe haven. The grey-listing imposed genuine economic costs that motivated surface-level compliance but could not compel the Pakistan military to redefine its strategic posture toward India. Pakistan exited the grey list in October 2022 having satisfied technical requirements while the underlying safe haven system continued to function.
Q: How do false identities work within the safe haven system?
The false-identity system enables wanted terrorists to live in Pakistani cities under assumed names. Zahoor Mistry, the IC-814 hijacker, lived as Zahid Akhund in Karachi for approximately two decades. Bashir Ahmad Peer operated as Imtiyaz Alam in Rawalpindi. The system requires institutional support: NADRA officials issue identity documents under false names, local police register the individual without background checks, and neighborhood associations accept valid-looking documentation without scrutiny. The chain of identity concealment depends on multiple institutional actors either actively participating or deliberately failing to investigate.
Q: What happened when the shadow war reached Rawalpindi?
The killing of Bashir Ahmad Peer in Rawalpindi carried particular symbolic weight because Rawalpindi is Pakistan’s garrison city, home to Army GHQ and the ISI directorate. Peer’s elimination in the most security-intensive city in Pakistan demonstrated that the safe haven’s protection extends even to the heart of the military establishment and yet proved insufficient against determined penetration. The Rawalpindi operation sent a signal to surviving terrorist leaders throughout the network: if Rawalpindi is not safe, nowhere is.
Q: Are there legitimate civilian uses for safe haven infrastructure?
Some safe-haven infrastructure genuinely serves civilian populations. JuD’s hospitals treat patients who lack access to affordable healthcare. JuD’s schools educate children in districts where government schools are absent. These dual-use functions create a genuine dilemma for any dismantlement strategy: removing the infrastructure without providing alternative services would create humanitarian gaps and potentially strengthen the organizations’ social base. Any realistic approach to the safe haven problem must account for the service-provision function that armed proxy organizations’ institutional layer performs alongside its military function.
Q: How has terrorist behavior changed since the shadow war intensified?
Pakistani media reports and open-source intelligence suggest significant behavioral changes among surviving terrorist leaders since the campaign accelerated in 2023. Senior LeT figures in Lahore have reportedly reduced public appearances, changed residential addresses, and adopted counter-surveillance measures. JeM leadership in Bahawalpur has increased perimeter security around organizational facilities. Hizbul commanders in Rawalpindi and PoK have altered daily routines, abandoned predictable movement patterns, and in some cases relocated to different cities. These behavioral adaptations indicate that the safe haven’s psychological guarantee, the assurance that Pakistan is a place where wanted men can live without fear, has been meaningfully degraded.
Q: Is the safe haven network permanent or could it collapse?
The safe haven’s permanence depends on the strategic calculus that motivates its maintenance. As long as the Pakistan Army perceives India as an existential threat and views non-state actors as useful instruments for imposing costs below the nuclear threshold, the institutional incentive to maintain some form of safe haven persists. The shadow war is changing this calculus by imposing escalating costs on the maintenance of the safe haven. If the campaign continues to expand geographically, climb organizational hierarchies, and degrade the protection guarantee, a tipping point at which the costs of maintaining the safe haven exceed its strategic benefits becomes conceivable. Whether that tipping point has been reached, or remains distant, is one of the central analytical questions of the India-Pakistan counter-terrorism landscape.
Q: How does Pakistan’s safe haven compare to other global terror sanctuaries?
Pakistan’s safe haven is unique among global terror sanctuaries because it combines functional statehood with deliberate institutional sponsorship. Afghanistan’s safe haven under the Taliban is a governance vacuum. Yemen’s is a consequence of civil war and state collapse. Somalia’s reflects statelessness. Pakistan is a functioning nuclear-armed state with an intact government, a professional military, and effective intelligence agencies that have deliberately constructed and maintained the terrorist infrastructure as an instrument of state policy. No other country in the world combines these characteristics, making Pakistan’s safe haven model globally unique and uniquely resistant to the types of interventions that have reduced safe havens in other contexts.
Q: What is the connection between the safe haven network and Operation Sindoor?
Operation Sindoor in May 2025 represented the convergence of India’s covert shadow war and its conventional military capability against the same safe haven infrastructure. India’s strikes targeted JeM facilities in Bahawalpur, LeT infrastructure, and other elements of the safe haven system using precision weapons including SCALP cruise missiles and BrahMos. The strikes demonstrated that the safe haven is vulnerable not only to covert penetration by individual operatives but to conventional military destruction from the air. Bahawalpur’s targeting during Sindoor confirmed that Indian military planners view the seminary and training infrastructure in southern Punjab as a critical node that justifies military-grade response. The shadow war and Operation Sindoor are two arms of the same strategic approach: one attacks the safe haven’s human components, the other attacks its physical facilities.
Q: How does the safe haven system recruit new members to replace eliminated operatives?
The recruitment pipeline operates primarily through the madrassa network. Students enter affiliated seminaries at young ages, receive years of combined religious education and ideological conditioning, and a subset are channeled into training camps for operational preparation. JuD’s madrassa system in Punjab and Sindh, JeM’s seminary belt in the Bahawalpur-Multan corridor, and Hizbul’s recruitment from Kashmiri exile communities in PoK and Rawalpindi collectively produce a continuous flow of replacements. The pipeline’s long gestation period, years of madrassa education before operational training, means that disruptions to the recruitment process take years to produce operational effects. Eliminating a trained operative creates an immediate vacancy, but the pipeline continues producing replacements unless the recruitment infrastructure itself is dismantled.
Q: Why does the safe haven persist despite decades of international pressure?
The safe haven persists because Pakistan’s military establishment calculates that the strategic benefits of maintaining proxy groups against India outweigh the diplomatic and economic costs of international criticism. The FATF grey-listing imposed genuine costs but produced only cosmetic compliance. UN Security Council designations have been issued but cannot be enforced without Pakistani cooperation. Bilateral pressure from the United States was undermined by Washington’s need for Pakistani cooperation in Afghanistan. China has consistently shielded Pakistan from the most severe international consequences through its UNSC veto power. The combination of strategic motivation, cosmetic compliance capacity, and geopolitical protection by China creates a resilience structure that has absorbed decades of international pressure without producing fundamental change.
