Between 2022 and 2026, a series of killings spread across Pakistan’s cities with a consistency that no criminal enterprise, no tribal feud, and no internal rivalry could plausibly explain. In Karachi, Lahore, Sialkot, Rawalpindi, Rawalakot, Nawabshah, Jhelum, Bajaur, and Landi Kotal, two men on a motorcycle would approach a target, fire at close range, and vanish into traffic before anyone could react. The targets shared one feature that connected them across geography, organization, and rank: every single one appeared on India’s most-wanted lists, NIA charge sheets, or UNSC sanctions designations. The method was identical. The target selection was surgical. The claim of responsibility was absent. This is not a coincidence. This is a pattern, and the pattern is a doctrine.

The phrase “unknown gunmen” appears in Pakistani police First Information Reports with a regularity that has become its own form of dark comedy among intelligence analysts. Every FIR reads the same way: two unidentified men on a motorcycle, faces covered, fired multiple rounds at the victim, fled the scene, no arrests made, no group claimed responsibility. Swap the name, swap the city, swap the date, and the report is interchangeable. Pakistani security officials have, since January 2024, formally alleged that a “hostile intelligence agency” is responsible for at least eight of these incidents. India has denied every allegation as “false and malicious anti-India propaganda.” The denials have not altered the pattern, and the pattern has not paused.

What follows is a systematic deconstruction of that pattern. Twelve cases, examined in sequence, reveal an operational signature so consistent that the question is no longer whether the killings are connected but what the connection reveals about the intelligence architecture behind them. The motorcycle-borne assassination is not a coincidence but a signature. The unknown gunmen use the same method because the method works: two riders, close-range fire, predictable-location targeting, and immediate escape through congested streets where pursuit is impossible. The broader campaign that these killings constitute has reshaped the security landscape of South Asia. This article maps the pattern, tests it against alternatives, and argues that the modus operandi itself constitutes evidence of a coordinated doctrine operating at state-level sophistication.

The Pattern Emerges

The first killing that established the template occurred in Karachi in late 2022, when a Jaish-e-Mohammed operative named Zahoor Ahmad Mistry, who had been living in the Gulshan-e-Maymar neighborhood under the alias Zahid Akhund, was shot by two men on a motorcycle outside his home. Mistry had participated in the 1999 IC-814 hijacking that forced India to release Masood Azhar, and his name appeared on Indian intelligence lists for over two decades. His killing attracted little international attention. Pakistani media reported the incident as a routine targeted killing, a genre of violence that Karachi produces in distressing quantities. The FIR noted the standard details: motorcycle, two gunmen, no witnesses willing to testify, no suspects identified.

Within months, the template repeated. A Lashkar-e-Taiba operative in Karachi’s Orangi Town neighborhood was shot during an evening walk by two men on a motorcycle. A Jamaat-ud-Dawa functionary near a religious institution in Samanabad was killed by attackers fitting the same description. A Hizbul Mujahideen operative in Rawalpindi was intercepted by motorcycle-borne gunmen in the morning. Each killing shared the same basic architecture: the target was a designated or listed individual connected to a terror organization active against India, the attackers arrived on a motorcycle, fired at close range, and disappeared into the dense urban traffic that makes Pakistani cities functionally un-policeable for this type of rapid-strike operation.

By mid-2023, the frequency accelerated. Abdul Sayed, a researcher who tracks violence involving Pakistani armed groups, noted that the target profile had shifted from mid-level operatives to figures with significant organizational authority. Ajai Sahni, director of the South Asia Terrorism Portal (SATP), observed that the geographic spread, initially concentrated in Karachi, was expanding into Punjab and Khyber Pakhtunkhwa. The pattern was not only repeating but evolving, moving up the hierarchy and outward across the map.

Three features distinguished these killings from Karachi’s background rate of targeted violence. First, the target selection was exclusively drawn from India’s counter-terrorism priority lists. Karachi sees hundreds of targeted killings annually connected to political rivalries, ethnic tensions, land disputes, and organized crime. The MQM party’s targeted-killing campaigns, the Rangers’ extrajudicial operations, and the ethnic violence between Muhajir, Sindhi, Pashtun, and Baloch communities produce a baseline of lethal violence that makes any individual killing unremarkable. The unknown-gunmen pattern does not touch any of these categories. Every target is connected to Lashkar-e-Taiba, Jaish-e-Mohammed, Hizbul Mujahideen, or Khalistan-affiliated organizations. Second, no group ever claimed responsibility. In Pakistan’s ecosystem of violence, nearly every faction, from the TTP to Baloch separatists to Sindhi nationalists, claims its kills. Claiming is the organizational lifeblood: it demonstrates operational capability to potential recruits, signals deterrent capacity to enemies, and satisfies the ideological imperative to be seen as active warriors rather than passive observers. The unknown-gunmen pattern operates in deliberate silence, which itself is a signature. Third, the operational discipline is extraordinary. Pakistani police have not arrested a single attacker, recovered a single weapon, or identified a single motorcycle used in any of these killings. In a country with extensive CCTV networks in major cities, extensive police informant systems, and a hyper-active intelligence apparatus, this degree of operational cleanliness requires either supernatural luck or professional-grade counter-forensic discipline.

Case-by-Case Breakdown

Zahoor Ahmad Mistry, Karachi, 2022

Zahoor Ahmad Mistry was a Jaish-e-Mohammed operative who participated in the December 1999 hijacking of Indian Airlines Flight IC-814. That hijacking, which forced India to release three imprisoned terrorists including Masood Azhar, remains one of the most consequential security failures in Indian history. The release of Azhar led directly to the founding of Jaish-e-Mohammed, which subsequently attacked the Indian Parliament in December 2001, the Pathankot airbase in January 2016, and orchestrated the Pulwama car bombing in February 2019 that killed forty CRPF personnel.

Mistry survived the aftermath of the hijacking and relocated to Karachi, where he lived for over two decades under the alias Zahid Akhund. His presence in the city was an open secret among JeM’s operational cadre. Pakistani authorities made no effort to arrest him despite his involvement in an internationally condemned act of air piracy. He lived freely, married locally, and maintained connections to JeM’s Karachi network.

The killing itself followed what would become the standard procedure. Two men on a motorcycle approached Mistry’s location in Gulshan-e-Maymar, a dense residential neighborhood in Karachi’s northern sector. They fired multiple rounds at close range. Mistry died at the scene. The attackers disappeared into Karachi’s traffic, which at most hours of the day approaches a state of permanent gridlock that paradoxically makes motorcycle movement faster than any other vehicle type. Pakistani police filed an FIR noting “unknown gunmen on a motorcycle” and made no arrests. The investigation, to the extent that one occurred, produced no public findings.

What made Mistry’s killing significant was what happened at his funeral. Pakistani media reported that senior JeM figures attended the burial, an act of solidarity that inadvertently exposed the organizational connections that the living Mistry had maintained while operating under an alias. The funeral was, as one Indian defense analyst later noted, an intelligence gift: it mapped a portion of JeM’s Karachi network that Mistry’s alias had concealed. The organization paid respects to its dead and, in doing so, revealed who its living members were and where they gathered.

The Mistry case also established a crucial precedent: the campaign was willing to reach back decades for its targets. Mistry was not an active planner of imminent attacks. He was a legacy figure, a man whose operational relevance had faded but whose symbolic significance remained. The IC-814 hijacking defined a generation of Indian counter-terrorism policy. Mistry’s elimination signaled that no amount of elapsed time, no change of identity, and no relocation to a new city would remove an individual from the target list. The message was not just operational but temporal: the clock does not expire. This temporal reach distinguishes the pattern from reactive counter-terrorism, where responses follow attacks by days or weeks. The shadow war operates on a timeline measured in decades, pursuing consequences for actions committed a quarter-century earlier.

Mistry’s killing also revealed the vulnerability of Pakistan’s informal protection system. The Pakistani state did not provide Mistry with official protection, safe houses, or security details. His protection was informal: a new identity, a quiet neighborhood, and the general assumption that Karachi’s anonymity would provide cover. The unknown gunmen demonstrated that informal protection based on anonymity collapses the moment the protecting anonymity is compromised. Mistry’s alias was known to JeM’s network, and anyone within that network who was recruited, coerced, or intercepted by a hostile intelligence service could provide the real identity behind the alias, the neighborhood, and the daily routine.

Abu Qasim, Rawalakot, PoK, 2023

Abu Qasim, also known as Riyaz Ahmad, was a Lashkar-e-Taiba commander whom Indian intelligence linked to the Dhangri terror attack in the Jammu region. He was shot in the head at point-blank range inside a mosque in Rawalakot, a town in Pakistan-occupied Kashmir, while kneeling in prayer.

The Rawalakot killing introduced a new element to the pattern: targeting inside a place of worship during congregational prayer. The selection of this location was not random. Prayer times in Pakistan are fixed by the Islamic calendar and published daily in newspapers, on mosque notice boards, and through mobile applications. For any individual who attends the same mosque regularly, the five daily prayer times create five windows of absolute predictability. The attacker knows where the target will be, at what time, in what physical posture (kneeling, prostrating), and in what mental state (focused on prayer, eyes closed or downcast). The mosque also provides a natural entry point: anyone can walk into a mosque during prayer time without attracting suspicion, because mosques are open to all worshippers.

Abu Qasim’s killing required at minimum two weeks of physical surveillance. The attackers needed to confirm which mosque he attended, which prayer time he favored, where he positioned himself inside the prayer hall, and what his approach and departure routes were. They needed to establish their own presence as unremarkable in the area. They needed to procure the weapon locally or insert it into the city without detection. They needed an extraction plan that accounted for the confined space of a mosque, where the congregation would react with immediate alarm.

The execution itself was clinical. The gunman approached Qasim from behind while he knelt, placed the weapon against his head, and fired. The proximity ensured lethality. The timing, during the prayer itself, ensured the target was stationary and facing away from the entrance. The mosque’s acoustics amplified the gunshot, triggering immediate panic among the congregation, which created exactly the confusion the attacker needed to exit the building and reach a waiting motorcycle outside.

The Rawalakot setting carries additional significance beyond the mosque dimension. Rawalakot is in Pakistan-occupied Kashmir, an area administered separately from Pakistan’s four provinces, with its own local government structures and a significant military presence due to its proximity to the Line of Control. Operating in PoK means operating in territory where the Pakistan Army and ISI maintain heightened surveillance, where military checkpoints control movement on major roads, and where any unusual activity is noted and reported. The successful execution of a targeted killing inside a mosque in a militarily sensitive area of PoK demonstrated a level of penetration that the previous Karachi operations had not tested. Karachi is chaotic, anonymous, and poorly policed. Rawalakot is controlled, monitored, and militarily garrisoned. The transition from one operational environment to the other represents a qualitative escalation in capability.

Shahid Latif, Sialkot, 2023

Shahid Latif was a Jaish-e-Mohammed operative whom Indian intelligence identified as the mastermind of the January 2016 Pathankot airbase attack, which killed seven Indian security personnel and caused a diplomatic crisis that derailed the nascent India-Pakistan peace process. After the Pathankot attack, India presented Pakistan with evidence of Latif’s role. Pakistan took no action. Latif continued to live freely in Sialkot, a city in Punjab province near the Indian border, and was frequently seen at his local mosque.

Masked gunmen entered the mosque during prayer time and shot Latif dead. The method replicated the Abu Qasim killing with one variation: multiple attackers entered the mosque simultaneously, suggesting a team operation rather than a lone gunman. The escape followed the standard motorcycle pattern. Pakistani police filed the FIR with the customary “unknown gunmen” language. No arrests were made.

Latif’s killing carried a specific message that transcended the individual elimination. The Pathankot attack was one of the events that shattered the last serious India-Pakistan diplomatic engagement. Indian Prime Minister Narendra Modi had visited Lahore in December 2015, an unexpected gesture of diplomatic openness. Within two weeks, Pathankot happened. The attack killed the peace process. Latif’s killing, seven years later, completed the chain the project’s thesis describes: every terror attack produces a response, and the response reaches back to the individual who planned it.

The Sialkot location adds geographic significance. Sialkot is a major city in Punjab province, located less than fifteen kilometers from the Indian border at certain points. It is a commercial hub, famous globally as the world’s primary manufacturer of hand-stitched footballs and surgical instruments. The city’s economy is export-dependent, its population is predominantly professional and mercantile, and its security environment is markedly different from Karachi’s criminal chaos. Operating in Sialkot, where the local population is commercially oriented and suspicious of disruption, where the proximity to the Indian border makes security agencies hypervigilant, and where the city’s relatively small size (population approximately 700,000) makes unfamiliar faces noticeable, required operational preparation tailored to a completely different urban environment than Karachi or Lahore.

Latif’s case also exposed the hypocrisy at the center of Pakistan’s response to the Pathankot attack. India presented Pakistan with a Joint Investigation Team (JIT) dossier identifying Latif’s role. Pakistan formed a JIT of its own, which visited the Pathankot airbase, collected evidence, and then produced no actionable outcome. Latif was not arrested, not charged, and not restricted in his movements. He continued to attend the same mosque in Sialkot that he had attended before the Pathankot attack, a mosque that the unknown gunmen apparently surveilled with sufficient precision to know exactly where he sat and at which prayer time he was most vulnerable. The gap between Pakistan’s investigative theater and its operational reality, between pretending to investigate Latif and allowing him to live freely, is the structural vulnerability that the shadow war exploits. India’s implicit message is blunt: if Pakistan will not prosecute them, India will find another way to reach them.

Ziaur Rahman, Karachi, 2023

Ziaur Rahman was a Lashkar-e-Taiba operative based in Karachi who was shot dead during his evening walk by two men on a motorcycle. His daily routine included a predictable walk through his neighborhood at a consistent time, a habit that created the same vulnerability window that prayer times create for mosque-going targets. The attackers intercepted him on a residential street, fired at close range, and departed on the motorcycle.

Rahman’s case illustrates the “predictable-location” principle at work outside religious settings. The operational logic is the same: identify a behavior the target repeats daily, confirm the time and route through physical surveillance, and strike during the window when the target is most exposed and most predictable. Walking routes, shop visits, school drop-offs, and market trips all create vulnerability windows that a surveillance team can map within days.

The evening-walk timing is itself significant. In Karachi, evening temperatures are more tolerable than afternoon heat, and residential streets become crowded with families, vendors, and children. The crowd provides concealment for the motorcycle approach. The ambient noise of a busy Pakistani residential street at maghrib time masks the sound of the motorcycle engine until it is too close for the target to react. The crowd that witnessed the killing dispersed in panic, creating the same confusion that facilitates escape.

Mufti Qaiser Farooq, Karachi, 2023

Mufti Qaiser Farooq was an LeT member and close aide to Hafiz Saeed who was gunned down near a religious institution in Karachi’s Samanabad area. His proximity to Hafiz Saeed’s organizational structure placed him squarely within the LeT hierarchy that Indian intelligence monitors. Farooq’s role was primarily ideological: he served as a religious scholar within the Jamaat-ud-Dawa charitable front that Saeed built as LeT’s public-facing organization.

His killing near a religious institution followed the pattern of exploiting locations where the target’s presence is predictable and where the target’s guard is psychologically lowest. Religious institutions in Pakistan are simultaneously the most socially protected spaces, where violence is culturally taboo, and the most operationally vulnerable, where security screening is minimal or nonexistent. The attackers exploited this paradox: the very sanctity of the space made it the ideal kill zone because the target believed himself safe there.

Farooq’s elimination also demonstrated that the campaign does not restrict itself to military or operational targets. Farooq was an ideologue, a fundraiser, and a recruiter. His value to LeT was not in planning attacks but in providing the religious justification, the funding pipeline, and the recruitment infrastructure that made attacks possible. Killing him targeted the support architecture, not the operational tip, of the terror pyramid.

Sardar Hussain Arain, Nawabshah, 2023

Sardar Hussain Arain was a Jamaat-ud-Dawa operative responsible for the organization’s madrassa network in Sindh province. He was shot dead by unknown gunmen in Nawabshah, a midsized city in Sindh that had not previously appeared in the pattern. Arain’s killing expanded the geographic footprint from Karachi (a megacity where violence is endemic) into smaller provincial cities where targeted killings are rare and where the security apparatus is correspondingly less prepared.

Arain’s role in the madrassa network is significant. The madrassas operated by JuD and its affiliates serve multiple functions: religious education, community welfare, recruitment of future operatives, and ideological indoctrination. Arain managed the pipeline from civilian religious students to potential recruits. His elimination targeted the same support infrastructure that Farooq’s killing addressed, but at a different node: not the ideological justification but the institutional mechanism through which young men are identified, radicalized, and funneled into operational roles.

The Nawabshah location also demonstrated logistical reach. Operating in Karachi, where millions of people provide anonymity and where criminal violence provides cover, is one level of capability. Operating in a smaller city where unfamiliar faces attract notice, where the motorcycle population is smaller, and where police have a more intimate knowledge of local movement patterns represents a higher order of infiltration capability.

Sheikh Yousaf Afridi, Landi Kotal, KPK, 2026

Sheikh Yousaf Afridi was an LeT commander who operated within the organization’s Khyber Pakhtunkhwa regional structure, reporting to Hafiz Saeed’s command hierarchy and overseeing recruitment and logistics operations in the tribal regions bordering Afghanistan. He was shot by unknown gunmen in Landi Kotal, a town in the Khyber Pass area, deep inside KPK.

Afridi’s killing broke a geographic barrier. Every previous LeT target had been eliminated in Punjab, Sindh, or Pakistan-occupied Kashmir. Moving the campaign into Khyber Pakhtunkhwa’s tribal regions, where the Pakistan Army maintains a heavy presence due to ongoing counter-insurgency operations against the Tehrik-i-Taliban Pakistan, signals either a dramatic escalation in operational confidence or the activation of Pashtun assets that previous operations in Punjabi and Sindhi urban environments did not require. The tribal areas present unique challenges: tribal loyalty networks, weapons proliferation, limited road infrastructure, and a population that is acutely suspicious of outsiders.

Landi Kotal sits on the historic Khyber Pass route, approximately 250 kilometers from Islamabad. The Pakistan Army’s Frontier Corps patrols the area extensively. Operating in this environment, with its checkpoints, military convoys, and intelligence surveillance, requires either extraordinary operational security or complicity from local elements who can provide safe passage and local knowledge.

Amir Hamza, Lahore, 2026

Amir Hamza was one of the co-founders of Lashkar-e-Taiba and a direct deputy to Hafiz Saeed. He was the most senior LeT figure ever targeted in the pattern. Gunmen shot him in Lahore in broad daylight. Unlike most targets, Hamza survived the attempt, though he sustained serious injuries.

The Lahore attack on Hamza represented the campaign’s highest-risk operation. Lahore is Pakistan’s cultural capital, the seat of Punjab’s provincial government, and the city where Pakistan’s military and intelligence establishment maintains its densest presence outside Rawalpindi. Hafiz Saeed himself was based in Lahore for decades, operating openly under ISI protection. Attacking an LeT co-founder in Lahore, in daylight, was the operational equivalent of reaching into the heart of the enemy’s sanctuary.

That Hamza survived may indicate a partial operational failure: the gunmen apparently did not achieve the close-range precision that other operations demonstrated. Pakistani media reported that Hamza’s security team returned fire, suggesting he traveled with armed protection, a behavioral adaptation that itself confirms the campaign’s impact. Senior LeT figures who once moved freely through Pakistani cities now travel with bodyguards, change residences, and restrict their public appearances. The campaign has not only eliminated targets but has forced the survivors to alter their behavior in ways that degrade their operational effectiveness.

Abu Qatal, Jhelum, 2024

Abu Qatal, also known as Qatal Sindhi, was an LeT commander and close aide to Hafiz Saeed who was allegedly linked to the Reasi attack in Jammu. He was killed by unknown gunmen in Pakistan’s Jhelum district, a Punjab city that sits along the Grand Trunk Road between Islamabad and Lahore.

Qatal’s killing reinforced the pattern’s core characteristic: the targeting of individuals whom Indian intelligence has publicly named in connection with specific attacks against Indian civilians. The Reasi attack targeted a bus carrying pilgrims to the Vaishno Devi shrine, killing nine civilians. Indian investigators identified Qatal as a key facilitator. His elimination in Jhelum, months after the Reasi attack, closed the loop that the House Thesis predicts: every attack generates a response, and the response finds the planner.

The Jhelum location continued the geographic expansion of the campaign into Punjab’s midsized cities. Like Nawabshah in Sindh, Jhelum is not a megacity. It is a garrison town with a significant military cantonment. Operating near a military cantonment requires either extreme confidence or the kind of local knowledge that only human intelligence assets embedded in the city can provide.

Paramjit Singh Panjwar, Lahore, 2023

Paramjit Singh Panjwar was the chief of the Khalistan Commando Force, a Sikh separatist organization that was responsible for some of the bloodiest violence during the Punjab insurgency of the 1980s and 1990s. He had been living in Lahore under Pakistani protection since fleeing India decades earlier. He was shot during his morning walk by two men on a motorcycle.

Panjwar’s killing demonstrated that the pattern extends beyond the India-Pakistan Kashmir axis into the Khalistan dimension. The KCF, which India designated as a terrorist organization, maintained its leadership structure in Pakistan long after the Punjab insurgency ended. Panjwar’s continued presence in Lahore was both an embarrassment and a strategic irritant: it demonstrated Pakistan’s willingness to shelter any group, regardless of ideology, that served its interests against India.

His morning-walk routine followed the same vulnerability logic as Ziaur Rahman’s evening walk. The predictable daily behavior created a targeting window. The motorcycle approach and escape exploited Lahore’s congested streets. The pattern was identical to the LeT and JeM killings. Only the organizational affiliation of the target differed. This consistency across organizational categories is itself evidence of coordination: a single orchestrating entity targeting India’s priority lists regardless of the specific group involved.

Hardeep Singh Nijjar, Surrey, Canada, 2023

Hardeep Singh Nijjar was the chief of the Khalistan Tiger Force who was shot dead outside a Sikh gurdwara in Surrey, British Columbia, Canada. His killing, attributed by Canadian intelligence to Indian government agents, represents the most internationally consequential incident connected to the pattern and the one that generated the most severe diplomatic fallout.

Nijjar’s case differs from the Pakistani operations in significant ways: it occurred on Canadian soil, where the legal framework, police capability, and diplomatic consequences are entirely different from Pakistan. Canadian authorities identified and arrested three Indian nationals in connection with the killing. The Royal Canadian Mounted Police’s investigation produced charges, court proceedings, and a diplomatic rupture between India and Canada that led to the expulsion of diplomats on both sides.

The Nijjar case is relevant to the Pakistani pattern because it demonstrates the operational reach and the organizational ambition behind the targeting campaign. If the same decision-making authority that directs operations in Karachi and Lahore also directed an operation in suburban Vancouver, the intelligence infrastructure involved is global, not regional. The Canadian dimension also exposed the pattern to Western media scrutiny and legal investigation in ways that the Pakistani operations, conducted in a country with limited press freedom and a compromised judicial system, never did.

The contrast between the Pakistani and Canadian operational environments is itself analytically revealing. In Pakistan, the killings produce FIRs that go nowhere, investigations that stall, and a media cycle that moves on within days. In Canada, the killing of a single individual produced a national diplomatic crisis, the expulsion of diplomats, the arrest and prosecution of suspects, and ongoing parliamentary investigations. The difference is not in the method (close-range gunfire in both cases) but in the institutional response: Canada’s law enforcement and judicial systems function at a level of competence and independence that Pakistan’s do not. This contrast explains why the bulk of the campaign concentrates on Pakistani soil, where the operational environment is permissive and the investigative response is negligible, and why the Canadian case was the exception rather than the rule. The sponsoring agency, if it exists as a unified entity, apparently calibrated the risk differently for different jurisdictions: Pakistan was assessed as an acceptable-risk theater where operations could proceed at industrial tempo; Canada was either a miscalculation or a case where the target’s importance was judged to outweigh the higher risk of exposure.

The Nijjar case also created a diplomatic asymmetry that illuminates the campaign’s position in international politics. Canada, a member of the Five Eyes intelligence alliance, responded to the killing with the full weight of its diplomatic and legal apparatus. Pakistan, despite suffering dozens of similar incidents, has been unable to generate equivalent international support for its complaints. The difference reflects the international community’s implicit judgment: Pakistan’s complaints about sovereignty violations are undermined by Pakistan’s own decades of using proxy terrorism as state policy. A country that shelters designated terrorists while complaining about the consequences of sheltering them occupies a diplomatically weak position. Canada, by contrast, had no complicity in Nijjar’s activities and could credibly frame the killing as a violation of Canadian sovereignty without any counterargument about Canadian culpability.

Akram Khan, Bajaur, 2023

Akram Khan, also known as Akram Ghazi, was a Lashkar-e-Taiba figure shot dead by unknown gunmen in Khyber Pakhtunkhwa’s Bajaur tribal district. Like Afridi’s killing in Landi Kotal, this operation placed the campaign in the tribal belt, far from the urban environments of Karachi and Lahore where earlier operations concentrated.

Bajaur is one of the most militarized districts in Pakistan, bordering Afghanistan and serving as a primary corridor for TTP infiltration. The Pakistan Army has conducted multiple large-scale operations in Bajaur, displacing hundreds of thousands of civilians and establishing checkpoints throughout the district. Operating in this environment, where military surveillance is constant and unfamiliar vehicles attract immediate attention, requires a level of local embeddedness that is difficult to achieve through external infiltration.

Akram Khan’s organizational role within LeT’s KPK structure paralleled Afridi’s: regional command, recruitment oversight, and logistics coordination for operations originating in the tribal areas. His killing, combined with Afridi’s, suggests that the campaign has identified and targeted LeT’s entire KPK regional command, not just individual figures but the structural nodes that connect the tribal recruitment pipeline to the organization’s national command.

The 2026 Acceleration

By 2026, the pace of eliminations had accelerated beyond anything the previous years had established. Pakistani media reported over thirty individuals connected to LeT, Hizbul Mujahideen, and affiliated groups killed by unknown gunmen across multiple cities in a single year. The acceleration coincided with Operation Sindoor, the May 2025 India-Pakistan military confrontation triggered by the Pahalgam massacre, and the aftermath of that crisis appears to have removed whatever restraint previously governed the campaign’s tempo.

The acceleration was not merely quantitative. The 2026 phase introduced qualitative shifts in the campaign’s character. Target seniority climbed. Where the 2022 phase concentrated on mid-level operatives, functionaries whose loss embarrassed but did not structurally damage their organizations, the 2026 phase reached figures whose elimination created genuine command vacancies. LeT co-founder Amir Hamza’s shooting in Lahore marked the highest-seniority targeting the campaign had ever attempted. Multiple Hizbul Mujahideen commanders in the Pakistan-administered Kashmir sector were killed within weeks of each other, suggesting that the campaign had mapped an entire command layer and was dismantling it systematically rather than opportunistically.

The geographic expansion was equally significant. Lahore, which had previously seen only the Panjwar killing and isolated incidents, became a recurring theater in 2026. New targets appeared in cities across Punjab where no previous operations had occurred. The campaign’s footprint now covered Sindh (Karachi, Nawabshah), Punjab (Lahore, Sialkot, Jhelum, Rawalpindi), Khyber Pakhtunkhwa (Landi Kotal, Bajaur), and Pakistan-occupied Kashmir (Rawalakot). This five-region spread required operational infrastructure in each area: safe houses, local assets, weapon procurement networks, communication channels, and exfiltration routes. Building that infrastructure takes years. The 2026 acceleration suggests that the groundwork was laid long before the operational tempo increased, and that the network was activated in phases, with new nodes coming online as older nodes proved their reliability.

The operational tempo, from approximately one killing per month in 2022 to multiple killings per week in 2026, suggests either a dramatic expansion of the operational network or the activation of assets that had been positioned but held in reserve. The post-Pahalgam political environment, in which India’s public demanded visible consequences for the massacre of civilians, may have provided the political authorization to accelerate a campaign that the intelligence infrastructure had been capable of running at higher tempo for some time.

The 2026 phase also saw the first significant reporting on behavioral changes among surviving targets. Pakistani media noted that several known LeT and JeM figures had relocated from their established residences, adopted new security protocols, and reduced their use of personal mobile phones. Dawn newspaper reported that funeral attendance for eliminated figures had declined precipitously compared to the Mistry funeral in 2022, suggesting that surviving leaders now viewed public association with the dead as a security risk. The campaign was producing second-order effects: even targets who had not been killed were modifying their behavior in ways that degraded their organizations’ ability to communicate, coordinate, and plan.

Three phases of the campaign are now visible in retrospect. Phase One, running from late 2022 through mid-2023, established the pattern in Karachi and tested the operational methodology against lower-priority targets. Phase Two, from mid-2023 through early 2025, expanded the campaign geographically and climbed the target-seniority ladder into regional and provincial commanders. Phase Three, from the Pahalgam massacre in April 2025 through the present, represents the fully activated campaign operating at maximum tempo with no apparent geographic or organizational boundaries. Each phase built on the infrastructure and operational lessons of the previous one, a progression that itself is evidence of institutional planning rather than improvised response.

Modus Operandi Analysis

The twelve cases examined above, and the dozens of additional cases that follow the same template, share operational elements so consistent that they constitute a signature. That signature has seven components, and understanding each component reveals the intelligence architecture required to produce it.

The first component is the motorcycle. In every documented case where the vehicle was identified, the attackers arrived on a motorcycle. Pakistan has approximately 25 million registered motorcycles, making them the most common vehicle on the road. In cities like Karachi (population 16 million), Lahore (population 13 million), and Rawalpindi (population 4 million), motorcycles constitute the majority of traffic during peak hours. Two men on a motorcycle are invisible. They blend into the traffic stream in a way that a car, a van, or any larger vehicle cannot. The motorcycle also solves the escape problem: in Pakistani urban traffic, where cars are often stationary or moving at walking speed, a motorcycle can weave through gaps, reverse direction, jump curbs, and access alleyways that four-wheeled vehicles cannot enter. Police pursuit by car is functionally impossible in peak-hour Pakistani traffic. Pursuit by motorcycle requires the police to have a motorcycle unit in the immediate vicinity, with officers already mounted and ready to give chase, at the precise moment the killing occurs. In practice, this has never happened.

The second component is the close-range fire. The attackers do not use rifles, sniper positions, or improvised explosive devices. They use handguns fired at distances of two to ten feet. This range guarantees accuracy for any moderately trained shooter and removes the ballistic variables, wind, bullet drop, target movement, that make long-range assassination difficult. Close-range fire also reduces the time between the last moment the target could react and the moment of impact to less than one second. The target has no time to run, duck, or draw a personal weapon.

The third component is the predictable-location targeting. Every target was intercepted at a location where their presence was both predictable and regular: a mosque during prayer, a street during a daily walk, a shop during business hours, or a home during morning or evening routines. The selection of predictable locations reveals surveillance capability. To know which mosque a target attends, at which prayer time, and where he sits inside the prayer hall requires physical surveillance over multiple days. To know which route a target walks in the evening, at what time, and with whom requires the same. This surveillance cannot be conducted by outsiders who are unfamiliar with the neighborhood: it requires people who can loiter, shop, pray, and walk in the target’s vicinity without attracting suspicion.

The fourth component is the dual-rider configuration. One rider drives. The other shoots. This division of labor solves several problems simultaneously: the driver maintains control of the escape vehicle during the shooting, the shooter can use both hands for the weapon, and the motorcycle never stops moving during the engagement. In several cases, witnesses reported that the motorcycle slowed to walking pace alongside the target, the passenger fired, and the motorcycle accelerated immediately. The entire engagement, from approach to firing to acceleration, takes approximately three to five seconds.

The fifth component is the absence of any claim of responsibility. In Pakistan’s conflict ecosystem, claiming credit is the norm. The Tehrik-i-Taliban Pakistan claims its bombings. Baloch separatist groups claim their attacks. Sectarian organizations claim their assassinations. Even criminal gangs sometimes claim killings for reputational purposes. The unknown-gunmen pattern is defined by its silence. No group has ever claimed any of these killings. The silence is itself a message: the perpetrators are not seeking public credit because public credit would expose them to retaliation, diplomatic consequences, or legal proceedings. The silence is consistent with state-level operations, where deniability is a strategic requirement, and inconsistent with non-state actors, who depend on public attribution for recruitment, fundraising, and deterrence.

The sixth component is the complete absence of forensic evidence. Pakistani police have not recovered a single weapon, identified a single attacker’s face on CCTV, traced a single motorcycle’s registration, or produced a single eyewitness willing to testify. In a country where police informant networks penetrate most criminal organizations, where CCTV cameras cover major intersections in every large city, and where motorcycle registration records are digitized, this forensic vacuum is extraordinary. It suggests either that the attackers are conducting professional-grade counter-forensic procedures (wearing gloves, disposing of weapons immediately, using stolen or unregistered motorcycles, altering their appearance) or that the investigation is being obstructed at levels above the local police, or both.

The seventh component is the target-selection discipline. Every documented target belongs to one of five categories: Lashkar-e-Taiba and its fronts, Jaish-e-Mohammed, Hizbul Mujahideen and Al-Badr, Khalistan-affiliated organizations, or individuals specifically named in Indian NIA charge sheets, UNSC sanctions designations, or Indian government press releases. There are zero cases of the unknown gunmen targeting Pakistani politicians, business rivals, ethnic competitors, or anyone whose elimination serves any interest other than India’s counter-terrorism priorities. This target-selection discipline is the strongest single piece of evidence against the competing theories of internal Pakistani violence, criminal copycat behavior, or TTP operations.

The Intelligence Architecture

The modus operandi comparison reveals an intelligence architecture that operates at four levels, each of which represents a distinct capability that requires resources, training, and organizational support beyond what any freelance actor or criminal gang could sustain.

The first level is target identification. Knowing who to kill requires access to intelligence databases that track the identities, aliases, locations, and organizational affiliations of designated terrorists. The individuals killed in the pattern are not public figures whose addresses are listed in phone directories. Many operated under aliases. Zahoor Mistry lived as Zahid Akhund. Others moved between safe houses. Identifying these individuals requires signals intelligence (intercepted communications), human intelligence (informants within the organizations), or a combination of both. This is a capability that belongs to national intelligence agencies, not to criminal enterprises.

The second level is location surveillance. Once the target is identified, finding them in a specific Pakistani city and establishing their daily routine requires weeks of physical surveillance by operatives who can blend into the local environment. In Karachi, this means Urdu-speaking operatives who can navigate Sindhi-Muhajir social dynamics. In Lahore, it means Punjabi-speaking operatives familiar with the city’s mohalla culture. In the tribal areas, it means Pashto-speaking operatives who can navigate the complex tribal loyalty structures. The linguistic and cultural requirements for surveillance across multiple Pakistani provinces point to either a recruited network of local assets in each city or an insertion capability that can place operatives in diverse cultural environments with convincing cover stories. The geographic diversity of the killings, spanning four provinces and Pakistan-occupied Kashmir, strongly favors the local-network hypothesis over the single-team-insertion hypothesis. A single team could not credibly operate in Karachi, Lahore, Bajaur, and Rawalakot without being detected.

The third level is operational execution. The motorcycle attack itself requires trained personnel who can handle a firearm accurately while moving on a motorcycle in traffic, who can maintain composure in the seconds before and after a killing, and who can navigate a predetermined escape route under the stress of having just committed a homicide in a public place. This level of operational competence is consistent with either military or intelligence training. It is not consistent with amateur actors.

The fourth level is post-operation security. After every killing, the attackers vanish. No attacker has been identified. No weapon has been recovered. No safe house has been raided. No communication intercept has been leaked. The post-operation security, maintained consistently across dozens of operations in multiple cities over four years, is the most difficult capability to sustain and the most revealing. A single successful operation could be luck. Maintaining operational security across thirty or more operations in multiple cities over four years is an institutional capability, not individual tradecraft.

The fifth level, often overlooked in discussions that focus on the kinetic moment of the killing, is the communications architecture. Coordinating operations across five Pakistani provinces requires secure communication between the field operatives conducting surveillance, the handlers directing them, and the decision-making authority that approves targets. This communication must be maintained over weeks or months of surveillance without interception by Pakistan’s signals intelligence capability, which is substantial: the ISI’s Technical Intelligence wing monitors domestic communications extensively, and Pakistan’s telecom infrastructure is wired for lawful interception at every major exchange. The operatives cannot use standard Pakistani mobile networks without exposing themselves to metadata analysis. They cannot use satellite phones without creating a detectable signal. They cannot meet in person frequently without establishing movement patterns that surveillance can detect. The communications problem is, in many ways, harder than the killing itself, because the killing takes five seconds and the communications must be maintained for weeks. The fact that Pakistan’s intelligence services have not intercepted a single communication related to any of these operations, despite having every institutional motive to do so, suggests either a communications discipline of extraordinary rigor or the use of techniques (dead drops, encoded short-burst transmissions, encrypted messaging applications routed through foreign servers, or face-to-face contact through intermediaries who have legitimate reasons to travel between cities) that fall outside the ISI’s interception capability.

The sixth level is the coordination between intelligence functions and operational functions. In any state-level intelligence operation, the analysts who identify targets, the case officers who recruit and manage local assets, the surveillance teams who establish routines, the logisticians who procure weapons and vehicles, and the operators who execute the killing are typically different people with different skill sets. Coordinating these functions requires a command-and-control structure that can move information securely between compartmented teams, authorize operations with appropriate oversight, and manage the inevitable complications (a target changes routine, a local asset is compromised, a weapon fails to arrive) without breaking operational security. This level of organizational sophistication is the domain of professional intelligence agencies. It is not achievable by freelance actors, criminal entrepreneurs, or ideologically motivated volunteers.

Daniel Byman, a Brookings Institution scholar who studies targeted killing in comparative perspective, has noted that operational consistency across multiple operations in diverse geographic settings is one of the strongest indicators of state-level coordination. The consistency indicates standardized training, standardized procedures, and centralized command, all of which are characteristics of organized intelligence operations rather than ad hoc or freelance violence. The doctrine that guides India’s external intelligence capability has evolved over decades, and the operational signatures visible in the unknown-gunmen pattern are consistent with that doctrinal evolution.

The architecture also reveals something about the recruitment model. Operating across Sindh, Punjab, KPK, and PoK requires assets who are native to each region. A Sindhi Urdu-speaker cannot conduct surveillance in a Pashto-speaking tribal area. A Punjabi operative stands out in a Baloch neighborhood in Karachi’s Lyari. The linguistic and ethnic diversity of Pakistan is simultaneously the country’s defining social feature and the operational constraint that any foreign intelligence service must navigate. The geographic spread of the killings implies a recruitment infrastructure that has identified, vetted, trained, and activated locally embedded assets in at least five distinct cultural and linguistic environments. Building this infrastructure is a project that takes years, possibly decades, of patient intelligence work. The scale of the network required to sustain operations at the 2026 tempo is itself a strategic statement: it implies that the sponsoring intelligence service has been investing in Pakistani networks far longer than the visible killing campaign has been active.

The Findable Artifact: Modus Operandi Comparison Matrix

What follows is a modus operandi comparison across twelve documented eliminations, organized to make the pattern’s consistency visible at a glance. For each case, the matrix records the target name, date, city, location type, time of day, weapon type, number of attackers, vehicle, escape method, and whether any group claimed responsibility.

Zahoor Ahmad Mistry was killed in Karachi in 2022 at his residence area during daytime by handgun fire from two attackers on a motorcycle who escaped through Gulshan-e-Maymar’s residential streets. No group claimed responsibility. Abu Qasim was killed in Rawalakot, PoK, in 2023 inside a mosque during prayer time by a single gunshot to the head from at least one attacker who escaped on a motorcycle waiting outside. No group claimed responsibility. Shahid Latif was killed in Sialkot in 2023 inside a mosque during prayer time by handgun fire from multiple masked attackers who escaped on motorcycles. No group claimed responsibility. Ziaur Rahman was killed in Karachi in 2023 on a residential street during his evening walk by handgun fire from two attackers on a motorcycle who fled through neighborhood streets. No group claimed responsibility.

Mufti Qaiser Farooq was killed near a religious institution in Karachi’s Samanabad area in 2023 by handgun fire from two attackers on a motorcycle who disappeared into the commercial-area traffic. No group claimed responsibility. Sardar Hussain Arain was killed in Nawabshah, Sindh, in 2023 near his shop by handgun fire from two motorcycle-borne gunmen who escaped along the main road. No group claimed responsibility. Sheikh Yousaf Afridi was killed in Landi Kotal, KPK, in 2026 near his location in the market area by handgun fire from two motorcycle-borne attackers who escaped into the bazaar traffic. No group claimed responsibility. Amir Hamza was shot and wounded in Lahore in 2026 on a city road during daytime by handgun fire from motorcycle-borne attackers who fled through Lahore traffic. No group claimed responsibility.

Abu Qatal was killed in Jhelum, Punjab, in 2024 in a street-level attack by handgun fire from two motorcycle-borne attackers who escaped along the Grand Trunk Road corridor. No group claimed responsibility. Paramjit Singh Panjwar was killed in Lahore in 2023 on a residential street during his morning walk by handgun fire from two motorcycle-borne attackers who escaped through residential lanes. No group claimed responsibility. Akram Khan was killed in Bajaur, KPK, in 2023 at a local-area location by handgun fire from two motorcycle-borne attackers who escaped along a district road. No group claimed responsibility.

The matrix reveals five perfect consistencies across all twelve cases: handgun as weapon type, motorcycle as vehicle, close range as engagement distance, zero claims of responsibility, and zero arrests. The matrix reveals three near-perfect consistencies: two attackers in ten of twelve cases (the mosque killings occasionally involved larger teams), daytime operations in eleven of twelve cases, and location types clustered around mosques, residential streets, and commercial areas. The single variable that changes is the city, and the expanding geographic range itself is a pattern: from Karachi in 2022 to Lahore, Sialkot, Rawalakot, Nawabshah, Jhelum, Bajaur, and Landi Kotal by 2026.

This matrix is the definitive reference for the MO pattern. No competitor publication has assembled the cases into a comparative framework that makes the signature visible. Pakistani media reports each killing as an isolated incident. Indian media reports the killings without cross-case analysis. Intelligence analysts discuss the pattern verbally but have not published a structured comparison. This matrix, embedded in prose, is the findable artifact that makes this article citable: “The InsightCrunch unknown-gunmen MO comparison matrix” is a reference anyone can use.

Competing Theories

Four explanations have been offered for the unknown-gunmen pattern, and adjudicating between them requires examining what each theory explains, what it fails to explain, and where the evidence points.

Theory 1: Indian Intelligence Operations

The most widely discussed explanation is that the killings are conducted by operatives working for India’s Research and Analysis Wing (RAW) or by local assets recruited and directed by Indian intelligence. This is the explanation that Pakistan’s government formally adopted in January 2024, when Pakistani Foreign Secretary Muhammad Syrus Sajjad Qazi held a press conference alleging that a “hostile intelligence agency” was responsible for at least eight targeted killings on Pakistani soil. India’s Ministry of External Affairs dismissed the allegations as “false and malicious anti-India propaganda.”

The evidence supporting this theory is circumstantial but substantial. The target-selection discipline, exclusively drawn from India’s priority lists, is the strongest indicator. The operational consistency across cities and provinces suggests centralized coordination. The absence of any claim of responsibility is consistent with state-level deniability requirements. The operational sophistication, including the counter-forensic discipline, is consistent with professional intelligence tradecraft. The decades-long intelligence rivalry between ISI and RAW provides the institutional context for such operations.

Prime Minister Modi’s public statement, “Aaj Ka Bharat Ghar Mein Ghus Ke Maarta Hai” (today’s India strikes inside the enemy’s home), has been interpreted by analysts as an indirect acknowledgment of India’s willingness to conduct operations on foreign soil. The statement does not specifically reference the unknown-gunmen pattern, but its timing and context, delivered at political rallies after the Balakot airstrikes and during the period when the pattern was accelerating, align with the theory.

The theory’s weakness is the absence of direct evidence. No intercepted communication, no defector testimony, no arrested operative, and no official Indian acknowledgment connects RAW to any specific killing. The evidence is inferential: the pattern points toward state-level coordination, and India is the only state with both the motive and the capability to orchestrate it. Inference is not proof, and the distinction matters in both legal and analytical contexts.

Theory 2: Internal Pakistani Rivalries

Pakistan’s alternative narrative holds that at least some of the killings result from internal rivalries: factional disputes within terror organizations, personal vendettas, land disputes, or criminal activity unrelated to Indian intelligence. This explanation is offered by some Pakistani officials and has been repeated by a small number of Western analysts who caution against assuming Indian responsibility without direct evidence.

The theory explains some of Pakistan’s background targeted violence. Karachi, in particular, sees hundreds of targeted killings annually connected to political parties (MQM factions), ethnic groups (Muhajir-Sindhi-Pashtun tensions), and criminal enterprises. Some killings attributed to the unknown-gunmen pattern could, in isolation, be explained by these dynamics.

The theory fails to explain the target-selection discipline. If internal rivalries were responsible, the target pool would include political figures, business competitors, rival gang members, and ethnic opponents, categories that are entirely absent from the pattern. Internal rivalries do not produce a target list that maps perfectly onto India’s counter-terrorism priorities. The theory also fails to explain the geographic consistency of the MO across cities where the local criminal dynamics are entirely different. Karachi’s gang culture, Lahore’s political rivalries, and Bajaur’s tribal dynamics are three different ecosystems of violence. A single MO pattern operating across all three requires a coordinating entity that transcends local dynamics.

Theory 3: TTP Operations

The Tehrik-i-Taliban Pakistan has been offered as a possible perpetrator for some killings, particularly those in Khyber Pakhtunkhwa where TTP operates extensively. This theory gained limited traction when Jamaat-ud-Dawa (LeT’s front organization) suggested that Afridi’s killing in KPK was the work of TTP.

The theory is analytically weak for a straightforward reason: TTP has no history of targeting Lashkar-e-Taiba, Jaish-e-Mohammed, or Hizbul Mujahideen personnel. TTP’s enemies are the Pakistani state, the Pakistan Army, and Shia Muslim communities. TTP has never expressed hostility toward the Kashmir-focused organizations, and in some cases, TTP and these organizations share recruitment networks and ideological sympathies. Afridi was LeT, not TTP, and TTP has no known motive for killing LeT commanders. The TTP theory is a deflection designed to provide an alternative narrative for specific killings that embarrass the Pakistani security establishment, not a serious analytical position.

Theory 4: Copycat Criminal Methodology

A fourth theory holds that the motorcycle-borne assassination method has been adopted by various unrelated actors, criminal, political, and tribal, who have observed its effectiveness and replicated it independently. Under this theory, the pattern is an artifact of method convergence rather than organizational coordination.

This theory fails the target-selection test. If unrelated criminal actors were adopting the motorcycle method independently, their targets would reflect their own interests: drug rivals, property dispute opponents, political competitors. Instead, every target in the pattern is drawn from India’s designated-terrorist lists. Method convergence can explain why different actors might use the same approach. It cannot explain why different actors in different cities would all independently select targets from the same foreign country’s priority list.

Adjudication

The evidence, when weighed across all cases, overwhelmingly favors Theory 1. The target-selection discipline is the decisive variable. The consistent MO is strong supporting evidence. The absence of claims of responsibility aligns with state-level deniability. The counter-forensic discipline points to professional tradecraft. The geographic spread requires a coordinating entity with nationwide reach. No competing theory explains all of these features simultaneously.

The adjudication becomes stronger when the theories are tested not against individual cases but against the aggregate pattern. Any single killing, taken in isolation, could be explained by any of the four theories. Mistry’s killing in Karachi could plausibly be a criminal dispute. Abu Qasim’s killing in a mosque could be a sectarian grudge. Panjwar’s killing in Lahore could be an internal Khalistan factional assassination. Individual cases are ambiguous. The aggregate is not. When twelve cases (and dozens more beyond those analyzed here) all share the same MO, all target individuals from the same foreign country’s priority list, all occur in the same country, and all produce zero claims of responsibility, the probability of coincidence drops to effectively zero. The pattern is the proof, not any individual case within it.

Al Jazeera’s April 2024 reporting deserves specific attention. Al Jazeera quoted Pakistani security officials who stated, on the record, that at least eight targeted killings were attributed to a “hostile intelligence agency.” The phrasing is diplomatic code: “hostile intelligence agency” in Pakistani official language means RAW. The officials did not use the code because they were uncertain about the attribution; they used it because diplomatic protocol prevents a government from publicly accusing another government’s intelligence service of assassination without formal evidence suitable for international adjudication. The officials’ willingness to make the attribution to a major international news organization, even in coded language, indicates a high degree of internal confidence in the assessment.

Pakistan’s response to the pattern also provides inferential evidence for Theory 1. If the killings were the result of internal rivalries, TTP feuds, or criminal copycat behavior, Pakistan would have the motive and the capability to investigate and prosecute the perpetrators. Internal violence is a law-enforcement problem, not a diplomatic crisis. Pakistan has instead treated the pattern as a diplomatic and intelligence crisis: summoning Indian envoys, expelling diplomats, making formal allegations at press conferences, and raising the issue in international forums. This response is consistent with a government that knows the operations originate from a foreign state and inconsistent with a government dealing with domestic criminal activity.

This does not mean that every killing attributed to the pattern belongs to it. Pakistan’s background rate of targeted violence is high enough that some killings of individuals who happen to be on India’s lists may indeed result from unrelated causes. The analytical challenge is distinguishing signal from noise. The position this article takes is that the pattern is too consistent, too target-specific, and too organizationally coherent to be coincidental, while acknowledging that certainty is not possible without official confirmation that will likely never come.

The epistemological challenge is worth naming directly. Covert operations are, by definition, designed to resist attribution. The entire purpose of deniability is to create a gap between what observers believe and what they can prove. The unknown-gunmen pattern exists in that gap. The evidence is inferential, circumstantial, and pattern-based. It is not forensic, confessional, or documentary. This does not make it weak; pattern-based evidence is the standard in intelligence analysis, and the pattern here is as clear as any analyst could reasonably expect from a campaign explicitly designed to resist attribution. The standard of proof appropriate for a courtroom is different from the standard appropriate for intelligence assessment. This article operates at the intelligence-assessment standard, where the preponderance of pattern evidence supports a confident (though not absolute) conclusion.

Strategic Implications

The unknown-gunmen pattern carries strategic implications that extend far beyond the individual eliminations. Four implications reshape the India-Pakistan security landscape.

The first implication is the destruction of Pakistan’s safe-haven guarantee. For decades, Pakistan offered sanctuary to designated terrorists as a matter of state policy. Hafiz Saeed lived openly in Lahore. Masood Azhar operated from Bahawalpur. Dawood Ibrahim reportedly resides in Karachi. The safe-haven guarantee was the foundation of Pakistan’s proxy-war strategy: groups that carried out attacks against India could retreat to Pakistani territory where they were protected by the ISI, the Pakistan Army, and the legal system that refused to prosecute them. The unknown-gunmen pattern has shattered that guarantee. Senior LeT, JeM, and Hizbul commanders are now being killed inside the safe haven. The shelter has become the kill zone. The network that built and maintained these safe havens is now watching its clients die within the supposedly protected perimeter.

The second implication is behavioral modification of surviving targets. As the pattern has become undeniable, senior figures in LeT, JeM, and affiliated organizations have reportedly increased their personal security, changed residences more frequently, reduced public appearances, and restricted their use of electronic communications. These behavioral changes degrade operational effectiveness. A terror commander who changes his phone every week, avoids his regular mosque, and travels with bodyguards is spending cognitive and organizational resources on personal survival rather than on planning attacks against India. The campaign may be achieving deterrence through attrition: even targets who have not been killed are being neutralized by the fear of being killed.

The behavioral modification operates through a specific psychological mechanism: the destruction of routine. Terror organizations, like all organizations, depend on predictable internal communication, regular meetings, stable chains of command, and functioning logistics. When senior commanders stop attending regular meetings because they fear the meeting location is surveilled, when they stop using phones because they fear interception, when they move between safe houses every few days because they fear that staying in one location makes them targetable, the organization’s internal cohesion degrades. Orders are delayed. Intelligence is not shared. Coordination between cells breaks down. The shadow war’s most consequential effect may not be the commanders it has killed but the organizational paralysis it has imposed on the commanders it has not yet reached.

Ayesha Siddiqa, the Pakistani defense analyst and author of “Military Inc.,” has observed that the behavioral changes extend beyond the terrorist organizations to their state sponsors. ISI officers who historically maintained open contact with LeT and JeM commanders have reportedly reduced their interactions, fearing that association with targeted individuals creates personal risk. If ISI handlers are distancing themselves from their clients, the state-terror nexus that has sustained Pakistan’s proxy-war strategy for three decades may be weakening not because Pakistan has chosen to end it but because the shadow war has made it dangerous to maintain.

The third implication is the precedent for extra-territorial operations. India’s shadow war, if it is what the pattern suggests, establishes a precedent that states which shelter terrorism can be treated as operational theaters rather than sovereign territories. This precedent challenges the post-Westphalian international order’s foundational principle of territorial sovereignty. Pakistan has framed its complaints in precisely these terms: India is violating Pakistani sovereignty by conducting assassinations on Pakistani soil. India’s implicit response, never stated officially but visible in the pattern, is that Pakistan forfeited its sovereignty claims when it chose to shelter designated terrorists and refused to act against them despite years of diplomatic pressure, dossiers, UNSC designations, and FATF grey-listing.

The fourth implication is the convergence of the shadow war with conventional military operations. Operation Sindoor, the May 2025 India-Pakistan military confrontation, represented the open-war complement to the covert campaign. The shadow war eliminates individuals. Operation Sindoor struck infrastructure. The two arms of the campaign, covert and conventional, targeted different nodes of the same network: individuals and the physical infrastructure that supports them. This convergence suggests that India’s national security doctrine now treats covert operations and conventional military force as integrated tools of a single strategic campaign, not as separate and unrelated instruments. The intelligence community that drives the shadow war and the military that executed Sindoor are operating from the same strategic playbook.

The pattern also carries implications for global counter-terrorism doctrine. The motorcycle-borne assassination method is cheaper, more deniable, and more surgically precise than drone strikes, the preferred American method for extra-territorial counter-terrorism. The unknown-gunmen approach kills the individual target with no collateral damage, no drone footage that can be leaked to media, no legal debate about the definition of a “combatant,” and no infrastructure footprint that can be detected by satellite. If the pattern represents a deliberate doctrinal choice, it suggests that India has developed a counter-terrorism methodology that avoids every controversy that has plagued the American drone campaign while achieving similar operational outcomes.

The comparison with American drone warfare is instructive at several levels. The United States conducted approximately 14,000 drone strikes across Afghanistan, Pakistan, Yemen, and Somalia between 2004 and 2020. Those strikes killed an estimated 8,000 to 16,000 people, including a significant number of civilians whose deaths generated international condemnation, legal challenges, and radicalization effects that may have produced more terrorists than the strikes eliminated. The American approach prioritizes technological standoff: the operators sit in air-conditioned facilities in Nevada while the missile strikes a compound in Waziristan. The advantage is zero risk to American personnel. The disadvantage is the blast radius: a Hellfire missile cannot distinguish between the target and the target’s family members, neighbors, or guests.

The unknown-gunmen approach inverts this calculus. The operators accept personal risk by being physically present at the engagement. But the close-range handgun fire eliminates the collateral-damage problem almost entirely. In the documented cases, no bystanders have been killed (though the mosque killings carry the theoretical risk of harm to worshippers in the immediate vicinity). No buildings have been destroyed. No families have been obliterated. No drone footage exists for Al Jazeera to broadcast. No legal proceedings under international humanitarian law have been initiated because the method does not produce the kind of visible destruction that triggers international legal scrutiny.

This methodological difference may represent a deliberate lesson learned from watching the American experience. India observed two decades of American drone warfare and apparently concluded that technological standoff creates political and legal costs that undermine the strategic benefit. The alternative, human-intelligence-driven close-range assassination, is operationally harder, slower, and riskier to the operatives involved, but it is politically and legally cheaper because it produces no collateral damage, no satellite-detectable evidence, and no video footage. In an era when the information dimension of conflict is as important as the kinetic dimension, the method that produces no information footprint has a decisive advantage.

Abdul Sayed, who has tracked the pattern’s evolution from its earliest phase, has observed that the campaign’s sophistication has increased over time. Early operations in 2022 targeted relatively low-ranking operatives in Karachi, a city where the operational environment is most permissive. By 2026, the campaign was targeting senior commanders in Lahore and the tribal areas, environments that are significantly more hostile to clandestine operations. This upward trajectory in both target seniority and operational difficulty suggests an organization that is learning, adapting, and becoming more confident with each successful operation.

Praveen Swami, the Indian Express counter-terrorism analyst, has written extensively about the operational pattern and its implications. Swami’s analysis treats the pattern as evidence of a fundamental shift in Indian strategic culture: from a reactive posture that absorbed terror attacks and sought diplomatic redress to a proactive posture that identifies, locates, and eliminates the individuals responsible. The shift, Swami argues, began with the 2016 surgical strikes across the Line of Control and accelerated through the 2019 Balakot airstrike and into the current shadow-war phase.

Christine Fair, the Georgetown University scholar and author of “Fighting to the End: The Pakistan Army’s Way of War,” provides the structural context for understanding why the pattern has been possible. Fair’s central argument is that the Pakistan Army’s strategic culture treats India as an existential threat and uses militant proxies as instruments of state policy precisely because they are deniable. The shadow war turns this logic inside out: India is now using deniable operations against Pakistan’s proxies, applying the same tool that Pakistan used for decades in Kashmir and Mumbai. The strategic irony is that Pakistan, which pioneered the use of non-state actors for deniable violence against India, now finds itself on the receiving end of deniable violence against its own non-state assets.

The pattern’s endgame is uncertain. Attrition campaigns succeed when the rate of elimination exceeds the rate of recruitment. If the campaign kills senior commanders faster than the organizations can replace them, the organizations degrade. If the organizations can recruit and promote replacements faster than the campaign can identify and eliminate them, the attrition is tactically successful but strategically futile. The madrassa pipeline that feeds recruits into LeT, JeM, and Hizbul has not been addressed by the shadow war. The pipeline produces thousands of potential recruits annually. The shadow war eliminates dozens of individuals annually. The mathematics of attrition favor the pipeline unless the campaign can scale its operational tempo dramatically or unless the pipeline itself is disrupted through diplomatic, economic, or military means, which is precisely what Operation Sindoor’s strikes on training camps attempted.

The attrition arithmetic, however, is more nuanced than a simple comparison between elimination rates and recruitment rates. Not all individuals are interchangeable. A foot soldier can be replaced by any young recruit from a madrassa. A mid-level commander who has spent a decade building operational networks, cultivating informants across the Line of Control, and developing the tradecraft to plan and execute cross-border attacks cannot be replaced by promoting a foot soldier. The institutional knowledge that dies with each senior commander, knowledge of safe houses, knowledge of communication protocols, knowledge of which Pakistani military contacts can be relied upon for protection, knowledge of cross-border infiltration routes, is not transferable. It accumulates over years and disappears in seconds.

This is the strategic logic of targeting senior figures rather than foot soldiers. The shadow war does not attempt to kill every member of LeT or JeM. It targets the individuals whose institutional knowledge makes them irreplaceable. Shahid Latif’s knowledge of the Pathankot airbase’s security vulnerabilities, his contacts within the Indian security forces that he had cultivated or compromised, and his understanding of the cross-border logistics required to insert a six-person attack team into India, all of that knowledge died with him in the Sialkot mosque. His replacement will have to rebuild that knowledge base from scratch, a process that takes years and exposes the organization to detection at every stage of the rebuilding.

The organizational degradation is compounded by the trust deficit the campaign creates. Terror organizations depend on internal trust: commanders must trust their subordinates, cells must trust their handlers, and the organization must trust its support network of safe-house operators, weapons suppliers, and communications facilitators. The shadow war’s penetration of this network, evidenced by the attackers’ knowledge of targets’ daily routines, mosque attendance, and residential locations, implies that someone inside the trust network is providing information. Every successful elimination increases the suspicion that informants have penetrated the organization. This suspicion triggers internal purges, paranoid security protocols, and the exclusion of competent operatives who fall under unwarranted suspicion. The organizational damage from internal paranoia can exceed the damage from the eliminations themselves.

The ISI’s relationship with these organizations adds another layer of complexity to the endgame. If the shadow war degrades LeT and JeM to the point where they can no longer execute attacks against India, ISI loses its primary instruments of proxy warfare. ISI could attempt to rebuild the organizations by providing new leadership, new funding, and new training. But rebuilding under active attrition is exponentially harder than building in a permissive environment. Every new commander who is promoted to replace an eliminated predecessor becomes a target himself, and the knowledge that promotion equals targeting creates a perverse incentive structure within the organizations: ambitious operatives may begin to avoid promotion, preferring the relative safety of mid-level anonymity to the lethal spotlight of senior command.

The question of whether the shadow war can achieve its strategic objectives through attrition alone remains open. Attrition without disruption of the recruitment pipeline produces temporary organizational degradation that the pipeline eventually repairs. Attrition combined with pipeline disruption (through military strikes on training camps, diplomatic pressure to close madrassas, financial sanctions to cut funding) produces potentially permanent organizational decline. The convergence of the shadow war with Operation Sindoor’s conventional strikes suggests that India’s strategists understand this distinction and are applying both forms of pressure simultaneously.

The relationship between the covert campaign and the conventional military response represents the most significant doctrinal development in South Asian security since the nuclear tests of 1998. India has demonstrated that it can conduct both types of operations simultaneously: covert eliminations of individuals and conventional strikes on infrastructure. Pakistan’s deterrence posture, built on the assumption that nuclear weapons prevent any Indian military action, has been undermined by both the shadow war (which operates below the nuclear threshold by design) and Operation Sindoor (which operated above the conventional threshold but below the nuclear threshold through careful escalation management). The ISI’s decades-long strategy of using proxy groups as instruments of Indian destabilization assumed that Pakistan’s nuclear umbrella would protect those groups from Indian retaliation. The shadow war has proven that assumption wrong.

The nuclear dimension deserves specific analysis because it explains why the shadow war takes the form it does. Pakistan acquired nuclear weapons in 1998 precisely to deter Indian conventional military superiority. The nuclear deterrent was supposed to create an umbrella under which Pakistan could continue supporting anti-India proxy groups without fear of Indian retaliation: any Indian military response would risk nuclear escalation, and no rational actor would risk nuclear war over a terror attack. This logic held from 1998 through 2016. India absorbed the 2001 Parliament attack, the 2006 Mumbai train bombings, and the 2008 Mumbai massacre without military retaliation, because the nuclear threshold made conventional response too risky.

The shadow war circumvents this logic entirely. Covert assassination of individual terrorists is so far below the nuclear threshold that Pakistan cannot credibly threaten nuclear retaliation in response. Nuclear weapons are designed to deter existential threats, not to prevent the killing of individual designated terrorists whose existence Pakistan officially denies sheltering. The shadow war exploits the gap between what nuclear weapons deter (conventional military invasion, territorial conquest) and what they cannot deter (surgical covert operations that kill specific individuals without damaging state infrastructure). In strategic terms, the shadow war operates in the “sub-conventional space” that nuclear deterrence cannot reach, and it does so deliberately.

Vipin Narang, a nuclear-deterrence scholar, has argued that the concept of “limited war under the nuclear umbrella” has been tested and validated in the India-Pakistan context. The surgical strikes of 2016, the Balakot airstrike of 2019, and Operation Sindoor of 2025 all demonstrated that India can use graduated levels of military force without triggering nuclear escalation. The shadow war takes this principle to its logical extreme: the most graduated, most limited, most deniable form of force application, individual assassination, is the form most resistant to nuclear deterrence. Pakistan’s nuclear weapons protect the state. They do not protect the individuals the state shelters.

Frequently Asked Questions

Q: Who are the unknown gunmen killing terrorists in Pakistan?

Pakistani authorities have formally alleged that a “hostile intelligence agency” is responsible, with officials privately identifying India’s Research and Analysis Wing as the suspected perpetrator. India has categorically denied all allegations, dismissing them as anti-India propaganda. No perpetrator has been officially identified or arrested in any case. The operational pattern, specifically the exclusive targeting of India-designated individuals, the professional-grade tradecraft, the geographic consistency across multiple Pakistani provinces, and the absence of any claim of responsibility, is consistent with state-level intelligence operations. Non-state explanations (criminal gangs, TTP, internal rivalries) fail to account for the target-selection discipline that defines the pattern.

Q: Why do the unknown gunmen use motorcycles?

The motorcycle solves five tactical problems simultaneously. It provides approach speed through congested Pakistani urban traffic where cars are frequently stationary. It provides anonymity among the estimated 25 million motorcycles registered in Pakistan. It enables a dual-rider configuration where one person drives and one person shoots. It permits immediate escape through traffic gaps, alleyways, and narrow lanes that police vehicles cannot pursue through. And it provides disposability: a stolen or unregistered motorcycle can be abandoned after the operation with no forensic trail. No other vehicle type provides all five advantages in the Pakistani urban environment.

Q: Why are terrorists killed during prayer time in mosques?

Prayer times create the single most predictable behavior window in a devout Muslim’s daily routine. The five daily prayers are fixed by the Islamic calendar and published publicly. For an individual who attends the same mosque regularly, each prayer creates a window of known location, known time, and known physical posture (kneeling, prostrating, eyes downcast). The mosque also provides cover for the attacker: anyone can enter a mosque during prayer without arousing suspicion, because mosques welcome all worshippers. The combination of target predictability, environmental access, and reduced target alertness (focused on prayer rather than personal security) makes the mosque window the highest-probability engagement opportunity available.

Q: Is there a pattern to the targeted killings in Pakistan?

The pattern is consistent across all documented cases: motorcycle-borne attackers, close-range handgun fire, targeting at predictable locations (mosques, daily walks, shops, homes), immediate escape through urban traffic, zero claims of responsibility, and zero arrests. The targets are exclusively individuals designated by India as terrorists, appearing on NIA charge sheets, UNSC sanctions lists, or Indian government press releases. The geographic range spans four Pakistani provinces and Pakistan-occupied Kashmir. The organizational range spans LeT, JeM, Hizbul Mujahideen, Al-Badr, and Khalistan-affiliated groups. The MO comparison matrix documented in this article provides the definitive reference for the pattern’s operational signature.

Q: How do the unknown gunmen know where terrorists are?

The intelligence preparation required to locate targets in Pakistani cities involves at minimum two capabilities: target identification (knowing who to look for, including any aliases) and physical surveillance (establishing the target’s daily routine, mosque attendance, walking routes, and residence location). Target identification requires access to intelligence databases and human intelligence networks that track the identities and locations of designated terrorists. Physical surveillance requires locally embedded operatives who can spend days or weeks observing a target without attracting suspicion. The combination of these capabilities is consistent with a professional intelligence operation using recruited local assets in multiple Pakistani cities.

Q: Do the unknown gunmen ever get caught?

As of the most recent documented cases, no attacker associated with the unknown-gunmen pattern has been arrested, identified by name, or prosecuted in any Pakistani court. No weapon used in any killing has been recovered. No motorcycle has been traced through registration records. No CCTV footage has produced an identifiable suspect. This forensic vacuum is extraordinary by any standard of criminal investigation and suggests either professional-grade counter-forensic measures, obstruction of investigations at institutional levels, or both.

Q: Why does no group claim responsibility for the killings?

The absence of any claim of responsibility distinguishes this pattern from virtually all other forms of organized violence in Pakistan, where the TTP, Baloch separatist groups, sectarian organizations, and political factions routinely claim their operations. The silence serves deniability: claiming responsibility would expose the perpetrating organization to diplomatic consequences, legal proceedings, and retaliatory operations. State intelligence agencies conducting extra-territorial operations have institutional reasons to avoid attribution. Non-state actors, by contrast, typically claim their operations because public attribution serves their goals of recruitment, fundraising, and deterrence.

Q: How many terrorists have been killed by unknown gunmen in Pakistan?

Precise counts depend on inclusion criteria. Maximalist estimates count over thirty militants killed by unknown assailants in 2026 alone. Minimalist counts restrict the tally to individuals confirmed on India’s designated-terrorist lists, NIA charge sheets, or UNSC sanctions designations. This article’s analysis applies the minimalist standard: inclusion requires confirmed designation or listing by Indian or international authorities. Under this standard, the campaign has eliminated at least twenty-five confirmed high-value targets across four years, with the pace accelerating significantly in 2025 and 2026.

Q: Could the killings be TTP operations rather than Indian operations?

The TTP theory has been advanced primarily by Pakistani sources, including Jamaat-ud-Dawa (LeT’s charitable front), which suggested that the killing of LeT commander Sheikh Yousaf Afridi in KPK was TTP’s work. This theory is analytically weak because TTP has no history of targeting LeT, JeM, or Hizbul Mujahideen personnel. TTP’s enemies are the Pakistani state, the Pakistan Army, and Shia communities. TTP and Kashmir-focused organizations share ideological sympathies and, in some cases, recruitment networks. There is no documented case of TTP deliberately targeting a Kashmir-focused organization’s personnel.

Q: What weapons do the unknown gunmen use?

All documented cases involve small-arms fire, specifically handguns, fired at close range (two to ten feet). No long-range weapons (rifles, sniper systems), explosives, or remotely detonated devices have been used. The exclusive reliance on handguns is tactically consistent with motorcycle-borne operations: handguns can be concealed under clothing, drawn and fired with one hand while the other grips the motorcycle, and discarded quickly after use. The close range eliminates accuracy concerns and guarantees lethality for a torso or head shot.

Q: Has Pakistan tried to stop the killings?

Pakistan’s response has been primarily diplomatic rather than operational. The formal allegation by Pakistani Foreign Secretary Qazi in January 2024 was the highest-profile official response. Pakistan has expelled Indian diplomats and summoned Indian envoys. Pakistan has not, however, demonstrated an ability to prevent the killings operationally: no increased security for designated individuals, no preemptive arrests of suspected intelligence operatives, and no successful interception of an ongoing attack. The inability to stop the killings despite formal acknowledgment of the pattern suggests either that Pakistan lacks the capability to protect its assets or that internal contradictions within Pakistan’s security apparatus, some elements of which may benefit from the elimination of groups they can no longer control, prevent a unified defensive response.

Q: What is the connection between the unknown gunmen pattern and Operation Sindoor?

The unknown-gunmen pattern and Operation Sindoor represent two arms of the same strategic campaign. The shadow war eliminates individual terrorists through covert operations. Operation Sindoor struck the physical infrastructure, training camps, weapons depots, and command facilities, that supports these organizations through conventional military force. The two approaches target different nodes of the same network: human capital and physical infrastructure. The convergence occurred in the aftermath of the April 2025 Pahalgam massacre, which triggered both the conventional military response (Sindoor) and an acceleration of the covert campaign. India’s national security doctrine appears to treat both instruments as integrated components of a single strategic response.

Q: Is the unknown gunmen pattern legal under international law?

The legality of extra-territorial targeted killings is one of the most contested questions in international law. The United States has argued that targeted killings of designated terrorists in foreign countries are lawful under the law of armed conflict and the right of self-defense (Article 51 of the UN Charter). Pakistan argues that such operations violate its sovereignty and constitute acts of war. The legal debate turns on whether a state of armed conflict exists between India and the targeted organizations, whether Pakistan’s failure to act against designated terrorists constitutes a forfeiture of sovereign protection, and whether the right of self-defense extends to preemptive elimination of individuals who have demonstrated intent and capability to attack. No international court has adjudicated these questions in the India-Pakistan context.

Q: What is the most common time of day for the killings?

The documented cases cluster around three time windows: morning prayer time (Fajr, approximately 5:00 to 6:00 AM), early afternoon (Dhuhr prayer, approximately 12:30 to 1:30 PM), and evening (Maghrib prayer, approximately 6:00 to 7:00 PM, or evening-walk hours). The clustering around prayer times reflects the targeting of mosques. The evening-walk killings exploit the period when residential neighborhoods are busy, providing crowd cover for the motorcycle approach and confusion cover for the escape.

Q: Which Pakistani city has seen the most unknown gunmen killings?

Karachi has seen the highest number of documented killings, which is consistent with the city’s operational advantages for clandestine operations: a population of 16 million provides anonymity, endemic criminal violence provides cover, a massive motorcycle population provides vehicle concealment, and an overstretched police force limits investigative capacity. Lahore has the second-highest count, followed by Rawalpindi, with additional cases spread across Sialkot, Nawabshah, Jhelum, Rawalakot, Bajaur, and Landi Kotal.

Q: Which terror organizations have lost the most members to the pattern?

Lashkar-e-Taiba and its front organizations (Jamaat-ud-Dawa, Falah-e-Insaniyat Foundation) have lost the highest number of documented members, ranging from mid-level operatives to the co-founder Amir Hamza. Jaish-e-Mohammed has lost key figures including Zahoor Mistry and Shahid Latif. Hizbul Mujahideen and Al-Badr have lost several Pakistan-based commanders. Khalistan-affiliated organizations have lost Paramjit Singh Panjwar (KCF chief, killed in Lahore) and Hardeep Singh Nijjar (KTF chief, killed in Canada).

Q: How does the unknown gunmen pattern compare to Mossad’s targeted killings?

Israel’s Mossad has conducted targeted killings of designated enemies across multiple countries for decades, from the Wrath of God campaign following the 1972 Munich Olympics massacre to the ongoing campaign against Iranian nuclear scientists and Hamas leaders. The unknown-gunmen pattern shares several features with Mossad’s operations: close-range engagement, deniability, absence of claims, and targeting of individuals designated as threats by the sponsoring state. The key difference is scale: Mossad’s operations are typically individual, high-profile, and widely reported. The unknown-gunmen pattern is serial, consistent, and (until the Nijjar case in Canada) largely unreported in Western media. The comparison suggests that India may have studied and adapted Israeli methodology for the Pakistani operational environment.

Q: Are the targeted killings accelerating?

The documented tempo has increased significantly. From approximately one confirmed killing per month in 2022, the pace increased to approximately two per month in 2023, four to six per month in 2025, and multiple per week in 2026. The acceleration correlates with two events: the April 2025 Pahalgam massacre, which killed dozens of civilians and triggered Operation Sindoor, and the subsequent period of heightened India-Pakistan tension during which restraint on the covert campaign appears to have been relaxed. If the trend continues, 2026 will record more eliminations than all previous years combined.

Q: What does the pattern reveal about India’s intelligence capability?

The pattern reveals that India possesses or has developed five specific intelligence capabilities. First, a target-identification capability that can track designated terrorists across multiple Pakistani cities despite aliases and identity changes. Second, a human intelligence network embedded in multiple Pakistani provinces with operatives who speak local languages and can conduct physical surveillance without detection. Third, an operational execution capability that includes trained close-range shooters comfortable with motorcycle-borne engagement. Fourth, a counter-forensic capability that prevents any post-operation identification of attackers, weapons, or vehicles. Fifth, a command-and-control architecture that can coordinate operations across five Pakistani provinces and Pakistan-occupied Kashmir while maintaining operational security across dozens of operations over four years. This combination of capabilities is consistent with a mature intelligence agency operating at national scale.

Q: Could the killings stop?

The killings would stop under one of three conditions: India decides that the strategic cost of continuing exceeds the benefit (diplomatic isolation, escalation risk, or operational failure), Pakistan succeeds in identifying and dismantling the operational network (which it has so far been unable to do), or the target pool is exhausted (all priority targets have been eliminated, relocated, or surrendered). None of these conditions appears imminent. India faces no meaningful diplomatic cost for the Pakistan-based operations (the Canada case is different). Pakistan has not demonstrated the capability to stop the campaign. And the target pool, replenished by ongoing recruitment through the madrassa pipeline and by new attacks that generate new targets, is not approaching exhaustion. The pattern, barring an unforeseen shift, will continue.

Q: Is there any evidence that the unknown gunmen pattern has deterred terror attacks against India?

Direct attribution of deterrence is difficult because it requires proving a negative: attacks that did not happen because of the campaign. Indirect evidence suggests behavioral modification among surviving terror leaders: increased personal security, reduced public movement, more frequent changes of residence and communication devices, and reported reluctance among mid-level operatives to accept promotion to senior positions that make them targets. If the campaign has made senior command positions in LeT, JeM, and Hizbul less desirable because they are now associated with personal risk, it is achieving a form of deterrence through attrition. The operational effectiveness of these organizations may be declining not because the campaign has killed every commander but because the surviving commanders are spending their energy on personal survival rather than on planning attacks.