logo
E-comm platforms, online payments services being abused for terror financing: FATF

E-comm platforms, online payments services being abused for terror financing: FATF

Economic Times08-07-2025
TIL Creatives Representational
Global terror financing watchdog FATF on Tuesday cited the February 2019 Pulwama terror attack, which killed 40 CRPF personnel, and the 2022 Gorakhnath Temple incident to say that e-commerce platforms and online payment services are being misused for terror financing.
In its 'Comprehensive Update on Terrorist Financing Risks', the FATF also flagged 'state sponsorship of terrorism' and said a variety of publicly available sources of information and delegations' inputs to this report indicate that "certain terrorist organisations have been and continue to receive financial and other forms of support from several national governments".
"Delegations reported on this trend by referring to the use of state sponsorship for TF (terror financing) either as fundraising technique or as part of the financial management strategy of the certain organisations engaging in terrorist acts. Several forms of support have been reported, including direct financial support, logistical and material support, or the provision of training," the Financial Action Task Force (FATF)said. In June, the FATF, while condemning the April 2025, Pahalgam terror attack, in which 26 people killed, and saying such attacks would not have been possible without financial support, had said it would come out with a "comprehensive analysis of terrorist financing", compiling cases provided by its global network consisting 200 jurisdictions. Giving the case study of use of e-commerce platform for procurement of materials for terrorist attack in India, the FATF said a key component of the improvised explosive device used in the attack -- aluminum powder -- was procured through the EPOM Amazon. This material was used to enhance the impact of the blast.
In February 2019, a suicide bombing targeted a convoy of Indian Security forces in Pulwama in Jammu & Kashmir, resulting in the deaths of 40 soldiers. India's authorities concluded that the attack was orchestrated by Jaish-I-Mohammed (JiM). As a result of the investigation, 19 individuals were charged under relevant provisions of the Unlawful Activities (Prevention) Act, including sections related to TF. Among those charged were seven foreign nationals, including the suicide bomber. LEAs also recovered moveable and immovable assets connected to the attack, such as vehicles and terrorist hideouts. Indian authorities have repeatedly highlighted Pakistan's persistent support for terrorism and its funnelling of multilateral funds for arms procurement. India has consistently held that Pakistan has given safe haven to designated terrorists and according to sources, India views that such action by Pakistan warrants that the country be put in the "grey list" of the FATF. The FATF report flagged that terrorists have been abusing e-commerce platforms and online marketplaces and said terrorists have used such platforms for their operational procurement (equipment, weapons, chemicals, 3D-printing material). EPOMs can also be used by terrorists to sell items to finance their projects and operations, including lower value items that were previously not in demand. "EPOMs can be used for fund-moving purpose inspired by trade-based money laundering schemes. Traded goods can indeed offer disguise to value being transferred from an accomplice to another member of the network. In such scheme, the first actor would purchase items, send them to his accomplice through an EPOM, for the latter to sell items in another jurisdiction and use profit to finance terrorism," the FATF said. The FATF in its update on TF risks also highlighted the methods used to raise, move, and manage funds and other assets for terrorist financing purposes and said online fund transfers using payment services platform offer less traceability and transparency compared to wire-transfer, making it harder to clearly identify initiators and recipients of transfers.
Giving a case study on the use of online payment service and VPNs to fund lone actor terrorist act, the FATF cited the April 3, 2022, Gorakhnath Temple attempted breach incident wherein an individual, influenced by Islamic State in Iraq and the Levant (ISIL) ideology, attacked security personnel leading to immediate arrest.
The financial investigation revealed that the individual transferred Rs 669,841 (USD 7,685) via PayPal to foreign countries in support of ISIL, using international third-party transactions and using VPN services to obscure the IP address. He also received Rs 10,323.35 (USD 188) from a foreign source. Further financial scrutiny uncovered that the accused had made a payment to a VPN provider through his bank account to secure these services. A comprehensive analysis of the accused's PayPal transactions, obtained via email, indicated that about 44 international third-party transactions totalling Rs 669,841 (approximately USD 7,736) had been made to foreign accounts. Additionally, the accused received funds from a foreign account through PayPal. The investigation also uncovered that the accused had sent money to multiple individuals identified as ISIL followers in foreign jurisdictions to support terrorist activities. "Due to the suspicious nature of these transactions and the potential for TF, PayPal suspended the accused's account, thereby preventing further illicit fund transfers," the FATF said in the case study as sourced from India's finance ministry. "As the offer of online payment services from Fintech companies grew substantially over the last 10 years, cases of terrorists opting for those services can be observed across all contexts, especially as it offers an opportunity to diversify fund-moving channels. "These payment services also appear attractive for terrorist organisations for the low-cost and fast money transfer solutions they offer, with possibility for enhanced opacity on initiators and beneficiaries through pseudonyms or fake accounts," the FATF said.
The FATF said Europol assesses that services are commonly used across all types of terrorist organisations. In cases involving small terrorist cells, FTFs (Foreign Terrorist Fighter), and other individual terrorists, P2P payment services have been used for procurement of military equipment, chemical components, or propaganda materials on e-commerce platforms (EPOMs). Delegations also report that EoRMT (Ethnically or Racially Motivated Terrorism) groups use peer-to-peer payment systems to sell merchandising, items conveying extremist ideologies (books, music, clothes) to sympathisers, constituting a central source of revenue for those organisations. "Such online payment services can also be used to convey donations to larger organisations, especially in the extent that some payment mechanisms are directly integrated into social networks and content hosting services. In those cases, a single platform can be used to recruit donators, launch a crowdfunding campaign, and proceed to the transfer of funds through an online payment service.
"As it was mentioned regarding credit cards, online payment services offer less traceability and transparency compared to wire-transfer, making it harder to clearly identify initiators and recipients of transfers," it added.
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

CoinDCX hit by $44.2 mn security breach; founders say customer funds unaffected, safe
CoinDCX hit by $44.2 mn security breach; founders say customer funds unaffected, safe

The Hindu

time8 minutes ago

  • The Hindu

CoinDCX hit by $44.2 mn security breach; founders say customer funds unaffected, safe

Indian cryptocurrency exchange CoinDCX has suffered a security breach, resulting in theft of $44.2 million, or ₹378 crore, even as the founders took to X to reassure that customer funds remained unaffected and safe, with the compromise limited to an internal operational account. The total exposure is being absorbed entirely by CoinDCX, using the company's treasury reserves, the company said in a First Incident Report released on Sunday. According to the report, on July 19, at 4 a.m., CoinDCX security systems detected an incident involving unauthorised access to one of its accounts on the partner exchange, leading to a financial exposure of about $44 million. The incident once again puts the spotlight on mounting security threats in the highly volatile world of cryptocurrencies. Last year, crypto exchange WazirX faced a hack in India, leading to the loss of more than $230 million, and marking one of the biggest such heists in India. The theft had prompted a thorough examination of safety measures and eroded sentiments. CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal took to the social media platform X to address the situation, confirming that the attack was the result of a sophisticated server breach, targeting an internal wallet, not the ones holding customer assets. The incident was first flagged by blockchain investigator ZachXBT, following which the exchange made the disclosure public. "Today, one of our internal operational accounts -- used only for liquidity provisioning on a partner exchange -- was compromised due to a sophisticated server breach. I confirm that the CoinDCX wallets used to store customer assets are not impacted and are completely safe. This won't cause any loss to our customers. CoinDCX will be bearing the full amount," Mr. Gupta said. "The total amount lost was USD 44Mn out of our treasury assets. Coindcx Treasury will be bearing these losses," Mr. Khandelwal wrote. Following this, users rushed to check their balances, leading to a spike in withdrawal requests. The sudden surge in activity led to CoinDCX's portfolio APIs, which display user balances and transaction histories, becoming jammed and unresponsive. For several hours, many were unable to even see their holdings on the app, adding fuel to rumours and anxiety online. The co-founders later updated that Portfolio APIs have been restored. Affected infrastructure has been completely isolated, and CoinDCX operations continue to run normally, the company said. CERT-In, or the Indian Computer Emergency Response Team, has been informed about the incident. Detailed forensics with two globally reputed security agencies is being carried out, and reports will be shared for public benefit, it added. "CoinDCX services remain fully operational. Trading activity, INR deposits and INR withdrawals continue. INR withdrawals below Rs 5 lakhs will reflect in your account within 5 hours, while withdrawals above Rs 5 lakhs will be processed within 72 hours. The incident was isolated and has no impact on your portfolio access or operations," the company stated. Social media is flooded with mixed reactions. While some praised CoinDCX for absorbing the losses and protecting user funds, others criticised the delay in public disclosure and raised concerns over the broader security of crypto platforms in India. "Coindcx silent for 17 hours? That's more suspense than a thriller! In crypto, transparency isn't optional; it's key. Stay open to keep trust alive!" a user wrote. "Good to see CoinDCX acting responsibly, assuring user funds are safe, and not passing losses onto customers. Sets a positive precedent for Indian crypto exchanges," another said.

Punjab Police probes own X post reminding of George Floyd tragedy
Punjab Police probes own X post reminding of George Floyd tragedy

Time of India

timean hour ago

  • Time of India

Punjab Police probes own X post reminding of George Floyd tragedy

Chandigarh: After backlash over a post on its official X handle -- the screenshot of which was purportedly captured and shared by many users -- Punjab police on Sunday issued a statement that the controversial post was only 'briefly visible' on its official handle before it was deleted. The post, a couple of days ago, had an illustration of a light-complexioned man, dressed as a cop, with his face covered with the Indian flag, crushing a dark-complexioned man under his knee, on whose face the Pakistani flag was seen. To many, it reminded of the George Floyd tragedy. Going by the viral screenshots, the text with the now-deleted illustration by Punjab police, allegedly read, "If you are caught with this flag, be prepared to suffer the consequences. " In a post on X on Sunday evening=, Punjab police said, "It has come to our attention that a contentious post was briefly visible on the official Punjab Police X handle and has since been deleted. Preliminary findings indicate that the imagery used in the post was AI-generated. We are investigating whether this incident resulted from unauthorised access." It added, "Our technical teams are actively probing the matter, including the possibility of a cybersecurity breach. We urge the public not to circulate unverified content and to rely only on information shared through our verified official handles. Your trust and safety remain our highest priority. Punjab Police does not endorse any such content in any form."

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store