The blast, which occurred in a crowded parking area near the historic monument, triggered widespread panic and left several nearby vehicles severely damaged. Authorities say the Hyundai i20 used in the attack was parked at the spot for nearly three hours before it exploded.

₹20 Lakh Received Through Illegal Channels

Investigators have reportedly traced a flow of ₹20 lakh to Umar Mohammad, also known as Umar Nabi, through hawala operators based in multiple states. The funds are believed to have supported the logistical preparations for the attack.

Several hawala dealers have been detained for questioning, and sources indicate that more arrests could follow as the financial network becomes clearer. A senior investigator said the hawala transactions appeared “well-planned, layered, and designed to avoid banking scrutiny.”

Fertilizer Purchases Raise Suspicion

Before the incident, Umar allegedly purchased large quantities of fertilizers from markets in Haryana’s Nuh district using cash payments. The type and quantity of fertilizers are now being examined by forensic teams to determine their role in the blast composition.

Officials stated that these purchases were “highly abnormal” for an individual with no professional requirement for such materials. This, combined with the hawala funding trail, has strengthened the suspicion of a larger terror operation at play.

Links to Arrested Doctors and Al-Falah University

The probe expanded further after two former doctors associated with Faridabad’s Al-Falah University Muzammil Ganaie and Shaheen Sayeed were arrested for their alleged involvement in the same terror network. Investigators reportedly recovered 360 kg of ammonium nitrate from the university premises.

The University Grants Commission (UGC) and the National Assessment and Accreditation Council (NAAC) have also flagged the institution for serious regulatory violations. As a result, two FIRs have been registered under charges of cheating and forgery.

Authorities are now examining whether the university’s facilities were misused to store or assemble explosive materials.

Blast Captured on CCTV Footage

CCTV cameras inside the Red Fort Metro station captured the moments leading up to and following the explosion. Footage reportedly shows flashes, smoke, and pedestrians rushing for cover as the blast reverberated across the surrounding area.

Police teams are also showing Umar’s photograph to drivers, shopkeepers, and vehicle owners who were present at the parking lot that evening. The aim is to establish whether Umar interacted with anyone shortly before leaving the car at the spot.

Part of a Larger Multi-State Terror Module

The explosion came just hours after security agencies arrested eight individuals  including three doctors  and seized nearly 2,900 kg of explosives in a separate operation across Jammu & Kashmir, Haryana, and Uttar Pradesh. Officials say both events may be linked to a “white-collar” terror module involving Jaish-e-Mohammed and Ansar Ghazwat-ul-Hind.

Initial assessments suggest a sophisticated network that blended professional identities, academic environments, and covert financial channels to evade detection.

Detailed Vehicle Entry Log Under Review

To reconstruct the sequence of events, Delhi Police have prepared a complete list of every vehicle that entered and exited the parking zone around the time the suspect car was parked. Forensic analysis of debris, tyre fragments, and soil samples is underway to trace the exact detonation mechanism.

The Crime Branch and central agencies are jointly working to map the movement of Umar and the others arrested. Officials believe the network operated with external handlers, using encrypted communication tools to plan and execute attacks.

According to sources, some suspects relied on secure foreign-based messaging platforms to share maps, travel routes, and detailed explosion plans  an indicator of deeper international linkages.

What Happens Next

With the hawala trail identified, investigators are expanding their probe into financial hubs across the NCR, Haryana, and Jammu & Kashmir. More interrogations and arrests are expected as agencies coordinate to break the wider network behind the attack.

Authorities are urging the public to report suspicious cash movements, fertilizer purchases, or abandoned vehicles to prevent similar incidents in the future. The Ministry of Home Affairs is expected to issue a formal statement soon.