New Delhi: Global terror financing watchdog FATF on Tuesday cited the February 2019 Pulwama terror attack, which killed 40 CRPF personnel, and the 2022 Gorakhnath Temple incident to say that e-commerce platforms and online payment services are being misused for terror financing.
In its ‘Comprehensive Update on Terrorist Financing Risks’, the FATF also flagged ‘state sponsorship of terrorism’ and said a variety of publicly available sources of information and delegations’ inputs to this report indicate that “certain terrorist organisations have been and continue to receive financial and other forms of support from several national governments”.
“Delegations reported on this trend by referring to the use of state sponsorship for TF (terror financing) either as fundraising technique or as part of the financial management strategy of the certain organisations engaging in terrorist acts. Several forms of support have been reported, including direct financial support, logistical and material support, or the provision of training,” the Financial Action Task Force (FATF)said.
In June, the FATF, while condemning the April 2025, Pahalgam terror attack, in which 26 people killed, and saying such attacks would not have been possible without financial support, had said it would come out with a “comprehensive analysis of terrorist financing”, compiling cases provided by its global network consisting 200 jurisdictions.
Giving the case study of use of e-commerce platform for procurement of materials for terrorist attack in India, the FATF said a key component of the improvised explosive device used in the attack — aluminum powder — was procured through the EPOM Amazon. This material was used to enhance the impact of the blast.
In February 2019, a suicide bombing targeted a convoy of Indian Security forces in Pulwama in Jammu & Kashmir, resulting in the deaths of 40 soldiers. India’s authorities concluded that the attack was orchestrated by Jaish-I-Mohammed (JiM).
As a result of the investigation, 19 individuals were charged under relevant provisions of the Unlawful Activities (Prevention) Act, including sections related to TF. Among those charged were seven foreign nationals, including the suicide bomber. LEAs also recovered moveable and immovable assets connected to the attack, such as vehicles and terrorist hideouts.
Indian authorities have repeatedly highlighted Pakistan’s persistent support for terrorism and its funnelling of multilateral funds for arms procurement. India has consistently held that Pakistan has given safe haven to designated terrorists and according to sources, India views that such action by Pakistan warrants that the country be put in the “grey list” of the FATF.
The FATF report flagged that terrorists have been abusing e-commerce platforms and online marketplaces and said terrorists have used such platforms for their operational procurement (equipment, weapons, chemicals, 3D-printing material).
EPOMs can also be used by terrorists to sell items to finance their projects and operations, including lower value items that were previously not in demand.
“EPOMs can be used for fund-moving purpose inspired by trade-based money laundering schemes. Traded goods can indeed offer disguise to value being transferred from an accomplice to another member of the network. In such scheme, the first actor would purchase items, send them to his accomplice through an EPOM, for the latter to sell items in another jurisdiction and use profit to finance terrorism,” the FATF said.
The FATF in its update on TF risks also highlighted the methods used to raise, move, and manage funds and other assets for terrorist financing purposes and said online fund transfers using payment services platform offer less traceability and transparency compared to wire-transfer, making it harder to clearly identify initiators and recipients of transfers.
Giving a case study on the use of online payment service and VPNs to fund lone actor terrorist act, the FATF cited the April 3, 2022, Gorakhnath Temple attempted breach incident wherein an individual, influenced by Islamic State in Iraq and the Levant (ISIL) ideology, attacked security personnel leading to immediate arrest.
The financial investigation revealed that the individual transferred Rs 669,841 (USD 7,685) via PayPal to foreign countries in support of ISIL, using international third-party transactions and using VPN services to obscure the IP address. He also received Rs 10,323.35 (USD 188) from a foreign source.
Further financial scrutiny uncovered that the accused had made a payment to a VPN provider through his bank account to secure these services. A comprehensive analysis of the accused’s PayPal transactions, obtained via email, indicated that about 44 international third-party transactions totalling Rs 669,841 (approximately USD 7,736) had been made to foreign accounts. Additionally, the accused received funds from a foreign account through PayPal.
The investigation also uncovered that the accused had sent money to multiple individuals identified as ISIL followers in foreign jurisdictions to support terrorist activities.
“Due to the suspicious nature of these transactions and the potential for TF, PayPal suspended the accused’s account, thereby preventing further illicit fund transfers,” the FATF said in the case study as sourced from India’s finance ministry.
“As the offer of online payment services from Fintech companies grew substantially over the last 10 years, cases of terrorists opting for those services can be observed across all contexts, especially as it offers an opportunity to diversify fund-moving channels.
“These payment services also appear attractive for terrorist organisations for the low-cost and fast money transfer solutions they offer, with possibility for enhanced opacity on initiators and beneficiaries through pseudonyms or fake accounts,” the FATF said.
The FATF said Europol assesses that services are commonly used across all types of terrorist organisations. In cases involving small terrorist cells, FTFs (Foreign Terrorist Fighter), and other individual terrorists, P2P payment services have been used for procurement of military equipment, chemical components, or propaganda materials on e-commerce platforms (EPOMs).
Delegations also report that EoRMT (Ethnically or Racially Motivated Terrorism) groups use peer-to-peer payment systems to sell merchandising, items conveying extremist ideologies (books, music, clothes) to sympathisers, constituting a central source of revenue for those organisations.
“Such online payment services can also be used to convey donations to larger organisations, especially in the extent that some payment mechanisms are directly integrated into social networks and content hosting services. In those cases, a single platform can be used to recruit donators, launch a crowdfunding campaign, and proceed to the transfer of funds through an online payment service.
“As it was mentioned regarding credit cards, online payment services offer less traceability and transparency compared to wire-transfer, making it harder to clearly identify initiators and recipients of transfers,” it added.
