SIT formed to probe suspected extremist links in Keralam’s Ernakulam synagogue arson case

The alleged attack involved a deliberate fire near the historic Kadavumbhagam Synagogue, close to Ernakulam Market. Police say the incident mattered because it may not have been an isolated act. The suspect’s devices reportedly contained communications involving other targets and possible foreign-linked groups.

According to investigators, a fire was set at Blossom Nursery, located in front of the synagogue. Ebin Paul, 32, allegedly arrived in a blue car, poured petrol on the premises, and set it alight. He allegedly filmed the incident on his mobile phone before leaving. Police arrested him in connection with the case.

The investigation has now widened beyond the local fire. Officers are checking a possible connection to an earlier Muvattupuzha arson incident, suspected narcotics activity, financial transactions, and communications with people or groups abroad. A Special Investigation Team is examining whether these strands point to a broader organised conspiracy.

A Special Investigation Team, or SIT, is a specially formed police group assigned to investigate a particular case in depth. It brings together officers with different responsibilities and gives the inquiry a focused structure. In this case, the SIT matters because investigators are examining more than one suspected offence.

Deputy Commissioner of Police Arun K. Pavithran will supervise the team, while Assistant Commissioner Sibi Tom leads it. The case was initially being handled by a team headed by Ernakulam Central Station House Officer Aneesh Joy. The SIT will examine the suspect’s alleged extremist links and whether he is connected to other criminal activities.

The team is also reviewing digital evidence, suspected narcotics communications, financial activity, and a possible Muvattupuzha connection. Central agencies have begun examining available information. This structure could help investigators combine local police work, cyber analysis, forensic examination, and wider intelligence into one coordinated inquiry.

Investigators are treating the suspect’s mobile phone and other devices as a possible map of the wider case. Digital evidence can show what happened, who communicated with whom, and whether an attack was planned, recorded, or rewarded. The findings could therefore connect the local arson to other crimes or outside actors.

A preliminary phone examination reportedly found videos of the alleged arson and communications with individuals and online groups suspected of foreign links. Messages allegedly referred to Jewish institutions, potential targets, and attacks in several Indian cities. Police also reported suspicious communications about narcotics transactions and possible cryptocurrency payments.

Forensic teams are prioritising the examination of the phone and other devices. They are tracing communication origins, studying financial transactions, and comparing video evidence with the earlier Muvattupuzha incident. Investigators are also seeking the identities of participants and examining whether footage was sent in exchange for payment.

Based on the four areas identified in the question and the article, the investigation now has four separate lines of inquiry. They are the alleged arson near the Kadavumbhagam Synagogue, the earlier Muvattupuzha arson, suspected narcotics activity, and communications that may involve foreign-linked groups. Counting them separately shows how far the probe has expanded.

The first inquiry concerns the fire at Blossom Nursery near the synagogue. The second concerns video comparisons and the suspect’s alleged admission about the Muvattupuzha incident. The third follows suspected narcotics communications and substances seized from his rented house. The fourth examines messages, online groups, possible targets, and cryptocurrency payments.

These lines are not necessarily proven to be one operation. Investigators are testing whether they connect through the suspect, his devices, financial transactions, or outside contacts. The SIT, Ernakulam Rural Police, and central agencies are examining the evidence before drawing conclusions about any broader network.

Proving that the suspect acted within an organised network would change the investigation’s scope. It would suggest that the alleged arson may have involved direction, financing, recruitment, or coordination beyond the person arrested. The case could then concern a wider pattern of criminal activity rather than one local incident.

Police are already examining an alleged system in which targets were assigned, attacks were carried out and recorded, and footage was sent back for payment. They are checking whether cryptocurrency was used. Communications allegedly mention Jewish institutions, other targets, and attacks in several cities, while another inquiry concerns narcotics activity.

If evidence confirms these links, investigators could trace other participants, funding sources, instructions, and related attacks. Central agencies might deepen their examination, and police could pursue additional offences or suspects. Any such action would depend on verified digital, financial, forensic, and witness evidence, rather than preliminary claims alone.

Forensic analysis can connect a physical attack to remote participants by rebuilding the suspect’s digital activity. Investigators can compare videos, messages, timestamps, contacts, and device data with events on the ground. This may show whether the attack was planned locally or followed instructions from another person.

In this case, police reportedly found an arson video, communications with suspected foreign-linked groups, references to targets, and possible evidence of payment for recorded attacks. Investigators are also examining financial transactions and indications that cryptocurrency may have been used. Those records could help identify senders, recipients, timing, and repeated payment patterns.

The process remains investigative, not conclusive. Authorities must trace the origin of communications, verify account ownership, authenticate files, and connect transactions to the alleged acts. The SIT is prioritising these steps, while central agencies examine available information and police pursue possible links to other crimes.

The central task is to separate evidence of one person’s conduct from evidence of planning or coordination. Investigators need to establish what happened at the scene, who carried it out, and whether another person gave instructions, supplied money, selected targets, or helped afterwards. A suspected link is not the same as a proven conspiracy.

In this case, police are comparing videos from the Ernakulam and Muvattupuzha incidents. They are examining messages, possible foreign-linked contacts, narcotics communications, financial transactions, and cryptocurrency indications. They also need to verify device material, trace communications, identify account holders, and connect digital records with physical evidence.

Protecting due process means preserving devices and records, documenting forensic work, checking the reliability of statements, and distinguishing police claims from established facts. The SIT and central agencies are still investigating. Their conclusions should rest on corroborated evidence and proper legal procedures, not on preliminary findings alone.