Loading summary
Narrator
The Australian Federal Police, or afp, is Australia's national policing agency. Its role is to outsmart serious crime with intelligent action. The AFP is opening their case vault to give us detailed insight into their investigations, tactics and most importantly, perseverance through this Crime Interrupted podcast. As the national law enforcement agency with international reach, the AFP investigates and disrupts crime, aiming to minimise the damage inflicted on victims while maximising the damage to the criminal environment. Some of these cases may surprise you with the extent criminals are prepared to go to and that these crimes do in fact occur or are planned in our own backyard. Once you get a glimpse into the AFP and what it does to protect our way of life, you will be glad the AFP has your back. Just a reminder that the operation that follows is true crime and may affect some listeners. Listener discretion is advised. The AFP teams up with local police to form joint counterterrorism teams in each capital city. The purpose of these teams is to detect and prevent terrorist attacks. They also monitor the activities of groups who support terrorist ideologies. Their goal is prevention, which is why governments all over the world make provision for law enforcement officers to arrest offenders before they commit a terrorist attack. The law in Australia is called Acts in Preparation. It means that the moment federal law enforcement officers have evidence that a person or a group is preparing to act, they can arrest them immediately. These kinds of arrests often follow months and sometimes years of investigation. But a case arose in 2016 where the Victorian Joint Counterterrorism Team had only days to avert a major terrorist threat in the heart of Melbourne's sea. Detective Leading Senior Constable Lindsay hall has been with the AFP for over two decades. He joined the joint counterterrorism team in 2015amidst a period of multiple threats of terrorist activity on Australian shores. Just the year before, on 20th September 2014, the spiritual leader of Islamic State issued a fatwa are ruling on a point of Islamic law, calling followers in Australia to target the government or the public and kill in any way they could. Three days later, 18 year old Nouman Hayder stabbed two counter terrorism officers outside the police station in Endeavour Hills, a south eastern suburb of Melbourne. Three months later in December, Man Monis, a lone gunman with allegiance to Islamic state, was held 10 customers and eight employees hostage in the Lindt Cafe in Sydney's Martin Place, resulting in the tragic deaths of Tory Johnson and Katrina Dawson. Lindsay hall stepped into the counter terrorism space at the height of this threat.
Detective Lindsay Hall
I had been in the AFP for about 20 years by that Stage counterterrorism had been clearly identified by the AFP Commissioner and the government as being a priority and a point of exposure to risk for policing agencies and for the government. Not everyone sees themselves in a counterterrorism role, but personally I thought I could bring an element of level headedness. I thought my temperament might be well suited to counter terrorism.
Narrator
Like most of us, Lindsay was largely unaware of the terrorist threats on Australian soil.
Detective Lindsay Hall
My awareness was pretty limited. I had been aware of a few investigations that had happened in Victoria where threats had been averted, but I didn't know about those in detail. I didn't know a great deal about terrorism as a concept and as a threat to the community. I sort of developed that once I got in there with the training that the AFP provides and just seeing it all unfold through experience on the job.
Narrator
Around 2014-2015, the rising threat that Lindsay and the Joint Counterterrorism Team faced had much to do with targeted propaganda coming from Islamic State in Syria.
Detective Lindsay Hall
Islamic State had become established in Syria and they were starting to have success in a battlefield context over there. They had started to become effective with their marketing and social media publications and it was really getting a foothold, especially with young men in Australia and around the world.
Narrator
As it turned out, the Islamic State directives to their followers were clear to.
Detective Lindsay Hall
Encourage people to go and join them and fight in the Middle east and if that wasn't possible, to carry out terrorist acts in their home countries.
Narrator
While most of us find it pretty hard to fathom the logic, in the end the message from Islamic State was pretty simple.
Detective Lindsay Hall
A lot of the information that Islamic State put out spoke of atrocities being committed to Islamic people in various places around the world. And a lot of people that I've seen were open to the idea that if their co religionists overseas were subject to mistreatment by their governments or by Western governments operating in those locations, then it was open to them to either conduct terrorist acts here as retribution or to teach our Western governments a lesson or to travel to wherever else Islamic State were active and joined them and.
Narrator
Fight for them in the detection and prevention of acts of terror on Australian soil. The Joint Counterterrorism team often play the long game.
Detective Lindsay Hall
Typically it can take months of observing a group of people or one or two people, and over that time you see the extent of their radicalisation, you see an elevation in things like their religious practice, their alienation from family, alienation from their regular mosque. They're seeking out a more extremist group of people to pray with and to be taught by. You see an acceleration in their access to social media. You see them searching for specific types of accounts that are continually feeding this radicalization process. Often that happens over a period of months and it's a very gradual process. You'll see a group of people encouraging each other and building each other up to start making acts in preparation for a terrorist act or try and get offshore, try and get overseas and join Islamic State.
Narrator
With Operation Castlehome, the Joint Counter Terrorism Team did not have the luxury of time. When the men involved came to the attention of the team, they had to be ready to act and stop the threat straight away.
Detective Lindsay Hall
The main difference with this investigation was it all happened within days. I think it was about four days between us starting to work on it and actually going overt and executing warrants and making arrests.
Narrator
Operation Castleholm began with an interagency briefing. At this first meeting, there was nothing to indicate the men involved were any different to the many others the Joint Counter Terrorism Team kept an eye on.
Detective Lindsay Hall
We took a briefing from another agency and it was like many others that we'd had before, a group of people, one in particular, who were exhibiting behaviours that were a bit out of the ordinary and they were known to be part of the extremist community in Melbourne. But their behaviours indicated an escalation in their level of radicalisation. It indicated a move towards actually preparing for a terrorist act. But at the same time, it was like a number of other briefings that we'd had over the preceding 18 months or so, where sometimes they don't go anywhere.
Narrator
But Operation Castlehome was different, but in.
Detective Lindsay Hall
This case, within a few days, it was apparent that it was very real and we had to get cracking.
Narrator
In the beginning, a man in his 20s had come onto the radar when he was linked with attempts to set fire to a mosque.
Detective Lindsay Hall
Ahmed had been identified as a suspect in a fire at a mosque in Fawkner. There had been two attempts to initiate a fire at a Shia mosque over the previous few weeks and he had been identified as someone who was a suspect in that. So investigations started around that time as to what his movements had been in relation to those events. That was what started it all.
Narrator
The Joint Counterterrorism Team is made up of officers from the AFP and Victoria Police, or VicPol. Peter is a Detective Senior Sergeant with VicPol.
Detective Senior Sergeant Peter
I undertook training relation to Counterterrorism because the opportunity arose and it was something I eschewed from there and I became a detective sergeant at the Joint Counterterrorism team.
Narrator
Originally, the mosque fires were investigated by Victoria Police. Local detectives passed the information on. There had been two minor fires and then one that gutted the mosque completely.
Detective Senior Sergeant Peter
There was one in May of 2016, an attempt to. Another one in November of 2016, another attempt, and then there was the final one in December of 2016, which destroyed the mosque. The initial investigations were conducted by the local Criminal investigation unit and the information at the time suggested that there was a rift amongst the board, I guess, of control of the mosque about ownership and there was Supreme Court action underway, civil action about who owned the property and who controlled the mosque, essentially. So I think the main focus of the investigations by the divisional detectives related to the various factions on that board, and that was perceived as the motive for the arson attacks.
Narrator
Megan was a detective with VicPol working in local criminal investigation units when she decided on a different career path and joined the Joint Counter Terrorism Team, or JCTT for short.
Detective Megan
I'd been a detective for about five or six years at a divisional ciu, so I'd been a divisional detective working on burglaries and assaults and deceptions type thing, and I was just ready to do something completely different. And at that stage, JCTT was totally different to what I'd already done.
Narrator
After the final mosque fire on 16 December, Ahmad's name was put Front Row Santa and the investigation was given the name Operation Castle Home. Whether the arsonists realised it or not, the mosque was covered by cctv. While much of the camera system was destroyed in the fire, investigators were able to examine what was left.
Detective Megan
We've identified that there's a benchmark CCTV drive that was damaged. So we immediately searched for this damaged hard drive to see what could be recovered, because now that it's possibly linked to a destruction of a mosque, there might be other things that are occurring. Once we had that footage, it really gave us a clear indication that we had three suspects, an exact time that it was destroyed, a method of how it was destroyed. So that was our first, I guess, big breakthrough, that this was the exact time we definitely had three suspects and we had a bit of a method of how they'd got into the building and how exactly it had occurred.
Narrator
While the CCTV images weren't clear enough for an immediate identification, they contained vital clues. For the trained investigators, it wasn't crystal.
Detective Megan
Clear, but you could start to get an idea of what built they were, the way they walked. Obviously one was quite. Two of them were carrying, appeared to be carrying quite heavy tyres, so you could tell they were a strong build and then you had the appearance of the person and you could also see them do the graffiti and that became quite critical as well.
Narrator
In the days immediately after the fire, the police were unsure if the Islamic State graffiti left on the one remaining wall of the ruined mosque was a declaration of a terrorist attack. Peter says the investigators had to find out if it was a red herring.
Detective Senior Sergeant Peter
So even though the graffiti was on there, it was potentially perceived to be a bit of a ploy as part of the warring factions of the ownership. But it wasn't until the following Monday when we received that information to suggest that Ahmed was likely involved in the attack that we commenced our investigation into the matter and treated it as being an act of terrorism.
Narrator
Investigators from Operation Castleholm examined the graffiti closely. The CCTV clearly showed one of the arsonists spray painting the wall during the attack. Megan had the message deciphered on the graffiti.
Detective Megan
They'd written something interesting. When we started to look into it more, we'd seen obviously the Islamic State had been written in English and an attempt to write it in Arabic had been made. But instead of saying the Islamic State had said the State of Islam and they'd also put in Arabic remaining, and that was believed to be a reference to remaining and expanding, which was the motto being used by Islamic State, and had featured in a lot of their publications and had been the title of one of their publications as well.
Narrator
Another VICPOL member, Tim, joined the JJCTT back in 2014 after working on the night 18 year old Nouman Haydar stabbed the two police members in Endeavour Hills in a vicious knife attack.
Detective Tim
I'd been a detective for a number of years, primarily working the crime command at Victoria Police and I was actually on call on the night that there was an incident in Endeavour Hills where two police members were stabbed and ended up shooting a male. It was a terrorism related offence. I was very much a shock that that would happen in Victoria and particularly to people that you work with or know. And as a result of that I made the decision that I wanted to work in that space.
Narrator
Tim worked Operation Castle Home when Ahmed became a suspect in the mosque fires.
Detective Tim
Ahmed becomes a person of interest in, once an analysis of his movements and contacts is reviewed, that he's potentially got some involvement in the fire.
Narrator
When Ahmed was put under close surveillance, other suspicious behaviour quickly came to light when he began making troubling purchases.
Detective Tim
It was identified that Ahmed had been involved in some suspicious activity, including the purchase of some chemicals which could be used to make explosives.
Narrator
When someone is identified As a potential terror threat, there is no limit to the resources available to the Joint Counterterrorism Team to ensure acts of terror on Australian soil are averted.
Detective Tim
As soon as it was identified that he was potentially trying to purchase materials that could be made into explosives, the JCTT needed to put as many resources as possible into watching him and identifying if he was intending to commit any offences.
Narrator
And then the case against Ahmed began to build. Not only was he a suspect in the mosque fires and had made suspicious purchases, but he and several other men were tracked making middle of the night trips to King Lake.
Detective Tim
A review of his movements is conducted and some suspicious activity up around the King Lake area is identified as well. So one of the tasks that we had at that point was, okay, why are they going up to this area at 12 in the morning? What are they doing up there? Are they testing different materials? Are they firing firearms? Are they blowing up explosives? Obviously it's highly unusual for someone to be going to that area for short periods of time in the middle of the night. So we sent a team up there to conduct a search of the area and some suspicious sort of locations were identified. But the testing that we did at that point was inconclusive because it was an open air environment. We weren't able to 100% determine if they had conducted any test explosions at that point. But all these things started to build a picture that these people were a real concern and we needed to be monitoring them as closely as possible.
Narrator
When members from the Joint Counterterrorism Team put Ahmed under close observation, three other men were seen with him.
Detective Lindsay Hall
We had our capabilities in place to ensure we had good coverage of him. And from there we noted that there were three people that he was particularly close with that he was in regular contact with.
Narrator
The Police identified the three men, all in their early 20s. They too came under the surveillance of the Joint Counterterrorism Team. As the senior investigating officer, Tim was in charge of a multi faceted approach to the investigation of Varmit and the three other men. He had to take into account managing the risk they posed, managing the investigation, and also looking back to gather evidence of what the men had already done.
Detective Tim
Managing the risk is probably the primary consideration. This individual or the syndicate of people are potentially planning an act of terrorism. So we have to put significant resources into making sure that they can't do that. We've got a team investigating things that have already occurred, such as the fire at the mosque, and seeing if we can identify any avenues of inquiry in any way to disrupt the Syndicate by arresting them for something that they've already done. And we're also looking at things like how many other materials have this group purchased? In early December, I think it was Islamic State actually had some propaganda published where they talked about how easy it is to make tatp, which is a highly volatile explosive, but we needed to actually work out how much material have they got and therefore how big an explosive device could they potentially make. And then we've also got to try to have a team working on the investigation moving forward and looking at getting warrants for telephone intercepts, listening devices, tracking devices, optical devices, whatever we can, to monitor these people closely to make sure they can't do anything.
Narrator
During their close monitoring of the four men, the Joint Counterterrorism team intercepted a phone call between Ahmad and one of the other men, telling him they were going into the city.
Detective Tim
Ahmad had said to him, I don't care what you've got on, you need to cancel it. This is more important than anything else. For us, that was really concerning because the assessment was the most important thing for these people is their religious beliefs. And their religious beliefs were very extreme and potentially involved hurting people that didn't hold the same beliefs as them. So at that point, we had very close surveillance coverage on them. We had tactical teams briefed and within very close proximity. And we also utilised a number of cameras and other means to monitor Ahmed and his associates when they travelled into the city.
Narrator
A major incident room had been set up so the team could monitor the movements of the four men remotely as they arrived in the city and headed straight to Melbourne's Federation Square. For AFP Detective Lindsay hall, it was concerning to see the men pointing at some of Melbourne's most iconic landmarks.
Detective Lindsay Hall
It was really worrying to us to see them basically sitting on the steps at Federation Square, motioning towards the cathedral that's just across the road from there and Flinders Street Station, Young and Jackson's hotel on the other corner. And then they're talking in a group and moving around, walking around Federation Square.
Narrator
The Joint Counterterrorism Team monitored the movements of the men from the CCTV cameras overlooking Federation Square. As the four men moved around, Lindsay was conscious of all the other people going about their regular activities.
Detective Lindsay Hall
And what we were able to watch more or less live was the CCTV from Federation Square. And it was the 20th of December when they went there. It was sort of a warm summer's night. There were kids and families everywhere that night.
Narrator
And then one of the men did something to move Operation Castle home. From surveillance to something much more. It suggested these men posed a clear threat to the safety of people in the cbd.
Detective Lindsay Hall
And then quite clearly, one of them made a chopping motion that could only have been like a demonstration of hitting someone with a large knife or a machete. So the way that moved, it became clear to us that it was a reconnaissance exercise in preparation for a terrorist act. It really couldn't have been anything else. So that, taken with everything else we knew about them, really heightened things for us and made us realise that we were facing a real threat of an act of terrorism.
Narrator
In Melbourne, Tim from Vicpole was also in the surveillance room. He too witnessed the chilling chopping motion.
Detective Tim
It was quite obvious that with his right hand swinging or chopping sort of motion to the neck of one of the other members of the group. There was four of them at that point, standing around in a fairly tight circle, talking. There was a slashing or a chopping sort of motion with his right hand to the neck of one of the other people that he was talking to. We obviously interpreted that would be some discussing a knife attack.
Narrator
The footage of the four men milling about in the crowds of Christmas shoppers in Federation Square was confronting. When he was watching, Lindsay had one predominant reaction.
Detective Lindsay Hall
I think the main feeling for me was dread. And you start to wonder how far along they are in terms of their planning. The assumption was that there would be a process of obtaining weapons, potentially making explosives, because that was the indication that we got that there would be explosive devices used and that there would be a build up to that. But then you consider that it was almost Christmas and that would be a prime time to move towards a terrorist act if they were ready to proceed that way.
Narrator
These men were planning a Christmas attack in the heart of Melbourne's cbd. And a conversation picked up by investigators confirmed this. Tim says it also suggested the men planned to make a suicide vest as part of their attack.
Detective Tim
One of them had said, we need to hurry up, Christmas is this Friday, or words to that effect. And the conversation revolved around if they wanted to make an explosive vest, they needed to hurry up and do it and get going. And there was a mention about pooling their money and just going and getting as much as they could.
Narrator
Once the four men had done their reconnaissance of Federation Square, the Joint Counterterrorism team had to be in a position to intervene should the group go back into the city. The problem, of course, was that the law enforcement officers didn't know how far the men were in their planning. They didn't seem to have a huge store of weapons. But experience had taught Lindsey and the team that you didn't need much to perform an act of terrorism. Unsophisticated attacks were becoming more common around the world.
Detective Lindsay Hall
All that you needed for a terrorist attack was basically a knife of some sort of and a mobile phone, so you could form the idea in your head to do something and be doing it within minutes. Once you'd formed the commitment to the exercise. They may not have had much, but they wouldn't have needed much to carry out a really effective terrorist act. Remembering that the effectiveness is not necessarily in the scale, and this could have been quite large scale, but it's more the effect that it has in terrorising the community. That's what terrorism is.
Narrator
Even though the four young men stood out in Federation Square, pointing at landmarks and making chopping motions, no one reported them to authorities. Tim said it was obvious from the surveillance footage that people around them were uncomfortable.
Detective Tim
They were clearly getting some attention from other people that looked either curious or even concerned around potentially what they were discussing. No one actually ever contacted the police or Crime Stoppers or the National Security Hotline, but it was quite obvious that from the camera footage that people were curious or concerned about what they were saying.
Narrator
The day after the Federation Square reconnaissance, Ahmed continued shopping for things he needed for the terrorist attack.
Detective Lindsay Hall
The following day, 21 December, Ahmed was seen going to the Bunning store and he purchased a fairly large supply of detonators for nail guns. These things are kept in a locked safe at the store. They're not out on the shelves or anything like that, so the staff know there's an element of danger attached to them. So Ahmed went in and bought a large number, larger than you would normally buy in one go, and the staff there recognised that that was out of the ordinary. And before the purchase was complete, one of the staff members had made their way out to the car park to follow him back to his car to make a note of the registration number and report it to police, because they could see that it was out of the ordinary and potentially dangerous.
Narrator
Because Ahmed was under close surveillance, as soon as he cleared the store, officers approached the two employees who served him to ask what they'd observed. Tim was impressed with their astute reading of what had just occurred.
Detective Tim
The staff at Bunnings actually recognised that his behavior was suspicious to the point where one of them went out and got his registration. And when we approached them, their intention was to obviously report this activity because they were so concerned by his behaviour. And they didn't believe that what he was buying was for the legitimate purposes. So fantastic observation skills, but also they were trusting their instincts and were prepared to do something about it when they suspected that something was not right.
Narrator
Just a couple of days into Operation Castle Home, there came a point where Joint Counterterrorism officers felt they couldn't guarantee the safety of the community while the four men were on the streets.
Detective Lindsay Hall
When Ahmed was observed going to Bunnings and buying the cartridges for the nail guns, that was the point where any doubt about their intentions to create explosive devices of some sort was completely gone. Taken with what we considered to be the reconnaissance mission the night before into Federation Square. From there, we just went as quickly as we could. We just couldn't guarantee the safety of the community for more than a few days without taking action.
Narrator
With Christmas just days away, Operation Castle Home officers were running out of time. Tim explains that the police command were keen for the overt or arrest phase to begin.
Detective Tim
Christmas was only a number of days away. At that point. We were told, you've got 36 hours to go into resolution. And then the following day, after Ahmed purchased some more materials, that timeline was brought forward and we went into resolution 12 hours earlier than that. So I think effectively 24 hours earlier.
Narrator
It is not enough for the Joint Counterterrorism team to avert an act of terror. They also have to gather enough evidence to charge their suspects with acts in preparation and make a case so that those who do this in Australia face a hefty jail sentence. The combined weight of evidence in Operation Castleholm, along with the chilling video of the men pointing to landmarks in Federation Square, meant it was time to call in the troops.
Detective Lindsay Hall
Once it was reported up that Ahmed had made that purchase at Bunnings, that they'd clearly done a reconnaissance of Federation Square, then it was that call that as soon as possible we would roll out, and it ended up being the next day. There would have been about 500 people deployed on the Resolution Phase of that investigation.
Narrator
Those 500 people were from across the AFP and Victoria Police and included personnel from the Special Operations Group and the Critical Incident Response Team. When there was evidence that the suspects were making explosive devices, these tactical experts were sent in first.
Detective Lindsay Hall
We had forensics members from all over the country. We had Victoria Police members from pretty much all of the inner city commands. A really large majority of the people that work here were deployed on this job for the Resolution Phase.
Narrator
Special Operations Group tactical members captured Ahmed and two of the men in a box manoeuvre while their car was stopped at traffic lights. Surveillance footage showed the car waiting at traffic lights. Then suddenly, other cars raced into the sides, front and back, trapping the young men. The fourth man was arrested in a separate raid on his home. Once all the men were taken into custody, the investigation began in earnest. All their homes were searched and even more evidence was found showing the extent of their acts in preparation to commit an act of terrorism in Melbourne. One of the many aspects that made Operation Castlehome so unusual was that because of the urgent nature of the arrests, a lot of information came to light after the four men were safely behind bars. It wasn't just explosives, which were bad enough, they had also purchased machetes in preparation for the attack on Federation Square.
Detective Lindsay Hall
We didn't know about the machetes until afterwards, after the arrests had been made, so they bought one each. They cost about $50 each, $40, $50 each, I think.
Narrator
The place where one of the men lived had CCTV out the front of it. Peter was able to use the evidence on the camera for the fire investigation too.
Detective Senior Sergeant Peter
He was renting a bungalow at the rear of a house and the owner had CCTV cameras. So him coming and going on the night of the fire, collecting a spray can, which was depicted on footage of him going to a stash of paint, picking up a spray can and then walking back down the driveway and getting in his car. These were ultimately little pieces of the puzzle. So that was really key evidence because it showed him walking up and down his driveways and we were able to time and date stamp when it was that he was doing that. And on the night of the fire where the graffiti was painted, there's footage of him retrieving a spray can essentially from his driveway and then getting back in his car and driving off. And then shortly thereafter, the mosque gets destroyed and there's a male depicted graffiti ing in the footage from the mosque. One occasion he was carrying a machete.
Narrator
When the joint counterterrorism officers watched footage of one of the men carrying the dangerous looking machetes inside from his car, it was another reminder for Lindsay that these could have been used to attack the citizens of Melbourne. In Federation Square, it was visible on.
Detective Lindsay Hall
The CCTV the packaging, which was in the shape of a really big knife, he was taking that out of the car and walking up the driveway with it to put it in the bin. So, yeah, terrifying looking things. And they were recovered and luckily weren't.
Narrator
Used among so many other worrying pieces of evidence. Lindsay and the JCTT also found out that Two of the men had made attempts to get firearms licences, but there were too many hoops to jump through and they couldn't do it in time.
Detective Lindsay Hall
Fortunately, there's a fairly rigorous process to go through to get to that stage. But both of them had downloaded from the Internet the application forms and have moved to the next step, which was contacting the police to get on a firearms handling course. They had made definite steps towards trying to obtain firearms licenses and Armin had searched on the Internet different types of firearms as well for potential purchases.
Narrator
The kinds of acts in preparation that the four young men made were in line with the videos that Islamic State posted on encrypted platforms. The videos encouraged followers to use weapons such as knives and explosive devices, and to record the attack and share the video.
Detective Lindsay Hall
We'd sort of gotten across Facebook and Twitter and the larger social media platforms and been able to inform those companies that their platforms were being used to disseminate this propaganda. They were taking it down as soon as it would go up.
Narrator
Members of Operation Castleholm were allocated suspects to interview. Lindsay interviewed one of the men.
Detective Lindsay Hall
I spent quite a few hours with him that night and into the next morning. So he was again just a normal guy. He was employed as a painter at the time, so he'd been able to maintain regular employment at that. But I have no doubt that if the group had progressed to a terrorist attack, he would have, he would have been involved, he would have joined them.
Narrator
Detective Leading Senior Constable Andy Butler was allocated one of the men to charge and interview. With 30 years of policing under her belt at both state and federal levels, the interview with Ibi, as she calls him, was like nothing she had ever experienced.
Detective Leading Senior Constable Andy Butler
I knew on the day that I would be arresting and interviewing Ibi, it would be a technical arrest because he would have been arrested by SOG and somebody else out at the scene.
Narrator
Even though terror suspects are apprehended by tactical teams. As the official arresting officer, Andy traveled from the arrest location with him in the backseat of the car. The 22 year old young man was.
Detective Leading Senior Constable Andy Butler
Personable when I met him and obviously I'd spent a fair bit of time prior to interview because I was with him, we were driving in and things like that. He was a really affable guy who family. His wife had just had a baby. He loved his baby, he loved his wife, he was going to school. It's just the incongruity of what an average guy that he seemed to be sort of knowing in your head that he was part of this possible planning for These terrible things that we thought that were going to happen.
Narrator
At the AFP offices, Ibbie was put into an interview room. While he had been affable on the car ride into town, Andy had no idea whether he would open up in the interview or no comment his way through. It could go either way. Once they all settled into their places, Andy and her partner had to begin by getting a baseline for his degree of honesty. They started with questions about his family and right from the start of the interview, Andy felt he wasn't giving a full and frank account.
Detective Leading Senior Constable Andy Butler
I didn't think he was telling us everything. I certainly believed he was lying at the start of that because obviously we had an amount of knowledge about what had gone on and what his sort of beliefs were.
Narrator
Andy wanted to understand the origins of Ibbe's radicalisation.
Detective Leading Senior Constable Andy Butler
He obviously had an idea of the evidence that we would have and he just essentially said, these are my beliefs. He seemed quite proud about telling us about these beliefs and, you know, and how he felt about it and how he felt about what was going on, how his people were being treated in the Islamic State.
Narrator
Andy had a lot of theoretical knowledge of radicalisation, but still found it fascinating to see a fervent young man embody the process. Even though he was Melbourne born and bred, his reference to what was being done to his people demonstrated he had realigned his affinities so that the people he grew up with were now the enemy.
Detective Leading Senior Constable Andy Butler
You're thinking, what makes people become radicalised? It was very interesting. A lot of ways to know exactly what his thought process was and exactly what they did, because we do a lot of reading about it and a lot of learning about it and counterterrorism, but to sort of be sitting there in an interview doing a real life experience was sort of huge when you think about it, after sort of life changing, really.
Narrator
He believed that Sharia law should be instituted in Australia so that all the people would fall under a contract to live among Muslims in peace. It was his belief that whoever did not sign the contract should leave the country or be executed. The AFP team were granted an extension to carry the interview over to the next day. It wasn't long before Ibbie told them that he didn't want them to ask him any more questions, rather he wanted to tell the story himself. He talked about wanting to make his mark. Andy was intrigued that he had decided to make his mark on Australian soil rather than in becoming a fighter overseas.
Detective Leading Senior Constable Andy Butler
They didn't have passports, so they had not done that. I suppose you can't even really say he was frustrated by not being able to travel because he'd never tried to get a passport or certainly didn't have a passport to travel out. And he'd decided that instead of going to fight with Islamic State, that he was going to do something on Australian soil and certainly wanted it to be big and a lot of people dying so that Australians would learn their lesson.
Narrator
It was disturbing for Andy to hear the casual way Ibbie talked about blowing up Australians and killing police officers, including her. The interview required all of her concentration. It wasn't until afterwards that the chilling discussion hit home.
Detective Leading Senior Constable Andy Butler
He was laughing about that while he was telling us all about it. And he was going to kill police officers and get their guns so that they could kill as many people as possible. Just no remorse in terms of the taking of life, or certainly the talking about the taking of life. I didn't feel it at the time. I didn't feel really disturbed at the time, but certainly after the interview I felt very disturbed. You know, it was quite emotional.
Narrator
What does Andy think of their motivation?
Detective Leading Senior Constable Andy Butler
They just wanted people to fear as limits state, didn't they? I think that they were aware that people were certainly frightened of them. But that's the point of terrorism, is to make people as frightened as possible, wasn't it?
Narrator
After the arrests, digital forensic officers discovered violent Islamic State propaganda. While ultimately the trial judge would decide what could be shown in court and what wouldn't be shown, Lindsay wanted the jury to at least see some of it because its incredible violence showed how the men were desensitising themselves to perform similar acts of violence.
Detective Lindsay Hall
When we made the arrests and executed search warrants, the propaganda that they had often is intense violence. And we wanted to play it in the prosecution at court, some of it at least, to give the jury a taste of what these people had deliberately exposed themselves to. And it has the purpose of desensitising themselves to the violence. And it comes with the message from Islamic State that you might find it unpleasant, might not be what you'd normally do, but it's the obligation of the supporters of Islamic State around the world to carry out acts of terrorism.
Narrator
There were other disturbing materials that the AFP found. There were Islamic State videos that suggested places to target around Melbourne.
Detective Lindsay Hall
That was something else that we learned afterwards was a publication from Islamic State, the usual messages about coming to Syria and joining or if you weren't able to carry out attacks at home. And it specifically mentioned and had photos of Melbourne Airport and St Paul's Cathedral, which is when you trace it back to what these guys were actually intending to do. They were reading from that material.
Narrator
Jobs like Operation Castleholm give the joint counter terrorism officers a chance to see how young men like Ahmed and his three co conspirators were radicalised. An examination of the propaganda showed it was designed to appeal to a broad range of young men.
Detective Lindsay Hall
The propaganda at that time had a broad focus. Some of it was about going to Islamic State and living under their conditions, living as a community with families and so forth, with the purest Islamic jurisprudence, I guess, that you could have in the world at that time. Other aspects of it were about the suffering that Muslims were undergoing in other places. Another aspect was the actual battlefield, trying to draw people to go as fighters and get involved in that side of things. So in that way they attracted a broad range of people. And we're aware of some people that have gone overseas and worked in the medical field in places under Islamic State control. A reasonable number of women have gone and raised families over there, married fighters. And a number of men have gone over as fighters themselves and become married since they've been over there or taken their families over with the hope of forming this community under Islamic State control. And I think a lot of that sort of propaganda glossed over the atrocities that were committed in the name of Islamic State.
Narrator
Both Lindsay and Megan were surprised at the quality and reach of the propaganda materials and its effect on people born in Australia.
Detective Lindsay Hall
We used to see these incredibly high quality videos. It looked like it was professionally produced. They were their own sort of command within the Islamic State governance structure that was responsible for producing this stuff.
Detective Megan
They were producing some really high quality, high level publications which they were translating into all languages. They appeared to have a wide reach and that they had essentially managed to reach out to people who had been, some of them had been born here in Melbourne or born here in Australia and influenced them to carry out attacks in Australia, if not travel. So just their ability to put forward high level publications and high level propaganda that convinced Australian born residents that that was a good idea. In hindsight it's a little bit unbelievable that it happened, but that's what they were doing. Melbourne featured in one of their videos. They are high quality, incredibly disturbing and distressing, but they're high quality publications.
Narrator
It was clear to the investigators that the propaganda had the desired effect on ibbe. He used it to justify the actions he'd been planning to take.
Detective Lindsay Hall
In his mind that the Australian government was participating in military action in Islamic countries that were resulting in the deaths of Muslims. So therefore he was justified in carrying out acts of murder here. That was perfectly acceptable to him. In his mind at that time, that was what he was entitled to do and in fact obligated to do.
Narrator
When it came to trial, Ibbie pleaded guilty. It was no surprise to the officers of Operation Castleholm. From the time he was arrested, he had been willing to talk about what he had done.
Detective Lindsay Hall
I think he formed in his mind that we had a very good knowledge of what they'd been up to. We did know a fair bit, but he thought we knew everything. So his strategy was basically that if he told us everything, it would make it easier on him and his co offenders. So that's what he did. And he told us that he had established himself as the leader of the group, gathered the others around him to carry out a terrorist attack in the centre of Melbourne to bring as much terror to the community as he could.
Narrator
Lindsay spoke to Wibby in jail. It was haunting to see the polite young man describe the acts of terror he had wanted to commit.
Detective Lindsay Hall
It was in the middle of the HALT process, probably 18 months or longer down the track. So we visited him in prison and we got him to go through his version of events again. He's quite well spoken, he was polite. Something I think of often is we had to stop for him to have his lunch at one stage, and when he came back, he might have eaten too quickly or whatever and he sort of belched a bit and excused himself. But then before that, he'd been telling us about his plans to get a group together and carry out a mass casualty event in Federation Square at Christmas.
Narrator
When it came time for the men to go to trial, Ibbie was the only one to enter a plea of guilty. Detective Leading Senior Constable Andy Butler saw this as his way of following his beliefs to the end.
Detective Leading Senior Constable Andy Butler
At the end of the day, Ibi was someone who had his beliefs and was prepared to follow through with those beliefs and then did an interview, whereas he believed in those beliefs and that's why he was going to do it. And then he plead guilty at court, saying he was going to do it.
Narrator
Ibbie's guilty plea couldn't be reported in the media because it may have affected the outcome of the other three on trial.
Detective Lindsay Hall
He pleaded guilty and the other three contested the charges, so they went to a full trial. So his plea of guilty meant that because he hadn't been sentenced yet and a judge was going to have to preside over that, the fact of his guilty plea couldn't be communicated to the jury. In the trial of the other three, because that might influence them to think, well, if he's guilty, the rest of them are too. In the end, he gave evidence in.
Narrator
The trial, With Ibbe pleading guilty. Along with the wealth of evidence found by the jctt, the case against the others was strong. All four men were eventually found guilty for their involvement in the Federation Square terror police plot. And for Ahmed and one of the others engaging in a terrorist attack. For the Mos Garson, the court was filled with friends and relatives of the men. Their reaction was like nothing detectives Megan and Peter had ever seen before.
Detective Megan
When the jury came back with a guilty verdict, the accused and some family members had an enormous outburst in the courts. I'd never seen anything like it.
Detective Senior Sergeant Peter
It was a confronting experience, even for us as police. You're sitting in a very confined Supreme Court courtroom with pretty much minimal security between the lawyers and the accused and the police and the jurors. Their families were very angry, screaming and wailing and that sort of stuff.
Detective Megan
One of them accused the jury of destroying their life and separating them from their parents and all that kind of stuff. The outburst was something I'd never seen before, and I'd never actually seen the jury have to be removed either for possible safety reasons. That was quite unusual. And, yeah, confronting thing. To see jury members who do this because they're obligated to do it, and then for them to, I guess, have that experience would have been incredibly distressing for them, I'd imagine. And you can see some of them were very distressed by it.
Narrator
The sentencing hearing would be held the following year, in 2019, after the outbursts in the court following the guilty verdict. Peter remembers a different courtroom setup for the sentencing.
Detective Senior Sergeant Peter
The sentencing and the plea was at a later date. I feel like potentially they'd kept the main floor of the court where the accused were to a bare minimum, and then everyone else sort of had to be up in the gallery, which meant you couldn't access the jurors or the police or the lawyers that were down in the courtroom.
Narrator
The entire legal process put several years between the four men and their planning a terrorist attack in the heart of Melbourne. Lindsay remembers them saying it had given them time to reflect their evidence in.
Detective Lindsay Hall
Their sentencing hearing was the first chance we got to really hear them speak about their motivations and what their intentions were, that sort of thing. So they admitted to the charges after they'd been found guilty by a jury. And part of their evidence was that despite the fact that they'd pleaded guilty to acts in preparation for this terrorist act that was motivated by support for Islamic State. Their position some years down the track was that they had renounced that support for Islamic State and they no longer agreed that a terrorist attack was something that their ideology supported. So they hadn't undergone any formal de radicalisation processes, but that was their evidence that they were no longer subject to that ideology or they were no longer of that belief.
Narrator
At the sentencing hearing, Ahmed and his co accused were forthcoming about their trips to the King Lake area, which the JCTT always suspected were for testing improvised explosive devices.
Detective Lindsay Hall
We were aware of the trips that they'd made and they confirmed that in their sentencing hearings that they'd gone up there to test explosive devices. So again, while we suspected that that was what they were doing, constructing and testing that that was the process that they were on, we didn't really know how far advanced they were. But I guess every time you test an explosive device and it doesn't work, then you know something more for the next time you try and you're bound to be closer to being successful.
Narrator
For the attack on the mosque and their acts in preparation of an attack on Federation Square, Ahmad and one of his co accused both received 38 years with a non parole period of 28 and a half years. One of the other men was sentenced to 22 years imprisonment with a non parole period of 16 years. Ibbie was sentenced to 24 years imprisonment with a non parole period Of 20 years. For Megan who had personally charged one of the offenders, it was the biggest sentence of anyone she'd ever put before the court.
Detective Megan
That's absolutely the biggest sentence I've ever received for any of my charges. It was unbelievable. It was higher than I was anticipating. It was such a good way to resolve all the work cause this was 2019 that all this got finalised. We'd been working on this since 16th of December 2016, pretty much non stop. So it'd been a huge amount of work and huge amount of resources go into this. So it was really satisfying that it all came together.
Narrator
For Lindsay hall, the sentences reflect the seriousness of the attack that would have been carried out had the joint counterterrorism team not stopped it.
Detective Lindsay Hall
The sentences that were handed down reflect the evidence that they were close, potentially within days of carrying out a terrorist attack that had the potential to have multiple people killed if they went through with it. The development of the legal system in Victoria over time that the community doesn't have any appetite for that sort of act to be carried out. It acknowledges the extent of the threat from external influences like Islamic State on the community here and how insidious that can be. So those sentences reflect all of those things. It was one of those times where you think this adequately reflects what was potentially going to happen, what we saw, and it feels like the work that we put into it was vindicated.
Narrator
So what lessons can we learn from Operation Castle Home? When Ahmed went into the Bunnings store, the two employees serving him became suspicious, both with the way he was acting and the items he purchased. They followed him out to his car and took down his registration so they could report him. Their information was important to police, but while some bystanders in Federation Square were clearly uncomfortable with the men pointing and making chopping motions, no one reported the behaviour to police. If you witness behaviour like this, that makes you uncomfortable, Tim says, the best thing you can do is report it.
Detective Tim
If you see something that you suspect isn't right, there's a reason for that and you can report that via the National Security Hotline. All Crime Stoppers, it's completely anonymous and that information will be provided to the relevant agencies and they will investigate it.
Narrator
In the aftermath of the court hearings and sentencing, Tim regards Operation Castle Home as one of his most satisfying cases.
Detective Tim
It's probably the most satisfying area I've worked in because I think everyone in the community actually appreciates the fact that you're just trying to keep them safe. So it's very rewarding place to work.
Narrator
After the fast arrest and then the years it took from trial to conviction to sentencing, Lindsay and the joint counterterrorism team were pleased with the success of Operation Castle Home.
Detective Lindsay Hall
It's not something you can express at court. You have to be obviously respectful there and respectful of these people's families and so forth and the community. But, yeah, behind closed doors it was. It was a great atmosphere, great to be part of.
Narrator
But along with the joy of a good sentence and the community being protected by those who wanted to cause it harm, Lindsay is always conscious of the toll this took on the families of the young men. Despite their outburst in court, the families were deeply affected by what happened.
Detective Lindsay Hall
We saw quite a few of their family members come to court throughout the trial and so forth. And it was obvious that those families never be the same again. There are children growing up with their parents in prison now. Marriages that have been broken up by elderly people who relied on these people for a certain amount of care no longer have that. It's a terrible shame for the families involved. Some of them would have had some idea about the level of the radicalisation but the sum of it is that the families that have really been pulled apart by what happened.
Narrator
Despite the excellent result in Operation Castle Home Detective Leading Senior Constable Andy Butler knows that there are still things to worry about at the end of the day.
Detective Leading Senior Constable Andy Butler
We got a good result in terms of court saving the Victorian people and locking up for bad guys because I think that especially in counterterrorism you go home every night thinking, have you done enough?
Narrator
If you are interested in learning more about the AFP's counter terrorism capability, including how Lindsey and Andy played their part in foiling this Melbourne CBD terror plot, visit afp.govau the AFP is all about protecting Australians and Australia's way of life. Stay tuned for our next instalment of Crime Interrupted as we take you behind the scenes of how the AFP took down a childcare fraud network costing Australian taxpayers millions of dollars. The episode will be available on May 12th. Wherever you get your podcast.
Detective Lindsay Hall
SA.
Podcast: Crime Interrupted
Host/Author: Casefile Presents
Episode: Operation Castleholm
Release Date: April 13, 2023
Operation Castleholm delves into one of the AFP's most critical undertakings to thwart a potential terrorist attack in Melbourne. The episode provides an in-depth look at the meticulous investigations, collaborative tactics, and unwavering perseverance of the Joint Counterterrorism Team (JCTT).
Narrator sets the stage by highlighting the AFP's role in combating serious crimes, emphasizing their international reach and dedication to minimizing victim impact while disrupting criminal activities. The tone underscores the gravity of terrorism threats within Australia, setting up the narrative for Operation Castleholm.
The backdrop of Operation Castleholm is set against a period of escalating terrorist activities in Australia during 2014-2016. Following a fatwa by the Islamic State (ISIS) leader in September 2014, urging followers in Australia to commit acts of terror, several incidents emerged:
Endeavour Hills Attack (September 20, 2014): Nouman Hayder, an 18-year-old, stabbed two counterterrorism officers outside a police station, highlighting the immediacy and severity of the threat.
Detective Leading Senior Constable Lindsay Hall (00:03:47): "Counterterrorism had been clearly identified by the AFP Commissioner and the government as being a priority and a point of exposure to risk."
Lindt Cafe Siege (December 15, 2014): Man Monis took hostages at a Sydney cafe, resulting in tragic fatalities, further cementing the need for robust counterterrorism measures.
Detective Lindsay Hall reflects on his transition to the JCTT amidst these threats, acknowledging his limited prior knowledge of terrorism until comprehensive training and on-the-ground experiences deepened his understanding.
Detective Lindsay Hall (00:04:21): "I sort of developed that once I got in there with the training that the AFP provides and just seeing it all unfold through experience on the job."
Operation Castleholm was triggered by suspicious activities surrounding Ahmed, a young man linked to attempts of setting fire to a mosque in Fawkner. Initially, Victoria Police investigated mosque arson attacks, attributing motives to internal disputes over mosque ownership.
Detective Senior Sergeant Peter (00:09:48) explains the initial investigations:
"The main focus related to the various factions on that board, and that was perceived as the motive for the arson attacks."
However, as Operation Castleholm unfolded, it became evident that the motives were rooted in extremist ideologies rather than internal conflicts.
CCTV Evidence: Despite fires destroying much of the mosque's CCTV, investigators recovered critical footage showing three suspects involved in the arson, providing essential clues despite unclear images.
Detective Megan (00:12:02): "So that was our first, I guess, big breakthrough... we had three suspects and we had a bit of a method of how they'd got into the building and how exactly it had occurred."
As Ahmed came under close surveillance, additional suspicious behaviors emerged:
Suspicious Purchases: Ahmed's acquisition of chemicals potentially usable as explosives raised red flags.
Detective Tim (00:15:46): "It was identified that Ahmed had been involved in some suspicious activity, including the purchase of some chemicals which could be used to make explosives."
Midnight Trips to King Lake: Ahmed and three other men made late-night visits to King Lake, raising concerns of explosive testing.
Detective Tim (00:16:39): "We sent a team up there to conduct a search of the area... building a picture that these people were a real concern."
On December 20, 2016, surveillance captured Ahmed and three associates at Melbourne's Federation Square, behaving suspiciously amid the bustling Christmas season:
Chopping Motions: One individual displayed movements suggestive of preparing for a knife or machete attack.
Detective Lindsay Hall (00:21:51): "He made a chopping motion that could only have been like a demonstration of hitting someone with a large knife or a machete."
Planning Conversations: Intercepted communications indicated the men were preparing for a Christmas attack, including discussions about creating suicide vests and pooling resources.
Detective Tim (00:23:59): "They needed to hurry up and do it and get going... making a suicide vest as part of their attack."
The JCTT's rapid response was crucial. With Christmas approaching, the team mobilized approximately 500 officers, including Tactical Experts from the Special Operations Group and the Critical Incident Response Team, to execute a coordinated resolution phase.
The decisive moves by law enforcement led to the apprehension of Ahmed and three others:
Tactical Arrests: Utilizing a box maneuver at traffic lights effectively immobilized the suspects, while the fourth was captured in a separate home raid.
Detective Lindsay Hall (00:30:06): "500 people were deployed on the Resolution Phase of that investigation."
Discovery of Machetes: Post-arrest searches revealed machetes and additional evidence of planned violence, reinforcing the severity of their intentions.
Detective Lindsay Hall (00:32:58): "They were carrying the dangerous looking machetes... recovered and luckily weren't used."
Attempted Firearm Acquisitions: Two men had endeavored to obtain firearms licenses, indicating a broader scope of planned violence.
Detective Lindsay Hall (00:33:46): "They had made definite steps towards trying to obtain firearms licenses... searched on the Internet different types of firearms."
Interviews with the suspects provided deep insights into their motivations and the radicalization process:
Ibi's Interview: Detective Andy Butler recounts the unsettling experience of interrogating Ibi, who displayed a stark contrast between his normal demeanor and extremist intentions.
Detective Andy Butler (00:35:33): "He was a really affable guy who had a baby... just the incongruity of what an average guy that he seemed to be..."
Radical Ideologies: The suspects believed in imposing Sharia law in Australia, with violent enforcement against non-compliant individuals.
Detective Andy Butler (00:37:27): "He was laughing about... killing police officers and get their guns so that they could kill as many people as possible."
The legal proceedings underscored the complexity and emotional weight of the case:
Guilty Plea: Ahmed was the first to plead guilty, streamlining the prosecution against his co-conspirators.
Detective Lindsay Hall (00:46:07): "He thought we knew everything. So his strategy was basically that if he told us everything, it would make it easier on him and his co-offenders."
Jury Verdicts: All four men were found guilty, with sentences reflecting the potential scale of their planned attacks.
Detective Megan (00:53:10): "That's absolutely the biggest sentence I've ever received for any of my charges."
Impact on Families: The case had profound effects on the families involved, highlighting the broader repercussions of terrorism beyond the immediate victims.
Detective Lindsay Hall (00:56:44): "Families were deeply affected... children growing up with their parents in prison."
Operation Castleholm serves as a critical reminder of the importance of community awareness and proactive reporting:
Community Reporting: While vigilant store employees played a pivotal role in Ahmed's arrest, bystanders at Federation Square did not report suspicious behaviors. The episode emphasizes the need for public engagement in national security.
Detective Tim (00:55:18): "If you see something that you suspect isn't right, there's a reason for that and you can report that via the National Security Hotline."
AFP's Reflection: The success of Operation Castleholm is viewed as a testament to the AFP and Victoria Police's commitment to safeguarding the community, though it also acknowledges the emotional toll on all parties involved.
Detective Lindsay Hall (00:56:11): "It was a great atmosphere, great to be part of."
Operation Castleholm exemplifies the intricate and relentless efforts of the AFP's Joint Counterterrorism Team in identifying, surveilling, and ultimately neutralizing a potent terrorist threat. The episode underscores the critical role of interagency collaboration, community vigilance, and the profound personal and societal impacts of combating terrorism.
For more insights into the AFP's counterterrorism capabilities and future operations, visit afp.gov.au. Stay tuned for the next episode of Crime Interrupted, releasing on May 12th, which will explore the AFP's efforts in dismantling a large-scale childcare fraud network.
Notable Quotes:
Detective Lindsay Hall (00:03:47): "Counterterrorism had been clearly identified by the AFP Commissioner and the government as being a priority and a point of exposure to risk."
Detective Tim (00:15:46): "It was identified that Ahmed had been involved in some suspicious activity, including the purchase of some chemicals which could be used to make explosives."
Detective Andy Butler (00:37:27): "He was laughing about... killing police officers and get their guns so that they could kill as many people as possible."
Detective Tim (00:55:18): "If you see something that you suspect isn't right, there's a reason for that and you can report that via the National Security Hotline."
Disclaimer: Operation Castleholm recounts real events and may contain disturbing content. Listener discretion is advised.