Mansir Muhammed
Applied research. Open to collaborators.
Data-Driven Ransom Economies in Northwest Nigeria
The Northwest Nigerian insecurity crisis persists not as a chaotic surge of violence, but as a calculated financial apparatus driven by the systematic extraction of ransom. Abductions function as a commercial industry where digital documentation by localized observers exposes a rigid, predictable pattern of extortion, armed engagement, and state-level security failure. The violence operates as a self-sustaining ecosystem fueled by the conversion of civilian assets into illicit capital. Raw reporting from independent citizen journalists provides the backbone of this reality, mapping the flow of funds and naming the power structures behind the attacks. These records transform abstract instability into concrete data points, connecting gold extraction and weapons procurement to specific armed groups. The consistency of these reports from early 2025 through early 2026 demonstrates that the conflict adheres to a functional logic rather than random brutality. Each ransom payment record functions as a line item in a broader ledger of territorial control and operational expansion, pulling the focus away from the vague rhetoric of civil unrest and toward the mechanics of a criminal state-within-a-state. While this granular documentation exposes the operational backbone of the kidnappers, the reliance on social media logs introduces a persistent friction. The sheer volume of information captures the financial and tactical realities of the actors, yet it leaves the actual efficacy of state intervention largely obscured by competing narratives and shifting regional power dynamics. The precision of the reporting highlights the limitations of official security responses, revealing an uncomfortable dependency where the observers become the primary source of operational intelligence in the absence of institutional transparency. Can this citizen-led data structure catalyze a shift in how state entities target the financial architecture of these groups, or does the visibility of these transactions merely harden the resolve of the perpetrators? The path forward hinges on whether technical intelligence regarding the ransom economy dictates defensive strategy or continues to track the erosion of regional security. The systematic extraction of ransom in Northwest Nigeria increasingly exploits both mobile money platforms and traditional banking channels. Ransom payments, estimated at billions of naira annually, generate irregular financial flows within the region's formal and informal economies. Criminal groups initially relied on fintech platforms before shifting to conventional bank accounts for receiving ransom, exposing gaps in transaction monitoring and regulatory compliance. This pattern of financial movement, including the illicit diversion of airtime and mobile data from telecommunication companies, indicates a sophisticated conversion of civilian assets into liquid capital that can be laundered through various vectors. The Nigerian Financial Intelligence Unit acknowledges kidnapping for ransom as a direct precursor to money laundering, thereby undermining the integrity of national financial systems. This financial integration masks the origins of criminal proceeds, identifying significant vectors for illicit capital transfer. The Nigerian federal government actively confronts this financial apparatus by identifying and sanctioning individuals and entities implicated in terror financing. As of April 2026, a list of 48 individuals and 12 entities, including figures like Abdulsamat Ohida and Tukur Mamu, faces asset freezes and travel restrictions under this national framework. These domestic measures frequently align with United Nations Security Council resolutions, extending the reach of international watchlists to disrupt funding networks. Further solidifying this approach, the Nigerian government formally designated bandits as terrorists in January 2022, providing a legal basis for intensified sanctions against perpetrators and their logistical supporters. Such actions parallel broader international efforts, including US Treasury sanctions targeting militant leaders in the Sahel involved in hostage-taking, some of whom are already listed on UN watchlists.
The Consolidation of the Northwest Extraction Economy
Northwest Nigeria is hardening into a permanent extraction zone where banditry operates as a self-sustaining fiscal system. The state authority retreats into fragmented pockets as non-state actors dictate the terms of rural life through a cycle of totalizing violence. Armed groups have transformed erratic criminality into a structured economy of mass abductions and systematic extortion. They impose illegal taxation on entire towns while sabotaging agricultural cycles during critical harvest windows to maximize regional dependence. Peace agreements serve only as tactical respites, collapsing as soon as groups rearm via gold trafficking circuits. These militias now operate with the permanence of an administrative layer, holding populations captive while utilizing partial ransom releases to maintain a constant stream of revenue and psychological control. This predatory dominance faces a friction point between the military’s reactive posture and the militants' persistent presence. Occasional state interventions fail to achieve long-term area denial, leaving rural populations perpetually vulnerable to immediate, retaliatory incursions. The violence is not a temporary breakdown of order but a durable shift toward a privatized territorial control that renders traditional governance obsolete. The collapse of local agriculture into this conflict economy signals a deeper transition from raiding toward long-term governance by extortion. Will this shift toward a permanent bandit state force the eventual formalization of informal taxation zones as the primary method of political survival for local communities? If state security remains intermittent, what prevents this regional model from evolving into a standardized form of warlordism across the broader Sahelian borderlands?
Noting data on kidnapping in the northwest based on two security specialists on social media (Jan2025–Mar2026)
Northwest Nigeria Insecurity Crisis: A Systematic Analysis of Abductions, Ransoms, Armed Attacks, and State Response OPEN-SOURCE INTELLIGENCE REPORT Compiled from 15 months of real-time social media documentation by two independent Nigerian reporters on X (formerly Twitter) Period January 2025 – March 2026 Sources @DanKatsina50 · @ZagazOlaMakama Classification Open Source Version 1.0 Table of Contents Methodology and Sources Executive Overview The Ransom Economy: A Financial Breakdown Incident Register: Documented Attacks (Jan 2025 – Mar 2026) Case Files: Abductions in Detail The Conflict Economy: Gold, Guns, and Governance Armed Group Profiles and Power Structures Military and Security Force Operations Community Resistance and Civilian Response Geographic Spread: Beyond the Northwest Terrorism Financing: Designated Entities Operational Security Failures Pattern Analysis and Structural Observations Named Individuals Registry Source Notes and Data Limitations 1. Methodology and Sources This report is constructed entirely from publicly available posts on X (formerly Twitter) by two independent Nigerian reporters who documented the Northwest insecurity crisis in real time between January 2025 and March 2026. Primary Sources @DanKatsina50 (known as "Bakatsine") — A citizen journalist based in Northwest Nigeria. His posts function as raw, emotional field reporting: breaking news alerts, community testimony, ransom payment records, death toll updates, and direct appeals to government officials. He frequently tags state governors (Governor Dikko Radda of Katsina, Governor Dauda Lawal of Zamfara, Governor Ahmed Aliyu of Sokoto) in his posts. His coverage is primarily Northwest-focused but includes reposts from other reporters covering Borno, Benue, Abuja, and the Southwest. His editorial commentary provides a citizen-level analysis of government failure, ransom economics, and the collapse of peace agreements. @ZagazOlaMakama (Zagazola Makama) — A professional OSINT and security reporter with access to military operational details. His posts include unit designations, operation names, precise timestamps, weapon specifics, casualty counts, and after-action reporting. He is the source for all military operation entries in this document, including Operation Hadin Kai, Operation Desert Sanity V, Operation Fansan Yanma, and the DSS-HYBRID joint operations. He also provides fact-checking (e.g., explicitly debunking a "173 bandits killed" claim) and analytical commentary on operational security failures. Secondary Sources (Reposted by Primary Reporters) @DanKatsina50 regularly reposts content from: @SavvyRinu (live conflict footage from Borno), @SaharaReporters (investigative reporting), @instablog9ja (breaking news aggregation), @ARISEtv (broadcast journalism), @OurFavOnlineDoc (civilian testimony video), @CaptJamyl (security advocacy), @mobilisingniger (OSINT tracking), @sadiqGsadiq (community updates), @thesunnigeria (print journalism), and @NigeriaStories. Data Handling Every figure, name, date, location, and ransom amount in this report is drawn directly from the source posts. Where a discrepancy exists between government claims and on-ground reporting (e.g., the Kwoza captive count: government said ~100, Boko Haram video showed 300+), both figures are presented. Gaps in reporting are noted where relevant. 2. Executive Overview Between January 2025 and March 2026, the posts of @DanKatsina50 and @ZagazOlaMakama documented a security crisis across Northwest Nigeria that is systemic, escalating, and structured. This is not random violence — it operates as an organized conflict economy with predictable patterns, identifiable actors, traceable financial flows, and measurable human costs. Key Figures Metric Value Killed in Bukkuyum LGA alone 1,065+ Ransoms paid (Bukkuyum LGA) ₦2.9 Billion+ States affected 11+ Captives shown in single video (Kwoza) 300+ The reporting period captures a crisis defined by five structural features: Industrialized ransom extraction. Bandits have moved from ad hoc robbery to structured hostage economics — imposing taxes, setting deadlines, demanding motorcycles (logistics assets), and increasingly demanding non-monetary payments (virgins, drugs) in the Southwest. Collapse of peace agreements. Multiple peace deals were signed and violated within days or weeks. Communities in Bakori, Kankara, Na'alma, and Makera all reported renewed attacks immediately following formal peace accords. Conflict economy funded by extractive industries. Illegal gold mining in Zamfara generates ₦200–300 million weekly for a single bandit commander. Bureau De Change operators and trading firms facilitate financial flows designated by the Federal Government as terrorism financing. Expansion beyond the Northwest. The reporting period shows incidents in Kwara, Ondo, Ekiti, Ebonyi, Benue, Kogi, Abuja, and Borno — the crisis is nationwide. Intermittent but real security force successes. Troop operations neutralized key commanders (Kachalla Yellow Danbokolo), cleared Sambisa Forest enclaves, intercepted ransoms, and rescued hostages — demonstrating capacity that is not consistently applied. 3. The Ransom Economy: A Financial Breakdown The single most consistently documented feature of the crisis is the ransom system. Every incident involving abduction follows a recognizable pattern: capture, demand, negotiation (often via phone), payment, and — increasingly — failure to release or escalation of demands after payment. 3.1 Documented Ransom Payments and Demands Location Amount Type Hostages Outcome Bukkuyum LGA, Zamfara ₦2.9 Billion Cumulative ransoms 1,065+ killed LGA chairman's public testimony; single LGA total Hon. Niworo, Niger State ₦30M paid + ₦150M demanded Individual ransom 1 (6 months captivity) Victim beaten, tortured, ill; ₦150M additional demanded; no govt assistance Ibeto, Magama LGA, Niger ₦150M demanded Community ransom 30 abducted; 17 remaining 54 days captivity; no visible government effort NYSC Member Abba, Katsina ₦10M + 2 motorcycles Individual ransom 1 Communication cut after payment; demand escalated to 2 more motorcycles; family held funeral prayer; victim later confirmed alive Dinawa, Wurno LGA, Sokoto ₦10M + 2 motorcycles Community ransom 14 abducted Only 4 released; 1 boy killed; 10 remain captive after 6 weeks Kwara Villagers ₦40M Community ransom 9 abducted in 2025 Released in 2026 after payment Bilbis, Tsafe LGA, Zamfara ₦30M levy Community tax Entire town Curfew imposed; residents ordered indoors until payment; hometown of Senator Ikira Aliyu Bilbis Yabo LGA, Sokoto ₦15M "tax" Community tax Entire community Threat to destroy farms and crops if unpaid Yargoje, Kankara LGA, Katsina ₦50M levy Community levy Surrounding communities Imposed by Mustapha Babaro's gang Dukku Forest, Niger State ₦20M (intercepted) Ransom payment 3 rescued Troops intercepted before delivery; 2 victims were family members carrying the ransom Unguwar Zakara, Katsina ₦10M demand Community extortion Threat of attack Demanded by Haruna Dandan Nabaruma Ruwan Dawa, Gusau LGA, Zamfara ₦8M Community ransom Men and women Women freed; men brutally executed after payment Mariga LGA, Niger State ₦8M (est.) Individual ransom 3 Qur'an memorizers Released after 3+ weeks following payment 3.2 Structural Analysis of the Ransom System Three patterns emerge from the documented financial data: Pattern 1: Payment does not guarantee release. In Dinawa, ₦10 million and two motorcycles were paid — only 4 of 14 hostages returned, and a boy was killed. In the case of NYSC member Abba, ₦10 million was paid and the abductors cut all communication. In Ruwan Dawa, ₦8 million was paid and the women were freed but the men were executed. As @DanKatsina50 wrote: "They are no longer releasing people after collecting ransom." Pattern 2: Demands escalate after initial payment. Hon. Niworo's family paid ₦30 million; the kidnappers demanded ₦150 million more. Abba's abductors received ₦10 million; they demanded two additional motorcycles. This creates a debt trap: families liquidate assets for the first payment, then face demands they cannot meet. Pattern 3: Community-level taxation is replacing individual ransom. The imposition of ₦30 million on Bilbis, ₦15 million on Yabo, and ₦50 million on Yargoje represents a shift from targeting individuals to taxing entire communities — functioning as a parallel governance structure enforced by violence. In Bilbis, the bandits imposed a curfew alongside the levy, ordering residents indoors until payment was made. KEY FINDING: The ₦2.9 billion reported by the Bukkuyum LGA chairman represents ransoms paid within a single local government area. Nigeria has 774 LGAs. If even a fraction of the affected LGAs in Zamfara, Katsina, Sokoto, Kaduna, and Niger States have comparable figures, the national ransom economy likely runs into tens of billions of naira annually. 4. Incident Register: Documented Attacks (Jan 2025 – Mar 2026) The following table contains every distinct attack incident documented by the two primary sources during the reporting period. Incidents are listed in reverse chronological order. This register includes only attack/abduction events — military operations, arrests, and community resistance events are documented in their respective sections. Date Location Killed Abducted Details 08 Mar 2026 Mallamawar Yari, Rabah LGA, Sokoto Several Many Bandits disguised in women's hijabs; ambush attack 07 Mar 2026 Pali, Alkaleri LGA, Bauchi 1 (vigilante) 2 children Vigilante Yusuf Momo killed; children of Alhaji Manu Pali taken; goods looted 07 Mar 2026 Kankara axis, Katsina 1 — CWC member Sani Kulle (35) ambushed at 12:20 p.m. by Dan Tsoho's gang; rifle stolen 07 Mar 2026 Bilbis, Tsafe LGA, Zamfara — — ₦30M levy imposed; curfew enforced 07 Mar 2026 Kwoza, Borno — 300+ Boko Haram video showing captive villagers in military uniforms; govt claimed ~100 07 Mar 2026 Kwande LGA, Benue 16→24 — Tyungu Jam & Mbaav communities; death toll rose during body search 04 Mar 2026 Dinawa, Wurno LGA, Sokoto 1 boy 14 (10 remain) ₦10M + 2 motorcycles paid; only 4 released after 6 weeks 28 Feb 2026 Kwakwaran Manu, Kaduna — Several Sequential raid after attacking Anguwan Shekarau 26 Feb 2026 Tudun Daluta, Kankara LGA, Katsina — 2 (businessman + wife) 3rd consecutive day of abductions despite peace agreement 25 Feb 2026 Gazau, Isa LGA, Sokoto 1 — Man shot in his home; motorcycle stolen 20 Feb 2026 Danjibga, Tsafe LGA, Zamfara — — 7-week blockade; food and medicine supplies cut off; humanitarian crisis 31 Jan 2026 Funtua LGA, Katsina 2 Several Houses set ablaze; 10 p.m. night raid 31 Jan 2026 Gidan Bature/Gidan Yaro, Bungudu LGA, Zamfara 4 Several + livestock Houses burned; 11 p.m. raid 31 Dec 2025 Nasarawa Mainika, Gwarzo LGA, Kano — Alhaji Dan-Baba Nasarawa Abducted from private residence; in Kwantara: 1 shot, 1 abducted 30 Nov 2025 Chacho, Wurno LGA, Sokoto — 30+ women/girls Wedding invasion; bride + bridesmaids taken 30 Nov 2025 Adabka, Bukkuyum LGA, Zamfara 1 Several farmers Harvest-season attack; Mukhtar Abdullahi killed 30 Nov 2025 Yankamaye, Tsanyawa LGA, Kano 1 woman 3 Including councillor's mother-in-law 30 Nov 2025 Makera/Dogon Ruwa, Dutsin-Ma LGA, Katsina — — Post-peace-deal abuses: cattle destroying farmland, seizure of tools, degrading rules 29 Nov 2025 Ibeto, Magama LGA, Niger — 30 (17 remain) ₦150M demanded; 54 days captivity 30 Oct 2025 Hayin Dan Mayaki, Bakori LGA, Katsina 1 Multiple Livestock rustled; despite peace agreements 29 Oct 2025 Na'alma, Malumfashi LGA, Katsina Several + 1 beheaded — Dawn attack during Fajr prayers; weeks after peace deal 28 Oct 2025 Kogawa/Unguwar Karma/Layin Rama, Bakori LGA, Katsina 3 8 Coordinated night raids on 3 communities; livestock rustled at all sites 28 Oct 2025 Yabo LGA, Sokoto — — ₦15M "tax" imposed; threat to destroy farms 30 Sep 2025 Ibeto, Magama LGA, Niger — 1 Two-pronged attack; bandits split into groups; video of bandits roaming 28 Sep 2025 Gulbin Boka–Rijau road, Niger — All passengers (18-seater bus) Road blockade; traders returning from Lagos (Zuru Emirate, Kebbi) 28 Sep 2025 Ruwan Dawa, Gusau LGA, Zamfara Men executed Women freed ₦8M ransom paid; women released; men killed 28 Sep 2025 Kwaren Gamba, Sabon Birni LGA, Sokoto — Chief Imam Went to deliver ransom for relatives; himself taken hostage 26 Sep 2025 Yandoto, Tsafe LGA, Zamfara 5 Several Mosque attack during Subhi (morning) prayers 26 Sep 2025 Dogon Ruwa, Dutsin-Ma LGA, Katsina 2 Several Livestock rustled 28 Aug 2025 Dantankari, Dandume LGA, Katsina 1 Several (men, women, children) 5 injured 28 Aug 2025 Kafin Maiyaki, Kiru LGA, Kano 1 (VGN member) Wives of Alhaji Rufai Traders' association chairman's family targeted 28 Aug 2025 Lambar Tureta–Bakura road, Sokoto — Truck driver + bus passengers Road blockade; sporadic shooting 27 Aug 2025 Rara ward villages, Rabah LGA, Sokoto — — 150+ fled; 6 villages hit (Madawa, Cirib Dikko, Cirib Sabon Gari, Qaurare, Tafara, Tukuyum) 30 Jul 2025 Unguwar Shanu, Funtua LGA, Katsina — Several (women + children) Livestock rustled 30 Jul 2025 GRA, Dutsin-Ma, Katsina — Wives of Alh. Mai Goro Invaded major town without challenge; husband absent 29 Jul 2025 Zamfara (multiple villages) — 150+ chained TikTok posted by bandit "Ibrahim Musa 099"; children starving; calling for govt talks 29 Jul 2025 Sayaya, Matazu LGA, Katsina Many farmers — Motorcycles stolen; cattle rustled 28 Jul 2025 Zagezagi, Sabuwa LGA, Katsina 2 Several 1 injured 27 Jul 2025 Yar Unguwa, Kurfi LGA, Katsina 4 — Many injured; livestock rustled 26 Jul 2025 Sai Ka Gani Farms, Faskari LGA, Katsina — 25+ workers Cattle rustled; agricultural hub deserted 30 Jun 2025 Chediya, Tsafe LGA, Zamfara Several Many Houses looted, set ablaze; livestock rustled; <24hrs after Kucheri attack 30 Jun 2025 Ikara, Kaduna 1 (guard) Wife of district head Wagun Zazzau's home invaded 29 Jun 2025 Gidan Tamba, Kankara LGA, Katsina 2 4 Night attack at 10:45 p.m.; Ashiru Shafiu (60) shot; Suleiman Yusuf (60) cardiac arrest 29 May 2025 Dan Muntari, Danko Wasagu LGA, Kebbi Many (incl. mother + newborn) 100+ Woman who gave birth 2 weeks earlier and her baby killed 28 May 2025 Sabon Sarah, Bakura LGA, Zamfara 2 Several (incl. adolescent girls) 1 injured 30 Apr 2025 Tsibiri, Maradun LGA, Zamfara Many Many "Turned into a graveyard"; town in ruins 29 Apr 2025 Zamfara Imam Malam Salisu + 2 family — Killed after 2 months captivity 28 Feb 2025 6 communities, Faskari LGA, Katsina 20+ (incl. 2 Mopol + 2 CWC) — 6 coordinated attacks in one night (Sheme, Unguwar Baki, Unguwar Na Mande, Raudama, Mai Daura, Bakin Gulbi) 28 Feb 2025 Mazoji, Katsina Alhaji Nasiru Dan Jayi 5 Prominent person killed 31 Jan 2025 Jangeru, Zamfara Several Several + 2 more (next day) Bello Turji's group attacked worshippers; returned 24hrs later for 2 more COMPLETENESS NOTE: This register captures documented incidents from the two primary sources. Both reporters acknowledge in their posts that many incidents go unreported. The actual number of attacks during this period is likely substantially higher. 5. Case Files: Abductions in Detail 5.1 Abba — The NYSC Corps Member Status: Confirmed alive as of 8 March 2026 Abba, an NYSC (National Youth Service Corps) member, was abducted at an unspecified location in Katsina State. His family paid ₦10 million in ransom. The abductors then cut all communication. The family decided not to pay any additional ransom, including the two motorcycles demanded after the initial payment. Believing Abba to be dead, the family prepared his Janaza prayer (Gha'ib — funeral prayer in absentia), scheduled for Friday, 6 March 2026. On 8 March 2026, a video surfaced showing Abba alive, speaking in captivity. He stated the recording was made on the 19th day of Ramadan. His abductors were now demanding two motorcycles. The case was reported by both @sadiqGsadiq (original update) and @ZagazOlaMakama (video confirmation), and extensively commented upon by @DanKatsina50. "Since receiving the ₦10 million ransom payment, Abba's abductors have completely cut off all communication with his family. Given the situation, the family has decided not to pay any more ransom (including the bikes his abductors requested after the initial payment). Abba's family are preparing to hold his Janaza prayer (Gha'ib) on Friday, 6th March." — @sadiqGsadiq, 5 March 2026 5.2 Hon. Alhassan Bawa Niworo — Six Months in Captivity Status: Still in captivity as of March 2026 Former Chairman of the Niger State Universal Basic Education Board (NSUBEB). Abducted approximately six months before the March 2026 reporting. His family paid ₦30 million in ransom. The kidnappers responded by demanding an additional ₦150 million — five times the original payment. His son, Saifullahi, gave a public interview: "My father has been in captivity for nearly six months. We already paid the kidnappers ₦30 million as ransom, yet they are now demanding an additional ₦150 million. Sadly, we have no money left, and the government has not offered us any assistance. Whenever they call, we hear them beating and torturing him. He is ill, cries in pain, and they constantly threaten to kill him." — Saifullahi, son of Hon. Niworo 5.3 Brigadier General Maharazu Tsiga (Rtd.) Status: Released 3 April 2025 Former Director-General of NYSC. Abducted in February 2025 by Mustapha Babaro's gang. Held captive for 56 days before regaining freedom on 3 April 2025. The abduction of a serving brigadier general demonstrated that even military rank does not confer immunity. The same Babaro gang subsequently imposed a ₦50 million levy on Yargoje and surrounding communities in Kankara LGA, and Babaro himself was spotted at a peace meeting — having previously been in custody before returning to terror. 5.4 The Dinawa Fourteen Status: 10 remain in captivity; 1 boy killed; 4 released 14 residents of Dinawa village, Wurno LGA, Sokoto State, were abducted and held for six weeks. The community paid ₦10 million and delivered two motorcycles. The bandits released only four hostages and killed a young boy. As of March 2026, ten captives remain held. 5.5 The Ibeto Thirty Status: 17 remained in captivity after 54 days 30 residents of Ibeto community, Magama LGA, Niger State, were abducted. After 54 days, bandits were demanding ₦150 million for the release of the remaining 17 captives. No visible government rescue effort was reported. 5.6 The Chacho Wedding Status: Unknown In November 2025, bandits invaded Chacho community in Wurno LGA, Sokoto State, during a wedding celebration. They abducted over 30 women and girls — including the bride and her bridesmaids. One person was injured. The attack targeted a moment of communal joy and turned it into mass abduction. 5.7 Dan Muntari — Mother and Newborn Status: Over 100 remain abducted In May 2025, bandits attacked Dan Muntari village in Danko Wasagu LGA, Kebbi State. They killed a woman who had given birth two weeks earlier and her newborn baby. Over 100 additional residents were abducted. @DanKatsina50 described the aftermath: "Dan Muntari has been turned into a graveyard." 5.8 The 150+ Chained on TikTok Status: Unknown In July 2025, over 150 villagers from Madaro, Maguru, Kyambarawa, Janbako, and surrounding communities in Zamfara were held in captivity — chained, tied, starving, and sick. A bandit identified as "Ibrahim Musa 099" posted a TikTok video showing the hostages and calling for government talks. Children and parents were shown crying with no food or medicine. The weaponization of social media by the abductors is a notable development. 5.9 Imam Malam Salisu Status: Killed in captivity Abducted two months before his death, Imam Malam Salisu was killed by his captors in April 2025, along with two family members who were also held captive. No ransom outcome was publicly reported. 6. The Conflict Economy: Gold, Guns, and Governance 6.1 The Zamfara Gold-for-Guns Pipeline Kachalla Mati, identified as the successor to deceased bandit leader Halilu Sububu, controls illegal gold mining operations in Anka, Zamfara State. According to @DanKatsina50's reporting in October 2025, Mati generates ₦200 to ₦300 million per week from mining operations. These revenues fund weapons procurement via a trafficking corridor running from Mali through Niger Republic to Nigeria. The scale of this figure is significant: at ₦250 million per week, a single bandit commander generates approximately ₦13 billion annually — more than four times the total cumulative ransoms paid in Bukkuyum LGA. The gold-for-guns pipeline represents a self-sustaining conflict economy independent of ransom income. 6.2 Ransom as an Economic System The transition from individual ransom demands to community-level taxation indicates organizational maturity. Three documented examples demonstrate this shift: Bilbis, Zamfara: ₦30 million levy imposed with a curfew — residents ordered indoors until payment. This is the hometown of Senator Ikira Aliyu Bilbis, who represents Zamfara Central Senatorial District. Yabo, Sokoto: ₦15 million "tax" with threat to destroy farms and crops. Yargoje, Katsina: ₦50 million levy imposed by Mustapha Babaro on surrounding communities. These are not ransom demands tied to specific hostages — they are territorial taxation backed by armed force. When combined with curfew enforcement (Bilbis) and threat of agricultural destruction (Yabo), this constitutes de facto governance by armed groups. 6.3 Danjibga: The Seven-Week Siege In February 2026, Danjibga town in Tsafe LGA, Zamfara State, had been blockaded by bandits for seven weeks. Food and medicine supplies were cut off. The town was effectively under siege, creating a humanitarian crisis. This method — economic strangulation rather than direct assault — represents a different operational approach from typical raid-and-retreat attacks. 6.4 Demand Evolution The reporting period documents a shift in ransom demands beyond cash: Motorcycles: Multiple incidents demand motorcycles as payment (Dinawa, Abba). Motorcycles are the primary logistics vehicle for bandit operations — demanding them directly integrates ransom into military capability-building. Virgins and drugs: In February–March 2026, Afenifere (the pan-Yoruba socio-political group) raised an alarm that bandits operating in the Southwest were demanding female virgins and drugs during ransom negotiations. @DanKatsina50 commented: "They no longer demand money because they already have enough, now they're demanding virgins as ransom." 7. Armed Group Profiles and Power Structures The reporting identifies several distinct armed groups and individual commanders operating during the reporting period. These are not a unified organization — they include rival factions, allies of convenience, and independent operators. Bello Turji Role: Bandit Commander — Zamfara/Sokoto One of the most wanted terror leaders in NW Nigeria. His group attacked worshippers in Jangeru (Jan 2025). Resumed attacks on the Shinkafi road despite pleas from senior Fulani leaders. After the death of his top commander/cousin Kachalla Yellow Danbokolo (June 2025), Turji reportedly began making overtures for peace — calling for meetings with other bandit groups to discuss surrender or dialogue. Whether this was genuine or tactical remains unclear. Also linked to Ori Jeje (ally). Kachalla Yellow Danbokolo Role: Neutralized — June 2025 Principal field commander and cousin of Bello Turji's terror network. Killed by DSS + HYBRID forces on 23 June 2025 in the Chida general area, Fakai District, Shinkafi LGA. Died three days after sustaining fatal gunshot wounds. 25 other bandits were killed in the same operation. His death was described by locals as "the biggest blow yet to banditry" and directly triggered Turji's peace overtures. Mustapha Babaro Role: Bandit Kingpin — Katsina Linked to the abduction of Brigadier General Maharazu Tsiga (Rtd.), who was held for 56 days. Imposed a ₦50 million levy on Yargoje and surrounding communities in Kankara LGA. Notably: previously in custody and somehow returned to active terror operations. Spotted at a peace meeting during the reporting period. Dan Tsoho Role: Bandit Kingpin — Katsina Notorious bandit that roams the Kankara axis of Katsina State. His gang killed Community Watch Corps member Sani Kulle (35) in an ambush on 7 March 2026 at 12:20 p.m. while Kulle was on his way to work. The attackers stole his rifle and fled. Kachalla Mati Role: Illegal Mining Operator — Zamfara Successor to deceased bandit Halilu Sububu. Controls illegal gold mining in Anka, Zamfara. Generates ₦200–300 million weekly. Funds weapon procurement via Mali–Niger–Nigeria trafficking corridor. One of the wealthiest bandit commanders documented. Haruna Dandan Nabaruma Role: Extortionist — Katsina Terrorizing Dutsin-Ma LGA. Demanded ₦10 million from residents of Unguwar Zakara in March 2025, threatening attack if payment was not received. Jankare Role: Neutralized — October 2025 Notorious bandit commander in Safana LGA. Killed not by security forces but by rival faction leader Muhwadinge in fresh bandit-on-bandit clashes. Communities in Safana, Dutsinma, and Kurfi LGAs reported relief. Ori Jeje / Dogo Chedi Role: Brothers — Zamfara Notorious bandits wreaking havoc in Zurmi and Shinkafi LGAs. Known allies of Bello Turji. Ibrahim Musa "099" Role: Social Media Operator — Zamfara Posted TikTok video of 150+ chained villagers in July 2025, calling for government talks. Notable for instrumentalizing social media as both a publicity tool and a bargaining mechanism. 7.1 Factional Violence The bandit ecosystem is not monolithic. The killing of commander Jankare by rival Muhwadinge in October 2025 demonstrates active inter-factional competition. This internal violence can benefit communities (Safana reported relief) but also creates unpredictable security dynamics when power vacuums emerge. 8. Military and Security Force Operations Reporting from @ZagazOlaMakama provides detailed documentation of security force operations during the period. These demonstrate genuine capability and occasional success — but the pattern is of intermittent intervention rather than sustained territorial control. 8.1 Named Operations Operation Location Date Result Op Desert Sanity V Sambisa Forest, Borno 31 Dec 2025 Cleared 3 terrorist enclaves (Garin Kago, Garin Alhaji Bita, Garin Malam Muazu); insurgents fled; 3 buried IEDs neutralized by EOD team; life-support structures destroyed. Units: 21 SAB + 26 Task Force Brigade + vigilantes Op Hadin Kai Sambisa + Lake Chad Basin Dec 2025 Neutralized 2 BH terrorists at Tokumbere/Lagara axes (29 Dec); clearance with 26 TFB + CJTF + hybrid forces + hunters. Separately: 10 terrorists neutralized at Rann–Gamboru Ngala (Cameroon border) with MNJTF Op Fansan Yanma Yankaba Village, Kaura Namoda LGA, Zamfara 7 Mar 2026 Troops repelled bandit attack at 6:00 p.m.; bandits fled after encountering superior firepower; patrols intensified DSS-HYBRID Joint Op Chida area, Shinkafi LGA, Zamfara 23 Jun 2025 Killed Kachalla Yellow Danbokolo + 25 others; Danbokolo died 3 days later from wounds; described as DSS + HYBRID Forces operation Dukku Forest Rescue Rijau LGA, Niger State 6 Mar 2026 Troops from FOB Warari and FOB Rijau repelled bandits; 3 kidnap victims rescued; ₦20M ransom intercepted; fierce gun battle; several bandits neutralized Kunamawa Defence Kunamawa, Katsina 27 Feb 2025 Joint security forces decisively crushed attacking bandits Police Scorpion Squad Birnin Magaji–Gusau road, Zamfara Nov 2025 Arrested 2 kidnappers (Sani Abdullahi, 28; Usman Bello, 32) at 2:30 a.m.; 3 vehicles recovered; group had terrorized 3 LGAs for 6 months Dabai Ambush Dabai town, Danja LGA, Katsina 28 Sep 2025 Police and Community Watch ambushed bandits; 1 bandit killed; victims rescued 8.2 Annual Statistics (2024 Reference Year) @ZagazOlaMakama reported that in the calendar year 2024: Metric Value Terrorists Eliminated 10,937 Terrorists Apprehended 12,538 Hostages Rescued 7,063 These numbers demonstrate the scale of military engagement. They also implicitly reveal the scale of the insurgency: if nearly 11,000 militants were eliminated and over 12,000 apprehended in a single year, the total armed actor population is extraordinarily large. 8.3 Structural Observation The documented operations show that the Nigerian security forces are capable of significant tactical success when deployed. The DSS-HYBRID operation that killed Danbokolo shifted the strategic landscape in Zamfara. The Sambisa clearance operations denied enclaves. The Dukku Forest rescue intercepted a ransom delivery in real time. Yet the frequency of uncontested bandit attacks on communities — including in major towns like GRA Dutsin-Ma — suggests these capabilities are not deployed at the scale or frequency needed to establish sustained territorial security. 9. Community Resistance and Civilian Response Communities are not passive. The reporting documents multiple instances of civilian resistance — armed confrontation, protest, and political engagement. 9.1 Armed Community Defence Sabon Layi, Matazu LGA (December 2025): A dispute that began when a bandit seized a woman's mat escalated. The woman's husband killed one attacking bandit; residents killed another. Two bandits confirmed dead. The bandits returned the next day for reprisal attacks. Chediya, Tsafe LGA (June 2025): When bandits attacked the community, residents mounted stiff resistance and killed three bandits. A resident stated: "They came heavily armed and started shooting sporadically. Some of our youth confronted them, and in the fight, we managed to kill three of them." Dabai, Danja LGA (September 2025): Police and Community Watch Corps successfully ambushed bandits, killing one and rescuing victims. 9.2 Civilian Protest Mairua, Faskari LGA (July 2025): Youth blocked the Gusau-Funtua road to protest rising insecurity. Security forces responded by shooting a protester. Citizens demanding protection were met with state violence. Bakori LGA (July 2025): Residents of Kandarawa, Kakumi, Guga, and other communities blocked the Funtua-Bakori road, protesting killings, rapes, and abductions by bandits. Auchi, Edo State (March 2026): Violence erupted as youths burned homes and shops in Hausa quarters over persistent kidnapping. @DanKatsina50 commented: "If the government doesn't address insecurity and crime, people will hit back at their perceived enemies." 9.3 Political Intervention Hon. Engr. Kandarawa, a Katsina State lawmaker, personally led a mission into the forest in November 2025 and negotiated the release of 37 kidnapped people from Bakori LGA. This followed a formal peace agreement. Kandarawa's intervention is notable because it was conducted by a single legislator walking into hostile territory — not a military operation. 10. Geographic Spread: Beyond the Northwest While the crisis is centered in the Northwest (Katsina, Zamfara, Sokoto, Kaduna, Niger, Kebbi), the reporting period documents its expansion into other regions: State Region Documented Incidents Borno Northeast Kwoza — 300+ captives in Boko Haram video; Konduga — live terrorist attack footage; Sambisa clearance operations; child survivor testimony of well killings Bauchi Northeast Pali community — multiple attacks; KB.Y Petrol Station taken over by bandits for 3+ days Benue North Central Kwande LGA — 24 killed across Tyungu Jam and Mbaav communities Kano Northwest Nasarawa Mainika — abduction; Yankamaye — 1 woman killed, 3 abducted; Kafin Maiyaki — VGN member killed Abuja (FCT) Federal Capital Kubwa — 16 kidnapped including pastor's four children and vigilante's wife Kwara North Central Egbe–Koro road abduction; 9 villagers held since 2025, freed after ₦40M ransom Ondo Southwest Kidnapped man found dead in Edo forest after ransom payment Ekiti Southwest Kidnappers demanding female virgins as ransom Ebonyi Southeast Kidnapped traditional ruler of Ndufu-Alike found dead (father of former deputy governor) Kogi North Central Terrorists abduct traveller along Egbe–Koro road (Kogi/Kwara border) Edo South-South Auchi — retaliatory violence by youths over persistent kidnapping The geographic data shows that "Northwest insecurity" is a misnomer for what has become a nationwide phenomenon. The crisis has reached the Federal Capital Territory, the Southwest (where ransom demands now include virgins and drugs), and the Southeast (where traditional rulers are being killed in captivity). 11. Terrorism Financing: Designated Entities In 2024, the Federal Government of Nigeria designated 15 individuals and business entities as terrorism financiers. As reported by @ZagazOlaMakama in November 2025: Designated Individuals Tukur Mamu Yusuf Ghazali Muhammad Sani Abubakar Muhammad Sallamudeen Hassan Adamu Ishak Hassana-Oyiza Isah Abdulkareem Musa Umar Abdullahi Designated Firms West & East Africa General Trading Company Limited Settings Bureau De Change Ltd G. Side General Enterprises Desert Exchange Ventures Ltd Eagle Square General Trading Company Limited Alfa Exchange BDC The inclusion of multiple Bureau De Change (BDC) operators and trading companies points to a financial infrastructure that enables cross-border money flows. These are not informal networks — they are registered businesses with operational addresses. The presence of named BDC firms suggests that ransom money and gold mining revenues are laundered through formal financial channels. Ammunition Interception Separately, the Nigeria Drug Law Enforcement Agency (NDLEA) intercepted 3 suspects with 1,125 rounds of 7.25mm live ammunition on the Abuja–Kaduna expressway. A separate incident involved ammunition falling from a vehicle on the Zaria–Funtua expressway. These interdictions confirm the physical logistics of arms trafficking between regions. 12. Operational Security Failures @ZagazOlaMakama reported that social media leaks of U.S. Intelligence, Surveillance, and Reconnaissance (ISR) flights over northern Borno compromised counter-terrorism operations in the Lake Chad region. A U.S. Air Force ISR aircraft operating from Accra, Ghana, flew over ISWAP's "Mantiqah Krinwa" in the Lake Chad area. An individual identified as Brant Philip posted real-time flight paths on social media. ISWAP-aligned forces relocated from Dogon Chikun to Bulabulin as a direct result. "Once the details of the ISR mission were posted online, the terrorists became aware of the surveillance and began repositioning. These kinds of leaks directly endanger operations and personnel." — Security source, via @ZagazOlaMakama "People on social media must understand that sharing operational intelligence, especially in real time, is not content, it is sabotage. Terrorists monitor these platforms too." — Security source, via @ZagazOlaMakama This incident illustrates a structural vulnerability: the same social media ecosystem that enables independent reporting of atrocities (as done by @DanKatsina50 and @ZagazOlaMakama) can also be exploited to undermine operations against those committing the atrocities. 13. Pattern Analysis and Structural Observations 13.1 The Peace Deal Cycle The reporting period documents a recurring pattern: A peace agreement is signed between state actors and bandit leaders. Within days or weeks, attacks resume — sometimes in the same communities covered by the agreement. Communities that relied on the deal are left exposed. Documented instances: Na'alma, Malumfashi LGA: Attacked during Fajr prayers "weeks after peace deal." Several killed, one beheaded. Kogawa/Unguwar Karma/Layin Rama, Bakori LGA: Coordinated night raids on three communities — "despite peace agreements." Tudun Daluta, Kankara LGA: Businessman and wife abducted — "3rd day of abductions despite peace agreement." Makera/Dogon Ruwa, Dutsin-Ma LGA: Post-deal abuses including cattle destroying farmland, seizure of farming tools, and degrading rules enforced on communities. Hayin Dan Mayaki, Bakori LGA: Attacks continuing "despite peace agreements." The pattern suggests that peace agreements are instrumentalized by armed groups — used to gain temporary respite, secure concessions, or reposition, without genuine intent to cease operations. The case of Mustapha Babaro, who was previously in custody and returned to terror, further undermines the credibility of negotiated settlements. 13.2 Target Selection Bandits demonstrate deliberate target selection across several categories: Sacred spaces: Yandoto mosque during prayers; Jangeru attack on worshippers; Na'alma attack during Fajr. Celebrations: Chacho wedding; Katsina naming ceremony. Agricultural targets: Harvest-season farm raids (Bukkuyum, Sai Ka Gani, Sayaya); destruction of crops and seizure of tools. Transport corridors: Gulbin Boka–Rijau road (entire bus abducted); Lambar Tureta–Bakura road; Funtua–Gusau highway; Egbe–Koro road. Prominent individuals: Brigadier General Tsiga, former NSUBEB chairman Niworo, Wagun Zazzau district head, traders' association chairman's family, KADVIS commander Sale Piya-Piya. Security personnel: 2 Mobile Police + 2 CWC killed in Faskari; VGN member killed in Kafin Maiyaki; CWC member Sani Kulle assassinated in Kankara. 13.3 Coordination Indicators Several incidents demonstrate coordination beyond opportunistic raiding: Faskari, February 2025: Six simultaneous attacks across six communities in one night. This requires planning, communication, and multiple operational units. Bakori, October 2025: Coordinated raids on three communities (Kogawa, Unguwar Karma, Layin Rama) in a single night. Sequential attacks: Multiple instances of bandits returning to the same area within 24 hours (Jangeru, Sabon Layi). 13.4 The Counter-Pattern: Bandit Vulnerability The reporting also documents moments of bandit vulnerability, suggesting that sustained pressure could yield results: Danbokolo's death triggered Turji's peace overtures — the loss of a single key commander shifted strategic calculations. Jankare's death by rival Muhwadinge — factional violence destabilizes bandit cohesion. Community resistance in Sabon Layi and Chediya — two bandits killed in each engagement, demonstrating that armed groups are not invincible when confronted. The Scorpion Squad arrest of two kidnappers who had terrorized three LGAs for six months — targeted policing can disrupt networks. Rapid response forces in Yar Jigawa — police forced bandits to flee, abandoning livestock and motorcycles. 13.5 Information Warfare Both sides use social media as a weapon: Bandits: Ibrahim Musa "099" posted TikTok of chained captives; Boko Haram released video of 300+ captives in military uniforms. These are broadcast to terrorize, recruit, and pressure governments. Counter-terrorism: ISR flight path leaks compromised operations; social media amplifies attacks but also enables rapid documentation and accountability pressure. Citizens: @DanKatsina50 and @ZagazOlaMakama function as an independent accountability mechanism — documenting what official channels do not report. 14. Named Individuals Registry 14.1 Bandit Commanders (Active During Reporting Period) Name Status Area of Operation Notable Activity Bello Turji Active Zamfara / Sokoto Attacks on Jangeru worshippers; Shinkafi road attacks; peace overtures after Danbokolo's death Mustapha Babaro Active Katsina (Kankara LGA) Abduction of Brig. Gen. Tsiga; ₦50M levy on Yargoje; attended peace meeting; previously in custody Dan Tsoho Active Katsina (Kankara axis) Assassination of CWC member Sani Kulle Kachalla Mati Active Zamfara (Anka) ₦200–300M weekly gold-for-guns revenue; successor to Halilu Sububu Haruna Dandan Nabaruma Active Katsina (Dutsin-Ma LGA) ₦10M extortion of Unguwar Zakara Ori Jeje / Dogo Chedi Active Zamfara (Zurmi / Shinkafi) Brothers; Turji allies Ibrahim Musa "099" Active Zamfara TikTok of 150+ chained captives Kachalla Yellow Danbokolo Neutralized Jun 2025 Zamfara (Shinkafi) Killed by DSS-HYBRID; Turji's cousin/field commander Jankare Neutralized Oct 2025 Katsina (Safana LGA) Killed by rival Muhwadinge in factional clashes Ɗan Guntu Captured Unspecified Targeted Fulani peaceful people 14.2 Documented Civilian Victims (Named) Name Status Details Abba (NYSC) Alive (in captivity) ₦10M ransom paid; family held funeral prayer; confirmed alive in video; abductors demanding 2 motorcycles Hon. Alhassan Bawa Niworo In captivity (~6 months) Former NSUBEB Chairman; ₦30M paid, ₦150M demanded; beaten and tortured Brig. Gen. Maharazu Tsiga (Rtd.) Released Former NYSC DG; 56 days captivity; Babaro's gang Sani Kulle / Sani Kulli (35) Killed CWC member; ambushed by Dan Tsoho's gang; rifle stolen Imam Malam Salisu Killed Killed after 2 months captivity along with 2 family members Alhaji Nasiru Dan Jayi Killed Prominent person killed in Mazoji community Yusuf Momo ("Dan Banga Pali") Killed Vigilante member in Pali, Alkaleri LGA Sale Piya-Piya Killed KADVIS commander, Kubau LGA; led forest operations Mukhtar Abdullahi Adabka Killed Farmer killed in Bukkuyum harvest attack Alhaji Dahiru Mai Shago Abducted Wealthiest person in Ta-Marke community Hon. Usman Garba Zingo Released (Feb 2026) Released after months in captivity Ahmed Maharazu Released Son of former Malumfashi LGA chairman Chief Imam of Kwaren Gamba Abducted Taken hostage while delivering ransom for relatives 15. Source Notes and Data Limitations 15.1 What This Report Captures This report is a structured compilation of publicly documented incidents from two specific X accounts. It captures what was posted — which is a function of what the reporters knew, what sources told them, and what they chose to publish. Both reporters are prolific and well-connected, but they are two individuals covering a crisis spanning hundreds of thousands of square kilometers. 15.2 Known Gaps Unreported incidents: Both reporters acknowledge that many attacks go unreported. Rural communities without phone access or media connections suffer in silence. Outcome tracking: Most abduction cases have no documented resolution. Whether hostages were released, killed, or remain in captivity is often unknown. Casualty figures: Many incidents use imprecise language ("several killed," "many abducted"). Exact counts are available only for a subset of incidents. Military operations: Reporting is limited to what @ZagazOlaMakama's sources share. Classified operations and their outcomes are not reflected. State-level aggregation: Only Bukkuyum LGA has a comprehensive cumulative figure (1,065 killed, ₦2.9B ransoms). No equivalent data is available for other LGAs. 15.3 Verification Standard Data in this report is drawn from publicly timestamped social media posts. Corroboration between the two sources is noted where it exists (e.g., both covered the Abba/NYSC case). Where government figures differ from on-ground reporting (Kwoza: government said ~100, video showed 300+), both figures are presented. @ZagazOlaMakama explicitly fact-checks claims in some instances — notably debunking a "173 bandits killed by vigilantes" report, confirming only one verified DSS-HYBRID operation. 15.4 Attribution All data in this report is sourced from public posts by @DanKatsina50 and @ZagazOlaMakama on X (formerly Twitter), including their original reporting and curated reposts from @SavvyRinu, @SaharaReporters, @instablog9ja, @ARISEtv, @OurFavOnlineDoc, @CaptJamyl, @mobilisingniger, @sadiqGsadiq, @thesunnigeria, and @NigeriaStories. Posted between January 2025 and March 2026. Document Information Report Type Open-Source Intelligence (OSINT) Compilation and Analysis Reporting Period January 2025 – March 2026 Primary Sources @DanKatsina50 (Bakatsine) · @ZagazOlaMakama (Zagazola Makama) — X/Twitter Classification Unclassified / Open Source | Classification | intelligence / Open Source | | Data Integrity| All figures, names, dates, and locations drawn directly from source posts. | *Mansir Muhammed produced this document.*
Get Involved