A March shooting outside the U.S. Consulate in Toronto has been tied to a sprawling criminals for hire network, one that Toronto police say is recruiting young adults through encrypted messaging apps and paying them to film their crimes as proof of completion.
What happened at the U.S. Consulate
The incident took place on March 10 at approximately 4:30 a.m., when two males arrived outside the consulate building in a white Honda. A witness reported that the pair fired a handgun before returning to the vehicle and fleeing the scene. No injuries were reported in connection with that specific attack, but authorities have since classified it as a national security incident given the nature of the target and its broader ties to an organized criminal operation.
A pattern emerges across the city
At a press conference on June 16, Toronto police revealed that investigators have linked two recovered firearms both traced back to the United States to a series of attacks carried out across the city.
The 1st firearm has been connected to at least 21 shootings, including the consulate attack. The 2nd has been tied to at least six additional incidents, bringing the total number of connected shootings to at least 27.
Toronto Police Chief described the pattern as a recurring method of operation in which individuals are recruited through encrypted platforms, directed to carry out attacks on specific targets and required to record themselves doing so in order to receive payment. Investigators believe the apps being used to coordinate the scheme include WhatsApp, Signal and Telegram.
Young people at the center of the network
According to Superintendent Joe Matthews, the individuals carrying out the attacks appear to be younger in age and may be operating within multiple, layered networks rather than a single centralized organization. The suspect linked to the consulate shooting is 19 years old and remains at large.
The network has already claimed at least one life. Toronto Constable Marc Pinizzotto was shot and killed in the line of duty on June 11. Police are seeking a 19 year old suspect in that case, who faces a charge of first degree murder.
FBI involvement and a key suspect
Toronto police confirmed they are working alongside the FBI to identify who is ultimately behind the coordination of the attacks. Demkiw stated that some of those hiring the criminals appear to be motivated by a desire to instill fear within Toronto communities, including the Jewish community.
The investigation took a significant turn when a U.S. court filing from May named Mohammad Baqer Saad Al-Saadi, an Iraqi national, as a key figure. According to the filing, Al-Saadi is accused of running a terrorist network responsible for multiple plots across the United States, Canada and Europe. Investigators say he discussed the consulate shooting in a recorded phone call.
Investigation ongoing
As the inquiry continues to unfold, authorities on both sides of the border are working to trace the full scope of the network and determine who is giving the orders. The cross border nature of the recovered firearms and the involvement of a suspect with alleged ties to international terrorism suggest the operation extends well beyond Toronto’s city limits.
For now, investigators are continuing to piece together how the network operates, who is funding it and whether additional attacks can be prevented.
The case has become one of the city’s most closely watched investigations, raising concerns not only about organized crime but also about how encrypted technology and social media may be enabling a new generation of violence that crosses borders and targets communities in increasingly unpredictable ways.