A Toronto police raid on June 11 killed a veteran officer and exposed a network of young gunmen-for-hire targeting synagogues and the U.S. Consulate, with Canada’s Secretary of State for Combatting Crime now confirming the shooters were “hired by a foreign entity.” The operation, linked to a March attack on the consulate, has led to charges against two suspects—one still in critical condition—while investigators hunt for a third, all tied to encrypted messaging networks paying teens to film their attacks.
Who’s Behind the Attacks—and What Toronto Police Know
Toronto police Chief Myron Demkiw revealed Wednesday that the shootings—including the March attack on the U.S. Consulate—are part of a “multilayered” network where young adults are recruited via encrypted apps like WhatsApp, Signal, and Telegram. According to Demkiw, these operatives are paid to carry out attacks and required to film them for proof of completion. The FBI and Royal Canadian Mounted Police are assisting in tracking the orchestrators, though Demkiw emphasized that the actual shooters are often younger than 20. AP News reported that two firearms seized in the investigation originated in the U.S. and were linked to over 25 shootings in Toronto.
The network’s modus operandi mirrors a pattern seen in other cities, where bad actors exploit vulnerable youth to create fear—particularly in Jewish communities, Demkiw said. “It is clear that some of the people hiring these criminals want to create a sense of fear in our communities,” he told reporters. The March consulate shooting, which left no injuries, was executed by two men in a stolen white SUV, according to court documents. The FBI previously linked the attack to Mohammad Baqer Saad Al-Saadi, an Iraqi national accused of ties to Iran’s Islamic Revolutionary Guard Corps (IRGC), though Toronto police have not confirmed his direct involvement in the local network.
The Raid That Exposed the Network—and Cost a Life
The June 11 raid on an apartment complex in Toronto’s northwest ended in tragedy when Constable Marc Pinizzotto, a 43-year veteran, was fatally shot during the operation. A suspect, 19-year-old Nicholas Bennett, was also shot by police and remains in critical condition, facing first-degree murder charges for Pinizzotto’s death. Bennett is additionally charged in connection with other shootings, though not yet linked to the consulate attack. Toronto police spokesperson Stephanie Sayer confirmed Bennett is unconscious in hospital, while a second suspect, Sheldon Tracey-Stewart, was charged in the consulate shooting. A third suspect, 19-year-old Zara Jabbi, remains at large and is considered armed and dangerous.
Photo: The Globe and Mail
The raid followed a week of intense police activity, including the arrest of Tracey-Stewart and the issuance of a warrant for Jabbi after he failed to appear. Police allege Jabbi and Tracey-Stewart drove to the consulate in a stolen SUV, fired multiple rounds at the building, and fled without causing injuries. The operation was part of a broader investigation into the consulate shooting, which authorities classified as a “national security incident.” USA Today reported that the two firearms recovered in the investigation—one linked to 21 shootings, the other to six—were traced back to the U.S.
Foreign Involvement: Canada’s Secretary of State Confirms a Foreign Hand
Canada’s Secretary of State for Combatting Crime, Ruby Sahota, made the most explosive claim to date on Wednesday, stating in the House of Commons that the shooters were “paid-for hires, hired by a foreign entity.” Her remarks came during a debate on the government’s lawful-access bill, which would grant police and intelligence agencies broader surveillance powers over encrypted communications. Sahota argued that passing the bill would help prevent future attacks by disrupting the networks recruiting young operatives.
While Sahota did not name the foreign entity, the FBI’s prior link to Al-Saadi—an IRGC-affiliated figure—raises questions about whether the Toronto network is part of a broader transnational operation. The Globe and Mail reported that Al-Saadi, arrested in Turkey in May, discussed the consulate shooting in a recorded phone call, though Canadian authorities have not confirmed his role in the local attacks. Demkiw’s description of “multi-layered” networks suggests a possible hierarchy, with foreign actors coordinating through intermediaries to avoid direct attribution.
Why This Matters: The Chilling Business of Hired Violence
The Toronto case is not an isolated incident. Police have identified a pattern of encrypted-app recruitment, where young people—often vulnerable or financially desperate—are paid small sums to commit acts of violence. Demkiw described the scheme as a “recurring and similar modus operandi,” with operatives required to film their attacks for payment. This tactic, detailed by The Globe and Mail, mirrors reports from other cities where bad actors exploit social media and messaging apps to radicalize or coerce participants.
The targeting of synagogues and the U.S. Consulate suggests a deliberate effort to provoke fear, particularly in Jewish communities. Demkiw’s warning—that the attacks are designed to “create a sense of fear”—highlights the psychological dimension of the violence. While the consulate shooting caused no casualties, the death of Pinizzotto and the broader campaign of intimidation underscore the real-world consequences of these networks.
What Happens Next: The Investigation and Legal Fallout
With Bennett in critical condition and Jabbi still at large, Toronto police face a race to dismantle the network before more attacks occur. The charges against Tracey-Stewart—including vehicle theft and illegal firearm possession—could provide critical leads, though investigators are still piecing together the full scope of the operation. Demkiw’s emphasis on the “multi-layered” nature of the networks suggests that foreign orchestrators may remain shielded from direct prosecution.
Legally, the case hinges on two fronts: identifying the foreign entity behind the hires and determining whether the attacks qualify as acts of terrorism under Canadian law. Sahota’s push for the lawful-access bill indicates that the government sees encrypted communications as a key vulnerability. If passed, the bill could grant police and intelligence agencies the tools to monitor and disrupt these networks—but critics argue it risks overreach into civilian privacy.
Internationally, the case raises questions about how Canada and the U.S. will coordinate to address transnational threats. The FBI’s involvement in the investigation suggests a shared interest in countering IRGC-linked activity, though the lack of direct evidence linking Al-Saadi to the Toronto network leaves room for speculation. For now, the focus remains on the local operation: finding Jabbi, securing Bennett’s testimony, and unraveling the encrypted chains that connect the shooters to their paymasters.
One thing is clear: the Toronto shootings are more than isolated crimes. They are part of a disturbing trend where violence is outsourced, filmed for proof, and used to sow fear. As Demkiw put it, “What we are dealing with in this case is a recurring and similar modus operandi.” The challenge now is to disrupt it before it spreads further.
Rafael Moreno directs international correspondents from London to Singapore. A multilingual journalist born in Madrid, he spent 12 years covering diplomacy and conflict for Global Affairs Review. His background in political science strengthens Globally Pulse’s depth in world reporting.
