PASO Nigeria Dossier — Terror Financing, Libya Weapons Trail, Foreign Military Pattern & Counter-Terrorism Action File

Public status

Counter-terrorism review threshold reached. Evidence preservation, official response and independent inquiry are required.

This dossier does not convict any state, official, company or armed actor. It establishes an action threshold: official records, public reports, weapons-trafficking trails, terrorism trends, strategic doctrines, military-training admissions, and material-capability signals now require structured investigation. False accusations harm public safety, but real facilitation, negligent tolerance or strategic exploitation of terrorism must not escape accountability.

Protection rule: The public page exposes method, sources and questions. Protected witnesses, raw intelligence, sensitive coordinates, sealed annexes and source identities remain outside the public layer.

Consolidated position

Executive core: the Nigeria security crisis must be investigated as a predictable regional pattern, not an isolated domestic failure

The Nigeria dossier is built around a hard public fact: the United Nations has said that weapons looted or diverted during and after the 2011 Libyan conflict later surfaced across the wider Sahel, including Nigeria, and some were found in the hands of extremist groups. That is not a marginal allegation. It links a foreign military intervention, post-conflict arms proliferation and Nigeria’s terrorist threat surface through a traceable regional weapons pathway.

The question is therefore no longer whether Nigeria’s insecurity is purely internal. The proper question is whether external decisions, military interventions, training programs, intelligence partnerships, sanctions policies, selective diplomatic narratives and corporate technology pathways have materially increased the capability of extremist groups while weakening Nigeria’s ability to compete, industrialize and act as a sovereign African power.

PASO applies an evidence-based standard. The file does not need a secret confession. It measures recurrence: official doctrine, known strategic incentives, material consequences, arms flows, training trails, terrorism escalation, equipment availability, institutional silence, selective moral language, and who benefits from the resulting dependency.

Foreign interventionLibya 2011 and regional collapse

Arms diffusionSahel routes, trafficking, leakage

Terror capabilityBoko Haram, ISWAP, bandits, hybrid groups

State weakeningMilitary overstretch, displacement, debt, insecurity

Strategic captureDependence, bases, contracts, alignment pressure

Filing formula: A powerful state or coalition cannot destabilize a region, leave weapons to circulate, train security actors without adequate public traceability, profit from the resulting dependency, and then demand permanent presumptions of neutrality. The burden of explanation moves to the actors with the power, records, satellites, contracts, weapons inventories and financial trails.

Severity 96/100Public evidence 88/100UN-linked public report

1. Libya weapons trail: a foreseeable intervention-to-terrorism pathway

Section link

Public anchor: UN-reported material indicates that weapons looted or diverted during and after the 2011 Libyan conflict later moved across the wider Sahel, including Niger, Burkina Faso and Nigeria, with some found in the hands of extremist groups. This creates a direct counter-terrorism question: who created, tolerated, failed to secure, or benefited from the arms-diffusion environment that strengthened violent actors across West Africa?

Public evidence usable

UN-reported statement: weapons looted or diverted during and after the 2011 Libya conflict surfaced across the wider Sahel, including Nigeria.
Public reporting since 2014 repeatedly links Libyan stockpiles to terror and armed groups across the Sahel and Nigeria.
Nigeria’s security crisis now involves ideological jihadism, criminal banditry, hybrid insurgency, arms looting, attacks on bases and repeated capture of military hardware.
The arms trail was foreseeable: the 2011 conflict involved large state stockpiles, collapse of authority, regional smuggling routes, and porous borders.

Legal and investigative questions

Which weapons, calibres, serial numbers and stockpile origins have been identified in Nigeria?
Which routes carried weapons from Libya through Niger, Chad, Mali, Burkina Faso or other transit corridors?
Which external actors had notice of proliferation risks after the 2011 intervention?
Which actors failed to secure, trace, buy back, disable, interdict or report the weapons?
Which actors later benefited from Nigeria’s weakened security position through bases, contracts, influence, extraction, debt or policy alignment?

Acts to request

Demand a UN-linked weapons-tracing annex: serial numbers, type, origin, seizure date, seizure location, armed group, transit route and chain of custody.
Request an AU/ECOWAS regional inquiry into post-Libya arms diffusion and its specific impact on Nigeria.
Request disclosure from NATO states and Libya-intervention participants on risk assessments, post-conflict stockpile security plans, and mitigation failures.
Open a Nigerian parliamentary inquiry on whether foreign intervention effects materially contributed to Boko Haram, ISWAP and bandit capability.

Public sources

Severity 94/100Official record 92/100

2. Official U.S. record: training, coups and missing public traceability

Section link

This is not a blog claim. It is an official hearing record.

The House Armed Services Committee transcript records a direct exchange on U.S.-trained African personnel participating in coups. The exchange entered Intercept articles into the official record and challenged the claim that the issue was less than one percent by asking for the dataset behind that number. The commander did not provide the dataset in that exchange. For PASO, that creates an evidence-preservation and audit trigger.

Official-record element	Probative value	Immediate demand
Large-scale U.S. training of African personnel	Creates a duty to track post-training outcomes, coups, unit affiliations and misuse of skills.	Produce full training dataset, countries, dates, modules, units, instructors, funding lines and post-training monitoring.
U.S.-trained personnel linked to coups	Moves the issue from speculation to a known risk requiring audit.	List all coups and attempted coups involving U.S.-trained or U.S.-equipped actors.
Minimization without public dataset	Weakens official reassurance and raises traceability concerns.	Produce the dataset and methodology used to calculate any minimization figure.
Congressional notice	Establishes public notice. After notice, failure to correct becomes relevant.	Preserve records and demand follow-up reports to Congress, AU, ECOWAS and affected states.

Open HASC transcript

Severity 91/100Declassified doctrine

3. Strategic doctrine: Nigeria as a population, resources and geopolitical-security variable

Section link

NSSM-200 matters because it proves that population growth, national resources, political stability and foreign assistance in countries including Nigeria were explicitly treated as U.S. national-security issues. PASO does not claim that one memorandum alone proves every later act. It establishes the strategic background: Nigeria’s demographic size, resources and geopolitical weight have long been viewed through a security-management lens by U.S. policy planners.

When this doctrine is placed beside later patterns — military-first engagement, training without adequate public traceability, intervention blowback from Libya, terrorism growth, reconciliation theater for armed actors, pressure on sovereign policy, and economic dependency — it removes the naïve presumption that external conduct is automatically neutral. The correct standard is structured suspicion followed by evidence-based verification.

NSSM-type logic Population, resources and stability are not treated as neutral humanitarian concerns but as strategic variables.

Security partnership logic Military cooperation can create dependency, influence and access while claiming stabilization.

Arms diffusion logic Intervention in one state can arm destabilizers in another state for years.

Forgiveness theater External pressure for reconciliation with violent actors may normalize impunity that the same powers would reject domestically.

Burden shift Actors with records, budgets, satellites and weapons logs must prove non-facilitation once patterns recur.

African security standard Nigeria’s population must be protected from both terrorist violence and strategic dependency disguised as assistance.

Sources

Severity 95/100Pattern recurrence

4. Pattern recurrence: foreign presence, capability leakage and increased terrorist action

Section link

The dossier does not argue that U.S. presence is the only cause of terrorism. It argues that repeated foreign military engagement, intervention blowback, training opacity, arms leakage, technology availability and strategic benefit form a serious contributory-risk profile. Where a powerful actor repeatedly enters a region under the banner of counter-terrorism and the threat grows, the actor must answer operational questions, not just repeat slogans.

1970s: Declassified doctrine frames Nigeria’s demographic and resource trajectory as a U.S. national-security concern.

2011: Libya intervention collapses state stockpile control and creates foreseeable regional arms-proliferation risk.

2014 onward: Public reports repeatedly link Libyan arms to terror and armed groups across the Sahel and Nigeria.

2023: HASC transcript records the issue of U.S.-trained personnel participating in African coups and the absence of a produced dataset for minimization.

2024–2026: Nigeria records renewed terrorism pressure, coordinated attacks, arms capture and rising fatalities according to public conflict reporting.

2026: UN-linked public reporting again flags Libya-looted weapons ending up with extremist groups in Nigeria.

Pattern test

Signal	Question	Document required
Libya weapons	Did intervention participants foresee and mitigate the arms spillover?	Stockpile-security plans, NATO risk assessments, UN tracing data.
Training trails	Did U.S.-trained personnel later destabilize African states?	Beneficiary lists, modules, affiliations, post-training status.
Terror escalation	Did foreign support reduce or increase practical terror capability?	Attack/fatality datasets before and after major interventions or support waves.
Technology signals	How do extremist groups access satellite connectivity and dual-use tools?	Serial numbers, payment records, reseller paths, disablement requests.
Strategic benefit	Who gains access, contracts, influence or policy leverage from Nigeria’s insecurity?	Contracts, aid conditions, security MoUs, bases, mining/energy agreements.

Severity 89/100Material capability

5. Starlink, U.S.-linked equipment allegations, military hardware capture and dual-use capability

Section link

Capability is evidence. A terrorist group’s ability to coordinate, communicate, move, film, recruit, loot bases, access satellite connectivity or reproduce uniforms changes the legal analysis. It shows organization, supply, technical enablement and possible external facilitation, even where intent remains contested.

Satellite connectivity

Starlink and similar systems can support command, propaganda, payment and field coordination in remote zones.

Base attacks and looted hardware

Coordinated attacks on Nigerian bases and looting of weapons or vehicles raise urgent stockpile-protection questions.

Foreign-origin equipment

Any U.S., NATO, Gulf or allied-origin equipment requires end-use tracing, not rhetorical denial.

Uniform replication

Uniform imitation enables infiltration, false-flag confusion, perfidy and attacks against civilians.

Technical demands

Serial numbers of satellite terminals, routers, radios, drones, scopes and recovered devices.
Payment accounts, reseller records, activation geography and disablement requests.
End-use certificates for U.S., NATO, Gulf or allied-origin equipment later recovered from armed groups.
Base-attack inventories: weapons lost, vehicles taken, ammunition captured, uniforms stolen, radios compromised.
Cross-border logistics routes through Libya, Niger, Chad, Cameroon, Benin and other relevant corridors.

Severity 93/100 Capability-control issue Counter-terrorism duty

6. Starlink duty failure: terrorist-linked terminals cannot be treated as neutral connectivity

Section link

Core finding: Starlink is not an ordinary anonymous radio signal. It is a managed satellite-internet system built around identifiable terminals, subscription accounts, geolocation, activation records, payment channels, reseller chains, service zones, device identifiers and network-control capabilities. Once terrorist-linked or criminally linked antennas are publicly reported, recovered, geolocated or notified to the provider, continued service cannot be treated as neutral infrastructure.

Under ordinary counter-terrorism, sanctions, telecommunications, export-control, anti-money-laundering and law-enforcement cooperation principles, a provider with the technical capacity to identify, suspend, geofence, preserve and disclose data linked to terrorist or criminal use has a heightened duty to cooperate with competent authorities. Starlink’s own service terms prohibit unlawful use. That contractual baseline becomes more serious when the same technology ecosystem is adjacent to U.S. defense and intelligence programs through SpaceX’s Starshield and other national-security contracts.

Legal position: non-action after notice becomes a separate evidence layer

This section does not assert that every illicit Starlink antenna was intentionally provided to terrorists. The legal question is narrower and stronger: once Starlink, SpaceX, regulators, security agencies or partner governments have notice that terminals are being used by jihadist groups, armed groups, criminal logistics networks or terrorist-linked formations, what concrete action was taken?

If the provider can identify terminal serial numbers, account holders, activation zones, payment channels, reseller routes, roaming behavior and live service status, then failure to disable, preserve, report or assist lawful investigations becomes a distinct operational fact. The issue is not merely “misuse by bad actors.” The issue is whether a powerful infrastructure provider tolerated or failed to disrupt a known terrorist-enabling capability while possessing unique technical control over that capability.

Capability-control matrix

Capability	Why it matters	Act to request
Terminal identification	Each antenna/kit is not an abstract internet signal; it can be tied to a device, account, shipment, reseller, activation and service history.	Produce serial numbers, kit IDs, activation records, associated accounts, reseller chain and payment method for all recovered or reported terminals.
Geolocation and service-zone control	Satellite broadband systems can assess where terminals operate and whether they are used in prohibited or high-risk zones.	Produce geolocation logs, roaming history, country authorization status, disablement actions and any geofencing applied to conflict areas.
Account suspension / terminal disablement	If a terrorist-linked terminal remains active after notice, the provider’s inaction may materially preserve command, logistics, propaganda or financing capability.	List all suspension requests, disabled terminals, refused requests, delayed requests and reasons for non-action.
Law-enforcement cooperation	Providers are expected to respond to lawful requests, preserve evidence and support investigations where serious crime or terrorism is involved.	Request preservation letters, legal-process logs, response times, data produced and jurisdictions contacted.
Reseller and smuggling-chain control	Illicit access often depends on grey-market resellers, false registration, cross-border smuggling and weak customer verification.	Demand reseller audits, know-your-customer controls, suspicious-order reports and blocked reseller lists.
Defense/intelligence adjacency	SpaceX markets Starshield as a government/national-security system leveraging Starlink technology, and public reporting documents deeper U.S. defense/intelligence ties.	Clarify firewalls between commercial Starlink, Starshield, U.S. government uses, conflict-zone policies and counter-terrorism cooperation.

Pattern inference

The evidentiary issue becomes sharper because Starlink is not only a civilian service. The broader SpaceX satellite ecosystem is used by U.S. and allied military or national-security actors, while the same class of connectivity has reportedly appeared in jihadist, rebel, scam-compound and conflict environments. A provider cannot claim high technical sophistication when selling to militaries, then claim practical helplessness when the same network architecture supports terrorist or criminal operations.

PASO therefore treats Starlink-linked terrorist connectivity as a technical-facilitation risk. The relevant question is not whether Starlink publicly endorses terrorism. The relevant question is whether, after notice, Starlink or responsible authorities failed to use available controls to identify, disable and preserve evidence concerning terrorist-linked terminals.

Questions for Starlink / SpaceX / regulators / security agencies

How many Starlink terminals have been recovered, visually identified, reported or geolocated in terrorist, insurgent, jihadist, bandit or criminal camps in Nigeria, the Sahel and nearby corridors?
For each terminal, what are the kit ID, serial number, account holder, activation date, country of activation, payment method, reseller, shipping path and last known service location?
How many disablement requests have Nigerian, Sahelian, U.S., UN, AU, ECOWAS or allied authorities sent to Starlink or SpaceX?
How many terminals were disabled, how fast, under what authority, and with what evidence preserved?
How many terminals remained active after public or official notice that they were linked to terrorist or criminal environments?
What controls exist to prevent bulk purchases, false registrations, conflict-zone roaming, reseller diversion and use by sanctioned or terrorist-linked networks?
Has SpaceX shared suspicious-use indicators with affected African governments, or only with selected U.S./allied agencies?
Are there different standards of cooperation when Starlink misuse affects African civilians compared with when Starlink misuse affects U.S., European or allied security interests?
What firewall exists between commercial Starlink operations, Starshield, U.S. defense/intelligence customers and conflict-zone enforcement decisions?
Have any terrorist-linked terminals been allowed to remain active because they were useful for intelligence collection, tracking, influence operations or other undisclosed strategic objectives?

Acts immediately requested

Preservation notice: require Starlink/SpaceX to preserve all records linked to terminals recovered or reported in terrorist, jihadist, insurgent, bandit or criminal environments in Nigeria and the Sahel.
Terminal registry: create a secure joint registry of kit IDs, serial numbers, geolocations, account details, activation data, reseller paths and disablement status.
Disablement protocol: require immediate suspension of confirmed terrorist-linked terminals, with evidence preserved before termination where lawful and operationally safe.
Regulator inquiry: request Nigerian Communications Commission, ECOWAS regulators and relevant telecom authorities to investigate unauthorized Starlink use, grey-market imports and criminal reseller networks.
Counter-terrorism finance inquiry: trace payments used to activate or renew terrorist-linked terminals, including cards, crypto, mobile money, shell companies, aid fronts, charities or foreign intermediaries.
UN/AU notification: submit Starlink-linked terminal evidence as part of a wider material-capability annex covering communications, financing, arms, logistics and propaganda.
Right of reply: invite Starlink/SpaceX to provide documented evidence of disablements, cooperation requests, blocked accounts, reseller controls and conflict-zone safeguards.

Public sources to attach

Starlink Terms of Service — Contractual prohibition on unlawful use of the service.
SpaceX — Starshield — SpaceX describes Starshield as a secured satellite network for government entities leveraging Starlink technology and launch capability for national-security efforts.
Reuters — SpaceX building spy satellite network for U.S. intelligence agency — Public reporting on Starshield and U.S. intelligence/national-security ties.
Reuters — Elon Musk’s U.S. Department of Defense contracts — Public reporting on SpaceX/Starlink and U.S. defense contracts.
Le Monde — Starlink as an asset for rebel and jihadist groups in the Sahel — Public reporting on jihadist and rebel use of Starlink terminals.
GI-TOC — How Starlink devices are shaping conflict and crime in the Sahel — Analysis of dual-use satellite internet in conflict and criminal ecosystems.
WIRED — DOJ seizure warrants targeting Starlink systems used at scam compounds — Shows that authorities can target Starlink systems used in serious criminal infrastructure and seek disablement/seizure.

Legal caution: This section does not allege that Starlink or SpaceX intentionally supports terrorism. It asserts that, once terrorist-linked use is known or reasonably knowable, failure to identify, disable, preserve and cooperate is not neutral. It becomes an auditable counter-terrorism fact.

Submission theoryCounter-terrorism / UN / ICC screening

6. Legal theory: facilitation, negligent tolerance, strategic benefit and burden-shifting

Section link

The dossier does not need to prove a secret order to arm terrorists. It needs to show a serious pattern requiring investigation: known weapons diffusion after Libya, official notice of training-linked coup risks, terrorism escalation, material capability growth, selective diplomatic framing, and strategic benefit to external powers.

Defense expected	PASO response	Investigative test
“This is counter-terrorism assistance.”	Assistance that repeatedly coincides with stronger terrorist capability must be audited.	Before/after capability and fatality analysis; equipment trace; training trails.
“Arms came from criminals, not states.”	Criminal trafficking does not erase the original foreseeability of post-intervention stockpile collapse.	Libya intervention records, stockpile plans, interdiction failures, tracing data.
“Training does not cause coups.”	The issue is not automatic causation but repeated risk, notice and deficient monitoring.	Full beneficiary dataset and coup participation analysis.
“Technology is commercial.”	Commercial status does not remove duties of sanctions compliance, disablement, reseller control and cooperation.	Device serials, account trails, reseller paths, blocking logs.
“No proof of intent.”	Intent is not the only threshold. Contribution, knowledge, negligence, benefit and failure to act after notice are actionable inquiry variables.	Chronology of notice, response, correction, silence and benefit.

Burden-shift standard: Once a powerful actor is linked to intervention blowback, training trails, equipment ecosystems, regional destabilization and strategic benefit, neutrality is no longer a gift. It must be demonstrated.

Visual dossier

7. Figures: terrorism trend, risk layers and investigation priorities

Nigeria terrorism deaths signal

Uses GTI 2026 public signal: Nigeria recorded the largest absolute increase in terrorism deaths in 2025, rising by 237 deaths to 750.

Convergence score

Shows how independent layers raise the inquiry threshold.

Action matrix

Layer	Risk	Action
Libya arms trail	Extreme	UN/AU weapons tracing
U.S. training/coups	Extreme	Dataset production
Starlink / satellite	High	Serial/account trace
Base attacks / looting	Extreme	Stockpile audit
NSSM-type strategic frame	High	Doctrine-to-policy review

Ready-to-file actions

8. Acts immediately requested

UN / AU / ECOWAS weapons-tracing inquiry: Libya-origin weapons found in Nigeria, serials, seizure locations, routes, armed-group holders and chain of custody.
Nigerian parliamentary inquiry: foreign intervention effects, arms diffusion, training trails, equipment origins and failure of border/security architecture.
AFRICOM / DoD dataset demand: full list of Nigerian and African beneficiaries of U.S. training, units, modules, dates, funding and post-training status.
Technology-tracing order: Starlink and other satellite/dual-use systems recovered from or linked to extremist networks: activation, account, reseller and disablement records.
Counter-terrorism finance review: trace payments, donations, ransom flows, platform usage, Gulf links, charitable fronts, commodity trades and cross-border logistics.
Legal notice to external actors: invite the U.S., NATO states, satellite providers, Gulf partners and relevant suppliers to provide corrections, records and due-diligence evidence.
ICC threshold screening: reserve ICC pathway for crimes within jurisdiction where widespread or systematic attacks on civilians can be linked to assistance, facilitation, persecution, displacement, murder or other inhumane acts.
Public correction protocol: allow right of reply and correction, but treat silence, destruction of records, refusal to disclose or intimidation as separate procedural facts.

9. Public sources to attach

Public legal caution

This dossier is a public-interest action file. It does not declare final guilt. It establishes thresholds for investigation, evidence preservation, disclosure, counter-terrorism review and legal notification. Every named or implicated party may provide correction, evidence, right of reply, documentary rebuttal or clarification. The same standard protects Nigeria and African populations from false claims, foreign manipulation, internal impunity and real terrorism facilitation.