In the months after Afghanistan’s fall to the Taliban in 2021, Tehreek-i-Taliban Pakistan (TTP) quietly regrouped. Under Imran Khan’s government, reports later confirmed that Islamabad allowed up to 5,000 TTP fighters and their families to return from Afghanistan as part of a ceasefire deal. This concession alarmed many Pakistanis: social media and news outlets erupted as previously displaced militants reappeared in Khyber Pakhtunkhwa (KPK). Locals and analysts alike have noted a deliberate strategy by the TTP to blend in with ordinary Pashtuns – holding community gatherings, setting up parallel courts and meetings, and even declaring brief ceasefires – in order to appear as another part of the local society. Recent monitoring ACLED reports describe how the TTP has been patrolling along major roads and treating only security forces as targets, all moves geared toward winning support among locals and entrenching its presence. The militants are waging a psychological campaign by pretending they only aim to protect tribal lands and trying to normalize their image as fellow countrymen rather than outsiders.

Online Jihad: Social Media as a Recruitment Ground

A crucial battleground in this campaign is social media. Pakistani officials have bluntly warned that hundreds of Internet accounts run by TTP and allied militants are active on Facebook, X (Twitter), Telegram, WhatsApp, and other platforms. While addressing a joint press conference with Min­ister of State for Interior Talal Chaudhry and Minister of State for Law and Justice Barrister Aqeel Malik revealed that investigators had identified 481 social media accounts linked to the TTP and Baloch insurgents, all used to “incite violence” and spread militant propaganda. Globally, extremists have shown how they exploit any communication platform: Gabriel Weimann studies suggest nearly 90% of organized online terrorism runs through social media, from slick Islamic State propaganda to guerrilla video messages. Within Pakistan, the TTP has adopted exactly these tactics. Research by Zoha Aziz points out that the Taliban in Pakistan “recruit via emotional videos, local-language content and private Telegram groups”. Hypothetically, a 15-year-old in Swat might see a mosque video on TikTok, hear a “jihadist” soundtrack, and be drawn into an encrypted chat group. Indeed, 66.9 million Pakistanis were social media users by January 2025, making our country a high-impact arena for such messaging.

Pakistani authorities are well aware of this menace: the government has pressed Big Tech to block the extremist channels that “spread propaganda and glorify insurgents”. But tech companies have been slow to act. In practice, militants continue to claim credit for attacks online and to recruit new members over WhatsApp or YouTube. Even ordinary news coverage can inadvertently amplify their reach: a report of a TTP attack, for example, is immediately retweeted by pro-jihadist feeds, turning headlines into propaganda. Social media is a central battlefield in modern terrorism – terrorists have virtually unfiltered access to audiences worldwide.

Crypto Cash and the Dark Web

Terrorist financing has gone digital as well. Authorities found that the TTP even appealed for bitcoin donations, posting wallet addresses on social media and urging supporters to send money via a Binance account. This alarming development was reported on Pakistan’s news sites; in one case, the TTP issued a Telegram plea specifically pointing followers to a cryptocurrency wallet. The method was no accident. Cryptocurrency (especially privacy coins) offers militants a degree of anonymity. Global studies show groups like ISIS-Khorasan have taken to using Monero and other hard-to-trace coins for funding. According to Tribune, Riccardo Valle, an Italy-based terrorism researcher, warns BBC that “terrorist organizations widely utilize cryptocurrency for fundraising,” letting them move cash secretly unless their wallets are exposed. Pakistan’s laws prohibit crypto trading, but militants care little: its geography abuts an ungoverned Afghanistan, and a sharp hawala operator or dark-web guru can convert digital coins into local rupees without much difficulty.

Experts also note that the dark web remains a shadowy support network for extremism. Encrypted forums and hidden websites host bomb-making guides, ideological manifestos, and funding appeals, all beyond the reach of ordinary Internet filters. The Zoha Aziz article cited above observes that the “Dark Web remains a hub for extremist activity, propaganda, ‘how-to’ guides, and even anonymous funding through cryptocurrencies”. In practical terms, this means a TTP recruiter could lurk on a hidden forum and share instructions on building grenades, or arrange clandestine crypto transfers with like-minded supporters. Such channels are by design hard to police, which means the TTP’s finances and training networks can be more resilient than before.

The TTP Among the People

Since 2022, the TTP has publicly announced temporary ceasefires during tribal jirgas and opened “courts” in villages to resolve disputes. By posing as arbiters and claiming they only fight soldiers, not civilians, the Taliban hope villagers will whisper sympathy instead of fear. Recent conflict monitors note that in parts of Waziristan and Lakki Marwat the TTP now runs patrols and rudimentary administrations, aiming to win hearts as much as battles. The goal is clear – if militants convince ordinary Pashtuns that “we are just like you, defending our land,” they undermine public support for army operations.

Pakistani media and international outlets have repeatedly highlighted these trends. In-depth reports emphasize that the TTP’s strategy is a kind of social camouflage. The U.S. based ACLED project, for example, observes that the Taliban’s recent public posture (emphasizing victims are only police or soldiers) appears “geared toward winning support among locals”. The militants want to fool normal people into accepting them. Social media have shown images of TTP fighters in flak jackets strolling markets, or handing out sweets after a bombing – to project an innocent image. TTP’s media unit (the so-called Umar Media) now produces propaganda in six languages (Pashto, Urdu, English, Balochi, Dari/Persian, and Arabic), targeting not only tribal elders but educated youth and foreign sympathizers. This multi-lingual outreach aims to broaden the Taliban’s appeal beyond the mountains into Pakistan’s cities and the Pashtun diaspora.

Media, Messaging and the Call to Action

The role of media in this fight is thus double-edged. On one hand, Pakistani authorities are rightly asking tech companies to de-platform the militants and have even threatened to cut the Internet if extremist content spreads unchecked. On the other hand, media outlets bear responsibility to counter the militants’ narrative. Journalists should avoid sensationalizing terror (glorified attack videos) and instead amplify moderate voices and facts. According to Dawn, Pakistan Institute for Conflict and Security Studies (PICSS) Managing Director Abdullah Khan observed that the proscribed TTP and other militant groups had changed their operational strategies by reducing attacks on civilians merely to rebuild their public perception – noting how normalizing appearances among villagers is part of their plan. These reports provide valuable context for ordinary Pakistanis, who may otherwise only see news of bombs and arrests.

Online radicalization is a global threat, not just a local one. Extremist content knows no borders: a teenager in Karachi exposed to TTP videos today could grow into a plotter somewhere else tomorrow. Europe and the U.S. have seen an upswing in youth radicalization through gaming apps, encrypted chats, and algorithmic recommendation systems. All societies face this danger. For Pakistan, it cannot tackle the Taliban’s revival with bullets alone. Digital literacy and police action on the Internet must go hand-in-hand with physical security. Civilians (especially parents and teachers) need resources to identify extremist grooming. Tech companies need clear incentives to flag and remove terrorist content in Urdu and Pashto as aggressively as in English. The government should also work to regulate digital payments, to choke off that covert crypto pipeline.

In the end, the TTP’s media-savvy push is a wake-up call that modern terrorism wears many faces. The Taliban no longer hide only in caves; they post on social media, slip into local gatherings, and exploit every unguarded moment online. Pakistan’s public and policymakers must adapt fast. As one security analyst warns, “social media is not about exploitation but about the service to community” – unless we step in, jihadists groups may misuse it in ways that harm social cohesion. It’s time for Pakistan to fight back with facts, vigilance, and digital strategy. If we fail to expose and block these virtual entry points, the province of KPK will continue to see young lives ruined, and the flames of extremism could well spread beyond our borders.

Muhammad Ibrahim is a Research Editor at the Asian Consortium for Regional Studies (ACRS) and a student of International Relations at National Defence University, Islamabad. His interests focus on nuclear policy, security affairs, climate politics, and great power foreign policy.