The FBI's affidavit tells you what an 18-year-old allegedly said for almost two years. It doesn't tell you why the FBI was listening when he was 16 or 17. That missing first step is the whole question this site exists to ask.
01What happened
On October 6, 2026, FBI agents arrested Sheikhdoon Abdullahi Mohamud, 18, of Richfield, Minnesota, shortly after he paid an undercover FBI employee $600 in cash for an AK-47-style rifle, four 30-round magazines and about 200 rounds of ammunition. The meeting took place in the employee's vehicle near Mohamud's home. The FBI says the rifle was "rendered inert prior to the transaction for officer and public safety"; the ammunition was live. Agents arrested him at gunpoint after he stepped out of the vehicle.
The next day, prosecutors charged him by complaint with one count of receiving a firearm and ammunition knowing they would be used to commit a federal crime of terrorism, 18 U.S.C. § 924(h). The underlying crime is material support to a designated foreign terrorist organization. The charge carries up to 15 years in prison. At his first appearance in St. Paul, before U.S. Magistrate Judge Elizabeth Cowan Wright, he told the court he has no job, no car and no money.
Prosecutors allege he planned an ISIS-inspired mass shooting at the Mall of America during the Hmong Arts Celebration on October 24. In a July 2026 message, according to the affidavit, he said he would target the mall because it was "owned by jewish [sic]." During the sale, he allegedly told the undercover employee he planned a shooting at a "kuffar" (non-believers') festival.
Presumed innocent. Mohamud is charged by complaint, not convicted. The allegations describe planned mass violence against shoppers, and nothing on this page minimizes that. Our question is narrower: whether the court and the defense will be told how this investigation actually began.
02The case, as the FBI tells it
Everything below comes from the FBI's sworn affidavit. Paragraph numbers are cited so you can check them yourself.
-
Dec. 2024
Investigation opens; the informant makes contact
The FBI says it has run a national security investigation of Mohamud since about December 2024. A paid confidential source, "CHS1," begins exchanging messages with him the same month. He is 16 or 17. ¶¶11–12
-
Jan. 2025
Legal process to his family's phone carrier
He praises the New Orleans attacker in messages. T-Mobile responds to legal process, tying a phone number to an account in his mother's name. ¶¶14–16
-
Mar. 2025
Talk of fighting overseas
He tells the source, "i wanna fight in Somalia support the isis in puntland." ¶17
-
May 2025
Agents knock on the family's door
FBI agents try to interview him at home. His father declines to share information and refers agents to his attorney. ¶18
-
Dec. 2025 – Jan. 2026
Discord, propaganda, and a flag photo
He talks about "hijrah" (migration) to join ISIS in Somalia and moves to Discord after, he says, his Telegram account was likely banned. He sends al-Shabaab propaganda. CHS1 sends him a photo of the source holding an ISIS flag. ¶¶19–23
-
Mar. – May 2026
Saving to travel
He says he'll leave for Somalia once he saves $2,000 to $3,000, and posts propaganda on TikTok. ¶¶24–26
-
July 2026
“so i will do attack here”
He says he can't afford to travel and names the Mall of America, writing that it is "owned by jewish [sic]." The source mentions a "brother" in Wisconsin who sells guns. ¶¶27–28
-
Aug. 2026
A “brother” with an AK
He talks about meeting "the brother" to buy an AK at the Mall of America on September 10. The "brother" role is later filled by an undercover FBI employee. ¶29
-
Sept. 2026
October 24 becomes the date
He asks for the brother to come "at the 24th not the 10th," then writes "October 24 is the day." He links the Hmong Arts Celebration at the mall. CHS1 asks whether he's "100%" sure and offers him a way out; he says he is "100% commited [sic]." He records a pledge of allegiance to ISIS's leader. ¶¶32–38
-
~Sept. 25, 2026
The informant proposes the sale date
CHS1 tells him the brother can sell him the rifle, magazines and ammunition on October 6. ¶39
-
Oct. 4, 2026
$601 on video
He sends a video counting $601 in cash. ¶40
-
Oct. 6, 2026
The sale and the arrest
Near his home, he pays the undercover employee $600 for an AK-47-style rifle, four 30-round magazines and about 200 rounds. The rifle has been made inert. He is arrested at gunpoint after leaving the vehicle. ¶¶41–43
03What the affidavit doesn't say
The affidavit's account starts mid-stream. Its narrative opens: "Since December 2024, the FBI has been conducting an ongoing national security criminal investigation…" ¶11. The next paragraph says that "In or about December 2024, a Confidential Human Source (CHS1)" began exchanging messages with him ¶12.
There is no tip, no platform referral, no parent's call and no earlier investigation. Nothing explains why the FBI opened a national security case on a Richfield teenager, or whether the informant reached out first.
The affidavit also says, as these documents routinely do, that "it does not set forth all of my or the government's knowledge about the matter" ¶4. That's standard. But it means the true starting point can sit entirely outside the document the public gets to read.
What the affidavit does tell us about the informant: CHS1 has worked with the FBI since 2017 and is "motivated by patriotism and monetary compensation" n.1. In other words, the first contact the affidavit documents is with someone the government was paying.
04Why the origin matters
Parallel construction works by giving a hidden source a clean replacement. Reuters documented DEA agents being told to "recreate" leads using "normal investigative techniques" so the true source never appeared in reports or testimony. In counterterrorism cases, an informant is the cleanest replacement there is: a person, not a program.
When this investigation opened in December 2024, Section 702 of FISA was fully in force. The FISA Court has documented more than 278,000 non-compliant FBI searches of FISA-acquired data. The law requires the government to notify a defendant when it intends to use information "obtained or derived from" FISA surveillance against them (50 U.S.C. § 1806(c)). Prosecutors didn't give a single criminal defendant notice of Section 702 evidence until October 2013, five years after the program began.
None of that is evidence that FISA data started this case. It's the reason the starting point matters. If a database query, a foreign-intelligence hit or an undisclosed tip pointed the FBI at Mohamud, his lawyers can only challenge it if they're told it exists.
05The entrapment question
Entrapment is a different question from parallel construction, but in this case it runs straight through the same informant. Under Jacobson v. United States, once a defendant shows government inducement, prosecutors must prove he was predisposed to commit the crime before agents first approached him. In this case, "before agents first approached him" is exactly what the affidavit leaves blank.
What the defense will point to
- A paid informant was his main documented contact for nearly two years, starting when he was a minor.
- The informant sent him a photo of the informant holding an ISIS flag ¶23.
- The informant first raised a gun-selling "brother" in Wisconsin ¶28, a role later filled by the FBI's undercover employee.
- The informant proposed the October 6 sale date ¶39.
- He told the court he has no job, no car and no money; the only rifle in the affidavit came from the FBI.
What prosecutors will point to
- He named the target, the mall's ownership and the Oct. 24 date himself ¶¶28, 32–33.
- The informant asked if he was "100%" sure and offered him a way out; he said he was committed ¶35.
- He recorded a pledge of allegiance to ISIS's leader ¶38.
- He saved and showed $601 in cash and showed up to the sale ¶¶40–41.
A 2014 Human Rights Watch and Columbia Law School report documented FBI terrorism stings in which informants and agents suggested plots, supplied the means, or pushed targets to act. Whether this case fits that pattern is for a jury. Whether the jury hears how it started is the question we're tracking.
06One template, two cases
Less than a month before this arrest, the FBI arrested Jonathan Hunter Kramer near Pittsburgh on the same charge, in a case with a similar structure. We track it as Case File 002.
| Mohamud (003) | Kramer (002) | |
|---|---|---|
| Charge | 18 U.S.C. § 924(h), predicate § 2339B | 18 U.S.C. § 924(h), predicate § 2339B |
| Documented investigation began | About Dec. 2024, at 16 or 17 | 2023, as a juvenile |
| Stated origin | None given | Tips on Mar. 11, 2023 and Mar. 19, 2026 (the 2026 tipster "closely associated" with him) |
| Informant | Paid FBI source since 2017, from Dec. 2024 | FBI source chatting from June 29, 2026 with an account the FBI attributes to him |
| Weapon source | FBI undercover employee (rifle made inert) | Not established; grainy Walmart parking-lot video appears to show him taking what looked like a long black bag from an unidentified person's trunk |
| FISA in the affidavit | Not mentioned | Not mentioned |
An affidavit without FISA references may simply mean there was nothing to disclose. It's also what a well-built parallel case would look like. That's why the next filings matter more than the press conference did.
07What to watch
- Oct. 19, 2026
Preliminary hearing on probable cause, set for 10 a.m., unless it's waived or an indictment comes first.
- By ~Nov. 5, 2026
Indictment. The Speedy Trial Act generally requires an indictment or information within 30 days of arrest, subject to exclusions and extensions.
- Any time
A notice under 50 U.S.C. § 1806(c) that the government intends to use FISA-derived evidence.
- Any time
Motions under the Classified Information Procedures Act (CIPA), especially sealed or ex parte filings about discovery.
- Discovery
Fights over CHS1's identity and file. Under Roviaro v. United States, the government's privilege to protect an informant gives way when disclosure is "relevant and helpful to the defense."
08Questions the defense should ask
- What first brought Mohamud to the FBI's attention, and on what date: a tip, a platform referral, a database query, or foreign intelligence?
- Who initiated the first contact with CHS1? Was CHS1 tasked to him, and on whose information?
- CHS1's full file: payments, tasking orders, prior cases since 2017, and every communication with Mohamud, including the ISIS-flag photo the source sent (Brady and Giglio material).
- What legal process produced T-Mobile's January 2025 response, when was it served, and what prompted it?
- Will the government file notice under 50 U.S.C. § 1806(c), or seek protective orders under CIPA?
09FAQ
Who is Sheikhdoon Abdullahi Mohamud?
An 18-year-old from Richfield, Minnesota, charged by federal complaint on October 7, 2026, with receiving a firearm and ammunition to commit a federal crime of terrorism. Prosecutors allege he planned an ISIS-inspired mass shooting at the Mall of America. He is presumed innocent.
What is he charged with, and what is the maximum sentence?
One count under 18 U.S.C. § 924(h), with material support to a designated foreign terrorist organization (18 U.S.C. § 2339B) as the underlying crime. The statute carries a maximum of 15 years in prison. He was charged by complaint; under the Speedy Trial Act an indictment or information is generally due within 30 days of arrest.
Was the rifle real?
It was a real AK-47-style rifle supplied by an undercover FBI employee, but the FBI says it was "rendered inert prior to the transaction for officer and public safety." The ammunition was live.
How did the FBI first find him?
The FBI's affidavit doesn't say. It describes a national security investigation running since about December 2024 and a paid FBI confidential source who began exchanging messages with him in or about December 2024, when he was 16 or 17, but it does not say what started the investigation or who contacted whom first.
Is this a parallel construction case?
Nothing in the public record shows that it is. We rate it "Open Questions" because the starting point of the investigation isn't in the record. If the government files notice that it intends to use FISA-derived evidence, or litigates classified material under CIPA, we'll upgrade the file. If a documented, independent starting point is disclosed, we'll downgrade it.
When is the next court date?
A preliminary hearing was set for 10 a.m. on October 19, 2026, according to MPR News. A grand jury indictment returned before then would make that hearing unnecessary.
10Sources
Every fact on this page comes from the documents below. If you spot an error, tell us and we'll correct it on this page.
- U.S. Attorney's Office, D. Minn., press release, Oct. 7, 2026
- Criminal complaint and FBI affidavit, United States v. Mohamud, No. 26-mj-760 (ECW), Oct. 2026
- MPR News, Oct. 7, 2026
- KSTP, Oct. 7, 2026
- CBS Minnesota, Oct. 7, 2026
- Star Tribune, Oct. 7, 2026
- 18 U.S.C. § 924(h), Cornell LII
- 18 U.S.C. § 3161 (Speedy Trial Act), Cornell LII
- 50 U.S.C. § 1806 (FISA notice), Cornell LII
- Jacobson v. United States, 503 U.S. 540, 1992
- Roviaro v. United States, 353 U.S. 53, 1957
- Human Rights Watch & Columbia Law School, "Illusion of Justice", July 21, 2014
- FISA Court opinion on FBI queries (released May 19, 2023), Apr. 21, 2022
- Lawfare, first Section 702 notice to a criminal defendant, Oct. 26, 2013
- Brennan Center, Section 702 resource page, updated Sept. 2026
- FBI affidavit, United States v. Kramer, Mag. No. 26-1518 (W.D. Pa.), Sept. 13, 2026