Are We to Believe Samir Khan’s Communications Were Used as a Tripwire, but Awlaki’s Weren’t?

You should read both the AP and OregonLive accounts of yesterday’s Mohamed Osman Mohamud trial for their description of the problems surrounding the FBI’s account of its early investigations of the teenager (not to mention its choice, when Mohamud’s drinking suggested he was abandoning his radicalism, they nudged him back into extreme views).

But for now I’d like to look at the account FBI Agent Issac DeLong gave of how they first started tracking Mohamud. From the AP.

DeLong’s testimony also revealed that FBI agents in the Charlotte, N.C., office tracking now-deceased al-Qaida operative Samir Khan were the first to identify Mohamud as a potential threat because of communication between the two.

The FBI was tracking Khan – who was killed in a drone strike with then-al-Qaida leader Anwar al-Awlaki – when they came across Mohamud’s emails to him in early 2009. They tracked down Mohamud’s IP address to a Portland suburb and identified him. When he cropped up on the bureau’s radar again, DeLong said he was able to rely on that information to identify Mohamud.

DeLong also said that a team of FBI agents followed Mohamud during his freshman year of college, monitoring his phone calls, text messages and emails, along with video and photo surveillance.

And from OregonLive:

Agents in Charlotte, N.C., picked up on Mohamud’s name in early 2009 while intercepting email traffic of then-U.S. based al-Qaida propagandist Samir Khan.

That August, FBI Special Agent Isaac DeLong was assigned to interview Mohamud’s father, Osman Barre, who feared Muslim extremists were radicalizing his son. Barre had read about Somali youths from Minnesota who were heading overseas to fight, and he worried his own son was trying to fly to Yemen to fight against the West, DeLong testified.

Barre agreed to speak to Mohamud and try to make sure he wouldn’t fly overseas. He took his son’s passport and reported back to the FBI that they had a chat.

“His father said that his son was not hiding anything,” DeLong said, “and there was nothing to worry about.”

But Barre followed up by forwarding to the FBI an email link he had received, DeLong said. It concerned a school in Yemen that his son hoped to attend. The correspondence contained the email address [email protected], which Mohamud had created in the United Kingdom, DeLong said.

The agent combed through the FBI’s storehouses of electronic data, finding that the address had been tied to the investigation of Samir Khan. He would learn that Mohamud had traded more than 100 emails with Khan beginning in February 2009 and that Mohamud had written articles for Khan under a pen name while a student at Beaverton’s Westview High School.

There are things that still don’t make sense about this narrative. At least from these accounts, it’s unclear whether the Charlotte discovery led to the Portland investigation, or whether the preliminary investigation out of Charlotte just served to make Mohamud’s father’s concerns more alarming.

And note this account still doesn’t jive with Hesham Abu Zubaydah’s claim that he had been told to track Mohamud at his mosque as early as 2008 (though we’re close enough in timeline that it’s possible they had Hesham track Mohamud after the Khan discovery, but before the formal investigation).

Moreover, note that the FBI delayed the Khan admissions until after the US had killed him, and turned over details of DeLong’s communications just weeks before the trial. The government tried to hide all of this earlier part of the narrative for a long time.

Mostly, though, I’m interested in how the FBI’s treatment of emails to Khan in early 2009 compared with its treatment of emails to Anwar al-Awlaki in that same period and earlier. From the Webster report, we know the FBI wasn’t prioritizing Awlaki emails in this period.

In fact, potentially radicalized people communicating with Awlaki were only incidentally tracked until after the [Nidal Hasan] attack(s) in 2009; the wiretap on Awlaki was not considered primarily a source of leads.

The report explains that when the Nidal Hasan emails were first intercepted the wiretap (which appears to have started on March 16, 2008) occasionally served as a “trip wire” identifying persons of potential interest. (Remember that bracketed comments are substitutions for redactions provided in the report itself.)

The Aulaqi [investigation] [redacted] also served as an occasional “trip wire” for identifying [redacted] persons of potential interest [redacted]. When SD-Agent or SD-Analyst identified such a person, their typical first step was to search DWS-EDMS [their database of intercepts] and other FBI databases for additional information [redacted]. If the [redacted] [person] was a U.S. Person or located in the U.S., SD-Agent might set a lead to the relevant FBI Field Office. If the information was believed valuable to the greater intelligence community and met one of the FBI’s intelligence-collection requirements, SD-Analyst would disseminate it outside the FBI in an IIR.

[snip]

On December 17, 2008, Nidal Hasan tripped the wire. (40-41)

But all of the “trip wire” leads that came from this wiretap up to this point were set as “Routine Discretionary Action” leads. (44) That’s how Hasan’s initial emails were also treated.

Now it’s possible that Mohamud’s emails were treated in the same way: the FBI went through the effort of identifying his IP, but once they had identified him they dropped the investigation. Though it doesn’t make sense that Mohamud’s writings for Khan would merit a big alarm later if they didn’t when they were written.

In other words, to the degree that the FBI’s story about Mohamud’s communication with Khan doesn’t make sense, it suggests the possibility that Khan’s communications were used a Tripwire in a way that Awlakis, during the same period, were not.

Tweet about this on Twitter0Share on Reddit0Share on Facebook0Google+0Email to someone

4 Responses to Are We to Believe Samir Khan’s Communications Were Used as a Tripwire, but Awlaki’s Weren’t?

  • 1
  • 2
  • 3
  • 4
Emptywheel Twitterverse
bmaz @nycsouthpaw Welp, whither Melgen may be the key question. Ante seriously upped against him. Does he hang tough or roll?
12mreplyretweetfavorite
bmaz Re: ECF/PACER RT @carlmalamud Redacted version of the Monday privacy breach notification to the courts. https://t.co/X1wGjI3IHs
18mreplyretweetfavorite
bmaz @dmataconis I miss Munch and Cragen far more than Stabler.
34mreplyretweetfavorite
bmaz Pennsylvania man uses chain saw to slay wife, then himself http://t.co/f0T4RtVeVk via @YahooNews
37mreplyretweetfavorite
bmaz RT @nycsouthpaw: If you don't steal $9 million from Medicare while importing foreign hotties, you probably don't need to keep a U.S. Senato…
39mreplyretweetfavorite
bmaz @hankdeanlight @yvonnewingett Welp, @DrEricMeyer is my Rep, and a pretty darn smart guy, so I believe him.
46mreplyretweetfavorite
bmaz @AllThingsHLS @EmergencyNet Sure, but when I use it that way, I am probably saying it in a, hopefully, pertinent sense.
47mreplyretweetfavorite
bmaz @AllThingsHLS @EmergencyNet My quick scan is that it's defensible by Menendez, but there is some real meat that a jury could easily bite on.
51mreplyretweetfavorite
bmaz RT @conor64: Writing at newspaper that litigated NY Times Company vs. U.S., Charles Blow casts corporations invoking 1st Amendment as new, …
54mreplyretweetfavorite
bmaz First they came for the churros......"Police Arrest 3 Women For Selling Churros in Union Square Subway Station" http://t.co/Lsr8uczpfz
58mreplyretweetfavorite
bmaz @AllThingsHLS @EmergencyNet Hey now, I stand by the veracity of that Menendez quip!
1hreplyretweetfavorite
JimWhiteGNV RT @lrozen: Historical negotiation: see Bloomberg's Jonathon Tirone, longest continuous for SoS since Camp David https://t.co/Q6hqr7HnoZ
1hreplyretweetfavorite
January 2013
S M T W T F S
« Dec   Feb »
 12345
6789101112
13141516171819
20212223242526
2728293031